Back to results
US 11,778,459 B2Granted
Secure session method and apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorsRong Wu, Bo Zhang, Shuaishuai Tan
Life of this patent
Estimating the term…
Abstract
This application provides an example secure session method and apparatus. The method includes receiving, by a user plane gateway, a service request message from user equipment UE, where the service request message is used to request to establish a connection between the UE and a service server in a data network. The user plane gateway and the UE separately generate an encryption key and an integrity protection key based on the service request message, and activate encryption protection and/or integrity protection based on the generated encryption key and integrity protection key.
Claims14
A secure session method, comprising:
- sending, by user equipment (UE), a service request message, wherein the service request message comprises a request to establish a connection between the UE and a service server in a data network;
- generating, by the UE, an encryption key and an integrity protection key;
- activating, by the UE, at least one of encryption protection or integrity protection based on the encryption key and the integrity protection key;
- and
- receiving, by the UE, a key identifier, wherein the key identifier comprises a key set identifier in 5G (ngKSI) corresponding to an intermediate key, and wherein the intermediate key is a key used to generate a user plane function (UPF) transmission root key, and wherein an one-to-one correspondence between the intermediate key and the ngKSI is stored at the UE prior to receiving the key identifier.
2 more elements
A secure session apparatus, comprising:
- at least one processor;
- and
- one or more memories coupled to the at least one processor and storing programming instructions for execution by the at least one processor, the programming instructions instruct the at least one processor to:
- send a service request message, wherein the service request message comprises a request to establish a connection between the secure session apparatus and a service server in a data network;
- generate an encryption key and an integrity protection key;
- activate at least one of encryption protection or integrity protection based on the encryption key and the integrity protection key;
- and
- receive a key identifier, wherein the key identifier comprises a key set identifier in 5G (ngKSI) corresponding to an intermediate key, and wherein the intermediate key is a key used to generate a user plane function (UPF) transmission root key, and wherein an one-to-one correspondence between the intermediate key and the ngKSI is stored at the apparatus prior to receiving the key identifier.
5 more elements
A secure session apparatus, comprising:
- at least one processor;
- and
- one or more memories coupled to the at least one processor and storing programming instructions for execution by the at least one processor, the programming instructions instruct the at least one processor to:
- receive a service request message from user equipment (UE), wherein the service request message comprises a request to establish a connection between the UE and a service server in a data network;
- generate an encryption key and an integrity protection key based on the service request message;
- receive a key identifier, wherein the key identifier comprises a key set identifier in 5G (ngKSI) corresponding to an intermediate key, and wherein the intermediate key is a key used to generate a user plane function (UPF) transmission root key, and wherein an one-to-one correspondence between the intermediate key and the ngKSI is stored at the UE prior to receiving the key identifier;
- and
- activate at least one of encryption protection or integrity protection based on the encryption key and the integrity protection key.
5 more elements
A secure session method, comprising:
- receiving a service request message from user equipment (UE), wherein the service request message comprises a request to establish a connection between the UE and a service server in a data network;
- generating an encryption key and an integrity protection key based on the service request message;
- receiving a key identifier, wherein the key identifier comprises a key set identifier in 5G (ngKSI) corresponding to an intermediate key, and wherein the intermediate key is a key used to generate a user plane function (UPF) transmission root key, and wherein an one-to-one correspondence between the intermediate key and the ngKSI is stored at the UE prior to receiving the key identifier;
- and
- activating at least one of encryption protection or integrity protection based on the encryption key and the integrity protection key.
2 more elements
Dependencies are inferred from the claim text.