Communication security processing method, and apparatus

A communication security processing method, comprising:

• receiving, by UE, a security parameter that is required for the UE to interact with an access point AP and is sent by a base station after an air interface is securely activated;
• and
• performing, by the UE by using the security parameter, security processing on data exchanged between the UE and the AP;
• wherein the security parameter is acquired by the base station sent from the AP or a mobility management entity MME.

A communication security processing method, comprising:

• receiving, by an access point AP, an access request that is used for user equipment UE to access the AP and is sent by a base station;
• acquiring, by the AP, a security parameter that is required for the AP to interact with the UE;
• sending, by the AP, an AP access response to the base station wherein the AP access response comprising the security parameter which is sent by the base station to the UE after an air interface is securely activated;
• and
• after the UE accesses the AP, performing, by the AP by using the security parameter, security processing on data exchanged between the AP and the UE.

A communication security processing method, comprising:

• receiving, by a mobility management entity MME, an access information request that comprises an access point AP identifier and is sent by a base station;
• acquiring, by the MME, a security parameter corresponding to the AP identifier;
• and
• sending, by the MME, the security parameter to the base station, so that the base station sends the security parameter to UE after an air interface is securely activated, wherein the security parameter is used for the UE to perform security processing on data exchanged between the UE and the AP.

A base station, comprising:

• a determining module, configured to determine that user equipment UE needs to access an access point AP;
• an acquiring module, configured to acquire a security parameter that is required for the UE to interact with the AP;
• and
• a sending module, configured to:
• after an air interface is securely activated, send the security parameter to the UE, so that the UE performs, by using the security parameter, security processing on data exchanged between the UE and the AP;
• wherein the acquiring module comprises:
• a first sending unit, configured to send an access request to the AP;
• and
• a first receiving unit, configured to receive an access response that comprises the security parameter generated by the AP and is sent by the AP;
• or
• wherein the acquiring module comprises:
• a second sending unit, configured to send an access information request that comprises an AP identifier to a mobility management entity MME;
• and
• a second receiving unit, configured to receive the security parameter that is corresponding to the AP identifier and is sent by the MME.

User equipment UE, comprising:

• a receiving module, configured to receive a security parameter that is required for the UE to interact with an access point AP and is sent by a base station after an air interface is securely activated;
• and
• a processing module, configured to perform, by using the security parameter, security processing on data exchanged between the UE and the AP;
• wherein the security parameter is acquired by the base station sent from the AP or a mobility management entity MME.

An access point AP, comprising:

• a receiving module, configured to receive an access request that is used for user equipment UE to access the AP and is sent by a base station;
• an acquiring module, configured to acquire a security parameter that is required for the AP to interact with the UE;
• a sending module, configured to send an AP access response to the base station wherein the AP access response comprising the security parameter which is sent by the base station to the UE after an air interface is securely activated;
• and
• a processing module, configured to:
• after the UE accesses the AP, perform, by using the security parameter, security processing on data exchanged between the AP and the UE.

A mobility management entity MME, comprising:

• a receiving module, configured to receive an access information request that comprises an access point AP identifier and is sent by a base station;
• an acquiring module, configured to acquire a security parameter corresponding to the AP identifier;
• and
• a sending module, configured to send the security parameter to the base station, so that the base station sends the security parameter to UE after an air interface is securely activated, wherein the security parameter is used for the UE to perform security processing on data exchanged between the UE and the AP.