Key derivation algorithm negotiation method and apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorsLi HU, Jing CHEN
Life of this patent
Estimating the term…
Abstract
This application provides a key derivation algorithm negotiation method and an apparatus. The method includes: checking, by a terminal, a sent first key derivation algorithm and a received second key derivation algorithm; if the checking is correct and the first key derivation algorithm is the same as the second key derivation algorithm, determining that the first key derivation algorithm sent by the terminal is not tampered with by an attacker; and then using a negotiated third key derivation algorithm as a key derivation algorithm of the terminal, to ensure confidentiality of the negotiated key derivation algorithm, thereby improving communication security.
Claims13
A cryptographic key generation method, comprising:
- sending, by a terminal, first identification information of a first key derivation algorithm to a network side network element, wherein the first key derivation algorithm is at least one key derivation algorithm supported by the terminal;
- receiving, by the terminal, second identification information of a second key derivation algorithm;
- and
- generating, by the terminal, a lower-layer key based on an upper-layer key, the first identification information, and the second key derivation algorithm.
An apparatus, comprising a processor and a communication interface, wherein
- the communication interface is configured to send first identification information of a first key derivation algorithm to a network side network element, wherein the first key derivation algorithm is at least one key derivation algorithm supported by a terminal;
- the communication interface is further configured to receive second identification information of a second key derivation algorithm;
- and
- the processor is configured to generate a lower-layer key based on an upper-layer key, the first identification information, and the second key derivation algorithm.
An apparatus, comprising a processor and a communication interface, wherein
- the communication interface is configured to receive third identification information of a third key derivation algorithm, wherein the third key derivation algorithm is at least one key derivation algorithm received by the apparatus and supported by a terminal;
- the processor is configured to:
- select a fourth key derivation algorithm from the third key derivation algorithm based on a preset policy;
- and generate a lower-layer key based on the third identification information, the fourth key derivation algorithm, and an upper-layer key;
- and
- the communication interface is further configured to send fourth identification information of the fourth key derivation algorithm to the terminal.
Dependencies are inferred from the claim text.