# US 2021/0344716 A1 · Session configuration method and apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0344716 A1 - Document ID: US20210344716A1 - Status: Published application - Kind: A1 - Application number: 17/377,425 - Filed: 2021-07-16 - Published: 2021-11-04 - Earliest claimed: 2019-01-18 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Rong WU - Web page: https://patentgrep.com/patent/US20210344716A1 ## CPC - H04L 63/166: {at the transport layer} - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04W 12/03: Protecting confidentiality, e.g. by encryption - H04W 12/041: Key generation or derivation - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A session configuration method and a session configuration apparatus are disclosed. According to the session configuration method, a terminal device sends, to a session management network element, a session establishment request used to request to establish a first session. After receiving the session establishment request, the session management network element sends redundant transmission security information to an access network device. After receiving the redundant transmission security information, the access network device sends the redundant transmission security information to the terminal device. The redundant transmission security information is used to indicate security keys and security policies of the first session and a second session that need to be established by the terminal device. The second session is a redundant session of the first session. ## Claims ### Claim 1 A session configuration method, comprising: receiving, by an access network device, redundant transmission security information of a first session from a session management network element, wherein the redundant transmission security information is indicative of security keys and security policies of the first session and a second session that need to be established by a terminal device, and the second session is a redundant session of the first session; and sending, by the access network device, the redundant transmission security information to the terminal device. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: after receiving the redundant transmission security information, configuring, by the access network device, the security keys and the security policies for the first session and the second session based on the redundant transmission security information. ### Claim 3 (depends on 2) The method according to claim 2, further comprising: after receiving the redundant transmission security information, sending, by the access network device, the security policies of the first session and the second session to the terminal device. ### Claim 4 (depends on 2) The method according to claim 2, further comprising: after receiving the redundant transmission security information, sending, by the access network device, a first parameter and a second parameter to the terminal device, wherein the first parameter is a parameter used to generate a security key of the first session, and the second parameter is a parameter used to generate a security key of the second session. ### Claim 5 (depends on 1) The method according to claim 1, wherein the redundant transmission security information indicates that a security key and a security policy of the first session are the same as those of the second session, or indicates that a security key and a security policy of the first session are different from those of the second session. ### Claim 6 A session configuration method, comprising: sending, by a terminal device, a session establishment request to a session management network element, wherein the session establishment request requests to establish the first session; and receiving, by the terminal device, redundant transmission security information of the first session from an access network device, wherein the redundant transmission security information is indicative of security keys and security policies of the first session and a second session, and the second session is a redundant session of the first session. ### Claim 7 (depends on 6) The method according to claim 6, further comprising: configuring, by the terminal device, the security keys and the security policies for the first session and the second session based on the redundant transmission security information. ### Claim 8 (depends on 7) The method according to claim 7, wherein the configuring, by the terminal device, the security policies for the first session and the second session based on the redundant transmission security information comprises: receiving, by the terminal device, the security policies of the first session and the second session from the access network device; and configuring, by the terminal device, the security policies for the first session and the second session based on the redundant transmission security information and based on the received security policies of the first session and the second session. ### Claim 9 (depends on 7) The method according to claim 7, wherein the configuring, by the terminal device, the security keys for the first session and the second session based on the redundant transmission security information comprises: receiving, by the terminal device, a first parameter and a second parameter from the access network device, wherein the first parameter is a parameter used to generate a security key of the first session, and the second parameter is a parameter used to generate a security key of the second session; and configuring, by the terminal device, the security keys for the first session and the second session based on the redundant transmission security information and based on the received first parameter and the second parameter. ### Claim 10 (depends on 6) The method according to claim 6, wherein the redundant transmission security information indicates that a security key and a security policy of the first session are the same as those of the second session, or indicates that a security key and a security policy of the first session are different from those of the second session. ### Claim 11 A communications apparatus, comprising a receiver and a transmitter, wherein the receiver is configured to receive redundant transmission security information of a first session from a session management network element, wherein the redundant transmission security information is indicative of security keys and security policies of the first session and a second session that need to be established by a terminal device, and the second session is a redundant session of the first session; and the transmitter is configured to send the redundant transmission security information to the terminal device. ### Claim 12 (depends on 11) The apparatus according to claim 11, further comprising a processor, and the processor is configured to, after the receiver receives the redundant transmission security information of the first session from the session management network element, configure the security keys and the security policies for the first session and the second session based on the redundant transmission security information. ### Claim 13 (depends on 12) The apparatus according to claim 12, wherein the transmitter is further configured to: send the security policies of the first session and the second session to the terminal device. ### Claim 14 (depends on 12) The apparatus according to claim 12, wherein the transmitter is further configured to: send a first parameter and a second parameter to the terminal device, wherein the first parameter is a parameter used to generate a security key of the first session, and the second parameter is a parameter used to generate a security key of the second session. ### Claim 15 (depends on 11) The apparatus according to claim 11, wherein the redundant transmission security information indicates that a security key and a security policy of the first session are the same as those of the second session, or indicates that a security key and a security policy of the first session are different from those of the second session.