Secure Communication Method, Related Apparatus, and System
AssigneeHuawei Technologies Co., Ltd.
InventorGuoqiang Shao
Life of this patent
Estimating the term…
Abstract
A secure communication method includes a security edge protection proxy (SEPP) device at a transmitting end that obtains a message modification policy of an Internet Protocol (IP) exchange service (IPX) device interconnected with the SEPP device, and then sends a first N32 message to the IPX device, where the first N32 message carries a first signaling message and the message modification policy. The IPX device sends the received first N32 message to a SEPP device at a receiving end, and the SEPP device at the receiving end checks the first N32 message according to the message modification policy carried in the first N32 message.
Claims20
A method implemented by a second security and edge protection proxy (SEPP) device, wherein the method comprises:
- receiving, from a second Internet Protocol (IP) exchange service (IPX) device, an N32 message carrying a first signaling message, a first modification block of a first IPX device, and a second modification block of the second IPX device;
- obtaining, a first message modification policy of the first IPX device;
- checking, according to the first message modification policy, the first modification block;
- obtaining, a second message modification policy of the second IPX device;
- checking, according to the second message modification policy, the second modification block;
- and
- sending, to a network function (NF) device after checking the first modification block and checking the second modification block is succeeded, the first signaling message.
A method comprising:
- receiving, by a second security and edge protection proxy (SEPP) device, an N32 message from a second Internet Protocol (IP) exchange service (IPX) device, wherein the N32 message carries a first signaling message, a first modification block of a first IPX device, and a second modification block of the second IPX device;
- obtaining, by the second SEPP device, a first message modification policy of the first IPX device;
- checking, by the second SEPP device according to the first message modification policy, the first modification block;
- obtaining, by the second SEPP device, a second message modification policy of the second IPX device;
- checking, by the second SEPP device according to the second message modification policy, the second modification block;
- sending, by the second SEPP device to a network function (NF) device after checking the first modification block and checking the second modification block is succeeded, the first signaling message;
- and
- receiving, by the NF device, the first signaling message.
A second security and edge protection proxy (SEPP) device comprising:
- a memory configured to store instructions;
- and
- a processor coupled to the memory and configured to execute the instructions to cause the second SEPP device to:
- from a second Internet Protocol (IP) exchange service (IPX) device, an N32 message carrying a first signaling message, a first modification block of a first IPX device, and a second modification block of the second IPX device;
- obtain a first message modification policy of the first IPX device;
- check, according to the first message modification policy, the first modification block;
- obtain a second message modification policy of the second IPX device;
- check, according to the second message modification policy, the second modification block;
- and
- send, to a network function (NF) device after checking the first modification block and checking the second modification block is succeeded, the first signaling message.
A system, comprising:
- a second security and edge protection proxy (SEPP) device, configured to:
- receive, from a second Internet Protocol (IP) exchange service (IPX) device, an N32 message carrying a first signaling message, a first modification block of a first IPX device, and a second modification block of the second IPX device;
- obtain a first message modification policy of the first IPX device;
- check, according to the first message modification policy, the first modification block;
- obtain a second message modification policy of the second IPX device;
- check, according to the second message modification policy, the second modification block;
- send the first signaling message after checking the first modification block and checking the second modification block is succeeded;
- and
- a network function (NF) device coupled to the second SEPP device and configured to receive the first signaling message from the second SEPP device.
Dependencies are inferred from the claim text.