Security system and method for wireless communication system

A security processing method of an evolved Node B (eNB) in a wireless communication system, the method comprising:

• receiving a Layer 3 (L3) message comprising a User Equipment (UE) security capability from a UE;
• receiving a Security Mode Command (SMC) comprising the UE security capability from a Mobility Management Entity (MME);
• selecting an Access Stratum (AS) security algorithm with verification of the UE security capability by comparing the UE security capability received from the UE and UE security capability carried by the SMC;
• transmitting a AS SMC comprising the selected AS security algorithm and an AS Message Authentication Code (AS MAC) to the UE;
• and
• transmitting, when a AS security mode complete message comprising the AS SMC is received, an SMC response message to the MME,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.

A security processing method of a User Equipment (UE) in a wireless communication system, the method comprising:

• transmitting a Layer 3 (L3) message comprising a UE security capability to a Mobility Management Entity (MME);
• receiving an Access Stratum Security Mode Command (AS SMC) comprising the UE security capability, a AS security algorithm and a AS Message Authentication Code (MAC) from an evolve Node B (eNB);
• verifying integrity of the AS SMC using the AS MAC;
• receiving a Non Access Stratum (NAS) SMC comprising the UE security capability from the MME;
• and
• verifying the UE security by comparing the UE securities received from the eNB and the MME and transmitting an AS security mode complete message to the eNB and a NAS security mode complete message to the MME,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.

A security processing method of an evolved Node B (eNB) for managing a User Equipment (UE) security capability in a wireless communication system, the method comprising:

• receiving a Security Mode Command (SMC) comprising the UE security capability selected by a Mobility Management Entity (MME);
• selecting an Access Stratum (AS) security algorithm indicated in the SMC and transmitting an AS SMC comprising the UE security capability, the AS security algorithm and a AS Message Authentication Code (MAC) to the UE;
• and
• transmitting, when a AS security mode complete message comprising the AS Message Authentication Code (MAC) is received from the UE, an SMC response message comprising the AS security mode complete message to the MME,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.

A security processing method of a User Equipment (UE) in a wireless communication system, the method comprising:

• transmitting a Layer 3 (L3) message comprising a UE security capability to a Mobility Management Entity (MME);
• receiving an Access Stratum Security Mode Command (AS SMC) comprising the UE security capability, a AS security algorithm and a AS Message Authentication Code (MAC) from an evolved Node B (eNB);
• transmitting a AS security mode complete message to the eNB after verifying integrity of the AS SMC message using the AS MAC;
• receiving a Non Access Stratum (NAS) SMC comprising the UE security capability from the MME;
• and
• transmitting a NAS security mode complete message to the MME after verifying the UE security capability by comparing the UE security capabilities received from the eNB and MME,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.

A security processing method of an evolved Node B (eNB) for managing a User Equipment (UE) security capability in a wireless communication system, the method comprising:

• receiving a Security Mode Command (SMC) comprising the UE security capability selected by a Mobility Management Entity (MME);
• selecting an Access Stratum (AS) security algorithm indicated in the SMC and transmitting a AS SMC comprising the UE security capability, the AS security algorithm and a AS Message Authentication Code (MAC) to the UE;
• and
• transmitting, when a AS security mode complete message comprising the AS Message Authentication Code (MAC) is received from the UE, an SMC response message comprising the AS security mode complete message to the MME after verifying integrity of the message received from the UE,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.

A security system for a wireless communication system, the system comprising:

• a User Equipment (UE) for transmitting a Layer 3 (L3) message comprising a UE security capability, for verifying an Access Stratum Security Mode Command (AS SMC) using a AS Message Authentication Code (MAC), when the AS SMC comprising a AS security algorithm and the AS MAC is received, for transmitting a AS security mode complete message in response to the AS SMC, for verifying integrity of a Non Access Stratum (NAS) SMC, when the NAS SMC comprises the UE security capability, and for transmitting an NAS security mode complete message in response to the NAS SMC;
• an evolved Node B (eNB) for receiving the UE security capability from the UE and an SMC comprising the UE security capability, for selecting the AS security algorithm as a result of verification of the UE security capability, for transmitting the AS SMC comprising the selected AS security algorithm and the AS MAC to the UE, and for transmitting an SMC response message comprising the selected AS security algorithm and the AS security mode complete message in response to the SMC message, when the AS security mode complete message comprising the AS MAC is received from the UE;
• and
• a Mobility Management Entity (MME) for selecting an NAS security algorithm, when the UE security capability is received from the UE, and for transmitting the SMC comprising the UE security capability to the eNB and the NAS AMC comprising the UE security capability to the UE,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.

A security system for a wireless communication system, the system comprising:

• a User Equipment (UE) for transmitting a Layer 3 (L3) message comprising a UE security capability, for verifying integrity of an Access Stratum Security Mode Command (AS SMC) using a AS Message Authentication Code (MAC), when the AS SMC comprising a AS security algorithm and the AS MAC is received, for verifying the UE security capabilities carried by the AS SMC and a Non Access Stratum (NAS) SMC, when the NAS SMC comprises the UE security capability, and for transmitting a AS security mode complete message in response to the AS SMC and an NAS security mode complete message in response to the NAS SMC;
• an evolved Node B (eNB) for selecting the AS security algorithm and transmitting the AS SMC comprising the selected AS security algorithm and the AS MAC to the UE, when the SMC comprising the UE security capability is received, and for transmitting a SMC response message comprising the selected AS security algorithm and the security mode complete message in response to the SMC, when the AS security mode complete message comprising the AS MAC is received from the UE;
• and
• a Mobility Management Entity (MME) for selecting an NAS security algorithm, when the UE security capability is received from the UE, and for transmitting the SMC comprising the UE security capability to the eNB and the NAS SMC comprising the UE security capability to the UE,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.

A security system for a wireless communication system, the system comprising:

• a User Equipment (UE) for transmitting a Layer 3 (L3) message comprising a UE security capability, for verifying integrity of an Access Stratum Security Mode Command (AS SMC) using a AS Message Authentication Code (MAC), when the AS SMC comprising a AS security algorithm and the AS MAC is received, for transmitting a AS security mode complete message comprising the AS MAC in response to the AS SMC, for verifying the UE security capabilities carried by the AS SMC and a Non Access Stratum (NAS) SMC and integrity of the NAS SMC, when the NAS SMC comprises the UE security capability, and for transmitting an NAS security mode complete message in response to the NAS SMC;
• an evolved Node B (eNB) for selecting, the AS security algorithm and transmitting the AS SMC comprising the selected AS security algorithm and the AS MAC to the UE, when an SMC including the UE security capability is received, and for transmitting an SMC response message comprising the selected AS security algorithm and the security mode complete message in response to the SMC, when the AS security mode complete message comprising the AS MAC is received from the UE;
• and
• a Mobility Management Entity (MME) for selecting a NAS security algorithm, when the UE security capability is received from the UE, and for transmitting the SMC comprising the UE security capability to the eNB and the NAS SMC comprising the UE security capability to the UE,
• wherein the AS security algorithm is selected in order of priority from at least one of a security algorithm allowed for a AS message transmission in the UE security capability from the MME and a security algorithm in a list of previously allowed security algorithms preset by the eNB and matching the UE security capability.