Method and apparatus for security algorithm selection processing, network entity, and communication system

A user equipment configured to communicate with a network entity, comprising:

• a storage module, configured to store a security algorithm list supported by the user equipment, wherein security algorithms in the security algorithm list for the user equipment are settable based on mappings between a security protection requirement and a service requested by a service request message of the user equipment;
• and
• a hardware to operate:
• an obtaining module, configured to obtain from the stored security algorithm list a security algorithm corresponding to a security protection requirement of a service requested by a service request message;
• a sending module, configured to generate and send the service request message to the network entity, wherein the service request message comprises the security algorithm list obtained;
• and
• a receiving module, configured to receive a security algorithm returned by the network entity, wherein the returned security algorithm is selected by the network entity according to the security protection requirement of the service requested by the service request message, from a security algorithm list determinable based on security algorithms supported by both the user equipment and the network entity for the service requested by the service request message.

A network entity configured to communicate with a user equipment, comprising:

• a storage module, configured to store a security algorithm list or a security algorithm selection policy, wherein the security algorithm list or the security algorithm selection policy is supported by the network entity, security algorithms in the security algorithm list for the network entity are settable based on mappings between a security protection requirement and a service requested by a service request message of the user equipment;
• and
• a hardware to operate:
• a receiving module, configured to receive a service request message sent by the user equipment, wherein the service request message comprises a security algorithm list supported by the user equipment;
• a selecting module, configured to select a security algorithm corresponding to a security protection requirement of the service requested by the service request message from a security algorithm list determinable based on security algorithms supported by both the user equipment and the network entity for the service requested by the service request message, according to the security algorithm list in the service request message, and one of the following:
• the security algorithm list or the security algorithm selection policy for the network entity stored in the storage module;
• and
• a sending module, configured to send the security algorithm selected to the user equipment.

A user equipment configured to communicate with a network entity, comprising:

• a storage module, configured to store a security algorithm list supported by the user equipment, wherein security algorithms in the security algorithm list for the user equipment are settable based on mappings between a security protection requirement and a service requested by a service request message of the user equipment, and the security algorithm list is used for indicating security capability of the user equipment;
• and
• a hardware to operate:
• a sending module, configured to generate and send a service request message to a network entity;
• a receiving module, configured to receive one of the following:
• a security algorithm list, a security algorithm selection policy, or a security algorithm selection policy identifier which are returned by the network entity, wherein the security algorithm list is a security algorithm list supported by the network entity, or a security algorithm list corresponding to a security protection requirement of the service requested by the service request message;
• and the security algorithm selection policy is set based on the security algorithm list supported by the network entity;
• and
• a selecting module, configured to, according to the security algorithm list stored in the storage module and the security algorithm list received by the receiving module, select a security algorithm corresponding to the security protection requirement of the service requested from a security algorithm list determinable based on security algorithms supported by both the user equipment and the network entity for the service requested by the service request message.

A network entity configured to communicate with a user equipment, comprising:

• a storage module, configured to store a security algorithm list, a security algorithm selection policy, or a security algorithm selection policy identifier, wherein the security algorithm list, the security algorithm selection policy, and the security algorithm selection policy identifier are supported by the network entity, the security algorithms in the security algorithm list for the network entity are settable based on mappings between a security protection requirement and a service requested by a service request message, and the security algorithm list is used for indicating security capability of the network entity;
• and the security algorithm selection policy is set based on the security algorithm list supported by the network entity;
• and
• a hardware to operate:
• a receiving module, configured to receive a service request message sent by the user equipment;
• and
• a sending module, configured to send to the user equipment:
• the security algorithm list stored in the storage module, and one of the following:
• a security algorithm list, a security algorithm selection policy, or a security algorithm selection policy identifier which are corresponding to a security protection requirement of the service requested by the service request message from the user equipment.