Abstract
A security capability negotiation method is applicable to perform security capability negotiation during a mobile network handover. The method includes the following processes: a second network receives a handover request sent by a first network; an access network entity of the second network selects a corresponding security capability or an access network entity and a core network (CN) entity of the second network respectively select a corresponding security capability; the second network sends the selected security capability to a user equipment (UE) via the first network. Moreover a security capability negotiation system is also provided. Consistent with the provided system and method it may be unnecessary for the MME to know the security capability of the corresponding eNB in a certain manner during a handover from a 2G/3G network to an LTE network. Meanwhile during the handover from the LTE network to the 3G network the SGSN does not need to introduce new requirements.
| Technology | Declaration Information | Specification Information | Explicitly Disclosed | Patent Type | |||||
|---|---|---|---|---|---|---|---|---|---|
| Declaration Date | Declaration Reference | Declaring Company | Specification Number | ||||||
| 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
Specification Information
Specification Information
Technologies
Family Information
| All Granted Patents In Patent Family : | ---- |
| All Pending Patents In Patent Family : | ---- |
| Publication No | Technology | Declaration Information | Specification Information | Explicitly Disclosed | Patent Type | |||||
|---|---|---|---|---|---|---|---|---|---|---|
| Declaration Date | Declaration Reference | Declaring Company | Specification Number | |||||||
| CN101304600A | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| CN101304600B | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| EP2117248A1 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| EP2117248A4 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| EP2117248B1 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| US2009275309A1 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| WO2008134986A1 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| JP2010521905A | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| JP5010690B2 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| US2018070275A1 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Basis Patent | |||
| ES2554808T3 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| US2016150449A1 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| US9668182B2 | 5G | 22/10/2018 | ISLD-201810-040 | HUAWEI |
S1
S2
S3
S4
|
Yes | Family Member | |||
| EP2966889B1 | ----- | ----- | ----- | ----- | ----- | ----- | ----- | |||
| EP3554112B1 | ----- | ----- | ----- | ----- | ----- | ----- | ----- | |||
| US10383017B2 | ----- | ----- | ----- | ----- | ----- | ----- | ----- | |||
| US2020068467A1 | ----- | ----- | ----- | ----- | ----- | ----- | ----- | |||
| US10958692B2 | ----- | ----- | ----- | ----- | ----- | ----- | ----- | |||
| Publication No | Technology | Declaration Information | Specification Information | Explicitly Disclosed | Patent Type | Status | National Phase Entries | |||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Declaration Date | Declaration Reference | Declaring Company | Specification Information | |||||||||
| ----- | ----- | ----- | ----- | ----- |
S1
|
----- | ----- | ----- | ----- | |||
Technologies
Mobility and handover
Product
Mobility Management Entity (MME)
Base Station (eNB/gNB)
Use Cases
Services
Mobility Management
Claim
1. A method for security capability negotiation during a handover of a user equipment (UE) from a first network to a second network, wherein the first network is a 2G or 3G network, the second network is a long term evolution (LTE) access network, and the security capabilities include a radio resource control (RRC) algorithm and a user plane (UP) encryption algorithm, comprising:
receiving, by an evolved node B (eNodeB) of the second network, a handover preparation request message from a mobility management entity (MME) of the second network, wherein the handover preparation request message includes a RRC algorithm and a UP encryption algorithm supported by the UE;
selecting, by the eNodeB, a RRC algorithm and a UP encryption algorithm supported by both the UE and the eNodeB, according to the RRC algorithm and the UP encryption algorithm supported by the UE and a RRC algorithm and a UP encryption algorithm supported by the eNodeB; and
sending, by the eNodeB, the selected RRC algorithm and the selected UP encryption algorithm to the first network.', 'receiving, by an evolved node B (eNodeB) of the second network, a handover preparation request message from a mobility management entity (MME) of the second network, wherein the handover preparation request message includes a RRC algorithm and a UP encryption algorithm supported by the UE;', 'selecting, by the eNodeB, a RRC algorithm and a UP encryption algorithm supported by both the UE and the eNodeB, according to the RRC algorithm and the UP encryption algorithm supported by the UE and a RRC algorithm and a UP encryption algorithm supported by the eNodeB; and', 'sending, by the eNodeB, the selected RRC algorithm and the selected UP encryption algorithm to the first network.
2. The method according to claim 1, the selecting further comprising:
combining, by the eNodeB, the RRC algorithm and the UP encryption algorithm supported by a security negotiation system, the security negotiation system including the UE and the MME.', 'combining, by the eNodeB, the RRC algorithm and the UP encryption algorithm supported by a security negotiation system, the security negotiation system including the UE and the MME.
3. The method according to claim 1, further comprising:
selecting, by the MME, a Non-Access signaling (NAS) algorithm supported by both the UE and the MME, according to a NAS algorithm supported by the UE and a NAS algorithm supported by the MME, wherein the security capabilities include the NAS algorithm.', 'selecting, by the MME, a Non-Access signaling (NAS) algorithm supported by both the UE and the MME, according to a NAS algorithm supported by the UE and a NAS algorithm supported by the MME, wherein the security capabilities include the NAS algorithm.
4. A system for security capability negotiation during a handover of a user equipment (UE) to a long term evolution (LTE) network from a non-LTE network, wherein the security capabilities include a radio resource control (RRC) algorithm, a user plane (UP) encryption algorithm and a Non-Access Signaling (NAS) algorithm, comprising:
an evolved node B (eNodeB) of the LTE network; and
a mobility management entity (MME) of the LTE network communicatively connected with the eNodeB,
wherein, the MME is configured to:
receive a handover request from the non-LTE network, the handover request including a NAS algorithm, a RRC algorithm and a UP encryption algorithm supported by the UE,
select a NAS algorithm supported by both the UE and the MME according to the NAS algorithm supported by the UE and a NAS algorithm supported by the MME,
send a handover preparation request message to the eNodeB, the handover preparation request message including the RRC algorithm and the UP encryption algorithm supported by the UE,
receive from the eNodeB a selected RRC algorithm and a selected UP encryption algorithm each supported by the UE and the eNodeB, and
send to the non-LTE network the selected NAS algorithm, the selected RRC algorithm and the selected UP encryption algorithm, and
wherein the eNodeB is configured to:
receive the handover preparation request message from the MME,
select a RRC algorithm and a UP encryption algorithm supported by both the UE and the eNodeB according to the RRC algorithm and the UP encryption algorithm supported by the UE and an RRC algorithm and a UP encryption algorithm supported by the eNodeB, and
send the selected RRC algorithm and the selected UP encryption algorithm to the MME.', 'an evolved node B (eNodeB) of the LTE network; and', 'a mobility management entity (MME) of the LTE network communicatively connected with the eNodeB,', 'wherein, the MME is configured to:
receive a handover request from the non-LTE network, the handover request including a NAS algorithm, a RRC algorithm and a UP encryption algorithm supported by the UE,
select a NAS algorithm supported by both the UE and the MME according to the NAS algorithm supported by the UE and a NAS algorithm supported by the MME,
send a handover preparation request message to the eNodeB, the handover preparation request message including the RRC algorithm and the UP encryption algorithm supported by the UE,
receive from the eNodeB a selected RRC algorithm and a selected UP encryption algorithm each supported by the UE and the eNodeB, and
send to the non-LTE network the selected NAS algorithm, the selected RRC algorithm and the selected UP encryption algorithm, and', 'receive a handover request from the non-LTE network, the handover request including a NAS algorithm, a RRC algorithm and a UP encryption algorithm supported by the UE,', 'select a NAS algorithm supported by both the UE and the MME according to the NAS algorithm supported by the UE and a NAS algorithm supported by the MME,', 'send a handover preparation request message to the eNodeB, the handover preparation request message including the RRC algorithm and the UP encryption algorithm supported by the UE,', 'receive from the eNodeB a selected RRC algorithm and a selected UP encryption algorithm each supported by the UE and the eNodeB, and', 'send to the non-LTE network the selected NAS algorithm, the selected RRC algorithm and the selected UP encryption algorithm, and', 'wherein the eNodeB is configured to:
receive the handover preparation request message from the MME,
select a RRC algorithm and a UP encryption algorithm supported by both the UE and the eNodeB according to the RRC algorithm and the UP encryption algorithm supported by the UE and an RRC algorithm and a UP encryption algorithm supported by the eNodeB, and
send the selected RRC algorithm and the selected UP encryption algorithm to the MME.', 'receive the handover preparation request message from the MME,', 'select a RRC algorithm and a UP encryption algorithm supported by both the UE and the eNodeB according to the RRC algorithm and the UP encryption algorithm supported by the UE and an RRC algorithm and a UP encryption algorithm supported by the eNodeB, and', 'send the selected RRC algorithm and the selected UP encryption algorithm to the MME.
5. The method according to claim 1, wherein the RRC algorithm comprises: an encryption algorithm and an integrity protection algorithm.
6. The method according to claim 3, wherein the NAS algorithm comprises: an encryption algorithm and an integrity protection algorithm.
7. The system according to claim 4, wherein the RRC algorithm comprises an encryption algorithm and an integrity protection algorithm, and the NAS algorithm comprises an encryption algorithm and an integrity protection algorithm.
8. A method for security capability negotiation during a handover of a user equipment (UE) to a long term evolution (LTE) network from a non-LTE network, wherein the non-LTE network is a 2G or 3G network, and the security capabilities include a Non-Access Signaling (NAS) algorithm, a radio resource control (RRC) algorithm and a user plane (UP) encryption algorithm, comprising:
receiving, by a mobility management entity (MME) in the LTE network, a handover request from a non-LTE network, wherein the handover request includes a NAS algorithm, a RRC algorithm and a UP encryption algorithm supported by the UE;
sending, by the MME, the RRC algorithm and the UP encryption algorithm supported by the UE to an evolved node B (eNodeB) in the LTE network;
receiving, by the MME, from the eNodeB, a selected RRC algorithm and a selected UP encryption algorithm supported by both the UE and the eNodeB;
sending, by the MME, the selected RRC algorithm and the selected UP encryption algorithm to the non-LTE network.', 'receiving, by a mobility management entity (MME) in the LTE network, a handover request from a non-LTE network, wherein the handover request includes a NAS algorithm, a RRC algorithm and a UP encryption algorithm supported by the UE;', 'sending, by the MME, the RRC algorithm and the UP encryption algorithm supported by the UE to an evolved node B (eNodeB) in the LTE network;', 'receiving, by the MME, from the eNodeB, a selected RRC algorithm and a selected UP encryption algorithm supported by both the UE and the eNodeB;', 'sending, by the MME, the selected RRC algorithm and the selected UP encryption algorithm to the non-LTE network.', '9. The method according to claim 8, the method further comprises:
selecting, by the MME, a NAS algorithm supported by both the UE and the MME, according to the NAS algorithm supported by the UE and a NAS algorithm supported by the MME; and
wherein the sending, by the MME, the selected RRC algorithm and the selected UP encryption algorithm to the non-LTE network further comprises:
sending, by the MME, the selected NAS algorithm, the selected RRC algorithm and the selected UP encryption algorithm to the non-LTE network.', 'selecting, by the MME, a NAS algorithm supported by both the UE and the MME, according to the NAS algorithm supported by the UE and a NAS algorithm supported by the MME; and', 'wherein the sending, by the MME, the selected RRC algorithm and the selected UP encryption algorithm to the non-LTE network further comprises:', 'sending, by the MME, the selected NAS algorithm, the selected RRC algorithm and the selected UP encryption algorithm to the non-LTE network.', '10. The method according to claim 9, wherein the RRC algorithm comprises an encryption algorithm and an integrity protection algorithm, and wherein the NAS algorithm comprises an encryption algorithm and an integrity protection algorithm.', '11. A mobility management entity (MME) for security capability negotiation for handover from a first network to a second network, wherein the MME is in the second network, and the security capabilities include a Non-Access Signaling (NAS) algorithm, a radio resource control (RRC) algorithm and a user plane (UP) encryption algorithm, comprising:
a receiver configured to receive a handover request sent by a first network, including a NAS algorithm, a RRC algorithm and a UP encryption algorithm supported by a user equipment (UE) in the first network; and
a transmitter communicatively connected to the receiver, the transmitter being configured to send the RRC algorithm and the UP encryption algorithm supported by the UE to an evolved NodeB (eNodeB) in the second network, and
wherein the receiver is further configured to receive from the eNodeB a selected RRC algorithm and a selected UP encryption algorithm supported by the UE and the eNodeB, and
wherein the transmitter is further configured to send the selected RRC algorithm and the selected UP encryption algorithm to the first network.', 'a receiver configured to receive a handover request sent by a first network, including a NAS algorithm, a RRC algorithm and a UP encryption algorithm supported by a user equipment (UE) in the first network; and', 'a transmitter communicatively connected to the receiver, the transmitter being configured to send the RRC algorithm and the UP encryption algorithm supported by the UE to an evolved NodeB (eNodeB) in the second network, and', 'wherein the receiver is further configured to receive from the eNodeB a selected RRC algorithm and a selected UP encryption algorithm supported by the UE and the eNodeB, and', 'wherein the transmitter is further configured to send the selected RRC algorithm and the selected UP encryption algorithm to the first network.', '12. The MME according to claim 11, further comprising:
a processor configured to select a NAS algorithm according to the NAS algorithm supported by the UE and a NAS algorithm supported by the MME, and
wherein the transmitter is further configured to send the selected NAS algorithm to the first network.', 'a processor configured to select a NAS algorithm according to the NAS algorithm supported by the UE and a NAS algorithm supported by the MME, and', 'wherein the transmitter is further configured to send the selected NAS algorithm to the first network.', '13. The MME according to claim 11, wherein the RRC algorithm comprises an encryption algorithm and an integrity protection algorithm, and the NAS algorithm comprises an encryption algorithm and an integrity protection algorithm.', '14. An evolved node B (eNodeB) for security capability negotiation for handover from a first network to a second network, wherein the eNodeB is in the second network, and the security capabilities include a radio resource control (RRC) algorithm and a user plane (UP) encryption algorithm, comprising:
a receiver configured to receive a handover preparation request message from a mobility management entity (MME), wherein the handover preparation request message includes a RRC algorithm and a UP encryption algorithm supported by a user equipment (UE);
a processor configured to select an RRC algorithm and a UP encryption algorithm each supported by the UE and the eNodeB, according to the RRC algorithm and the UP encryption algorithm supported by the UE and an RRC algorithm and a UP encryption algorithm supported by the eNodeB; and
a transmitter configured to send the selected RRC algorithm and the selected UP encryption algorithm to the first network.', 'a receiver configured to receive a handover preparation request message from a mobility management entity (MME), wherein the handover preparation request message includes a RRC algorithm and a UP encryption algorithm supported by a user equipment (UE);', 'a processor configured to select an RRC algorithm and a UP encryption algorithm each supported by the UE and the eNodeB, according to the RRC algorithm and the UP encryption algorithm supported by the UE and an RRC algorithm and a UP encryption algorithm supported by the eNodeB; and', 'a transmitter configured to send the selected RRC algorithm and the selected UP encryption algorithm to the first network.', '15. The eNodeB according to claim 14, wherein the RRC algorithm comprises an encryption algorithm and an integrity protection algorithm, and the UP algorithm comprises an encryption algorithm and an integrity protection algorithm.']
Associated Portfolios
Licensor Claim Chart
Creation Date |
Download |
||
|---|---|---|---|
|
Claim charts will soon be available!
|
|||
SUMMARY
ClaimChart-US8774759B2-STO
Patent number:US8774759B2
Claim Chart Type : SEP Claim Chart
Price: 200 €
To view claim charts you must become a Gold or Platinum Member.
Upgrade your subscriptionYou have reached the maximum number of patents which can be associated to your account per your subscription. If you wish to associate more patents
Please upgrade your subscription.Note:
The information in blue was extracted from the third parties (Standard Setting Organisation, Espacenet)
The information in grey was provided by the patent holder
The information in purple was extracted from the FrandAvenue
Explicitly disclosed patent:openly and comprehensibly describes all details of the invention in the patent document.
Implicitly disclosed patent:does not explicitly state certain aspects of the invention, but still allows for these to be inferred from the information provided.
Basis patent:The core patent in a family, outlining the fundamental invention from which related patents or applications originate.
Family member:related patents or applications that share a common priority or original filing.

Creation Date
Download