Patent ID: 9467295
Filing Date: 2016-10-11
CPC Classification: H04L,H04W

Claim Text:
1. A Home (evolved) NodeB (H(e)NB) security access method, comprising: signing by a security gateway (SeGW) a digital signature for identity information of the H(e)NB, and sending by the SeGW the digital signature to the H(e)NB; sending by the H(e)NB a registration request containing the signed digital signature and the identity information of the H(e)NB to a core network element; performing by the core network element a correctness verification on the digital signature and the identity information of the H(e)NB; wherein the step of the signing by a security gateway (SeGW) a digital signature for identity information of the H(e)NB, and sending by the SeGW the digital signature to the H(e)NB comprises: obtaining by the SeGW the identity information and an IP address of the H(e)NB, and signing by the SeGW the digital signature based on the identity information and the IP address of the H(e)NB; wherein the step of the performing by the core network element a correctness verification on the digital signature and the identity information of the H(e)NB comprises: obtaining by the core network element another digital signature based on received the identity information of the H(e)NB and a source IP address of the registration request, if the other digital signature is consistent with the digital signature received from the H(e)NB, determining that the correctness verification is passed, otherwise, determining that the correctness verification fails; wherein the core network element is an H(e)NB GW or a Mobility Management Entity (MME), wherein, when a UE accesses through the H(e)NB, after the core network element verifies that the identity information of the H(e)NB is correct, sending the identity information of the H(e)NB by the core network element to the MME or SGSN or MSC, so that the MME or the SGSN or the MSC obtains the CSG ID information supported by the H(e)NB and performs an access control on the UE according to the CSG ID information; wherein, the CSG ID information is obtained from the H(e)NB information, or the HSS/AAA server by the MME or the SGSN or the MSC.