Patent ID: 7474751
Filing Date: 2009-01-06
Classification: H04L,H04W

Abstract:
1. A method for implementing security communication by independently selecting an encryption algorithm, comprising: a. when a subscriber is calling or is being called, the Core Network (CN) extracting Mobile Country Code (MCC) of the subscriber and according to said MCC setting value of Customer Identifier (CI) to indicate whether the subscriber is a foreign or domestic subscriber; b. establishing a connection between User Equipment (UE) corresponding to the subscriber and Radio Resource Controller (RRC), after the connection is successfully established, the UE sending a message of RRC connection completion to RNC of the access network, the RNC then storing relevant security information in said message including User Encryption Algorithms (UEAs) supported by the UE; c. when CN initiating establishment procedure of security mode, a Visit Location Register (VLR) of CN selecting at least one UEA, and sending RNC a security mode command message including UEAs, Cipher Key (CK) and CI information; d. after receiving the security mode command message from CN, RNC selecting a UEA for security communication according to the selected UEAs in CN in said message and the stored UEAs supported by the UE; where CN supports more than one encryption algorithm, if the current subscriber is a foreign subscriber and a standard encryption algorithm is supported by both UE and CN, determining the standard encryption algorithm as the encryption algorithm for security communication; otherwise, determining that no appropriate encryption algorithm is available and disconnecting the communication; if the current subscriber is a domestic subscriber and a non-standard encryption algorithm is supported by both UE and CN, determining this encryption algorithm as the encryption algorithm for security communication; otherwise, determining that no appropriate encryption algorithm is available and disconnecting the communication; where CN only supports the standard encryption algorithm, if the standard encryption algorithm is also supported by UE, determining the standard encryption algorithm as the encryption algorithm for security communication directly; otherwise, determining that no appropriate encryption algorithm is available and disconnecting the communication; after selecting UEA, RNC sending UE a security mode command message carrying the selected UEA; e. after receiving the security mode command message, UE setting the local UE security capability parameter as the received UE security capability parameter, meanwhile, UE sending a security mode complete message to RNC of the access network; after receiving the message, RNC sending a security mode complete message carrying the selected UEA to VLR of CN; the VLR of CN completing setting of its own security mode after receiving the security mode complete message.