Patent ID: 8666073

Claim:
A safe handover method, applied in a handover process of a terminal in a next generation network, wherein the next generation network comprises a handover management module, an authentication server and the terminal, and the method comprises: presetting initial safety parameters in the authentication server and the terminal, and generating safety parameters from the initial safety parameters; the handover management module obtaining the safety parameters; and the handover management module and the terminal interacting with each other by using the generated safety parameters to ensure a communication safety between the two communication parties; wherein, the interaction performed by the handover management module and the terminal by using the generated safety parameters comprises: an authentication process interacted between the handover management module and the terminal; integrity and/or confidentiality processes interacted between the handover management module and the terminal, wherein, the authentication process between the handover management module and the terminal comprises: the handover management module obtaining a first safety parameter from the authentication server, and transmitting a first parameter to the terminal, wherein the first parameter comprises a second random number and a first safety parameter processed with the second random number; the terminal receiving the first parameter, and authenticating the handover management module according to a second safety parameter and the first parameter; and the handover management module authenticating the terminal according to a fourth parameter from the terminal and a third safety parameter in the handover management module under the condition that the handover management module is successfully authenticated, wherein the fourth parameter comprises a first random number and a fourth safety parameter processed with the first random number; wherein the first safety parameter and the third safety parameter are generated according to the initial safety parameters in the authentication server, and the second safety parameter and the fourth safety parameter are generated according to the initial safety parameters in the terminal.