公开(公告)号：US12089045B2

公开(公告)日：2024-09-10

申请号：US17695145

申请日：2022-03-15

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Fei Li ,  Juan Deng

IPC: H04W12/08 ,  H04L9/32 ,  H04W12/03 ,  H04W12/041 ,  H04W12/102 ,  H04W92/10

CPC classification number: H04W12/102 ,  H04L9/3242 ,  H04W12/03 ,  H04W12/041 ,  H04W92/10

Abstract: Embodiments of this application disclose an air interface information security protection method and apparatus, to protect security performance of air interface information sent by a terminal to a base station. In an embodiment, a terminal determines a first message authentication code (MAC) value based on a security key and air interface information, where the security key is a non-access stratum (NAS) security key between the terminal and a core network device; and the terminal sends the air interface information and the first MAC value to a base station.

公开(公告)号：US11606768B2

公开(公告)日：2023-03-14

申请号：US17180032

申请日：2021-02-19

Applicant: Huawei Technologies Co., Ltd.

Inventor： Juan Deng

IPC: H04W12/06 ,  H04W60/04 ,  H04W12/037 ,  H04W12/041 ,  H04W8/08 ,  H04W48/16

Abstract: A method for registration is used in an access and mobility management function (AMF) redirection scenario. The registration method includes determining, by a first AMF selected, during AMF redirection, to serve a user equipment (UE), to protect a first message, and sending the protected first message to the UE, where the first message includes an authentication request message.

公开(公告)号：US12015707B2

公开(公告)日：2024-06-18

申请号：US17380961

申请日：2021-07-20

Applicant: Huawei Technologies Co., Ltd.

Inventor： Juan Deng ,  Chengdong He

IPC: H04L9/08 ,  H04W12/041 ,  H04W12/0433 ,  H04W60/00 ,  H04W88/08

CPC classification number: H04L9/0891 ,  H04W12/041 ,  H04W12/0433 ,  H04W60/00 ,  H04W88/08

Abstract: A communication method and a related product are provided. The communication method includes: When UE switches from a source slice to a target slice mutually exclusive with the source slice, both the UE and a target AMF serving the target slice can obtain a first AMF key Kamf_new. The first AMF key Kamf_new is different from a second AMF key Kamf, and the second AMF key Kamf is a key of a source AMF serving the source slice. According to the application communication security and effectiveness are significantly improved_in a mutually exclusive slice switching scenario.

公开(公告)号：US11751160B2

公开(公告)日：2023-09-05

申请号：US17512276

申请日：2021-10-27

Applicant: Huawei Technologies Co., Ltd.

Inventor： Juan Deng ,  Bo Zhang

IPC: H04W60/00 ,  H04W12/041 ,  H04W36/00 ,  H04W12/106 ,  H04W12/03

CPC classification number: H04W60/00 ,  H04W12/041 ,  H04W36/0038 ,  H04W12/03 ,  H04W12/106

Abstract: A method includes after receiving a first non-access stratum (NAS) security mode command (SMC) message sent by an initial access and mobility management function (AMF), a user equipment (UE) stores a first NAS security context; the UE receives a second NAS SMC message sent by a second AMF, where the message carries indication information used to indicate the UE to use the first NAS security context; and the UE uses the first NAS security context as a current NAS security context based on the indication information. According to the method for mobility registration provided in this application, when receiving the second NAS SMC message sent by the second AMF, the UE uses the first NAS security context as the current NAS security context, and then processes the second NAS SMC message, so that the NAS security contexts on the UE and the second AMF are consistent.

公开(公告)号：US20210185631A1

公开(公告)日：2021-06-17

申请号：US17180032

申请日：2021-02-19

Applicant: Huawei Technologies Co., Ltd.

Inventor： Juan Deng

IPC: H04W60/04 ,  H04W8/08 ,  H04W48/16 ,  H04W12/06 ,  H04W12/041 ,  H04W12/037

Abstract: A method for registration is used in an access and mobility management function (AMF) redirection scenario. The registration method includes determining, by a first AMF selected, during AMF redirection, to serve a user equipment (UE), to protect a first message, and sending the protected first message to the UE, where the first message includes an authentication request message.