公开(公告)号：US20230033598A1

公开(公告)日：2023-02-02

申请号：US17819188

申请日：2022-08-11

Applicant: Huawei Technologies Co., Ltd.

Inventor： Zhongding LEI ,  Lichun LI ,  Bo ZHANG ,  Fei LIU ,  Haiguang WANG ,  Xin KANG

IPC: H04L9/08 ,  H04L9/14 ,  H04L9/40

Abstract: Embodiments of this application disclose a network key processing system, including user equipment, a security anchor network element, and an access and mobility management network element, where the security anchor network element is configured to: obtain a first key parameter from a slice selection network element, where the first key parameter includes identifier information of N network slices; generate N slice-dedicated keys based on the first key parameter; and send the N slice-dedicated keys to the corresponding N network slices respectively; the access and mobility management network element is configured to: obtain the first key parameter, and send the first key parameter to the user equipment; and the user equipment is configured to: generate the N slice-dedicated keys for the N network slices based on the first key parameter, and access the N network slices based on the generated N slice-dedicated keys.

公开(公告)号：US20190342082A1

公开(公告)日：2019-11-07

申请号：US16517645

申请日：2019-07-21

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Zhongding LEI ,  Lichun LI ,  Bo ZHANG ,  Fei LIU ,  Haiguang WANG ,  Xin KANG

IPC: H04L9/08 ,  H04L9/14 ,  H04L29/06

Abstract: Embodiments of this application disclose a network key processing system, including user equipment, a security anchor network element, and an access and mobility management network element, where the security anchor network element is configured to: obtain a first key parameter from a slice selection network element, where the first key parameter includes identifier information of N network slices; generate N slice-dedicated keys based on the first key parameter; and send the N slice-dedicated keys to the corresponding N network slices respectively; the access and mobility management network element is configured to: obtain the first key parameter, and send the first key parameter to the user equipment; and the user equipment is configured to: generate the N slice-dedicated keys for the N network slices based on the first key parameter, and access the N network slices based on the generated N slice-dedicated keys.

公开(公告)号：US20190159029A1

公开(公告)日：2019-05-23

申请号：US16240710

申请日：2019-01-05

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Lichun LI ,  Fei LIU ,  Marco SPINI

IPC: H04W12/06 ,  H04L29/06

Abstract: Embodiments of the present invention disclose a cyber security management system, method, and apparatus. The system includes UE, an AN, a network function selection module, and at least two authentication modules. The UE is configured to send a first service request to the network function selection module, where the first service request carries authentication protocol information. The network function selection module is configured to: select a target authentication module based on the authentication protocol information, and send a second service request to the target authentication module. The target authentication module is configured to perform mutual authentication with the UE. The target authentication module is further configured to: determine a first security configuration according to a specified security policy, and send the first security configuration to the AN.