Zte Corporation

Yinxing Wei

Tian Hao Tian

Zhimeng Teng

Hongyan Wang

Yunwen Zhu

Feng Gao

Yifeng Bi

Tian Tian

Yumen Zhu

Mengwang Zhang

Xien Wang

A method, system and apparatus for implementing secure call forwarding are provided in the present invention. The method includes: a calling party calling a called party, the called party triggering the subscribed call forwarding service; a key management server (KMS) obtaining information of a legal call-forwarded party of the called party through an application server; the call-forwarded party obtaining a media key from the KMS; and the calling party establishing a call connection with the call-forwarded party.

Method, system and apparatus for implementing secure call forwarding

A method and a system for single sign-on are provided by the present invention, wherein the method comprises: a terminal sending an authentication request carrying a user identity identification to an RP and the RP redirecting the authentication request to an authentication center; the authentication center authenticating the terminal by means of SIP Digest and redirecting the authentication result to the RP via the terminal; and the RP providing services for the terminal according to an authentication result. By the present invention, the resources required by the operators to deploy GBAs are reduced, at the same time the requirement of non-UICC terminals accessing IMS network can be met, and the relevant application services of the IMS network can be accessed by means of SSO.

Method and system for single sign-on

It is provided a method and system for multi-access authentication in Next Generation Network (NGN). A network side authentication center (NSAC) generates an authentication vector after receiving, from a user terminal (UT), UT information including subscription information and multi-access information of the UT; after receiving an authentication request including authentication information from the NSAC, the UT performs authentication on the network side, generates keying material and network side authentication information (NSAI) upon successful authentication, and sends the NSAI to the NSAC, which performs authentication on the NSAI using the authentication vector, generates keying material according to the multi-access information of the UT upon successful authentication, and informs an access forwarding functional module (AFFM) of the keying material; the AFFM encrypts and decrypts access service information of the UT according to the keying material. The efficiency with which the UT accesses the network is enhanced.

Method and system for multi-access authentication in next generation network

An authentication method and an authentication system based on forking, and a forking authentication device are provided. The method includes: setting authentication credentials on the receiving devices and the original device respectively; a forking network element forking a calling request after receiving the calling request from the original device, and transmitting the forked calling request to the corresponding receiving devices; the forking network element receiving challenging values from a plurality of receiving devices, and forwarding a plurality of challenging values to the original device; the forking network element receiving the calling request which is retransmitted by the original device, wherein the retransmitted calling request carries relevant authentication credentials; and the forking network element forking the retransmitted calling request, and transmitting the forked calling request to the corresponding receiving devices, such that the receiving devices authenticate the original device according to the authentication credentials.

Authentication method and authentication system based on forking, and forking authentication device

The disclosure discloses a method for protecting security of layer-3 mobility user plane data in Next Generation Network (NGN), includes: performing authentication by a terminal with an authentication server; after the authentication is passed, obtaining a shared key material by both the terminal and the authentication server; generating, by the terminal and the authentication server, a mobility data security key according to the shared key material; transmitting, by the authentication server, the generated mobility data security key to a mobility data transmission module; protecting security of the layer-3 mobility user plane data, by the terminal and the mobility data transmission module, by using the mobility data security key. The disclosure also discloses a system for protecting security of layer-3 mobility user plane data in NGN. By using the method and the system provided by the disclosure, the protection for security of user plane data between the NGN user and the NGN network side is realized, and the security of user plane data of the terminal in layer-3 mobility session is enhanced.

Method and system for protecting security of the third layer mobility user plane data in NGN

The present invention relates to a method for realizing a secure forking call session, which comprises: performing authentication between a calling party and a KMS or between each called party and the KMS, and acquiring a shared key between the calling party and the KMS or a shared key between each called party and the KMS; generating a random number by the calling party and calling each called party through an IMS; generating a random number by each called party and acquiring a media root key from the KMS; generating a media key, which is shared with the calling party, by each called party according to the media root key and the random number generated by the called party; sending the media root key and the generated random number by a called response party in the called parties, who responds the call, to the calling party through the IMS network; generating a media key identical to that of the called response party by the calling party according to the media root key and the random number generated by the called response party; and performing a secure media session between the calling party and the called response party with the identical media key.

Method and system for realizing secure forking call session in IP multimedia subsystem

A method for transmitting deferred media information in an Internet Protocol (IP) multimedia subsystem (IMS) includes: a sending party of the media information sends a key generation parameter encrypted with a Ka to a mailbox application server of a receiving party of the media information, the mailbox application server stores or saves the encrypted key generation parameters, and sends the encrypted key generation parameters to a key management server (KMS); the KMS generates a media key K and forwards it to the sending party through the mailbox application server of the receiving party; the receiving party obtains the encrypted key generation parameter from the mailbox application server and sends it to the KMS; the KMS generates the K and sends it to the receiving party; the receiving party decrypts the encrypted media information by using the K. A corresponding system is also disclosed. The method and system decrease signaling interaction between the sending party and the KMS, reduce the storage pressure of the KMS; realize the end-to-end secure transmission of the deferred media in the IMS.

Method and system for transmitting deferred media information in an IP multimedia subsystem

The present invention provides a safe handover method and system which are applied in a handover process of a terminal in the next generation network, wherein the next generation network comprises a handover management module, an authentication server and a terminal. The safe handover method comprises: presetting initial safety parameters in the authentication server and the terminal, and generating safety parameters from the initial safety parameters; the handover management module obtaining the safety parameters; and the handover management module and the terminal interacting with each other by using the generated safety parameters to ensure a communication safety between the two communication parties. The present invention can ensure the communication safety between the terminal and the handover management module.

Safe handover method and system

The present invention discloses a method for obtaining key management server information, and an intercepting method, system and device, including: in the process of a user equipment registering an IP multimedia subsystem (IMS), storing the KMS information corresponding to the user equipment in a preset IMS core network network element; and when a lawful intercepting device monitors a session initiated by the user equipment, intercepting a session request signaling sent by the user equipment, and obtaining an identification information of the user equipment from the session request signaling, and searching the KMS information corresponding to the user equipment from the preset IMS core network network element according to the identification information of the user equipment. The technical solution of the present invention makes the requirement of lawful intercepting be met without depending on security of the signaling plane when a plurality of KMSs are deployed in the IP multimedia subsystem.

Method for obtaining information of key management server, and method, system and device for monitoring

A method and system for supporting mobility security in a next generation network are provided. A Transport Authentication and Authorization Functional Entity (TAA-FE) and a mobile agent functional entity are configured in the network, and a reference point for transmitting key material is established between the TAA-FE and the mobile agent functional entity; when a terminal moves, the mobile agent functional entity receives the key material from the TAA-FE, and performs security protection for signaling between the terminal and the mobile agent functional entity.

Method and system for supporting mobility security in the next generation network

A method for monitoring a picture or multimedia video pictures in a communication system is provided. The method includes following steps: a monitoring node extracts a picture or multimedia video pictures from communication data; a preprocessing system divides the picture or multimedia video pictures into multiple parts, and executes hash calculation respectively to obtain hash value of each part; the preprocessing system processes multiple hash values to construct a single ID; a primary monitoring system searches a template base for the ID, the template base includes multiple items, and each item includes an ID and hash values of which the ID in the item is composed; if the ID is not found, the primary monitoring system searches the template base for each hash value respectively; and the primary monitoring system informs the search result to the preprocessing system and the monitoring node. The present invention improves the efficiency of monitoring a picture or multimedia video pictures in communications.

Growing community of inventors

Shenzhen, China

Yinxing Wei