AUTHENTICATION METHOD, AUTHENTICATION APPARATUS, AND AUTHENTICATION SYSTEM

    公开(公告)号:US20200344063A1

    公开(公告)日:2020-10-29

    申请号:US16923741

    申请日:2020-07-08

    Abstract: An authentication method, an authentication apparatus, and an authentication system for the communications field are described. The authentication includes receiving, by a communications network element, a request from a user equipment (UE) comprising a first identifier that is an international mobile subscriber identity (IMSI). The communication networkelement, in response to the request, sends the first identifier to a home subscriber server. The communications network element, upon authenticating the UE successfully, sends a second identifier to a key management center (KMS) to facilitate the KMS generating a subscriber private key corresponding to the second identifier and sending the subscriber private key to the communications network element. The communications network element thereafter sends the subscriber private key to the UE.

    DATA TRANSMISSION METHOD AND RELATED DEVICE AND SYSTEM

    公开(公告)号:US20190261167A1

    公开(公告)日:2019-08-22

    申请号:US16400032

    申请日:2019-04-30

    Inventor: Bo ZHANG Lu GAN Rong WU

    Abstract: Embodiments of the present invention disclose a data transmission method and a related device and system. The system includes an access network device AN and user equipment UE. The AN is configured to receive a base key sent by a key management device in a core network, where the base key is a key generated from two-way authentication between the UE and the core; the AN and the UE are configured to process the base key according to a preset rule to generate an air interface protection key; the UE is configured to: protect a target field in an uplink protocol data unit PDU by using the air interface protection key; and the AN is configured to parse the target field in the uplink protocol data unit by using the air interface protection key.

    NETWORK AUTHENTICATION METHOD, AND RELATED DEVICE AND SYSTEM

    公开(公告)号:US20190149329A1

    公开(公告)日:2019-05-16

    申请号:US16248778

    申请日:2019-01-16

    Inventor: Rong WU Bo ZHANG Lu GAN

    Abstract: Embodiments of the present invention disclose a network system. The system includes user equipment, a network authentication device, and a service authentication device. The service authentication device is configured to obtain reference information and generate a second shared key with reference to the reference information and a first shared key, where the first shared key is a shared key pre-configured between the user equipment and the service authentication device; the user equipment is configured to obtain the reference information and generate the second shared key with reference to the reference information and the first shared key; the service authentication device is configured to send the second shared key to the network authentication device; and the network authentication device is configured to receive the second shared key, where the second shared key is used by the user equipment and the network authentication device to generate a target shared key.

    NETWORK ROAMING PROTECTION METHOD, RELATED DEVICE, AND SYSTEM

    公开(公告)号:US20200322798A1

    公开(公告)日:2020-10-08

    申请号:US16909601

    申请日:2020-06-23

    Inventor: Rong WU Bo ZHANG Lu GAN

    Abstract: Embodiments of the present disclosure disclose a network roaming protection method and related device. The method includes: receiving, by a visited session management device, a first session establishment request that includes a first security requirement; obtaining, by the visited session management device, a target security policy, where the target security policy is obtained by processing the first security requirement set and a second security requirement set using a preset rule; and sending the target security policy to the UE instructing the UE to generate a target shared key based on a reference shared key and according to a rule defined by the target security policy, where the target shared key is used to protect secure end-to-end data transmission between the UE and the visited gateway.

    VERTICAL INDUSTRY USER SYSTEM, DEVICE, AND IDENTIFICATION NUMBER DISTRIBUTION METHOD

    公开(公告)号:US20190141531A1

    公开(公告)日:2019-05-09

    申请号:US16221566

    申请日:2018-12-16

    Abstract: Embodiments of the present invention disclose a vertical industry user system, including a service provider device, a terminal, a core network element, and a base station. The core network element is configured to: obtain a distribution instruction; and according to the distribution instruction, configure a core network identification number for the core network element, distribute a provider identification number to the service provider device, and distribute a base station identification number to the base station. The service provider device is configured to receive the provider identification number. The base station is configured to receive the base station identification number. The embodiments of the present invention further provide an identification number distribution method.

    KEY CONFIGURATION METHOD, KEY MANAGEMENT CENTER, AND NETWORK ELEMENT

    公开(公告)号:US20180278595A1

    公开(公告)日:2018-09-27

    申请号:US15978794

    申请日:2018-05-14

    Inventor: Bo ZHANG Lu GAN

    Abstract: This application provides a key configuration method and an apparatus. A key management center obtains a service key, and performs encryption and/or integrity protection on the service key to obtain a token. The key management center sends the token to a first network element, the first network element forwards the token to a second network element, and the second network element obtains the service key based on the token. The service key is used to perform encryption and/or integrity protection on data transmitted between the first network element and the second network element. Therefore, security key configuration can be implemented through interaction between the key management center and the network elements, thereby laying a foundation for end-to-end security communication between the first network element and the second network element.

    DEVICE REGISTRATION METHOD, HUB DEVICE, AND APPARATUS

    公开(公告)号:US20250097065A1

    公开(公告)日:2025-03-20

    申请号:US18714195

    申请日:2022-11-15

    Inventor: Dehai WANG Lu GAN

    Abstract: This application can be applicable to the field of the internet of things, and relates to a device registration method, a hub device, and an apparatus. In an example device registration method provided in this application, a hub device may register a target device with the hub device with assistance of first user equipment, and the hub device may register the hub device with a server with assistance of second user equipment. The hub device may register a registered device (which may include the target device that is registered with the hub device) with the server after the hub device registers the hub device with the server.

    RESOURCE SUBSCRIPTION METHOD, RESOURCE SUBSCRIPTION APPARATUS, AND RESOURCE SUBSCRIPTION SYSTEM

    公开(公告)号:US20190089648A1

    公开(公告)日:2019-03-21

    申请号:US16193574

    申请日:2018-11-16

    Inventor: Hongna CHANG Lu GAN

    Abstract: A network resource subscription system is provided. In the system, a subscription apparatus and a publishing apparatus respectively send a resource subscription request and a resource publishing request to a control apparatus through a forwarding apparatus, to establish a network resource tree. Then, the control apparatus can use a relatively exact or fuzzy matching manner to make the subscription apparatus subscribe to a resource of the publishing apparatus, and make the subscription apparatus and the publishing apparatus perform peer to peer (P2P) communication, thereby taking both transmission efficiency and subscription efficiency into account.

Patent Agency Ranking