公开(公告)号：US20230156042A1

公开(公告)日：2023-05-18

申请号：US18154073

申请日：2023-01-13

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Yan ZHOU ,  Chengdong HE ,  Qingchun LIN

IPC: H04L9/40

CPC classification number: H04L63/20

Abstract: Embodiments of this application disclose a trusted communication method. A core network device may detect, based on trusted policy information, whether a non-access stratum NAS message or user data that passes through the core network device is abnormal. When it is detected that the NAS message or the user data is abnormal, the NAS message or a service corresponding to the user data may be notified or blocked, and exception information notification signaling may be reported to a trusted control node (an independent network function entity, an existing control network element, or an existing management network element). In this way, the trusted control node can update the trusted policy information in a timely manner, or notify each network element to take a trusted protection operation. This effectively improves security of a communication system.

公开(公告)号：US20190222611A1

公开(公告)日：2019-07-18

申请号：US16359753

申请日：2019-03-20

Applicant: Huawei Technologies Co., Ltd.

Inventor： Qingchun LIN ,  Tao JIN ,  Jiangsheng WANG

IPC: H04L29/06 ,  H04L12/66 ,  G06F9/455

CPC classification number: H04L63/20 ,  G06F9/45558 ,  G06F2009/45587 ,  G06F2009/45595 ,  H04L12/66 ,  H04L29/02

Abstract: A security policy deployment method and apparatus are provided, and the method includes: when a lifecycle state of a virtualized network function VNF changes, generating, by a management network element, a security policy of the VNF, where the security policy of the VNF is used to perform access control on the VNF; and sending, by the management network element, the security policy of the VNF to a control device. The management network element is a network element configured to perform lifecycle management on the VNF. By using the method or apparatus provided in embodiments of this application, the security policy of the VNF can be adjusted in time when the lifecycle state of the VNF changes, thereby greatly reducing a possibility that a bug occurs in the security policy of the VNF because the VNF changes.