Security protection method and communication device

• Main Authors: WU RONG, BEN HENDA NOAMEN, GUO LONGHUA
• Format: Patent
• Language: Chinese; English
• Published: 14.11.2023
• Subjects: ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; WIRELESS COMMUNICATIONS NETWORKS

The embodiment of the invention provides a security protection method and a communication device. According to the method provided by the invention, if the user plane security policy received by the centralized unit control plane entity indicates that the user plane security protection does not need to be started or preferably started, the centralized unit control plane entity sends an imaginary key to the centralized unit user plane entity, the imaginary key is different from a user plane security key, and the user plane security protection is preferably started. Therefore, even if the user plane entity of the centralized unit is broken by an attacker, the attacker can only obtain the imaginary key from the user plane entity of the centralized unit and cannot obtain the user plane security key, so that the risk of leakage of the user plane security key can be reduced. 本申请实施例提供了一种安全保护方法及通信装置。根据本申请的方法，若集中式单元控制面实体接收到的用户面安全策略指示不需要开启用户面安全保护或优选开启用户面安全保护，则集中式单元控制面实体向集中式单元用户面实体发送虚构密钥，虚构密钥与用户面安全密钥不同，从而即使在集中式单元用户面实体被攻