SECURITY NEGOTIATION METHOD, SECURITY FUNCTIONAL ENTITY, CORE NETWORK ELEMENT, AND USER EQUIPMENT

摘要

Embodiments of the present invention provide a security negotiation method, a security function entity, a core network element, and user equipment. The method includes: receiving, by a security function entity, an authentication request sent by a core network element, where the authentication request is generated by the core network element based on a request message of user equipment UE; performing, by the security function entity, Authentication and Key Agreement with the UE based on the authentication request, and generating a security parameter, where the security parameter includes a first key; receiving, by the security function entity, a key request sent by the core network element; and generating, by the security function entity, a security key between the core network element and the UE based on the key request and the first key. In the method, NAS security for a 5G network architecture can be negotiated, thereby meeting a security requirement of a 5G network.