Method and system for supporting security in a mobile communication system

1. A method for supporting security by a User Equipment (UE) in a mobile communication system, comprising:

sending an information provisioning request message to a network;

performing verification for security with the network;

upon completion of the verification, receiving an information provision response message from the network, the information provision response message including an encrypted index of a security key, an International Mobile Subscriber Identity (IMSI), and a security-related profile; and

selecting a security key based on the encrypted index of the security key, and storing the selected security key, the IMSI, and the profile.

2. The method of claim 1 , wherein the information provisioning request message includes at least one of a Public Land Mobile Network Identity (PLMN ID), a Machine IDentity (MID) and a Random Number (RAND).

3. The method of claim 1 , wherein the performing verification comprises verifying the network by decrypting an encrypted first random number (RAND 1 ) received from the network, encrypting a second random number (RAND 2 ) received from the network, and transmitting the encrypted second random number (RAND 2 ) to the network.

4. The method of claim 1 , wherein the performing verification comprises:

receiving an authentication vector including a random challenge (RAND) and an authentication token (AUTN), from the network;

verifying the AUTN, generating a Response parameter (RES) used for verification of the UE, and transmitting the RES to the network; and

selecting the security key based on the information provision response message, or the RAND, the AUTN, and the encrypted index of the security key.

5. The method of claim 1 , further comprising:

generating a derived master key based on the security key and a nonce; and

storing the derived master key.

6. A method for supporting security by a network in a mobile communication system, comprising:

receiving an information provisioning request message from a User Equipment (UE);

performing verification for security with the UE; and

upon completion of the verification, selecting a security key and an index of the security key, encrypting the index of the security key, and sending an information provision response message including an International Mobile Subscriber Identity (IMSI) and a security-related profile, to the UE through a Mobility Management Entity (MME).

7. The method of claim 6 , wherein the information provisioning request message includes a Public Land Mobile Network Identity (PLMN ID), a Machine IDentity (MID), and a RAND 1 .

8. The method of claim 6 , wherein the information provisioning response message includes at least one of a MID, the IMSI, the encrypted index of the security key, the profile, a PLMN ID, a MID, and a network type.

9. The method of claim 6 , wherein the performing verification comprises:

encrypting a first random number (RAND 1 ) included in the information provisioning request message, and transmitting to the UE the encrypted RAND 1 and a second random number (RAND 2 ) for verifying the UE;

receiving an encrypted RAND 2 from the UE; and

verifying the UE by decrypting the encrypted RAND 2 .

10. A User Equipment (UE) for supporting security of the UE, the UE comprising:

a transmitter configured to send an information provisioning request message to a network;

a controller configured:

to perform verification for security with the network,

upon completion of the verification, if a receiver receives an information provision response message from the network, the information provision response message including an encrypted index of a security key, an International Mobile Subscriber Identity (IMSI), and a security-related profile, to select a security key based on the encrypted index of the security key, and

to store the selected security key, the IMSI, and the profile.

11. The UE of claim 10 , wherein the information provisioning request message includes a Public Land Mobile Network Identity (PLMN ID), a MID, and a first random number (RAND 1 ).

12. The UE of claim 10 , wherein the controller verifies the network by decrypting an encrypted first random number (RAND 1 ) received from the network, encrypts a second random number (RAND 2 ) received from the network, and controls the transmitter to transmit the encrypted second random number (RAND 2 ) to the network.

13. An apparatus for supporting security of a User Equipment (UE), comprising:

a controller configured to, upon receiving an information provisioning request message from the UE through a receiver, verify the UE by calculating an authentication vector, to select a security key and an index of the security key, to encrypt the index of the security key, and to control a transmitter to transmit an information provision response message including an International Mobile Subscriber Identity (IMSI) and a security-related profile to the UE through a Mobility Management Entity (MME).

14. The apparatus of claim 13 , wherein the information provisioning request message includes a Public Land Mobile Network Identity (PLMN ID) and a Machine Identity (MID).

15. The apparatus of claim 13 , wherein the information provisioning response message includes at least one of a MID, the IMSI, the encrypted index of the security key, the profile, a PLMN ID, and a network type.

16. The apparatus of claim 13 , wherein the controller encrypts a first random number (RAND 1 ) included in the information provisioning request message, controls the transmitter to transmit to the UE the encrypted RAND 1 and a second random number (RAND 2 ) for verifying the UE, controls the receiver to receive an encrypted RAND 2 from the UE, and verifies the UE by decrypting the encrypted RAND 2 .