Counter check and reconfiguration method, apparatus, and system
The present invention relates to base stations, and a terminal. The primary base station execute the following steps, receiving, by a primary base station, security parameter update request information that is sent by a secondary base station and carries an encryption algorithm, wherein the security parameter update request information comprises the encryption algorithm; adding, by the primary base station, the encryption algorithm in the received security parameter update request information to reconfiguration information; sending, by the primary base station, the reconfiguration information carrying the encryption algorithm to a terminal; and receiving, by the primary base station, reconfiguration complete information sent by the terminal. Thereby, the present invention implements a reconfiguration process in a network architecture in which a primary base station is separated from a secondary base station.
1. A primary base station, comprising:
a processor;
a transmitter; and
a receiver, the receiver configured to:
receive security parameter update request information that carries an encryption algorithm from a secondary base station,
transmit the security parameter update request information carrying the encryption algorithm to the processor,
receive reconfiguration complete information sent by a terminal, wherein the security parameter update request information comprises the encryption algorithm, and
receive security parameter update request cause information from the secondary base station, wherein the security parameter update request cause information comprises a count value that overflows, the count value maintained by the secondary base station;
the processor configured to:
receive the security parameter update request information carrying the encryption algorithm from the receiver,
add the encryption algorithm in the received security parameter update request information to reconfiguration information, and
transmit the reconfiguration information to the transmitter; and
the transmitter configured to:
receive the reconfiguration information carrying the encryption algorithm from the processor,
send the reconfiguration information carrying the encryption algorithm to the terminal, and
send security capability information of the terminal to the secondary base station, the security capability information of the terminal is used to determine the encryption algorithm.
2. A system comprising:
a primary base station configured to:
receive security parameter update request information that is sent by a secondary base station, wherein the security parameter update request information comprises an encryption algorithm,
receive security parameter update request cause information,
add the encryption algorithm in the received security parameter update request information to reconfiguration information,
send the reconfiguration information carrying the encryption algorithm to a terminal, and receive reconfiguration complete information sent by the terminal, and
send security capability information of the terminal to the secondary base station; and
wherein the secondary base station is configured to:
determine an encryption algorithm used by the secondary base station and the terminal,
send security parameter update request information to the primary base station, wherein the security parameter update request information comprises the encryption algorithm,
receive the security capability information of the terminal, and determine the encryption algorithm according to the security capability information of the terminal,
send security parameter update request cause information to the primary base station, wherein the security parameter update request cause information comprises that a count value maintained by the secondary base station overflows, and
communicate with the terminal by using an updated key, the updated key is updated based on the encryption algorithm.
3. The primary base station according to claim 1 , wherein the encryption algorithm in the reconfiguration information is used to update a key of the terminal.