Communication method and apparatus
Embodiments of this application provide example communication methods and apparatuses. One example communication method is applied to a communications device, where a subscriber identification module (SIM) card is installed in the communications device, and where the example communication method includes determining, by the communications device, that the SIM card is removed. The communications device can then send alarm information to a network device, where the alarm information indicates that the SIM card in the communications device is removed, and where security protection is performed on the alarm information based on security context stored in the communications device. The communications device can then delete the security context.
1. A communications system, comprising a communications device and a network device, wherein a subscriber identification module (SIM) card is installed in the communications device, wherein:
the communications device is configured to:
determine that the SIM card is removed;
send alarm information to the network device, wherein the alarm information indicates that the SIM card in the communications device is removed, and wherein security protection is performed on the alarm information based on security context stored in the communications device; and
delete the security context, wherein deleting the security context comprises:
receiving a security-protected acknowledgment message from the network device; and
deleting the security context after performing security deprotection on the security-protected acknowledgment message by using the security context; and
the network device is configured to:
receive the alarm information; and
store the alarm information.
2. The communications system according to claim 1 , wherein determining that the SIM card is removed comprises:
determining that a connection to the SIM card is interrupted; or
determining that information cannot be read from the SIM card.
3. The communications system according to claim 1 , wherein:
the network device is a mobility management network element;
sending the alarm information to the network device comprises sending, to the mobility management network element, non-access stratum (NAS) signaling on which NAS security protection is performed based on the security context, wherein the NAS signaling comprises the alarm information; and
receiving the alarm information comprises receiving the NAS signaling.
4. The communications system according to claim 3 , wherein
the security-protected acknowledgment message comprises a security-protected NAS acknowledgment message from the mobility management network element.
5. The communications system according to claim 1 , wherein:
the network device is an access network device;
sending the alarm information to the network device comprises sending, to the access network device, access stratum (AS) signaling on which AS security protection is performed based on the security context, wherein the AS signaling comprises the alarm information; and
receiving the alarm information comprises receiving the AS signaling.
6. The communications system according to claim 5 , wherein
the security-protected acknowledgment message comprises a security-protected AS acknowledgment message from the access network device.
7. The communications system according to claim 1 , wherein deleting the security context comprises:
deleting the security context after a configured timer expires, wherein the configured timer starts timing after the communications device sends the alarm information, or the configured timer starts timing after the communications device determines that the SIM card is removed.
8. A communication method, wherein the method is applied to a communications device, wherein a subscriber identification module (SIM) card is installed in the communications device, and wherein the method comprises:
determining, by the communications device, that the SIM card is removed;
sending, by the communications device, alarm information to a network device, wherein the alarm information indicates that the SIM card in the communications device is removed, and wherein security protection is performed on the alarm information based on security context stored in the communications device; and
deleting, by the communications device, the security context, wherein deleting the security context comprises:
receiving, by the communications device, a security-protected acknowledgment message from the network device; and
deleting, by the communications device, the security context after performing security deprotection on the security-protected acknowledgment message by using the security context.
9. The communication method according to claim 8 , wherein the determining, by the communications device, that the SIM card is removed comprises:
determining, by the communications device, that a connection to the SIM card is interrupted; or
determining, by the communications device, that information cannot be read from the SIM card.
10. The communication method according to claim 8 , wherein:
the network device is a mobility management network element; and
the sending, by the communications device, alarm information to a network device comprises sending, by the communications device to the mobility management network element, non-access stratum (NAS) signaling on which NAS security protection is performed based on the security context, wherein the NAS signaling comprises the alarm information.
11. The communication method according to claim 10 , wherein
the security-protected acknowledgment message comprises a security-protected NAS acknowledgment message from the mobility management network element.
12. The communication method according to claim 8 , wherein:
the network device is an access network device; and
the sending, by the communications device, alarm information to a network device comprises sending, by the communications device to the access network device, access stratum (AS) signaling on which AS security protection is performed based on the security context, wherein the AS signaling comprises the alarm information.
13. The communication method according to claim 12 , wherein
the security-protected acknowledgment message comprises a security-protected AS acknowledgment message from the access network device.
14. The communication method according to claim 8 , wherein the deleting, by the communications device, the security context comprises:
deleting, by the communications device, the security context after a configured timer expires, wherein the configured timer starts timing after the communications device sends the alarm information, or the configured timer starts timing after the communications device determines that the SIM card is removed.
15. A communications apparatus in which a subscriber identification module (SIM) card is installed, comprising:
at least one processor; and
a memory coupled to the at least one processor and having program instructions stored thereon which, when executed by the at least one processor, cause the communications apparatus to:
determine that the SIM card is removed;
send alarm information to a network device, wherein the alarm information indicates that the SIM card in the communications apparatus is removed, and wherein security protection is performed on the alarm information based on security context stored in the communications apparatus; and
delete the security context, wherein deleting the security context comprises:
receiving a security-protected acknowledgment message from the network device; and
deleting the security context after performing security deprotection on the security-protected acknowledgment message by using the security context.
16. The communications apparatus according to claim 15 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
determine that a connection to the SIM card is interrupted; or
determine that information cannot be read from the SIM card.
17. The communications apparatus according to claim 15 , wherein the network device is a mobility management network element, and wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
send, to the mobility management network element, non-access stratum (NAS) signaling on which NAS security protection is performed based on the security context, wherein the NAS signaling comprises the alarm information.
18. The communications apparatus according to claim 17 , wherein
the security-protected acknowledgment message comprises a security-protected NAS acknowledgment message from the mobility management network element.
19. The communications apparatus according to claim 15 , wherein the network device is an access network device, and wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
send, to the access network device, access stratum (AS) signaling on which AS security protection is performed based on the security context, wherein the AS signaling comprises the alarm information.
20. The communications apparatus according to claim 15 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
delete the security context after a configured timer expires, wherein the configured timer starts timing after the communications apparatus sends the alarm information, or the configured timer starts timing after the communications apparatus determines that the SIM card is removed.