METHOD, APPARATUS, AND SYSTEM FOR PROCESSING SESSION CONTEXT

• US 20110258682A1
• Filed: 06/30/2011
• Published: 10/20/2011
• Est. Priority Date: 12/31/2008
• Status: Abandoned Application

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: YIN, Yu
• Application Number:
  US13/173,212
• Publication Number:
  US 20110258682A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 65/1093 by adding participants; by removing participants

Abstract

A method, an apparatus, and a system for processing session context are disclosed. The method for processing session context includes: receiving a reset notification message that carries a device identifier; confirming that a reset event corresponding to the reset notification message occurs on a peer device identified by the device identifier; and deleting an associated context related to the reset event. According to the present invention, after a local device receives a reset notification message from a peer device and before deleting an associated context related to the reset event of the peer device, the local device needs to confirm the authenticity of the reset notification message with the peer device. In this way, the associated context on the device will not be wrongly deleted due to the attack from a fake source address, and it is ensured that the associated context are correctly processed after a reset notification message is received, thus ensuring that the local device can perform normal communication and improving the system security.

Claims

1. A method for processing session context, comprising:

receiving a reset notification message that carries a device identifier;

confirming that a reset event corresponding to the reset notification message occurs on a peer device identified by the device identifier; and

deleting an associated context related to the reset event.

2. The method of claim 1, wherein the reset notification message comprises one of a complete reset notification message and a partial reset notification message.

3. The method of claim 2, wherein the step of confirming that the reset event corresponding to the reset notification message occurs on the peer device identified by the device identifier comprises:

performing interactive authentication with the peer device and confirming that the reset event occurs on the peer device.

4. The method of claim 3, wherein the step of performing interactive authentication on the peer device and confirming that the reset event occurs on the peer device comprises:

sending an authentication request message that carries an authentication parameter to the peer device;

receiving an authentication response message that the peer device returns according to the authentication request message, wherein the authentication response message carries information of the authentication parameter; and

confirming that the reset event occurs on the peer device according to the information of the authentication parameter.

5. The method of claim 3, wherein the step of performing interactive authentication on the peer device and confirming that the reset event occurs on the peer device comprises:

sending an authentication request message to the peer device;

receiving an authentication response message that the peer device returns according to the authentication request message, wherein the authentication response message carries information of an authentication parameter; and

confirming that the reset event occurs on the peer device according to the information of the authentication parameter.

6. The method of claim 4, wherein the information of the authentication parameter comprises at least one of the authentication parameter and a converted authentication parameter obtained after the authentication parameter is converted.

7. The method of claim 5, wherein the information of the authentication parameter comprises at least one of the authentication parameter and a converted authentication parameter obtained after the authentication parameter is converted.

8. The method of claim 6, wherein the authentication parameter comprises one of a current restart count of a local device and identifier information pre-generated by a peer device.

9. The method of claim 8, wherein the authentication parameter comprises one of a current restart count of a local device and identifier information pre-generated by a peer device.

10. The method of claim 4, wherein the step of confirming that the reset event occurs on the peer device according to the authentication parameter comprises:

if receiving the authentication response message within a valid time period, confirming, according to the information of the authentication parameter, that the reset event occurs on the peer device.

11. The method of claim 5, wherein the step of confirming that the reset event occurs on the peer device according to the authentication parameter comprises:

if receiving the authentication response message within a valid time period, confirming, according to the information of the authentication parameter, that the reset event occurs on the peer device.

12. The method of claim 10, wherein the authentication parameter comprises at least one of time when the reset notification message is received and time when the authentication response message is expected to be received.

13. The method of claim 11, wherein the authentication parameter comprises at least one of time when the reset notification message is received and time when the authentication response message is expected to be received.

14. The method of claim 2, wherein the reset notification message further carries information of an authentication parameter, and the step of confirming that the reset event corresponding to the reset notification message occurs on the peer device identified by the device identifier comprises:

confirming, according to the information of the authentication parameter, that the reset event occurs on the peer device.

15. The method of claim 4, wherein the partial reset notification message further carries a packet data network (PDN) connection set identifier (CSID), and the step of deleting the associated context related to the reset event comprises:

deleting an associated context corresponding to the CSID.

16. An apparatus for processing session context, comprising:

a receiving module, configured to receive a reset notification message that carries a device identifier;

a confirming module, configured to confirm that a reset event corresponding to the reset notification message occurs on a peer device identified by the device identifier; and

a processing module, configured to delete an associated context related to the reset event.

17. The apparatus of claim 16, wherein the confirming module comprises:

a first request authenticating unit, configured to send an authentication request message that carries an authentication parameter to the peer device;

a first response authenticating unit, configured to receive an authentication response message that the peer device returns according to the authentication request, wherein the authentication response message carries information of the authentication parameter; and

a first confirming unit, configured to confirm that the reset event occurs on the peer device according to the information of the authentication parameter.

18. The apparatus of claim 16, wherein the confirming module comprises:

a second request authenticating unit, configured to send an authentication request message to the peer device;

a second response authenticating unit, configured to receive an authentication response message that the peer device returns according to the authentication request message, wherein the authentication response message carries information of an authentication parameter; and

a second confirming unit, configured to confirm that the reset event occurs on the peer device according to the information of the authentication parameter.

19. The apparatus of claim 16, wherein the reset notification message received by the receiving module comprises information of an authentication parameter, and the confirming module is configured to confirm that the reset event occurs on the peer device according to the information of the authentication parameter.

20. A system for processing session context, comprising a peer device and a local device, wherein:

the peer device is configured to send a reset notification message that carries a device identifier to the local device after a reset event occurs; and

the local device is configured to;

receive the reset notification message that carries the device identifier, confirm that the reset event corresponding to the reset notification message occurs on the peer device identified by the device identifier, and delete an associated context related to the reset event.