Abstract: The present invention discloses a method and system for remote password based authentication using smart cards for accessing a communications network. The disclosed method does not require a remote authentication sever to maintain a table of passwords for all users. The disclosed method and system also support mutual authentication. It not only prevents the illegal use of system resources by an impersonator, the user can also authenticate the identity of the remote authentication server.

Abstract: The invention discloses a signal-to-interference ratio (SIR) measurement method. The method measures interference power (I) of a single-path signal after the received signal is demodulated by the single-path demodulators of multipath receiving device at the receiving end. The total interference power is obtained by equipartition combining with the measured interference power of each single-path signal. The signal power (S) is obtained by measuring after maximum ratio combination of each single-path signal. The SIR of the received signal is the division of the signal power and the total interference power. An apparatus, implementing mentioned method, sets the interference power measurement-device in the RAKE combiner and the signal power measurement-device after the RAKE combiner. In this way, the interference measurement can effectively provide more information and can more really response to the channel variation.

Abstract: A method for implementing data service security in a mobile communication system includes: obtaining security condition of a user terminal based on security-relevant configuration information reported by the user terminal; determining a security policy for the user terminal based on the security-relevant configuration information of the user terminal and security policy information stored, and sending the security policy determined to a packet service support node and/or the user terminal; implementing, by the packet service support node and/or the user terminal, a control process based on the security policy. The method, system and apparatus provided by the embodiments of the present invention introduce a security mechanism cooperated by the mobile communication network and a user terminal to effectively prevent the mobile communication network against viruses.

Abstract: A system and a method for security authentication, in which a biometric authentication subsystem in the security authentication system receives a biometric certificate held by the user and the user's biometric information from a user terminal; the biometric certificate contains the user's biometric template or the storage address of the biometric template; next, the biometric authentication subsystem authenticates the biometric certificate, performs matching between the biometric information and the biometric template, and generates the identity authentication result. The invention can also combine biometric authentication with PMI privilege authentication, so as to enhance security of identity authentication in PMI and widen applicability of biometric authentication.

Abstract: A correlative reacting system and a method for implementing security update of mobile station. The correlative reacting system includes a security correlative agent at a terminal side and a security correlative server at a network side communicated with the security correlative agent via an air interface. In the present invention, the correlative reacting system performs an information interaction with the mobile station, controls the mobile station to carry out an automatic security update. The automatic security update includes automatic downloading and installation, update of the security correlative agent, and automatic recovery of the insecurity factors of the mobile station and the like.

Abstract: This invention provides a method and system for network security control. A server at the network side analyzes local security correlation information collected and reported by terminal devices, and determines a security strategy according to the result of the analysis. Since correlative reacting between the network side and the terminal side is implemented and the security strategy is established according to the information from the terminal devices, threats against security from a terminal device can be resisted from the beginning. A relative large number of information sources can be taken into account when determining the security strategy such that the determined security strategy is more reasonable and accurate. Furthermore, a differential security service can be provided for terminal devices with different subscriber levels. This invention also provides a method and system for preventing junk mails based on the concept of correlative reacting between a terminal and a server.

Abstract: A method for identifying the primary cell under Site Selective Diversity Transmit comprises the steps of: (1) An ID is assigned by the system to each cell; (2) The ID indicating the primary cell is transmitted periodically by UE to the connected cells via the up link FBI fields; (3) The ID indicating the primary cell transmitted by the mobile station is received by the base station, if the signals received by the base station satisfy with one of the following conditions, then the said base station will consider itself as a primary cell; the identification conditions are: A. The ID code word indicating the primary cell received by the base station is matched with the ID code word of itself; B. The quality of the up link signals received does not satisfy with a quality threshold Qth, at the same time, there is a certain matching degree between the received ID code word indicating the primary cell and the ID code word of the cell itself; and C.

Abstract: The invention discloses a power control method for the multiple time-slot power control pattern in a CDMA system. The method pre-stores two encoded symbols which correspond to the all “1” and all “0” TPC commands respectively. Based on whether the current TPC command is identical with the last TPC command, the receiving end determines whether sending the original TPC command or the encoded TPC command. In the transmitting end, based on consistent degree of the received N TPC command data group and the encoded symbol, a corresponding power control mode is determined. The invention replaces the all “0” or all “1” TPC command with an encoded symbol, so the reliability of a TPC command is raised and the performance of power control is improved.

Abstract: The present invention discloses a method for determining encryption algorithm used in security communication based on Mobile Country Code (MCC) number. In this method, a Mobile Country Code (MCC) number list is preset in a Core Network (CN), and all the MCC numbers of those countries or service providers adopting the same self-developed encryption algorithms as those adopted by the homeland are stored in this MCC number list. When a User Equipment (UE) is calling or being called, the UE sends an International Mobile Subscriber Identifier (IMSI) information of the current subscriber to the CN, and the CN parses the information and extracts the MCC number after receiving the IMSI information.

Abstract: The present invention discloses a method for implementing security communication by independently selecting an encryption algorithm. In this method, a bit for representing CI is added, and a judge process for the CI and encryption algorithm supported by both the current subscriber and network is added. Under the condition that CN supports more than one encryption algorithm, if the CI is 1 and a standard encryption algorithm is supported by both UE and CN, the standard encryption algorithm is determined as the encryption algorithm for security communication; otherwise, the communication is disconnected; if the CI is 0 and a self-developed non-standard encryption algorithm is supported by both UE and CN, the encryption algorithm is determined as the encryption algorithm for security communication; otherwise, the communication is disconnected.

Abstract: A method for identifying the primary cell under Site Selective Diversity Transmit comprises the steps of: (1) An ID is assigned by the system to each cell; (2) The ID indicating the primary cell is transmitted periodically by UE to the connected cells via the up link FBI fields; (3) The ID indicating the primary cell transmitted by the mobile station is received by the base station, if the signals received by the base station satisfy with one of the following conditions, then the said base station will consider itself as a primary cell; the identification conditions are: A. The ID code word indicating the primary cell received by the base station is matched with the ID code word of itself; B. The quality of the up link signals received does not satisfy with a quality threshold Qth, at the same time, there is a certain matching degree between the received ID code word indicating the primary cell and the ID code word of the cell itself; and C.

Abstract: The invention discloses a power control method for the multiple time-slot power control pattern in a CDMA system. The method pre-stores two encoded symbols which correspond to the all “1” and all “0” TPC commands respectively. Based on whether the current TPC command is identical with the last TPC command, the receiving end determines whether sending the original TPC command or the encoded TPC command. In the transmitting end, based on consistent degree of the received N TPC command data group and the encoded symbol, a corresponding power control mode is determined. The invention replaces the all “0” or all “1” TPC command with an encoded symbol, so the reliability of a TPC command is raised and the performance of power control is improved.

Abstract: The invention discloses a signal-to-interference ratio (SIR) measurement method. The method measures interference power (I) of a single-path signal after the received signal is demodulated by the single-path demodulators of multipath receiving device at the receiving end. The total interference power is obtained by equipartition combining with the measured interference power of each single-path signal. The signal power (S) is obtained by measuring after maximum ratio combination of each single-path signal. The SIR of the received signal is the division of the signal power and the total interference power. An apparatus, implementing mentioned method, sets the interference power measurement-device in the RAKE combiner and the signal power measurement-device after the RAKE combiner. In this way, the interference measurement can effectively provide more information and can more really response to the channel variation.