Abstract: Firstly,we introduce the architecture of soft switching and the moving soft-switching network, then analyze the security hidden troubles of moving soft-switching network,lastly propose the security scheme of IPSec(tunnel working modes)+certificate server/Policy Server +Iu-Flex.IPSec provides encryption and authentication services in the network layer,which makes this security strategy can protect all IP flow,and makes the control of security scheme more flexible.