Firstly，we introduce the architecture of soft switching and the moving soft-switching network， then analyze the security hidden troubles of moving soft-switching network，lastly propose the security scheme of IPSec(tunnel working modes)+certificate server/Policy Server +Iu-Flex．IPSec provides encryption and authentication services in the network layer，which makes this security strategy can protect all IP flow，and makes the control of security scheme more flexible．