On-demand network function re-authentication based on key refresh
AssigneeQUALCOMM Incorporated
InventorsSoo Bum Lee, Adrian Edward Escott, Lenaig Genevieve Chaponniere
Life of this patent
Estimating the term…
Abstract
Methods, systems, and devices for wireless communication are described. A user equipment (UE) may determine that a security context with a network node has been established for more than a threshold time period. The UE may identify, based on a key hierarchy, a parent network node associated with the network node. The UE may transmit a key refresh request message to the parent network node to trigger a key refresh procedure between the parent network node and the network node. The UE may perform a procedure with the network node to establish a new security context based on the key refresh procedure.
Claims30
A method for wireless communication, comprising:
- establishing, by a user equipment (UE), a connection with a network node at a first time:
- determining, by the UE, an age of a security context associated with the connection with the network node, the age of the security context being based at least in part on the first time, and indicating that the security context has been established for more than a threshold time period;
- identifying, based at least in part on a key hierarchy, at least one parent network node associated with the network node;
- transmitting a key refresh request message from the UE to the identified parent network node to trigger a key refresh procedure between the identified parent network node and the network node;
- and
- performing a procedure with the network node to establish a new security context based at least in part on the key refresh procedure.
An apparatus for wireless communication, in a system comprising:
- a processor;
- memory in electronic communication with the processor;
- and
- instructions stored in the memory and operable, when executed by the processor, to cause the apparatus to:
- establish a connection with a network node at a first time;
- determine an age of a security context associated with the connection with the network node, the age of the security context being based at least in part on the first time, and indicating that the security context has been established for more than a threshold time period;
- identify, based at least in part on a key hierarchy, at least one parent network node associated with the network node;
- transmit a key refresh request message to the identified parent network node to trigger a key refresh procedure between the identified parent network node and the network node;
- and
- perform a procedure with the network node to establish a new security context based at least in part on the key refresh procedure.
An apparatus for wireless communication, comprising:
- means for establishing, by a user equipment (UE), a connection with a network node at a first time;
- means for determining, by the UE, an age of a security context associated with the connection with the network node, the age of the security context being based at least in part on the first time, and indicating that the security context has been established for more than a threshold time period;
- means for identifying, based at least in part on a key hierarchy, at least one parent network node associated with the network node;
- means for transmitting a key refresh request message from the UE to the identified parent network node to trigger a key refresh procedure between the identified parent network node and the network node;
- and
- means for performing a procedure with the network node to establish a new security context based at least in part on the key refresh procedure.
A non-transitory computer readable medium storing code for wireless communication, the code comprising instructions executable by a processor to:
- establish, by a user equipment (UE), a connection with a network node at a first time;
- determine, by the UE, an age of a security context associated with the connection with the network node, the age of the security context being based at least in part on the first time, and indicating that the security context has been established for more than a threshold time period;
- identify, based at least in part on a key hierarchy, at least one parent network node associated with the network node;
- transmit a key refresh request message from the UE to the identified parent network node to trigger a key refresh procedure between the identified parent network node and the network node;
- and
- perform a procedure with the network node to establish a new security context based at least in part on the key refresh procedure.
Dependencies are inferred from the claim text.