Method and apparatus for applying security information in wireless communication system
AssigneeLG Electronics Inc.
InventorsYoungdae Lee, Sungjun Park, Seungjune Yi, Sunghoon Jung
Life of this patent
Estimating the term…
Abstract
A method and apparatus for applying security information in a wireless communication system is provided. A user equipment (UE) obtains first security information and second security information, applies the first security information to a first set of radio bearers (RBs) which is served by a master eNodeB (MeNB), and applies the second security information to a second set of RBs which is served by a secondary eNodeB (SeNB).
Claims17
A method performed by a user equipment (UE) in a wireless communication system, the method comprising:
- establishing, by the UE, both a first connection with a first base station and a second connection with a second base station;
- receiving, by the UE from the first base station, a security mode command message including a first security parameter;
- deriving, by the UE, a first security key for the first base station;
- deriving, by the UE, a signaling key associated with the first security parameter from the first security key;
- applying, by the UE, integrity protection or ciphering for signaling for the first base station based on the signaling key and the first security parameter;
- while maintaining both the first connection with the first base station and the second connection with the second base station:
- deriving, by the UE, a second security key for the second base station from the first security key;
- deriving, by the UE, a user traffic key associated with a second security parameter from the second security key;
- applying, by the UE, ciphering for user traffic for the second base station based on the user traffic key and the second security parameter,
- wherein the second security key is derived, by the first base station, from the first security key and transmitted, by the first base station, to the second base station, and used by the second base station.
A user equipment (UE) in a wireless communication, the UE comprising:
- a memory;
- a radio frequency (RF) unit;
- and
- a processor, operably coupled to the memory and the RF unit, and configured to:
- establish both a first connection with a first base station and a second connection with a second base station,
- control the RF unit to receive, from the first base station, a security mode command message including a first security parameter;
- derive a first security key for the first base station;
- derive a signaling key associated with the first security parameter from the first security key;
- apply integrity protection or ciphering for signaling for the first base station based on the signaling key and the first security parameter;
- while maintaining both the first connection with the first base station and the second connection with the second base station:
- derive a second security key for the second base station from the first security key;
- derive a user traffic key associated with a second security parameter from the second security key;
- and
- apply ciphering for user traffic for the second base station based on the user traffic key and the second security parameter,
- wherein the second security key is derived, by the first base station, from the first security key and transmitted, by the first base station, to the second base station, and used by the second base station.
A processor for a wireless communication device in a wireless communication, wherein the processor is configured to:
- establish both a first connection with a first base station and a second connection with a second base station,
- control the wireless communication device unit to receive, from the first base station, a security mode command message including a first security parameter;
- derive a first security key for the first base station;
- derive a signaling key associated with the first security parameter from the first security key;
- apply integrity protection or ciphering for signaling for the first base station based on the signaling key and the first security parameter;
- while maintaining both the first connection with the first base station and the second connection with the second base station:
- derive a second security key for the second base station from the first security key;
- derive a user traffic key associated with a second security parameter from the second security key;
- and
- apply ciphering for user traffic for the second base station based on the user traffic key and the second security parameter,
- wherein the second security key is derived, by the first base station, from the first security key and transmitted, by the first base station, to the second base station, and used by the second base station.
Dependencies are inferred from the claim text.