On-demand network function re-authentication based on key refresh
AssigneeQUALCOMM Incorporated
InventorsSoo Bum Lee, Adrian Edward Escott, Lenaig Genevieve Chaponniere
Life of this patent
Estimating the term…
Abstract
Methods, systems, and devices for wireless communication are described. A user equipment (UE) may determine that a security context with a network node has been established for more than a threshold time period. The UE may identify, based on a key hierarchy, a parent network node associated with the network node. The UE may transmit a key refresh request message to the parent network node to trigger a key refresh procedure between the parent network node and the network node. The UE may perform a procedure with the network node to establish a new security context based on the key refresh procedure.
Claims30
A method for wireless communication, comprising:
- receiving, at a parent network node, a key refresh request message from a user equipment (UE);
- identifying, based at least in part on the key refresh request message, a network node having a security context with the UE;
- obtaining an integrity verification information associated with the identified network node;
- performing a key refresh procedure based at least in part on obtaining the integrity verification information associated with the identified network node;
- and
- identifying, based at least in part on performing the key refresh procedure, a re-authentication procedure to be performed between the network node and the UE to establish a new security context.
An apparatus for wireless communication, in a system comprising:
- a processor;
- memory in electronic communication with the processor;
- and
- instructions stored in the memory and operable, when executed by the processor, to cause the apparatus to:
- receive a key refresh request message from a user equipment (UE);
- identify, based at least in part on the key refresh request message, a network node having a security context with the UE;
- obtain an integrity verification information associated with the identified network node;
- perform a key refresh procedure based at least in part on obtaining the integrity verification information associated with the identified network node;
- and
- identify, based at least in part on performing the key refresh procedure, a re-authentication procedure to be performed between the network node and the UE to establish a new security context.
A non-transitory computer-readable medium storing code for wireless communication, the code comprising instructions executable by a processor to:
- receive, at a parent network node, a key refresh request message from a user equipment (UE);
- identify, based at least in part on the key refresh request message, a network node having a security context with the UE;
- obtain an integrity verification information associated with the identified network node;
- perform a key refresh procedure based at least in part on obtaining the integrity verification information associated with the identified network node;
- and
- identify, based at least in part on performing the key refresh procedure, a re-authentication procedure to be performed between the network node and the UE to establish a new security context.
Dependencies are inferred from the claim text.