Security mode integrity verification
AssigneeLenovo (Singapore) Pte. Ltd.
InventorsAndreas Kunz, Genadi Velev
Life of this patent
Estimating the term…
Abstract
Apparatuses, methods, and systems are disclosed for security mode integrity verification. One method includes transmitting a request message to one or more network devices. The method includes, in response to transmitting the request message, authenticating with the one or more network devices. The method includes, in response to successfully authenticating with the one or more network devices, receiving a security mode command message. The method includes verifying the integrity of the security mode command message. The method includes, in response to the verification of the integrity of the security mode command message indicating that a security key is invalid, performing a cell reselection procedure.
Claims14
A method performed at a user equipment, the method comprising:
- transmitting a request message to one or more network devices;
- in response to transmitting the request message, authenticating with the one or more network devices;
- in response to successfully authenticating with the one or more network devices, receiving a security mode command message having a first security key derived with a public land mobile network ID associated with the one or more network devices as input;
- deriving a security second key with an associated public land mobile network identifier (ID) as input;
- verifying the integrity of the security mode command message is invalid by determining a mismatch between the first security key to the second security key;
- and
- in response to the verification of the integrity of the security mode command message indicating invalidity, performing a cell reselection procedure.
An apparatus comprising:
- a transmitter that transmits a request message to one or more network devices;
- a processor that, in response to transmitting the request message, authenticates with the one or more network devices;
- and
- a receiver that, in response to successfully authenticating with the one or more network devices, receives a security mode command message having a first security key derived with a public land mobile network ID associated with the one or more network devices as input,
- wherein the processor:
- deriving a security second key with an associated public land mobile network ID as input;
- verifies the integrity of the security mode command message is invalid by determining a mismatch between the first security key to the second security key;
- and
- in response to the verification of the integrity of the security mode command message indicating invalidity, performs a cell reselection procedure.
A method performed at a device executing an access and mobility management function, the method comprising:
- receiving a request message corresponding to a user equipment;
- in response to receiving the request message,
- determining whether the request message is valid based on information corresponding to the user equipment;
- generating a security mode command message having a first security key derived with a public land mobile network ID associated with the device;
- and
- sending the security mode command message to the user equipment;
- and
- in response to receiving a security mode response message indicating invalidity, transmitting a response message indicating to the user equipment that the request message is rejected.
An apparatus executing an access and mobility management function, the apparatus comprising:
- a receiver that receives a request message corresponding to a user equipment;
- a processor that, in response to receiving the request message,
- determines whether the request message is valid based on information corresponding to the user equipment;
- generates a security mode command message having a first security key derived with a public land mobile network ID associated with the apparatus;
- and
- sends the security mode command message to the user equipment;
- and
- a transmitter that, in response to receiving a security mode response message indicating invalidity, transmits a response message indicating to the user equipment that the request message is rejected.
Dependencies are inferred from the claim text.