Re-authentication key generation

A network entity in a cellular network, the network entity comprising:

• at least one memory;
• and
• at least one processor coupled with the at least one memory and configured to cause the network entity to:
• generate a re-authentication key;
• and
• transmit the re-authentication key with a key set identifier (ID) in an extensible authentication protocol message, wherein the re-authentication key is generated using three or more of:
• a public land mobile network (PLMN) ID;
• a trusted gateway function ID;
• a subscription permanent identifier (SUPI);
• or
• a user equipment (UE) ID.

A processor for cellular network communication, the processor comprising:

• at least one controller coupled with at least one memory and configured to cause the processor to:
• generate one or more of a re-authentication root key, a serving network re-authentication key, a re-authentication integrity key, an access point key, and a re-authentication master session key using three or more of:
• a public land mobile network (PLMN) identifier (ID);
• a trusted gateway function ID;
• a subscription permanent identifier (SUPI);
• a user equipment (UE) ID;
• a re-authentication integrity key label;
• an anti-bidding down between architecture parameter;
• a trusted access point ID;
• trusted access point information;
• or
• a trusted access point mobility counter;
• and
• transmit one or more of the re-authentication root key, the serving network re-authentication key, the re-authentication integrity key, the access point key, or the re-authentication master session key to the UE.