# US 2008/0188200 A1 · Security key generation for wireless communications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2008/0188200 A1 - Document ID: US20080188200A1 - Status: Published application - Kind: A1 - Application number: 11/730,536 - Filed: 2007-04-02 - Published: 2008-08-07 - Earliest claimed: 2007-02-02 - Assignees: Nokia Corporation - Inventors: Dan Forsberg - Web page: https://patentgrep.com/patent/US20080188200A1 ## CPC - H04W 12/041: Key generation or derivation - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 36/0038: {of security context information} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Generating and re-generating security keys for wireless communication over a Radio Access Network efficiently without having to synchronize sequence numbers. In response to a predetermined event, at least one security key is generated for use in wireless communication between a mobile station and an access network element by utilizing a randomly allocated temporary identifier associated with the mobile station. ## Claims ### Claim 1 A method, comprising: generating, in response to a predetermined event, at least one security key for use in wireless communication between a mobile station and an access network element by utilizing a randomly allocated temporary identifier associated with the mobile station. ### Claim 2 (depends on 1) The method according to claim 1, wherein the utilizing of the randomly allocated temporary identifier in the generating of the at least one security key further comprises concatenating the randomly allocated temporary identifier with predetermined security context data. ### Claim 3 (depends on 1) The method according to claim 1, wherein the generating of the at least one security key comprises generating at least one of a ciphering key and an integrity protection key. ### Claim 4 (depends on 1) The method according to claim 1, wherein the access network element comprises a present access point. ### Claim 5 (depends on 4) The method according to claim 4, wherein the predetermined event comprises a handover of the mobile station from a prior access point to the present access point. ### Claim 6 (depends on 4) The method according to claim 4, wherein the utilizing of the randomly allocated temporary identifier associated with the mobile station comprises allocating a radio link identifier randomly to a radio link between the mobile station and the present access point. ### Claim 7 (depends on 6) The method according to claim 6, further comprising: utilizing an access point identifier allocated to the present access point in the generating of the at least one security key. ### Claim 8 (depends on 4) The method according to claim 4, wherein the utilizing of the randomly allocated temporary identifier associated with the mobile station comprises randomly allocating a temporary identifier to the mobile station. ### Claim 9 (depends on 4) The method according to claim 4, wherein the generating of the at least one security key comprises a security key by radio resource control signaling. ### Claim 10 (depends on 1) The method according to claim 1, wherein the access network element comprises at least one of a mobility management element and a user data gateway. ### Claim 11 (depends on 10) The method according to claim 10, wherein the predetermined event comprises a state change at the mobile station from a first state to a second state. ### Claim 12 (depends on 1) The method according to claim 1D, wherein the utilizing of the randomly allocated temporary identifier associated with the mobile station comprises allocating a temporary identifier randomly to the mobile station. ### Claim 13 (depends on 12) The method according to claim 12, further comprising: utilizing a routing area identifier allocated to a present routing area in the generating of the at least one security key. ### Claim 14 (depends on 10) The method according to claim 10, wherein the generating of the at least one security key comprises a security key by one of non access stratum signaling and user data protection. ### Claim 15 An apparatus, comprising: a security key generator configured to generate, in response to a predetermined event, at least one security key for use in wireless communication between a mobile station and an access network element by utilizing a randomly allocated temporary identifier associated with the mobile station. ### Claim 16 (depends on 15) The apparatus according to claim 15, wherein the security key generator is further configured to perform the utilizing of the randomly allocated temporary identifier in the generating of the at least one security key by concatenating the randomly allocated temporary identifier with predetermined security context data. ### Claim 17 (depends on 15) The apparatus according to claim 15, wherein the at least one security key to be generated comprises at least one of a ciphering key and an integrity protection key. ### Claim 18 (depends on 15) The apparatus according to claim 15, wherein the apparatus is arranged at the mobile station. ### Claim 19 (depends on 15) The apparatus according to claim 15, wherein the apparatus is arranged at the access network element. ### Claim 20 (depends on 15) The apparatus according to claim 15, wherein the access network element comprises a present access point. ### Claim 21 (depends on 20) The apparatus according to claim 20, wherein the predetermined event comprises a handover of the mobile station from a prior access point to the present access point. ### Claim 22 (depends on 20) The apparatus according to claim 20, wherein the randomly allocated temporary identifier associated with the mobile station comprises a radio link identifier randomly allocated to a radio link between the mobile station and the present access point. ### Claim 23 (depends on 22) The apparatus according to claim 22, wherein the security key generator is further configured to utilize an access point identifier allocated to the present access point to generate the at least one security key. ### Claim 24 (depends on 20) The apparatus according to claim 20, wherein the randomly allocated temporary identifier associated with the mobile station comprises a temporary identifier randomly allocated to the mobile station. ### Claim 25 (depends on 20) The apparatus according to claim 20, wherein the at least one security key to be generated comprises a security key for use by radio resource control signaling. ### Claim 26 (depends on 15) The apparatus according to claim 15, wherein the access network element comprises at least one of a mobility management element and a user data gateway. ### Claim 27 (depends on 26) The apparatus according to claim 26, wherein the predetermined event comprises a state change at the mobile station from a first state to a second state. ### Claim 28 (depends on 26) The apparatus according to claim 26, wherein the randomly allocated temporary identifier associated with the mobile station comprises a temporary identifier randomly allocated to the mobile station. ### Claim 29 (depends on 28) The apparatus according to claim 28, wherein the security key generator is further configured to utilize a routing area identifier allocated to a present routing area to generate the at least one security key. ### Claim 30 (depends on 26) The apparatus according to claim 26, wherein the at least one security key to be generated comprises a security key for use by one of non access stratum signaling and user data protection. ### Claim 31 An apparatus, comprising: a receiving means for receiving a predetermined event; and a security key generating means for generating, in response to the received predetermined event, at least one security key for use in wireless communication between a mobile station and an access network element, wherein the security key generating means includes means for utilizing a randomly allocated temporary identifier associated with the mobile station. ### Claim 32 A computer program embodied on a computer readable medium, the computer program controlling a data processing device to perform: generating, in response to a predetermined event, at least one security key for use in wireless communication between a mobile station and an access network element by utilizing a randomly allocated temporary identifier associated with the mobile station.