Methods and Devices Having a Key Distributor Function for Improving the Speed and Quality of a Handover

A key distributor node, comprising:

• a memory device with at least one first key, said first key derived from a master key for building a secure relationship;
• at least one data communication device configured to exchange data with first and second access nodes integrated into a network in which the key distributor node is connected, wherein the first key is derived from the master key during establishment of a security relationship between the second access node and the key distributor node,
• at least one processor connected to the memory device and the data communication device,
• wherein functions are provided for the at least one processor to complete a handover of a terminal from the first access node to the second access node by responding to a received key request from the terminal via the second access node using the established security relationship with the key distributor node by:
• deriving a second key from the first key in response to the key request at the key distributor node, and
• transmitting the derived second key to the second access node via the data communication device and forwarding the second key to the terminal to establish a secure relationship for communications between the terminal and the second access node in order to complete the handover without the second access node forming a secure relationship with the first access node.

A non-transitory computer-readable storage media comprising instructions that are executable by a key distributor node that, when implemented, result in the key distributor node performing a method comprising:

• the key distributor node authenticating a first access node of a network to form a security relationship between the first access node and the key distributor node;
• the key distributor node authenticating a second access node of the network to form a security relationship between the second access node and the key distributor node;
• the key distributor node responding to a request for a first key from the second access node for use in forming a security relationship between the second access node and a communication terminal that is received after the first and second access nodes were authenticated by the key distributor node by generating the first key by deriving that first key from a second key saved in a storage device accessible by the key distributor node that was formed during the authenticating of the second access node of the network to form the security relationship between the second access node and the key distributor node and subsequently sending the derived first key to the second access node, wherein the generated first key derived from the second key that is sent to the second access node is usable for facilitating a handover for associating the communication terminal with the second access node without an establishment of a secure relationship between the first access node and the second access node for performing the handover.