Method and device for managing security according to service in wireless communication system

A method of a network, the method comprising:

• receiving, from a terminal, connection request messages for network slices, each of the network slices corresponding to each service;
• generating security contexts for each network slice based on at least one of identifiers of the network slices and information generated during an authentication operation;
• and
• transmitting, to a base station, messages including the security contexts generated for each network slice.

A method of a base station, the method comprising:

• receiving, from a network, a setup request message including generated security contexts based on at least one of identifiers of network slices and information generated during an authentication operation, each of the network slices corresponding to each service;
• transmitting, to a terminal, a connection response message including the at least one of the identifiers of the network slices;
• and
• receiving at least one of data or control messages for the network slices using the security contexts generated for each network slice.

A terminal, comprising:

• a transceiver configured to transmit or receive signals;
• and
• at least one processor configured to:
• transmit, to a network, connection request messages for network slices, each of the network slices corresponding to each service;
• receive, from a base station, a connection response messages including identifiers of the network slices;
• and
• generate security contexts for each network slice based on at least one of the identifiers of the network slices and information generated during an authentication operation.

A network, comprising:

• a transceiver configured to transmit or receive signals;
• and
• at least one processor configured to:
• receive, from a terminal, connection request messages for network slices, each of the network slices corresponding to each service;
• generate security contexts for each network slice based on at least one of identifiers of the network slices and information generated during an authentication operation;
• and
• transmit, to a base station, messages including the security contexts generated for each network slice.

A base station, comprising:

• a transceiver configured to transmit or receive signals;
• and
• at least one processor configured to:
• receive, from a network, a setup request message including generated security contexts based on at least one of identifiers of network slices and information generated during an authentication operation, each of the network slices corresponding to each service;
• transmit, to a terminal, a connection response message including the identifiers of the network slices;
• and
• receive at least one of data or control messages for the network slices using the security contexts generated for each network slice.