System and Method for Security Activation with Session Granularity
AssigneeFuturewei Technologies, Inc.
InventorsNathan Edward Tenny, Yi Guo
Life of this patent
Estimating the term…
Abstract
A method for operating a user equipment (UE) includes deriving security keys for a signaling radio bearer (SRB) in accordance with a first message received from an access node, initiating security for the SRB in accordance with the first message, receiving, from the access node, a second message including at least one security parameter for at least one data radio bearer (DRB), wherein the at least one security parameter is associated with a session that includes the at least one DRB, and wherein the second message is secured with the security keys for the SRB, and initiating security for the at least one DRB in accordance with the at least one security parameter.
Claims24
A computer implemented method for operating a user equipment (UE), the method comprising:
- deriving, by the UE, security keys for a signaling radio bearer (SRB) in accordance with a first message received from an access node;
- initiating, by the UE, security for the SRB in accordance with the first message;
- receiving, by the UE from the access node, a second message including at least one security parameter for at least one data radio bearer (DRB), wherein the at least one security parameter is associated with a session that includes the at least one DRB, and wherein the second message is secured with the security keys for the SRB;
- and
- initiating, by the UE, security for the at least one DRB in accordance with the at least one security parameter.
A computer implemented method for operating an access node, the method comprising:
- receiving, by the access node from an access and mobility management function (AMF), a first message to initiate a session at a user equipment (UE), the first message including at least one security parameter for at least one data radio bearer (DRB) associated with the session;
- sending, by the access node to the UE, a second message including the at least one security parameter for the at least one DRB associated with the session;
- and
- initiating, by the access node, security for the at least one DRB in accordance with the at least one security parameter.
A user equipment (UE) comprising:
- a memory storage comprising instructions;
- and
- one or more processors in communication with the memory storage, wherein the one or more processors execute the instructions to:
- derive security keys for a signaling radio bearer (SRB) in accordance with a first message received from an access node,
- initiate security for the SRB in accordance with the first message,
- receive, from the access node, a second message including at least one security parameter for at least one data radio bearer (DRB), wherein the at least one security parameter is associated with a session that includes the at least one DRB, and wherein the second message is secured with the security keys for the SRB, and
- initiate security for the at least one DRB in accordance with the at least one security parameter.
An access node comprising:
- a memory storage comprising instructions;
- and
- one or more processors in communication with the memory storage, wherein the one or more processors execute the instructions to:
- receive, from an access and mobility management function (AMF), a first message to initiate a session at a user equipment (UE), the first message including at least one security parameter for at least one data radio bearer (DRB) associated with the session,
- send, to the UE, a second message including the at least one security parameter for the at least one DRB associated with the session, and
- initiate security for the at least one DRB in accordance with the at least one security parameter.
Dependencies are inferred from the claim text.