Incorporating network policies in key generation
AssigneeQUALCOMM Incorporated
InventorsSoo Bum LEE, Adrian Edward ESCOTT, Anand PALANIGOUNDER
Life of this patent
Estimating the term…
Abstract
The present disclosure provides techniques that may be applied, for example, for providing network policy information in a secure manner. In some cases, a UE may receive a first message for establishing a secure connection with a network, wherein the first message comprises network policy information, generate a first key based in part on the network policy information, and use the first key to verify the network policy information.
Claims47
A method for wireless communication by a user equipment (UE), comprising:
- receiving a first message for establishing a secure connection with a network, wherein the first message comprises network policy information;
- generating a first key based in part on the network policy information;
- and
- verifying the network policy information based, at least in part, on the first key.
A method for wireless communication by a security anchor function (SEAF), comprising:
- generating a key for a network node based at least in part on network policy information, wherein the key is used for establishing a secure connection between a user equipment (UE) and the network node;
- and
- sending the key to the network node.
A method for wireless communication by a user equipment (UE), comprising:
- establishing, based on an authentication procedure with a network, an anchor key that is shared between the UE and a security anchor function (SEAF) in the network;
- receiving a first message for establishing a secure connection with the network, wherein the first message comprises a network policy token for a communication session with the network, network policy information, a first amount of time that a first key is valid and a second amount of time that the network policy token is valid;
- and
- determining whether the network policy token is valid based on a key derived from the shared anchor key, the network policy information, the first amount of time and the second amount of time, prior to establishing the secure connection with the network.
A method for wireless communication by a security anchor function (SEAF), comprising:
- establishing, based on an authentication procedure with a user equipment (UE), an anchor key that is shared between the SEAF and the UE in a network;
- generating a network policy token based in part on the anchor key, network policy information and a first amount of time that the network policy token is valid;
- generating a key for a network node;
- and
- sending the key, the network policy information, and the network policy token to the network node.
Dependencies are inferred from the claim text.