Security handling for rrc resume from inactive state

A wireless device operative in a wireless communication network employing a Radio Resource Control, RRC, protocol, wherein the wireless device in RRC CONNECTED state receives from the network an RRC Suspend message including a security update parameter, and in response to the RRC Suspend message enters an RRC INACTIVE state and stores a first security context, the wireless device comprising:

• communication circuitry;
• processing circuitry operatively connected to the communication circuitry, and adapted to, upon attempting to transition to an RRC CONNECTED state:
• generate a second security context using the security update parameter received in the RRC Suspend message;
• send to the network an RRC Resume Request message;
• and
• in response to one of the following events, discard the second security context:
• receiving from the network an RRC Reject message in response to the RRC Resume Request message;
• expiration of a timer started upon sending the RRC Resume Request message, without receiving a responsive message from the network;
• and
• performing a cell reselection prior to receiving a message from the network responsive to the RRC Resume Request message.

A base station operative in a wireless communication network employing a Radio Resource Control, RRC, protocol, comprising:

• communication circuitry;
• processing circuitry operatively connected to the communication circuitry, and adapted to:
• store a previously active security context for the wireless device;
• receive from the wireless device an RRC Resume Request message including a security token;
• generate a temporary security context for the wireless device;
• use the temporary security context to verify the security token;
• send an RRC message to the wireless device;
• and
• if no response to the RRC message is received from the wireless device, discard the temporary security context and retrieve the previously active security context.