Devices, methods, apparatuses, and computer readable media for network slice security

A terminal device, comprising:

• at least one processor;
• and
• at least one memory storing instructions that, when executed by the at least one processor, cause the terminal device at least to perform:
• receiving from a source access network device associated with a handover of the terminal device, security information specific to a slice;
• and
• deriving at least one key specific to the slice based on the security information specific to the slice.

A network device, comprising:

• at least one processor;
• and
• at least one memory storing instructions that, when executed by the at least one processor, cause the network device at least to perform:
• selecting a target access network device associated with a handover of a terminal device, based on a security capability, of the target access network device, specific to a first slice used by the terminal device;
• and
• transmitting to the target access network device, security information specific to the first slice or security information specific to a second slice remapped from the first slice.

An access network device, comprising:

• at least one processor;
• and
• at least one memory storing instructions that, when executed by the at least one processor, cause the access network device as a target access network device associated with a handover of a terminal device at least to perform:
• receiving from another network device associated with the handover of the terminal device, security information specific to a first slice used by the terminal device or security information specific to a second slice remapped from the first slice.