Key generation method and apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorsLonghua GUO, Yuanping ZHU, Li HU, Rong WU
Life of this patent
Estimating the term…
Abstract
A key generation method and an apparatus are provided. The key generation method includes the following steps: A first access network device determines that a first device that registers with a network by using the first access network device is an IAB node. The first access network device sends a secondary node (SN) addition/modification request message to a third access network device, and receives an SN addition/modification request acknowledgement (ACK) message. The first access network device establishes a secure tunnel between the first device and the first access network device.
Claims21
A key generation method, comprising:
- determining, by a first access network device through which a first device registers with a network, that the first device is an integrated access and backhaul (IAB) node;
- sending, by the first access network device, a secondary node (SN) addition/modification request message to a third access network device, wherein the third access network device is a secondary base station of the first device, the SN addition/modification request message carries a secondary base station key, and the secondary base station key is generated by the first access network device;
- receiving, by the first access network device, an SN addition/modification request acknowledgement (ACK) message from the third access network device;
- sending, by the first access network device, a radio resource control (RRC) reconfiguration message to the first device, wherein the RRC reconfiguration message comprises fourth indication information, the first access network device is a master base station, and the fourth indication information indicates that the master base station is an IAB donor;
- receiving, by the first access network device, an RRC reconfiguration complete message from the first device;
- sending, by the first access network device, an SN reconfiguration complete message to the third access network device;
- generating, by the first access network device, an IAB key KIAB based on a master base station key, an internet protocol (IP) address of the first access network device, and an IP address of the first device;
- establishing, by the first access network device and by using the KIAB, a secure tunnel between the first device and the first access network device;
- wherein the master base station key is generated in a process in which the IAB node registers with the network through the first access network device.
A communication apparatus, comprising:
- at least one processor, configured to execute instructions to cause the communication apparatus to:
- determine, through which a first device registers with a network, that the first device is an integrated access and backhaul (IAB) node;
- send a secondary node (SN) addition/modification request message to a third access network device, wherein the third access network device is a secondary base station of the first device, the SN addition/modification request message carries a secondary base station key, and the secondary base station key is generated by the communication apparatus;
- receive an SN addition/modification request acknowledgement (ACK) message from the third access network device;
- send a radio resource control (RRC) reconfiguration message to the first device, wherein the RRC reconfiguration message comprises fourth indication information, the communication apparatus is a master base station, and the fourth indication information indicates that the master base station is an IAB donor;
- receive an RRC reconfiguration complete message from the first device;
- send an SN reconfiguration complete message to the third access network device;
- generate an IAB key KIAB based on a master base station key, an internet protocol (IP) address of the communication apparatus, and an IP address of the first device;
- establish, by using the KIAB, a secure tunnel between the first device and the communication apparatus;
- wherein the master base station key is generated in a process in which the IAB node registers with the network through the communication apparatus.
A communication system, comprising:
- a first access network device configured to:
- determine, through which a first device registers with a network, that the first device is an integrated access and backhaul (IAB) node;
- send a secondary node (SN) addition/modification request message to a third access network device, wherein the third access network device is a secondary base station of the first device, the SN addition/modification request message carries a secondary base station key, and the secondary base station key is generated by the first access network device;
- receive an SN addition/modification request acknowledgement (ACK) message from the third access network device;
- send a radio resource control (RRC) reconfiguration message to the first device, wherein the RRC reconfiguration message comprises fourth indication information, the first access network device is a master base station, and the fourth indication information indicates that the master base station is an IAB donor;
- receive an RRC reconfiguration complete message from the first device;
- send an SN reconfiguration complete message to the third access network device;
- generate an IAB key KIAB based on a master base station key, an internet protocol (IP) address of the first access network device, and an IP address of the first device;
- establish, by using the KIAB, a secure tunnel between the first device and the first access network device;
- wherein the master base station key is generated in a process in which the IAB node registers with the network through the first access network device;
- and
- a third access network device configured to:
- receive the SN addition/modification request message;
- send the SN addition/modification request ACK message to the first access network device;
- receive the SN reconfiguration complete message.
(canceled)
Dependencies are inferred from the claim text.