Method and device for rekeying in a radio network link layer encryption system

A radio network communications device in a radio network comprising a plurality of network locations, the radio network communications device comprising:

• a transceiver;
• a processor;
• and
• a non-transitory computer readable medium having instructions stored thereon that, in response to execution by the processor, cause the radio network communications device to perform operations comprising:
• during a first portion of a first LLE crypto period during which a first LLE key (LEK) is used to LLE encrypt inbound and outbound communications between a base station and mobile stations operating within a corresponding coverage area of the base station, preventing individual ones of the mobile stations from requesting a second LEK to be used during a second LLE crypto period after the first LLE crypto period;
• and
• during a second portion of the first LLE crypto period, allowing individual ones of the mobile stations to request the second LEK.

A mobile station in a radio network comprising a plurality of network locations, the mobile station comprising:

• a wireless transceiver;
• a processor;
• and
• a non-transitory computer readable medium having instructions stored thereon that, in response to execution by the processor, cause the mobile station to perform operations comprising:
• during a first portion of a first LLE crypto period during which a first link layer encryption key (LEK) is used to LLE encrypt inbound and outbound communications between a base station and the mobile station operating within a corresponding coverage area of the base station, refraining from requesting a second LEK to be used during a second LLE crypto period after the first LLE crypto period;
• and
• during a second portion of the first LLE crypto period, and responsive to determining that the mobile station was not pre-provisioned with the second LEK and was not provided the second LEK during the first portion of the first LLE crypto period, transmitting an individual request for the second LEK over an air interface to the base station.