Systems, apparatus and methods to facilitate handover security

A computer program product, comprising:

• a non-transitory computer-readable medium, comprising:
• a first set of codes for causing a computer to derive a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value;
• a second set of codes for causing the computer to derive a key value using the KDF for a connection establishment using a second input value, wherein the first input value is different from the second input value and is different from input values derived subsequent to the second input value, and establishing the connection using the key value derived using the second input value;
• a third set of codes for performing the handover using the key value derived using the first input value;
• and
• wherein the first input value, the second input value and the input values derived subsequent to the second input value are input to a same key derivation function that outputs a key for use between a network entity and user equipment during the handover and connection establishment;
• and
• wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].

An apparatus, comprising:

• means for deriving a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value;
• means for performing the handover using the key value derived using the first input value;
• and
• means for deriving a key value using the KDF for a connection establishment using a second input value, wherein the first input value is different from the second input value and is different from input values derived subsequent to the second input value, and establishing the connection using the key value derived using the second input value;
• wherein the first input value, the second input value and the input values derived subsequent to the second input value input to a same key derivation function that outputs a key for use between a network entity and user equipment during the handover and connection establishment;
• and
• wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].

An apparatus, comprising:

• a mobility management module configured to:
• derive a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value;
• perform the handover using the key value derived using the first input value;
• and
• derive a key value using the KDF for a connection establishment using a second input value, wherein the first input value is different from the second input value and is different from input values derived subsequent to the second input value, and establishing the connection using the key value derived using the second input value;
• wherein the first input value, the second input value and the input values derived subsequent to the second input value input to a same key derivation function that outputs a key for use between a network entity and user equipment during the handover and connection establishment;
• and
• wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].

A method to facilitate handover security, the method comprising:

• deriving a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value;
• performing the handover using the key value derived using the first input value;
• and
• deriving a key value using the KDF for a connection establishment using a second input value, wherein the first input value is different from the second input value, and wherein the first input value and the second input value are values indicative of instances of deriving a key for use between a network entity and user equipment, and establishing the connection using the key value derived using the second input value;
• and
• wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].

A computer program product, comprising:

• a non-transitory computer-readable medium, comprising:
• a first set of codes for causing a computer to derive a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value;
• a second set of codes for causing the computer to derive a key value using the KDF for a connection establishment using a second input value, wherein the first input value is different from the second input value, and wherein the first input value and the second input value are values indicative of instances of deriving a key for use between a network entity and user equipment, and establishing the connection using the key value derived using the second input value;
• a third set of codes for performing the handover using the key value derived using the first input value;
• and
• wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].

An apparatus, comprising:

• means for deriving a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value;
• means for performing the handover using the key value derived using the first input value;
• and
• means for deriving a key value using the KDF for a connection establishment using a second input value, wherein the first input value is different from the second input value, and wherein the first input value and the second input value are values indicative of instances of deriving a key for use between a network entity and user equipment, and establishing the connection using the key value derived using the second input value;
• wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].

An apparatus, comprising:

• a mobility management module configured to:
• derive a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value;
• perform the handover using the key value derived using the first input value;
• and
• derive a key value for a connection establishment using a second input value,
• wherein the first input value is different from the second input value, and wherein the first input value and the second input value are values indicative of instances of deriving a key for use between a network entity and user equipment, and establishing the connection using the key value derived using the second input value;
• and
• wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].