Methods and apparatus for differencitating security configurations in a radio local area network

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code,
• the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:
• receive, from a source base station, a handover command to handover the apparatus from the source base station to a target local access point;
• determine, based on at least an indication included in the handover command, a security configuration to be used for protecting communication between the source base station and the apparatus after the handover;
• transmit, after receipt of the handover command, a handover complete message;
• and
• communicate, through the target local access point and after transmission of the handover complete message, with the source base station according to the determined security configuration.

A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to at least perform the following:

• receive, from a source base station, a handover command to handover the apparatus from the source base station to a target local access point;
• determine, based on at least an indication in the handover command, a security configuration to be used for protecting communication between the source base station and the apparatus after the handover;
• transmit, after receipt of the handover command, a handover complete message;
• and
• communicate, through the target local access point and after transmission of the handover complete message, with the source base station according to the determined security configuration.

A method comprising:

• sending, via a source first access point, a handover request to a target access point for initiating a handover of a user equipment from the source first access point to the target access point, the handover request comprising an indication of a security configuration to be used for protecting communication between the source access point and the user equipment after the handover of the user equipment to the target access point;
• receiving, via the source access point and in response to the handover request, a handover command from the target access point, the handover command comprising the indication;
• forwarding, via the source access point, the handover command to the user equipment;
• and
• communicating, via the source access point and after a handover complete message from the user equipment, with the user equipment through the target access point and according to the indicated security configuration.