SUPPORTING INTERWORKING AND/OR MOBILITY BETWEEN DIFFERENT WIRELESS COMMUNICATION SYSTEMS

    公开(公告)号:US20240031814A1

    公开(公告)日:2024-01-25

    申请号:US18376241

    申请日:2023-10-03

    摘要: There is provided a method performed by a network unit, and a corresponding network unit as well as a corresponding wireless communication device, for supporting interworking and/or idle mode mobility between different wireless communication systems, including a higher generation wireless system and a lower generation wireless system, to enable secure communication with the wireless communication device. The method comprises selecting, in connection with a registration procedure and/or a security context activation procedure of the wireless communication device with the higher generation wireless system, at least one security algorithm of the lower generation wireless system, also referred to as lower generation security algorithm(s). The method also comprises sending a control message including information on the selected lower generation security algorithm(s) to the wireless communication device. The method further comprises storing information on the selected lower generation security algorithm(s) in the network unit.

    NETWORK SLICE AUTHENTICATION
    5.
    发明申请

    公开(公告)号:US20220070157A1

    公开(公告)日:2022-03-03

    申请号:US17422767

    申请日:2019-01-21

    IPC分类号: H04L29/06

    摘要: Arrangements for network slice isolation. A method is performed by a terminal device. The method includes determining to shift from accessing a first service using a current network slice to accessing a second service using a target network slice. Network access to the current network slice is handled by a source Access Management Function. Network access to the target network slice is handled by a target Access Management Function. The method includes performing a slice authentication procedure in response thereto. During the authentication procedure a mutual secret is shared between the terminal device and the target Access Management Function. The method includes creating a security context for the target network slice based on the mutual secret. The method includes activating the security context, thereby security isolating the target network slice from the source Access Management Function.

    METHODS PROVIDING NON-3GPP ACCESS USING ACCESS NETWORK KEYS AND RELATED WIRELESS TERMINALS AND NETWORK NODES

    公开(公告)号:US20200178076A1

    公开(公告)日:2020-06-04

    申请号:US16631560

    申请日:2017-07-28

    摘要: A method may be provided at a wireless terminal to support communications with a network node of a wireless communication network. An IKE SA may be initiated to establish a NAS connection between the wireless terminal and the network node through a non-3GPP access network and a non-3GPP interworking function network node. After initiating the IKE SA, an IKE authorization request may be transmitted through the non-3GPP access network to the N3IWF network node, with the IKE authorization request including an identifier of the wireless terminal. An access network key may be derived for the NAS connection through the non-3GPP access network at the wireless terminal, with the access network key being derived based on a NAS count for the wireless terminal and an anchor key. An IKE authorization response corresponding to the IKE authorization request may be received.

    SECURITY SOLUTION FOR SWITCHING ON AND OFF SECURITY FOR UP DATA BETWEEN UE AND RAN IN 5G

    公开(公告)号:US20230224700A1

    公开(公告)日:2023-07-13

    申请号:US18122814

    申请日:2023-03-17

    IPC分类号: H04W76/10 H04W12/03 H04W12/10

    CPC分类号: H04W76/10 H04W12/03 H04W12/10

    摘要: A network node configured to perform a process that includes receiving a PDU Session Establishment Request message for establishing a PDU session, wherein the PDU Session Establishment Request message was transmitted by a UE and includes a PDU session ID. The process also includes communicating a Session Management (SM) Request comprising the PDU Session Establishment Request to an SMF. The process also includes receiving from the SMF a message that includes: i) the PDU Session ID identifying the PDU session, ii) a PDU Session Establishment Accept message, and iii) a user plane (UP) security policy for the PDU session, wherein the UP security policy for the PDU session indicates: i) whether UP confidentiality protection shall be activated or not for all data radio bearers (DRBs) belonging to the PDU session, and/or ii) whether UP integrity protection shall be activated or not for all data radio bearers (DRBs) belonging to the PDU session.