Communication device, base station, and communication method

Abstract

A communication device (100) according to an embodiment is a communication device (100) that communicates with a primary cell group and a secondary cell group, the primary cell group being associated with a primary node (MN 200M), and the secondary cell group being associated with a secondary node (SN 200S). The communication device is provided with: a reception unit (112) that receives, from the master node, a radio resource control (RRC) reconfiguration message including configuration information for configuring a plurality of conditional reconfigurations for configuring a plurality of candidate cells, and information on a counter value, the configuration information being used for configuring the communication device, and the conditional reconfigurations being used for configuring a plurality of candidate cells; the information of the counter value is used for exporting the security key of the auxiliary node; a control unit (120) that specifies a cell for which an execution condition is satisfied from among the plurality of candidate cells, and uses the counter value to derive the security key for the secondary node associated with the specified cell; and a transmission unit (111) that transmits, to a network (10), the counter value for deriving the security key.

Description

[0001] Cross-references to related applications

[0002] This application is based on and claims the benefit of priority from patent application No. 2023-013393 filed on January 31, 2023, the entire contents of which are incorporated herein by reference. Technical Field

[0003] The present disclosure relates to a communication device, a base station, and a communication method. Background Art

[0004] Dual Connectivity (DC) has been introduced in mobile communication systems that comply with the technical specifications of 3GPP (registered trademark, hereinafter referred to as the Third Generation Partnership Project), a standardization project for mobile communication systems. In DC, communication devices communicate with a master cell group (MCG) and a secondary cell group (SCG). The MCG is associated with a master node (also called a "primary base station"), and the SCG is associated with a secondary node (also called a "secondary base station").

[0005] In the 3GPP technical specification document, the primary node sends a security key (specifically, KSN) to the secondary node and sends a counter value (specifically, SN counter) used to derive the security key to the communication device. The communication device uses the counter value to derive the security key, and uses the derived security key to derive a key for protecting communications with the secondary node (see Non-Patent Document 1).

[0006] In recent years, for example, selective SCG activation has been discussed to enable continuous cell changes when a communication device moves at high speed. In selective SCG activation, while the communication device remains connected to the same primary cell (P cell), multiple conditional reconfigurations are configured for the communication device to configure multiple candidate target primary and secondary cells (candidate target PS cells). The communication device executes conditional reconfigurations for candidate target PS cells whose execution conditions are met among the multiple conditional reconfigurations to change the PS cell from the source PS cell to the candidate target PS cell. After the PS cell is changed, the communication device can also change the PS cell by using the maintained multiple conditional reconfigurations, thereby continuously changing the cell.

[0007] Prior art literature

[0008] Non-patent literature

[0009] Non-Patent Document 1: 3GPP TS 33.501 V17.8.0 “Security architecture and procedures for 5G System” Summary of the Invention

[0010] A communication device according to a first aspect is a communication device (100) for communicating with a primary cell group and a secondary cell group, wherein the primary cell group is associated with a primary node (MN 200M) and the secondary cell group is associated with a secondary node (SN 200S). The communication device comprises: a receiving unit (112) for receiving a radio resource control (RRC) reconfiguration message from the primary node, the RRC reconfiguration message including configuration information and counter value information, the configuration information being used to configure a plurality of conditional reconfigurations for the communication device, the plurality of conditional reconfigurations being used to configure a plurality of candidate cells, and the counter value information being used to derive a security key for the secondary node; a control unit (120) for determining a cell for which an execution condition is satisfied from among the plurality of candidate cells, and using the counter value to derive the security key of the secondary node associated with the determined cell; and a sending unit (111) for sending the counter value for deriving the security key to a network (10).

[0011] A second aspect relates to a base station, which is a base station (200) operating as the aforementioned master node in a network (10) including a master node (MN 200M) and a secondary node (SN 200S), wherein the aforementioned master node is associated with a primary cell group configured for a communication device (100), and the aforementioned secondary node is associated with a secondary cell group configured for the aforementioned communication device. The aforementioned base station includes: a sending unit (211) for sending a radio resource control (RRC) reconfiguration message to the aforementioned communication device, the aforementioned RRC reconfiguration message including configuration information, the aforementioned configuration information being used to configure multiple conditional reconfigurations for the aforementioned communication device, the aforementioned multiple conditional reconfigurations being used to configure multiple candidate cells; and a receiving unit (212) for receiving a counter value, the aforementioned counter value being used when the aforementioned communication device derives a security key of the aforementioned secondary node associated with a cell whose execution condition is satisfied from among the aforementioned multiple candidate cells.

[0012] A third aspect relates to a base station (200) that acts as a secondary node in a network (10) including a master node (MN 200M) and a secondary node (SN 200S), wherein the master node is associated with a primary cell group configured for a communication device (100), and the secondary node is associated with a secondary cell group configured for the communication device. The base station includes a receiving unit (212) that receives a counter value from the master node, wherein the master node sends configuration information to the communication device, wherein the configuration information is used to configure multiple conditional reconfigurations for the communication device, wherein the multiple conditional reconfigurations are used to configure multiple candidate cells, and wherein the counter value is used at the communication device to derive a security key of the secondary node associated with a cell whose execution condition is satisfied from among the multiple candidate cells.

[0013] A fourth aspect relates to a communication method performed by a communication device (100), wherein the communication device communicates with a primary cell group and a secondary cell group, wherein the primary cell group is associated with a primary node (MN 200M) and the secondary cell group is associated with a secondary node (SN 200S). The communication method comprises: receiving a radio resource control (RRC) reconfiguration message from the primary node, wherein the RRC reconfiguration message includes configuration information and counter value information, wherein the configuration information is used to configure multiple conditional reconfigurations for the communication device, wherein the multiple conditional reconfigurations are used to configure multiple candidate cells, and the counter value information is used to derive a security key for the secondary node; determining a cell whose execution condition is satisfied from the multiple candidate cells; deriving the security key of the secondary node associated with the determined cell using the counter value; and transmitting the counter value for deriving the security key to a network (10). BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The objects, features, advantages and the like of the present disclosure will become more apparent from the following detailed description with reference to the accompanying drawings.

[0015] Figure 1 It is a diagram showing the configuration of a mobile communication system involved in an embodiment.

[0016] Figure 2 This is a diagram showing a configuration example of a protocol stack in a mobile communication system according to an embodiment.

[0017] Figure 3 This is a diagram showing an overview of dual connectivity (DC) according to an embodiment.

[0018] Figure 4 This is a sequence diagram for explaining an example of security in DC.

[0019] Figure 5This is a diagram used to illustrate a hypothetical scenario.

[0020] Figure 6 It is a diagram showing the configuration of a user equipment (UE) involved in an embodiment.

[0021] Figure 7 It is a diagram showing the configuration of a base station involved in the embodiment.

[0022] Figure 8 This is a sequence diagram (part 1) of an operation example 1 according to the embodiment.

[0023] Figure 9 This is a sequence diagram (part 2) of the first example of operation according to the embodiment.

[0024] Figure 10 This is a sequence diagram (part 3) of the first example of operation according to the embodiment.

[0025] Figure 11 This is a diagram showing a configuration example of an RRC reconfiguration message according to an embodiment.

[0026] Figure 12 This is a sequence diagram of the second operation example according to the embodiment.

[0027] Figure 13 This is a sequence diagram of the third operation example according to the embodiment.

[0028] Figure 14 This is a sequence diagram of operation example 4 according to the embodiment.

[0029] Figure 15 This is a sequence diagram of operation example 5 according to the embodiment. DETAILED DESCRIPTION

[0030] The mobile communication system according to the embodiment will be described with reference to the accompanying drawings. In the description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

[0031] It is assumed that in order to enable continuous cell changes, the communication device uses multiple conditional reconfigurations without resetting after the PS cell change. Therefore, it is impossible to receive the latest counter value from the master node every time the PS cell is changed.

[0032] In this case, for example, each time the PS cell is changed to the same cell, the communication device must use the same counter value to derive the security key. As a result, the key used to protect communications between the communication device and the secondary node is the same as the key previously used, which may result in communications between the communication device and the secondary node not being properly protected.

[0033] Therefore, one of the objects is to provide a communication device, a base station, and a communication method that can appropriately protect communication between the communication device and a secondary node.

[0034] (Configuration of mobile communication system)

[0035] Reference Figure 1 The configuration of a mobile communication system 1 according to the embodiment will be described. Mobile communication system 1 is, for example, a system compliant with the 3GPP Technical Specification (TS). Hereinafter, a 5th Generation System (5GS) based on the 3GPP standard, i.e., a mobile communication system based on NR (New Radio), will be described as an example of mobile communication system 1.

[0036] Mobile communication system 1 includes a network 10 and a user equipment (UE) 100 communicating with network 10. Network 10 includes NG-RAN (Next Generation Radio Access Network) 20, which is a 5G radio access network, and 5GC (5G Core Network) 30, which is a 5G core network.

[0037] UE 100 is an example of a communication device. UE 100 may be a device used by a user. UE 100 may be a user equipment specified in the technical specifications of 3GPP. UE 100 is, for example, a mobile phone terminal such as a smartphone, a tablet terminal, a notebook PC (personal computer), a communication module, or a communication card, or other movable device. UE 100 may be a vehicle (e.g., a car, a train, etc.) or a device provided therein (e.g., a Vehicle UE). UE 100 may be a transport body other than a vehicle (e.g., a ship, an airplane, etc.) or a device provided therein (e.g., an Aerial UE). UE 100 may be a sensor or a device provided therein. In addition, UE 100 may also be referred to as a mobile station, a mobile terminal, a mobile device, a mobile unit, a subscriber station, a subscriber terminal, a subscriber device, a subscriber unit, a wireless station, a wireless terminal, a wireless device, a wireless unit, a remote station, a remote terminal, a remote device, or a remote unit, or other names. In addition, UE 100 is an example of a terminal, and the terminal may include factory equipment, etc.

[0038] NG-RAN 20 includes multiple base stations 200. Each base station 200 manages at least one cell. A cell constitutes the smallest unit of a communication area. For example, a cell belongs to one frequency (carrier frequency) and includes one component carrier. The term "cell" sometimes refers to a wireless communication resource and sometimes refers to a communication object of UE 100. Each base station 200 is capable of wireless communication with UE 100 located in this cell. The base station 200 communicates with UE 100 using the protocol stack of RAN. The base station 200 is connected to other base stations 200 (also referred to as neighboring base stations) via the Xn interface. The base station 200 communicates with neighboring base stations via the Xn interface. In addition, the base station 200 provides NR user plane and control plane protocol termination for UE 100, and is connected to 5GC 30 via the NG interface. Such an NR base station 200 is sometimes referred to as a gNodeB (gNB).

[0039] 5GC 30 includes a core network device 300. Core network device 300 includes, for example, an Access and Mobility Management Function (AMF) and / or a User Plane Function (UPF). The AMF manages the mobility of UE 100. The UPF provides functions dedicated to user plane processing. The AMF and UPF are connected to base station 200 via an NG interface.

[0040] Reference Figure 2 , a configuration example of a protocol stack in the mobile communication system 1 involved in the embodiment is described.

[0041] The protocol of the wireless segment between UE 100 and base station 200 includes a physical (PHY) layer, a MAC (Medium Access Control) layer, an RLC (Radio Link Control) layer, a PDCP (Packet Data Convergence Protocol) layer, and an RRC (Radio Resource Control) layer.

[0042] The PHY layer performs encoding / decoding, modulation / demodulation, antenna mapping / demapping, and resource mapping / demapping. Data and control information are transmitted between the PHY layer of the UE 100 and the PHY layer of the base station 200 via a physical channel.

[0043] A physical channel consists of multiple OFDM (Orthogonal Frequency Division Multiplexing) symbols in the time domain and multiple subcarriers in the frequency domain. A subframe includes multiple OFDM symbols in the time domain. A resource block is a resource allocation unit and includes multiple OFDM symbols and multiple subcarriers. A frame can be composed of 10ms and can include 10 subframes of 1ms each. Within a subframe, there can be a number of time slots corresponding to the subcarrier spacing.

[0044] Among physical channels, the Physical Downlink Control Channel (PDCCH) plays a central role in purposes such as downlink scheduling assignments, uplink scheduling grants, and transmit power control. For example, UE 100 uses the Cell-Radio Network Temporary Identifier (C-RNTI) and Modulation and Coding Scheme-C-RNTI (MCS-C-RNTI) or Configured Scheduling-RNTI (CS-RNTI) assigned to UE 100 by base station 200 to perform blind decoding of the PDCCH, and obtains the successfully decoded DCI as the DCI addressed to the UE. The DCI transmitted from base station 200 is supplemented with CRC parity bits scrambled using the C-RNTI and MCS-C-RNTI or CS-RNTI.

[0045] In NR, UE 100 can use a bandwidth narrower than the system bandwidth (i.e., the bandwidth of the cell). The base station 200 configures a bandwidth part (BWP) including consecutive PRBs for UE 100. UE 100 sends and receives data and control signals in the active BWP. For example, up to four BWPs can be configured for UE 100. Each BWP can have a different subcarrier spacing, and the frequencies can overlap with each other. When multiple BWPs are configured for UE 100, the base station 200 can specify which BWP to activate through control in the downlink. As a result, the base station 200 can dynamically adjust the UE bandwidth according to the data traffic volume of UE 100, etc., which can reduce UE power consumption.

[0046] For example, base station 200 can configure up to three control resource sets (CORESETs) for each of up to four BWPs on a serving cell. A CORESET is a radio resource used for control information that UE 100 should receive. Up to 12 CORESETs can be configured on a serving cell for UE 100. Each CORESET includes an index from 0 to 11. For example, a CORESET includes six resource blocks (PRBs) and one, two, or three consecutive OFDM symbols in the time domain.

[0047] The MAC layer performs data priority control, retransmission processing using Hybrid ARQ (HARQ), and random access procedures. Data and control information are transmitted between the MAC layer of UE 100 and the MAC layer of base station 200 via transport channels. The MAC layer of base station 200 includes a scheduler. The scheduler determines the uplink and downlink transmission formats (transport block size, modulation and coding scheme (MCS)) and the resources allocated to UE 100.

[0048] The RLC layer uses the functions of the MAC layer and the PHY layer to transmit data to the RLC layer on the receiving side. Data and control information are transmitted between the RLC layer of the UE 100 and the RLC layer of the base station 200 via logical channels.

[0049] The PDCP layer performs header compression / decompression and encoding / decoding.

[0050] The Service Data Adaptation Protocol (SDAP) layer can be configured as an upper layer of the PDCP layer. The SDAP layer maps IP flows to radio bearers. IP flows are the unit of QoS (Quality of Service) control in the core network, while radio bearers are the unit of QoS control in the access stratum (AS).

[0051] The RRC layer controls logical channels, transport channels, and physical channels in response to the establishment, reestablishment, and release of radio bearers. RRC signaling for various configurations is transmitted between the RRC layer of the UE 100 and the RRC layer of the base station 200. When an RRC connection exists between the RRC layer of the UE 100 and the RRC layer of the base station 200, the UE 100 is in the RRC connected state. When no RRC connection exists between the RRC layer of the UE 100 and the RRC layer of the base station 200, the UE 100 is in the RRC idle state. When the RRC connection between the RRC layer of the UE 100 and the RRC layer of the base station 200 is suspended, the UE 100 is in the RRC inactive state.

[0052] The NAS layer, located above the RRC layer, manages session and mobility for UE 100. NAS signaling is transmitted between the NAS layer of UE 100 and the NAS layer of core network device 300 (AMF). In addition to the radio interface protocol, UE 100 also includes an application layer, etc.

[0053] (DC Overview)

[0054] Reference Figure 3 , an overview of dual connectivity (DC) according to an embodiment of the present invention is described.

[0055] In DC, the UE 100 performs simultaneous communication with a master cell group (MCG) managed by a master node (MN) 200M and a secondary cell group (SCG) managed by a secondary node (SN) 200S. The MN 200M can be an NR base station (gNB) or an LTE base station (eNB). The MN 200M is also referred to as a master base station. In addition, in MR-DC (Multi-Radio Dual Connectivity), the master node is a radio access node that provides a control plane connection to the core network. The master node can be a master eNB (in EN-DC (E-UTRA-NR dual connectivity)), a master ng-eNB (in NGEN-DC (NG-RAN E-UTRA-NR dual connectivity)), or a master gNB (in NR-DC (NR-NR dual connectivity) and NE-DC (NR-E-UTRA dual connectivity)).

[0056] The SN 200S can be an NR base station (gNB) or an LTE base station (eNB). The SN 200S is also referred to as a secondary base station. Furthermore, in MR-DC, a secondary node is a radio access node that does not have a control plane connection to the core network and provides additional resources to the UE 100. The secondary node can be an en-gNB (in EN-DC), a secondary ng-eNB (in NE-DC), or a secondary gNB (in NR-DC and NGEN-DC).

[0057] For example, after the MN 200M sends a predetermined message (eg, an SN Addition Request message) to the SN 200S, the MN 200M sends an RRC Reconfiguration message to the UE 100, thereby starting DC.

[0058] UE 100 in the RRC connected state receives radio resources from the scheduler of each of MN 200M and SN 200S, which are connected to each other via a backhaul network communication section, and performs wireless communication using the radio resources of MN 200M and the radio resources of SN 200S. The network communication section between MN 200M and SN 200 may be an Xn interface or an X2 interface. MN 200M and SN 200 communicate with each other via this network communication section.

[0059] The MN 200M may have a control plane connection with the core network. The MN 200M provides primary radio resources for the UE 100. The MN 200M manages the MCG. The MCG is a group of serving cells associated with the MN 200M. The MCG includes a primary cell (PCell) and optionally one or more secondary cells (SCells).

[0060] The SN 200S may not have a control plane connection with the core network. The SN 200S provides additional radio resources to the UE 100. The SN 200S manages the SCG. The SCG is associated with the SN 200S. The SCG includes a primary and secondary cell (PS cell) and optionally one or more SCells. In addition, the PCell of the MCG and the PS cell of the SCG are also called special cells (SpCells).

[0061] (Security in DC)

[0062] cite Figure 4 , an example of security in DC is explained.

[0063] In step S11, UE 100 and MN 200M establish an RRC connection.

[0064] In step S12, the MN 200M sends an SN add request message or an SN change request message to the SN 200S. The message may include the security key (KSN) of the target secondary node (specifically, the SN 200S). The security key may also be referred to as a secondary key. In addition to the "KSN" label, the security key may also be labeled "KeNB," "KgNB," "S-KeNB," "S-KgNB," or "S-KeNB."

[0065] MN 200M can calculate a security key and distribute it to SN 200S. Based on the security key, SN 200S derives a key for protecting communication between UE 100 and SN 200S. SN 200S can derive the RRC key and UP key used between UE 100 and SN 200S as the key.

[0066] RRC keys are keys used for RRC signaling. They are keys derived from security keys by UE 100 and base station 200. RRC keys include a key (KRRCint) used only to protect RRC signaling with a specific integrity algorithm, and a key (KRRCenc) used only to protect RRC signaling with a specific encryption algorithm.

[0067] The UP key is a key used for uplink (UP) traffic. The UP key is derived from security keys by the UE 100 and the base station 200. The UP key can include a key (KRRCint) used only to protect UP traffic between the UE 100 and the base station 200 with a specific integrity algorithm, and a key (KRRCenc) used only to protect UP traffic with a specific encryption algorithm.

[0068] Furthermore, the MN 200M can send the UE security function and UP security policy received from the SMF (Session Management Function) to the SN 200S. In addition, the MN 200M can include information indicating the determination of enabling of UP integrity protection and encryption in the aforementioned message.

[0069] The SN 200S can allocate the necessary resources. In addition, the SN 200S can select the encryption algorithm and integrity algorithm with the highest priority from the configuration list that are also present in the UE security function. In addition, the SN 200S can activate the UP security policy.

[0070] In step S13, the SN 200S sends an SN Add Request Confirmation message or an SN Change Request message to the MN 200M. This message may indicate the availability of the requested resources and the identifier of the algorithm selected for the DRB (Data Radio Bearer) and / or SRB (Signaling Radio Bearer) requested for the UE 100.

[0071] In step S14, the MN 200M sends an RRC reconfiguration message to the UE 100 to indicate to the UE 100 the configuration of new DRBs and / or SRBs for the SN 200S.

[0072] The MN 200M may include an SN counter in the RRC reconfiguration message. The SN counter indicates a counter value used to derive a security key. The SN counter may be a parameter indicating that a new KSN is required.

[0073] In addition, the MN 200M may include these information in the RRC reconfiguration message in order to forward the UE configuration parameters including the algorithm identifier, UP integrity protection, and ciphering indication received from the SN 200S, for example.

[0074] After integrity verification, UE 100 accepts the RRC reconfiguration message. If the SN counter is included in the message, UE 100 derives (calculates) the security key for SN 200S based on the counter value indicated by the SN counter. Furthermore, UE 100 derives (calculates) the required RRC keys and UP keys based on the derived security key. UE 100 activates RRC and UP protection according to the received indication for each associated SRB and / or DRB.

[0075] In step S15, the UE 100 sends an RRC reconfiguration complete message to the MN 200M. At this point in time, the UE 100 activates the selected encryption / decryption and integrity protection keys with the SN 200S.

[0076] In step S16, the MN 200M sends an SN Reconfiguration Complete message to the SN 200S to notify the SN 200S of the configuration result. In response to receiving this message, the SN 200S can activate the selected encryption / decryption and integrity protection with the UE 100. If encryption / decryption and integrity protection are not activated at this stage, the SN 200S activates encryption / decryption and integrity protection in response to receiving a random access request from the UE 100.

[0077] In step S17, UE 100 and SN 200S perform a random access procedure. Thus, UE 100 communicates with the MCG managed by MN 200M and the SCG managed by SN 200S in DC. In this way, SN 200S can use security keys to derive RRC keys and UP keys to enable encryption and decryption for UE 100 and thus communicate with UE 100.

[0078] (Imagine a scenario)

[0079] cite Figure 5 , explaining the hypothetical scenario. In recent years, for example, selective SCG activation has been discussed to enable continuous cell changes when UE 100 moves at high speed. In selective SCG activation, while UE 100 maintains the same PC cell, multiple conditional reconfigurations are configured for UE 100 to configure multiple candidate target primary and secondary cells (candidate target PS cells). UE 100 executes conditional reconfigurations for candidate target PS cells whose execution conditions are satisfied among the multiple conditional reconfigurations to change the PS cell from the source PS cell to the candidate target PS cell. After the PS cell change, UE 100 can also change the PS cell by using the maintained multiple conditional reconfigurations, thereby continuously changing the cell.

[0080] Here, it is assumed that in order to enable continuous cell changes, UE 100 uses multiple condition reconfigurations without resetting even after PS cell change. Therefore, it is impossible to receive the latest counter value (specifically, SN counter) from MN 200M every time PS cell change is made.

[0081] In this case, for example, each time the PS cell is changed to the same cell, the UE 100 must use the same counter value to derive the security key. As a result, the key used to protect the communication between the UE 100 and the SN 200S is the same as the key used previously, which may cause the communication between the UE 100 and the SN 200S to be inadequately protected.

[0082] For example, Figure 5 As shown, MN 200M manages MCG (PCell), SN 200S1 manages cells C11 and C12, SN 200S2 manages cells C21 and C22, and SN 200S3 manages cells C31 and C32.

[0083] UE 100 communicates with cell C11, which is the MCG of MN 200M and the SCG of SN 200S1, via DC. It is assumed that UE 100 is configured with conditional reconfigurations for each of cells C11, C12, C21, C22, C31, and C32 as multiple conditional reconfigurations.

[0084] In the use of Figure 5 As shown in the path A, UE 100 uses the pre-configured multiple condition reconfiguration to change the PS cell from cell C11 to cell C21, and then changes the PS cell from cell C21 to cell C11. In this case, the PS cell can be changed without receiving the MN 200M. Figure 4 14. Therefore, when the PS cell is changed from cell C21 to cell C11, UE 100 uses the counter value used before the PS cell was changed to cell C21 to derive the security key. As a result, even when multiple PS cell changes are performed, UE 100 uses the same security key to implement communication protection when cell C11 is set as the PS cell.

[0085] In addition, since the SN 200S1 associated with the cell C11 and the cell C12 is the same, when using Figure 5 As shown in path B, UE 100 uses multiple pre-configured conditional reconfigurations to change the PS cell from cell C11 to cell C21, and then changes the PS cell from cell C21 to cell C12. Currently, the counter value is the same in the configurations of cells C11 and C12. Therefore, similar to path A, even when multiple PS cell changes are performed, UE 100 uses the same security key to implement communication protection when cells C11 and C12 are set as PS cells.

[0086] Although security keys have traditionally been changed each time a PS cell is changed for security reasons, selective SCG activation uses the same security keys for communication protection when the PS cell is changed to a specific cell, raising concerns that communications between UE 100 and SN 200S may not be properly protected. An embodiment described later will describe operations for properly protecting communications between UE 100 and SN 200S.

[0087] (Configuration of user equipment)

[0088] Reference Figure 6, the configuration of the UE 100 according to the embodiment will be described. The UE 100 includes a communication unit 110 and a control unit 120.

[0089] The communication unit 110 wirelessly communicates with the base station 200 by sending and receiving wireless signals. The communication unit 110 includes at least one transmitting unit 111 and at least one receiving unit 112. The transmitting unit 111 and the receiving unit 112 can be configured to include multiple antennas and RF circuits. The antennas convert signals into radio waves and radiate these waves into space. Furthermore, the antennas receive radio waves in space and convert them into signals. The RF circuits perform analog processing on the signals transmitted and received by the antennas. The RF circuits may include high-frequency filters, amplifiers, modulators, and low-pass filters.

[0090] The control unit 120 performs various controls within the UE 100. The control unit 120 controls communication with the base station 200 via the communication unit 110. The operations of the UE 100 described above and below may be controlled by the control unit 120. The control unit 120 may include at least one processor capable of executing programs and a memory storing the programs. The processor can execute the programs to perform the operations of the control unit 120. The control unit 120 may include a digital signal processor that performs digital processing of signals transmitted and received via the antenna and RF circuit. This digital processing includes processing of the RAN protocol stack. Furthermore, the memory stores programs executed by the processor, parameters related to the programs, and data related to the programs. The memory may include at least one of ROM (Read Only Memory), EPROM (Erasable Programmable Read Only Memory), EEPROM (Electrically Erasable Programmable Read Only Memory), RAM (Random Access Memory), and flash memory. All or a portion of the memory may be included within the processor.

[0091] The UE 100 configured in this way communicates with the MCG and SCG, the MCG being associated with the MN 200M and the SCG being associated with the SN 200S. The receiving unit 112 receives configuration information from the MN 200M, the configuration information being used to configure a plurality of conditional reconfigurations for the UE 100, the plurality of conditional reconfigurations being used to configure a plurality of candidate target primary and secondary (PS) cells. The control unit 120 performs conditional reconfiguration on a cell among the plurality of candidate target PS cells for which the execution conditions are satisfied. The configuration information includes information on a counter value, which is used to derive a security key for the target SN 200S associated with the cell. When the conditional reconfiguration is performed, the control unit 120 updates the counter value. Thus, even when the PS cell is changed to a specific cell, different security keys are used to implement communication protection, thereby enabling appropriate protection of the communication between the UE 100 and the SN 200S.

[0092] Furthermore, the receiving unit 112 receives configuration information from the MN 200M for configuring multiple conditional reconfigurations for the UE 100. These conditional reconfigurations are used to configure multiple candidate target primary and secondary (PS) cells. The control unit 120 updates a counter value used to derive security keys for target SNs 200S associated with cells whose execution conditions are satisfied from among the multiple candidate target PS cells. The transmitting unit 111 transmits confirmation information to the network 10, confirming the security keys derived based on the updated counter value. This allows the network 10 to identify the security keys derived based on the counter value updated by the UE 100 and appropriately protect communications between the UE 100 and the SNs 200S.

[0093] (Base station configuration)

[0094] Reference Figure 7 The configuration of the base station 200 according to the embodiment will be described. The base station 200 includes a communication unit 210, a network communication unit 220, and a control unit 230.

[0095] Communication unit 210, for example, receives wireless signals from UE 100 and transmits wireless signals to UE 100. Communication unit 210 includes at least one transmitting unit 211 and at least one receiving unit 212. Transmitting unit 211 and receiving unit 212 may be configured to include RF circuits. RF circuits perform analog processing of signals transmitted and received via an antenna. RF circuits may include high-frequency filters, amplifiers, modulators, and low-pass filters.

[0096] Network communication unit 220 transmits and receives signals to and from the network. For example, network communication unit 220 receives signals from and transmits signals to adjacent base stations connected via an Xn interface, which is an interface between base stations. Furthermore, network communication unit 220 receives signals from and transmits signals to core network device 300 connected via an NG interface, for example.

[0097] The control unit 230 performs various controls in the base station 200. For example, the control unit 230 controls communication with the UE 100 via the communication unit 210. In addition, the control unit 230 controls communication with nodes (for example, adjacent base stations, core network devices 300) via the network communication unit 220. The actions of the base station 200 described above and below may be actions controlled by the control unit 230. The control unit 230 may include at least one processor capable of executing programs and a memory storing programs. The processor may execute the program to perform the actions of the control unit 230. The control unit 230 may include a digital signal processor that performs digital processing of signals sent and received via the antenna and RF circuit. The digital processing includes processing of the protocol stack of the RAN. In addition, the memory stores the program executed by the processor, parameters related to the program, and data related to the program. All or part of the memory may be included in the processor.

[0098] The base station 200 configured in this manner operates as a MN 200M in a network 10, which includes the MN 200M associated with the MCG configured for the UE 100 and the SN 200S associated with the SCG configured for the UE 100. In the base station 200, a transmitting unit 211 transmits configuration information to the UE 100, the configuration information being used to configure a plurality of conditional reconfigurations for configuring a plurality of candidate target primary and secondary (PS) cells. A receiving unit 212 receives, from the UE 100, determination information for deriving, from the plurality of candidate target PS cells, a security key for a target secondary node associated with a cell for which an execution condition is satisfied, the determination information being used to determine the security key to be derived based on the updated counter value.

[0099] In addition, the base station 200 operates as an SN 200S in the network 10, which includes an MN 200M associated with an MCG configured for the UE 100, and an SN 200S associated with an SCG configured for the UE 100. In the base station 200, the receiving unit 212 receives, via the master node that transmits configuration information to the UE 100, determination information from the UE 100 whose counter value has been updated, the configuration information being used to configure a plurality of conditional reconfigurations for configuring a plurality of candidate target primary and secondary (PS) cells, the counter value being used to derive, from the plurality of candidate target PS cells, a security key of a target secondary node associated with a cell whose execution condition is satisfied, and the determination information being used to determine the security key derived based on the updated counter value.

[0100] Thereby, the SN 200S that has received the confirmation information from the MN 200M or the MN 200M can grasp the security key derived based on the counter value updated by the UE 100, and thus can appropriately protect the communication between the UE 100 and the SN 200S.

[0101] (Operation Example of Mobile Communication System)

[0102] Hereinafter, an example of the operation of the mobile communication system will be described. In addition, descriptions of the same contents as those already described may be omitted.

[0103] (Action Example 1)

[0104] Reference Figures 4 to 11 , the operation example 1 of the mobile communication system 1 involved in the embodiment is described. Figure 5 as well as Figure 8 As shown in FIG, it is assumed that DC is configured through UE 100, MN 200M and SN 200S1. Figure 8 In the initial stage, UE 100 communicates with the MCG (P cell) of MN 200M and the SCG of SN 200S1. Cell C11 of SN 200S1 is a PS cell. In the following, the communication between UE 100 and MCG (P cell) is appropriately described as the communication between UE 100 and MN 200M. Similarly, the communication between UE 100 and each SCG (PS cell) is appropriately described as the communication between UE 100 and each SN 200S. Figure 8 Regarding SN 200S3, it is omitted.

[0105] In this example, UE 100 is as follows: Figure 5 The following describes the case where the moving path B is taken as an example.

[0106] like Figure 8As shown, in step S101, the control unit 230 of the MN 200M requests the candidate target SN to allocate resources to the UE through the SN addition process, thereby starting a conditional SN change. Specifically, the network (NW) communication unit 220 of the MN 200M sends an SN addition request message to each candidate target SN. In this action example, the candidate target SNs are SN 200S1, SN 200S2, and SN 200S3. The NW communication units 220 of SN 200S1 to SN 200S3 receive the SN addition request message. In addition, the request can indicate that it is a request for CPAC (Conditional PSCell Addition / Change).

[0107] The NW communication unit 220 of the MN 200M can provide candidate cells recommended by the MN 200M based on the latest measurement results, so that the candidate target SN selects and configures an SCG cell. The NW communication unit 220 of the MN 200M can provide an upper limit on the number of PS cells that the candidate target SN can prepare.

[0108] The control unit 230 of each candidate target SN specifies a list of PS cells from the cell list indicated in the measurement result. In addition, the control unit 230 of each candidate target SN specifies SCells of other SCGs.

[0109] In addition, the MN 200M and each SN 200S may also perform the same operation as step S12.

[0110] In step S102, the NW communication unit 220 of each candidate target SN transmits an SN addition request confirmation message to the MN 200M. The NW communication unit 220 of the MN 200M receives the SN addition request confirmation message from each candidate target SN.

[0111] The control unit 230 of each candidate target SN may include an RRC reconfiguration message in the SN add request confirm message, the RRC reconfiguration message including the new SCG radio resource configuration. In addition, the MN 200M and each SN 200S may also perform the same actions as step S13.

[0112] In step S103, the transmitting unit 211 of the MN 200M transmits an RRC reconfiguration message to the UE 100. The receiving unit 112 of the UE 100 receives the RRC reconfiguration message from the MN 200M.

[0113] The RRC reconfiguration message includes configuration information for configuring multiple conditional reconfigurations to the UE 100. The multiple conditional reconfigurations are conditional reconfigurations for configuring multiple candidate target PS cells. The configuration information may be CPC configuration information. Figure 11 As shown, the configuration information may be, for example, "RRCReconfiguration-IEs" or "conditionalReconfiguration". The configuration information includes one or more conditional reconfiguration information (e.g., condRRCReconfig). Each conditional reconfiguration information (condRRCReconfig) includes an RRC reconfiguration (RRCReconfiguration) message that is applied when an execution condition is met. The configuration information may be a list of RRC reconfiguration messages associated with an execution condition.

[0114] The RRC reconfiguration message included in the conditional reconfiguration information includes configuration information for configuring the candidate target PS cell. The RRC reconfiguration message does not include a predetermined field (e.g., a "conditionalReconfiguration" field or a "daps-Config" field). The RRC reconfiguration message includes information about a counter value used to derive a security key for the target SN.

[0115] The information of the counter value may include an SN counter indicating the counter value. The SN counter may be referred to as a "sk-Counter." The SN counter may be a counter used in the initial configuration and refresh of the security key of the target SN.

[0116] The counter value information may include an initial counter value and an offset value. The initial counter value and the offset value are used to update the counter value. The receiving unit 112 of the UE 100 receives the initial counter value and the offset value from the MN 200M as the counter value information.

[0117] like Figure 11 As shown in E11 of FIGURE 1, the initial counter value (sk-Counter_ini) and the offset value (OffSN) may be included in the conditional reconfiguration information (condRRCReconfig). In this case, the offset value may be a value specifically configured in each of the plurality of conditional reconfiguration information. Alternatively, as shown in FIGURE 1 Figure 11 As shown in E12 of FIG, the initial counter value (sk-Counter_ini) may be included in the conditional reconfiguration information. Figure 11As shown in E13 of FIG, the offset value (OffSN) may be included in RRCReconfiguration separately from conditionalReconfiguration. In this case, the offset value may be a value commonly configured in a plurality of conditional reconfiguration messages.

[0118] In addition, the counter value information may include a list associating each of multiple counter values ​​with the number of PS cell changes. This list may be associated with the configuration of the execution condition (e.g., Trigger Event Cfg). The PS cell change count NKSN may be a value common to all candidate target PS cells. Therefore, the number of PS cell changes can be counted regardless of the PS cell to which the change is made.

[0119] The information on the counter value may include, for each of a plurality of candidate target SNs, a list associating each of a plurality of counter values ​​with the number of changes to the PS cell. The number of changes NKSN may be a value specifically configured for each candidate target SN. As information on the counter value, for example, within the RRC reconfiguration information, a list of a plurality of counter values ​​for each candidate target SN may be configured in parallel. In addition, as information on the counter value, for example, within each of a plurality of conditional reconfiguration information (condRRCReconfig), a list of a plurality of counter values ​​for the target SN that manages the PS cell corresponding to the conditional reconfiguration information may be included.

[0120] The counter value information may include a list associating each of the multiple counter values ​​with the number of PS cell changes for each of the multiple candidate target PS cells. The PS cell change number NKSN may be a value specifically configured for each candidate target PS cell.

[0121] The configuration information may include information configuring execution conditions that need to be satisfied in order to trigger execution of the conditional reconfiguration ("condExecutionCond", "condExecutionCondSCG", etc.).

[0122] The control unit 120 of the UE 100 applies the RRC reconfiguration complete message and saves the configuration information. In addition, the UE 100 and the MN 200M may also perform the same operation as step S14.

[0123] In step S104, the transmitting unit 111 of the UE 100 transmits an RRC reconfiguration complete message to the MN 200M. The receiving unit 212 of the MN 200M receives the RRC reconfiguration complete message from the UE 100. Furthermore, the UE 100 and the MN 200M can perform the same operations as in step S15. Thereafter, the MN 200M and each SN 200S can perform the same operations as in step S16.

[0124] In step S105 , the control unit 120 of the UE 100 measures the radio signals from each cell.

[0125] In step S106, the control unit 120 of the UE 100 evaluates the execution condition based on the measurement result. Specifically, the control unit 120 determines whether the execution condition (event) of the candidate target PS cell is met based on the measurement result. When the execution condition is met, the control unit 120 of the UE 100 regards the target candidate cell corresponding to the satisfied execution condition as a triggered cell. When there are multiple triggered cells, the control unit 120 selects one of the multiple triggered cells to perform conditional reconfiguration. When there is only one triggered cell, the control unit 120 regards the cell as the cell selected for performing conditional reconfiguration. The control unit 120 starts to perform conditional reconfiguration for the selected cell and performs the following actions. In this action example, the control unit 120 selects cell C21 and starts to perform conditional reconfiguration.

[0126] In step S107, the control unit 120 of the UE 100 applies the conditional reconfiguration information of the selected cell. Thus, the control unit 120 of the UE 100 applies the RRC reconfiguration included in the conditional reconfiguration information of the selected cell.

[0127] In step S108, the control unit 120 of the UE 100 updates the counter value. When conditional reconfiguration is executed, the control unit 120 updates the counter value. In this operation example, the control unit 120 of the UE 100 updates the counter value before starting the random access (RA) procedure by executing conditional reconfiguration.

[0128] The control unit 120 may update the counter value in response to the application of the conditional reconfiguration information for the selected cell. The control unit 120 may update the counter value in response to the application of the RRC reconfiguration (RRCReconfiguration) included in the conditional reconfiguration information for the selected cell. The control unit 120 may update the counter value based on the number of changes NKSN of PS cells from the source PS cell to the target PS cell using the configuration information. The number of changes NKSN may be replaced by the number of applications of the RRC reconfiguration. The control unit 120 can use any of the following methods to update the counter value.

[0129] In the first method, the control unit 120 can update the counter value by calculating the counter value. For example, the control unit 120 can determine (calculate) the counter value using the following formula. The control unit 120 can regard the determined counter value (sk-Counter_Mob) as the updated counter value.

[0130] sk-Counter_Mob=sk-Counter_ini+OffKSN×NKSN

[0131] The initial counter value (sk-Counter_ini) may be a value commonly configured for all candidate target PS cells. Alternatively, the initial counter value may be a value specifically configured for each candidate target PS cell. The initial counter value may be a value specifically configured for each candidate target SN.

[0132] The offset value (OffKSN) may be a value based on the number of candidate target SNs configured by the configuration information. The offset value may be a value that is increased according to the number of candidate target SNs. The offset value may be, for example, a value greater than the number of candidate target SNs configured by the configuration information. The control unit 230 of the base station 200 may configure the number of candidate target SNs as the offset value. The control unit 120 of the UE 100 may configure the number of candidate target SNs as the offset value. In addition, the control unit 120 may determine the number of candidate target SNs based on the number of conditional reconfiguration information. The control unit 120 may determine the number of candidate target SNs based on the number of candidate target SNs included in the conditional reconfiguration information.

[0133] (a) When the number of changes NKSN is a value common to all candidate target PS cells:

[0134] When the RRC reconfiguration message is directly received from the MN 200M as in step S104, the control unit 120 may configure the number of changes NKSN to 0. When the execution condition is satisfied and it is determined that the RRC reconfiguration included in the conditional reconfiguration message has been received, the control unit 120 may increase the number of changes NKSN by 1. Thus, the control unit 120 counts the number of PS cell changes using the configuration information as the number of changes NKSN. The control unit 120 may count the number of PS cell changes NKSN each time the PS cell is changed, regardless of the PS cell to which the change is made.

[0135] (b) When the number of changes NKSN is a value specifically configured for each candidate target SN:

[0136] When the RRC reconfiguration message is received directly from the MN 200M, the control unit 120 may reset the number of change counts NKSN previously configured for the UE 100 for all candidate target SNs. The control unit 120 may configure the newly configured number of change counts NKSN for all candidate target SNs based on the directly received RRC reconfiguration message, setting each number of change counts NKSN to 0. When it is determined that the RRC reconfiguration included in the conditional reconfiguration information has been received due to the execution condition being satisfied, and it is determined that the target SN is different from the source SN (inter-SN CPC), the control unit 120 may increase the number of change counts NKSN associated with the target SN by 1. Therefore, the control unit 120 counts the number of change counts NKSN specifically for each candidate target secondary node.

[0137] (c) When the number of changes NKSN is a value configured specifically for each candidate target PS cell:

[0138] When the RRC reconfiguration message is received directly from the MN 200M, the control unit 120 may reset the number of change counts NKSN previously configured for the UE 100 for all candidate target PS cells. Based on the directly received RRC reconfiguration message, the control unit 120 may configure newly configured number of change counts NKSN for all candidate target PS cells, setting each number of change counts NKSN to 0. When it is determined that the RRC reconfiguration included in the conditional reconfiguration information has been received due to the execution condition being satisfied, the control unit 120 may increment the number of change counts NKSN associated with the target PS cell by 1. Thus, the control unit 120 counts the number of change counts NKSN specifically for each candidate target PS cell.

[0139] In the second method, the control unit 120 updates the counter value based on a list that associates each of the multiple counter values ​​with a change count NKSN. The control unit 120 may set the counter value corresponding to the change count NKSN to the updated counter value. In this case, the control unit 120 may count the PS cell change count NKSN each time a PS cell change occurs, regardless of the PS cell to which the change is made.

[0140] In the third method, the control unit 120 updates the counter value based on a list that associates each of multiple counter values ​​for the corresponding candidate target SN with a change count NKSN. In this case, the control unit 120 configures the change count NKSN for each candidate target SN. The control unit 120 can count the change count NKSN specifically for each candidate target SN and set the counter value corresponding to the change count NKSN associated with the target SN among the multiple counter values ​​as the updated counter value. In this case, the control unit 120 can count the change count NKSN specifically for each candidate target secondary node.

[0141] In the fourth method, the control unit 120 updates the counter value based on a list that associates each of multiple counter values ​​for the corresponding candidate target PS cell with a change count NKSN. In this case, the control unit 120 configures the change count NKSN for each candidate target PS cell. The control unit 120 can count the change count NKSN specifically for each candidate target PS cell and set the counter value among the multiple counter values ​​corresponding to the change count NKSN associated with the target PS cell as the updated counter value. In this case, the control unit 120 can count the change count NKSN specifically for each candidate target PS cell.

[0142] If the target SN is associated with both the source and target PS cells, the control unit 120 may skip updating the counter value. That is, if a PS cell change (intra-SN CPC) is performed within the same SN 200S, the control unit 230 may skip updating the counter value.

[0143] The control unit 120 can determine whether the target SN is associated with both the source PS cell and the target PS cell (is an intra-SN CPC) based on the configuration information currently configured for the UE 100 (e.g., information included in SpCellConfig) and the information included in the conditional reconfiguration information of the selected cell (e.g., MeasObject and / or RRCRReconfiguration). The configuration information currently configured for the UE 100 is compared with the information included in the conditional reconfiguration information of the selected cell. If the information related to the source PS cell and the target PS cell is the same, the control unit 120 can determine that the target SN is associated with both the source PS cell and the target PS cell. Otherwise, the control unit 120 can determine that the target SN is not associated with both the source PS cell and the target PS cell.

[0144] In addition, the control unit 120 of the UE 100 can derive (update) a security key based on the updated counter value. The control unit 120 can derive an RRC key and a UP key using the derived security key.

[0145] In step S109 , the transmitting unit 111 of the UE 100 transmits an RRC reconfiguration complete message to the MN 200M. The receiving unit 212 of the MN 200M receives the RRC reconfiguration complete message from the UE 100 .

[0146] The control unit 120 of the UE 100 may include determination information for determining the security key derived based on the updated counter value in the RRC reconfiguration complete message.

[0147] The control unit 120 may include the confirmation information in a message (e.g., an SN RRC Reconfiguration Complete message described later) sent to the target SN via the MN 200M. The control unit 120 may include this message in the RRC Reconfiguration Complete message. Thus, the transmission unit 111 can transmit the confirmation information to the network 10 via a message sent to the target SN via the MN 200M.

[0148] Control unit 120 may include the confirmation information in the message with MN 200M as the terminating end. The confirmation information may be included in a field other than the message included in the RRC Reconfiguration Complete message and sent to the target SN via MN 200M. Thus, transmitting unit 111 can send the confirmation information to network 10 via the message with MN 200M as the terminating end.

[0149] The determination information may include the updated security key. The determination information may include the updated counter value. The determination information may include calculation information used to calculate the updated counter value. The calculation information may include, for example, the number of PS cell changes NKSN used to calculate the updated counter value.

[0150] When the determination information is included in a field other than the SN RRC Reconfiguration Complete message within the RRC Reconfiguration Complete message, the control unit 230 of the MN 200M can acquire the determination information. On the other hand, when the determination information is included in the SN RRC Reconfiguration Complete message within the RRC Reconfiguration Complete message, the control unit 230 of the MN 200M does not acquire the determination information.

[0151] like Figure 9As shown, in step S110, the NW communication unit 220 of the MN 200M may send an SN release request message to the SN 200S1. The NW communication unit 220 of the SN 200S1 may receive the SN release request message from the MN 200M. Thus, the MN 200M notifies the SN 200S1, which is the source SN, to stop providing user data.

[0152] In step S111, the NW communication section 220 of the SN 200S1 may transmit an SN release request confirmation message to the MN 200M. The NW communication section 220 of the MN 200M may receive the SN release request message from the SN 200S1.

[0153] In step S112, the NW communication unit 220 of the MN 200M transmits an SN reconfiguration complete message to the SN 200S2. The NW communication unit 220 of the SN 200S2 receives the SN reconfiguration complete message from the MN 200M. Thus, the MN 200M notifies the SN 200S2 of the PS cell selected by the UE 100.

[0154] The control unit 230 of the MN 200M may include an SN RRC Reconfiguration Complete message, the SN RRC Reconfiguration Complete message including the confirmation information, in the SN Reconfiguration Complete message. Consequently, the NW communication unit 220 of the MN 200M transmits the SN RRC Reconfiguration Complete message including the confirmation information to the SN 200S2. Alternatively, the control unit 230 of the MN 200M may include the confirmation information along with the SN RRC Reconfiguration Complete message in the SN Reconfiguration Complete message. Consequently, if the confirmation information includes a security key, the NW communication unit 220 of the MN 200M transmits the security key to the SN 200S2. The control unit 230 of the MN 200M may include information for calculating the security key in the SN Reconfiguration Complete message.

[0155] In step S113, the control unit 230 of the SN 200S2 determines the security key. In this operation example, the control unit 230 determines the security key based on the determination information.

[0156] In a case where the determination information includes a security key, the control unit 230 may determine the security key included in the determination information as a security key for protecting communication with the UE 100 .

[0157] The control unit 230 may derive a security key based on the information for calculating the security key and the determination information. The control unit 230 may determine the derived security key as a security key for protecting communications with the UE 100 .

[0158] The control unit 230 can derive the RRC key and UP key used between the UE 100 and the SN 200S2 based on the determined security key. In addition, the MN 200M and the SN 200S2 can also perform the same operation as step S16.

[0159] In step S114, UE 100 and SN 200 S2 perform a random access procedure. Thereafter, UE 100 communicates with MCG and cell C21 in DC.

[0160] Furthermore, the control unit 230 of the UE 100 may update the counter value at a timing other than step S108. For example, the control unit 230 may update the counter value after the RA procedure for cell C21 is initiated by executing conditional reconfiguration and before an RRC message is sent to cell C21 during the RA procedure. The RRC message in this case is, for example, Message 3.

[0161] like Figure 10 As shown, steps S115 to S119 are steps S105 to S109. In this operation example, the control unit 120 of the UE 100 selects the cell C12 as the PS cell.

[0162] In step S120, similarly to step S110, the NW communication unit 220 of the MN 200M transmits an SN release request message to the SN 200S 2. In step S121, similarly to step S111, the NW communication unit 220 of the SN 200S 2 transmits an SN release request confirmation message to the MN 200M.

[0163] In step S122, similar to step S112, the NW communication unit 220 of the MN 200M sends an SN reconfiguration complete message to the SN 200S1. In step S123, similar to step S113, the control unit 230 of the SN 200S1 determines the security key. In step S124, similar to step S114, the UE 100 and the SN 200S1 perform the RA procedure. Thereafter, the UE 100 communicates with the MCG and cell C12 in DC.

[0164] As described above, in this example operation, the receiving unit 112 of the UE 100 receives configuration information from the MN 200M for configuring multiple conditional reconfigurations for the UE 100. These conditional reconfigurations are used to configure multiple candidate target PS cells. The control unit 120 performs conditional reconfiguration on cells among the candidate target PS cells for which the execution conditions are met. The configuration information includes information about a counter value, which is used to derive the security key of the target SN associated with the cell for which the conditional reconfiguration is performed. When the conditional reconfiguration is performed, the control unit 120 updates the counter value. This allows communication protection to be achieved using different security keys even when the PS cell is changed to a specific cell, thereby appropriately protecting communications between the UE 100 and the SN 200S. Furthermore, when conditional reconfiguration is performed, that is, before the PS cell is changed, the control unit 120 updates the counter value. Therefore, since the UE 100 updates the counter value before the security key is used for communication protection, communications between the UE 100 and the SN 200S can be appropriately protected.

[0165] In addition, the control unit 120 may update the counter value before starting the RA process for the cell by performing conditional reconfiguration. As a result, the UE 100 can perform the RA process and subsequent communications while appropriately protecting the communication between the UE 100 and the SN 200S without updating the counter value during the RA process.

[0166] Furthermore, after the RA procedure for a cell is initiated by executing conditional reconfiguration, and before an RRC message is sent to the cell during the RA procedure, the control unit 120 updates the counter value. This allows the counter value to be updated before communication protection begins using a key derived from a security key, enabling the RA procedure and subsequent communications to be performed while appropriately protecting communications between the UE 100 and the SN 200S.

[0167] Furthermore, the control unit 120 may update the counter value based on the number of PS cell changes NKSN from the source PS cell to the target PS cell using the configuration information. Since the number of PS cell changes NKSN changes each time the PS cell is changed, it is possible to avoid using the same counter value to derive security keys.

[0168] Furthermore, the control unit 120 may count the number of times the PS cell is changed using the configuration information as the number of changes. This allows the UE 100 to avoid storing the number of changes specifically for each PS cell, for example, and thus reduce the processing load.

[0169] Furthermore, the control unit 120 can specifically count the number of changes for each candidate target SN 200S. This allows the UE 100 to avoid storing the number of changes specifically for each PS cell, for example, thereby reducing the processing load. Furthermore, when changing PS cells within an SN 200S, the counter value is not changed, thereby suppressing unnecessary increases in the counter value (and the associated overhead).

[0170] Furthermore, the control unit 120 may count the number of changes specifically for each candidate target PS cell. This prevents the same security key from being derived even if other items used to calculate the counter value are the same, since the number of changes NKSN changes each time the PS cell is changed.

[0171] Furthermore, the receiving unit 112 can receive, from the MN 200M, an initial counter value and an offset value for updating the counter value as counter value information. Thus, by appropriately changing the initial counter value and the offset value, the counter value can be changed without significantly modifying the existing system that includes an SN counter (sk-Counter) for each SN 200S and complies with 3GPP technical specifications. As a result, even when the PS cell is changed to a specific cell, communication protection is achieved using a different security key, thereby appropriately protecting communications between the UE 100 and the SN 200S.

[0172] In addition, the initial counter value may be a value specifically configured for each candidate target PS cell. Thus, the MN 200M can flexibly control the counter value.

[0173] In addition, the initial counter value may be a value commonly configured for all candidate target PS cells. Therefore, regardless of the number of candidate target PS cells, UE 100 does not need to maintain multiple initial counter values ​​or select a corresponding initial counter value from among multiple initial counter values, which can reduce processing load.

[0174] In addition, the offset value can be a value based on the number of candidate target SNs 200S configured by the configuration information. Therefore, even if the number of candidate target SNs 200S increases, the counter value calculated based on the offset value will not be repeated, thereby avoiding the use of the same counter value to derive the security key.

[0175] In addition, the counter value information may include a list associating each of the plurality of counter values ​​with a change count. The control unit 120 may set the counter value corresponding to the change count NKSN to the updated counter value. This eliminates the need for the UE 100 to use a formula to calculate the counter value, thereby reducing the processing load.

[0176] Furthermore, the counter value information may include a list associating each of the multiple counter values ​​with a number of changes for each of the multiple candidate target PS cells. The control unit 120 may specifically count the number of changes for each candidate target PS cell. The control unit 120 may set the counter value corresponding to the number of changes among the multiple counter values ​​for the corresponding candidate target PS cell as the updated counter value. This eliminates the need for UE 100 to use a formula to calculate the counter value, reducing processing load.

[0177] Furthermore, if the target SN 200S is associated with both the source PS cell and the target PS cell, the control unit 120 can skip updating the counter value. Since security keys are assigned to each target SN 200S, even when the PS cell is changed within the same target SN 200S, communication between the UE 100 and the SN 200S can be properly protected even if security key derivation is omitted. This allows for proper communication protection while reducing the processing load on the UE 100.

[0178] Furthermore, in this example operation, the receiving unit 112 of the UE 100 receives configuration information from the MN 200M, which is used to configure multiple conditional reconfigurations for the UE 100. These conditional reconfigurations are used to configure multiple candidate target primary and secondary (PS) cells. The control unit 120 updates a counter value used to derive the security key of the target SN associated with the cell whose execution conditions are satisfied from among the multiple candidate target PS cells. The transmitting unit 111 transmits confirmation information to the network 10, which confirms the security key derived based on the updated counter value. This allows the network 10 to understand the security key derived based on the counter value updated by the UE 100 and appropriately protect communications between the UE 100 and the SN 200S.

[0179] Furthermore, the transmitter 111 of the UE 100 can transmit identification information including the security key to the network 10. This allows the network 10 to understand the security key derived by the UE 100. This allows the processing of calculating the security key to be omitted, thereby reducing the processing load.

[0180] Furthermore, the transmitting unit 111 may transmit identification information including the updated counter value to the network 10. The network 10 can grasp the security key derived by the UE 100 based on the updated counter value.

[0181] Furthermore, the transmitter 111 may transmit determination information including calculation information for calculating the updated counter value to the network 10. This allows the network 10 to grasp the security key derived by the UE 100 based on the calculation information.

[0182] In addition, the transmitting unit 111 can transmit the determination information to the network 10 via a message, and the message is transmitted to the target SN 200S via the MN 200M. In this way, the UE 100 can transmit directly to the target SN 200S. The target SN 200S can determine the security key using the determination information.

[0183] Furthermore, the transmission unit 111 can transmit the specific information to the network 10 using a message with the MN 200M as the terminating end. This allows the UE 100 to transmit a message to the MN 200M, and the MN 200M to grasp the specific information.

[0184] Furthermore, in this example operation, in base station 200 operating as MN 200M, transmitting unit 211 transmits configuration information for configuring multiple conditional reconfigurations for configuring multiple candidate target primary and secondary (PS) cells to UE 100. Receiving unit 212 receives, from UE 100, confirmation information for deriving, from the multiple candidate target PS cells, a security key for a target secondary node associated with a cell for which an execution condition is satisfied, the security key derived based on the updated counter value. Furthermore, in the base station 200 operating as the SN 200S, the receiving unit 212 receives confirmation information from the UE 100, whose counter value has been updated, via the MN 200M that transmits configuration information to the UE 100. The configuration information is used to configure multiple conditional reconfigurations for the communication device, the multiple conditional reconfigurations being used to configure multiple candidate target primary and secondary (PS) cells, the counter value being used to derive security keys for target SNs associated with cells whose execution conditions are satisfied from among the multiple candidate target PS cells, and the confirmation information being used to determine the security keys derived based on the updated counter value. The SN 200S that receives the confirmation information from the MN 200M or the MN 200M is able to grasp the security keys derived based on the counter value updated by the UE 100, and thus can appropriately protect communications between the UE 100 and the SN 200S.

[0185] In addition, the receiving unit 212 may receive a message that is sent to the target secondary node via the primary node and includes the determination information. The NW communication unit 220 may send the message to the target SN 200S. Thus, the target SN 200S can determine the security key through the determination information.

[0186] Furthermore, the confirmation information may include a security key. The receiving unit 212 may receive the confirmation information via a message with the MN 200M as the terminating end. The NW communication unit 220 may transmit the security key to the target secondary node. This allows the control unit 230 to grasp the security key derived by the UE 100. This allows the calculation of the security key to be omitted, reducing the processing load.

[0187] (Action Example 2)

[0188] Reference Figure 12 Next, a second operation example of the mobile communication system 1 according to the embodiment will be described. In this operation example, the SN 200S2 requests a security key or information for calculating a security key from the MN 200M. Descriptions of parts identical to those in the first operation example will be omitted.

[0189] Steps S140 to S142 are the same as steps S110 to S112. In this action example, the control unit 120 of the UE 100 may include the confirmation information in a message (eg, SN RRC Reconfiguration Complete message) sent to the target SN via the MN 200M.

[0190] In the case that the SN reconfiguration complete message (the confirmation information included therein) does not include the security key, the control unit 230 of the SN 200S2 may perform the following actions.

[0191] In step S143, the NW communication unit 220 of the SN 200S2 transmits a request message for requesting a security key or information for calculating a security key to the MN 200M. The NW communication unit 220 of the MN 200M receives the request message from the SN 200S2.

[0192] The request message may include the determination information. Thus, the NW communication unit 220 of the MN 200M receives the determination information from the SN 200S2. In addition, the request message may be an existing message or a new message.

[0193] In step S144, the NW communication section 220 of the MN 200M transmits a response message to the request message to the SN 200S 2. The NW communication section 220 of the SN 200S 2 receives the response message from the MN 200M.

[0194] Similar to step S113, the control unit 230 of the MN 200M may derive the security key based on the determination information. The control unit 230 may include the derived security key in the response message. Alternatively, the control unit 230 may determine, based on the determination information, calculation information for calculating (deriving) the security key from the determination information. The control unit 230 may include the calculation information in the response message.

[0195] In step S145, similarly to step S113, the control unit 230 of the SN 200S2 determines the security key. The control unit 230 determines the security key based on the security key or calculation information included in the response message.

[0196] The control unit 230 may determine the security key included in the response message as the security key for protecting communication with the UE 100. Alternatively, the control unit 230 may derive the security key based on the calculation information and determination information included in the response message. The control unit 230 may determine the derived security key as the security key for protecting communication with the UE 100.

[0197] Step S146 is the same as step S114.

[0198] As described above, the NW communication unit 220 of the MN 200M can receive the identification information from the SN 200S 2. The NW communication unit 220 can send the security key or information for calculating the security key to the SN 200S 2.

[0199] (Action Example 3)

[0200] Reference Figure 13 Next, a third operation example of the mobile communication system 1 according to the embodiment will be described. In this operation example, the MN 200M determines a security key. Descriptions of parts identical to those of the above operation examples will be omitted.

[0201] Steps S160 to S162 are the same as steps S110 to S112. In this example, the control unit 120 of the UE 100 may include the determination information in the message with the MN 200M as the terminating end (e.g., a field other than the SN RRC Reconfiguration Complete message within the RRC Reconfiguration Complete message). The determination information may include the updated counter value or calculation information used to calculate the updated counter value.

[0202] In step S163, similarly to step S113, the control unit 230 of the MN 200M determines the security key based on the determination information. The control unit 230 may calculate the updated counter value based on the calculation information. The control unit 230 derives the security key based on the updated counter value.

[0203] In step S164, the NW communication unit 220 of the MN 200M transmits the security key to the SN 200S2. The NW communication unit 220 of the MN 200M can transmit the security key to the SN 200S2 via an existing message or a new message. The NW communication unit 220 of the SN 200S2 receives the security key from the MN 200M. The security key is the security key included in the confirmation information or the security key derived by the control unit 230.

[0204] Step S165 is the same as step S114.

[0205] As described above, the determination information may include the updated counter value or calculation information used to calculate the updated counter value. The control unit 230 may derive a security key based on the updated counter value. The NW communication unit 220 may transmit the security key derived by the control unit 230 to the SN 200S2. This allows the MN 200M to derive the security key, similar to conventional operations, while preventing the SN 200S2 from deriving the security key. This reduces the impact on the SN 200S2.

[0206] (Action Example 4)

[0207] Reference Figure 14 Next, a fourth operation example of the mobile communication system 1 according to the embodiment will be described. Descriptions of parts identical to those of the above-mentioned operation examples will be omitted.

[0208] Currently, when the MN 200M determines to release a connection offloaded to the SN 200S and then determines to restart offload to the same SN 200S, it keeps the security key fresh by continuously incrementing the counter value. Here, because an upper limit for the counter value is specified, the MN 200M needs to refresh the root key of the 5GAS security key context associated with the counter value (SN counter) before rounding up the SN counter. The MN 200M refreshes the root key by performing an intra-cell handover. When refreshing the root key, the MN 200M resets the counter value. Since the MN 200M notifies the UE 100 of the counter value updated by incrementing or resetting the counter value as the SN counter each time the SN 200S is changed, the UE 100 does not need to maintain the SN counter.

[0209] However, when UE 100 itself updates the counter value, there is a possibility that the counter value held by UE 100 is not reset, causing a malfunction. Therefore, in this operation example, an operation that can appropriately reset the counter value will be described.

[0210] like Figure 14 As shown, step S201 is the same as step S109.

[0211] In step S202, the control unit 230 of the MN 200M determines whether the counter value is rounded up. In this operation example, the control unit 230 determines whether the counter value is rounded up based on the identification information received from the UE 100 or the SN 200S.

[0212] If the determination information includes a counter value, the control unit 230 may determine whether the counter value exceeds an upper limit. If the determination information does not include a counter value, the control unit 230 may calculate a counter value based on the determination information. The control unit 230 may determine whether the calculated counter value exceeds an upper limit. The upper limit is a value equal to or less than the rounded-up value of the counter value.

[0213] If the counter value exceeds the upper limit, the control unit 230 may determine that the counter value is rounded up. In this case, the control unit 230 may reset the counter value and execute the process of step S203.

[0214] On the other hand, if the counter value does not exceed the upper limit, the control unit 230 may determine that the counter value is not rounded up. In this case, the control unit 230 may end the process.

[0215] In step S203, the transmitting unit 211 transmits the reset counter value to the UE 100. The receiving unit 112 of the UE 100 receives the counter value from the MN 200M.

[0216] Similar to step S103, the sending unit 211 of the MN 200M may send the counter value via an RRC reconfiguration message, wherein the RRC reconfiguration message includes configuration information for configuring multiple conditional reconfigurations. Alternatively, the sending unit 211 of the MN 200M may send a new message to the UE 100, wherein the new message is used to reset the counter value maintained by the UE 100.

[0217] The control unit 230 of the UE 100 may configure the counter value received from the MN 200M and configure the counter value to, for example, 0. Thereby, the counter value held by the UE 100 is reset.

[0218] As described above, control unit 230 determines whether the counter value is rounded up based on the identification information. Thus, if the counter value is rounded up, control unit 230 resets the counter value held by UE 100, thereby preventing the counter value held by UE 100 from being reset and causing a malfunction.

[0219] (Action Example 5)

[0220] Reference Figure 15 Next, a fifth operation example of the mobile communication system 1 according to the embodiment will be described. In this operation example, the UE 100 determines whether to round up the counter value. The description of the parts that are the same as those in the above operation examples will be omitted.

[0221] In step S221, similar to step S103, the transmitter 211 of the MN 200M may transmit an RRC reconfiguration message including the counter value. The receiver 112 of the UE 100 may receive the RRC reconfiguration message including the counter value. The RRC reconfiguration message may include an upper limit value.

[0222] In step S222, similar to step S202, control unit 120 of UE 100 determines whether the counter value is rounded up. If the counter value is rounded up, control unit 120 may execute the process of step S223. On the other hand, if the counter value does not exceed the upper limit, control unit 230 may terminate the process.

[0223] The control unit 120 may make this determination based on a change in the PS cell. The control unit 120 may make this determination based on an updated counter value.

[0224] In step S223, the transmitter 111 of the UE 100 transmits reset information for resetting the counter value to the MN 200M. The transmitter 111 can transmit the reset information for resetting the counter value to the MN 200M before the counter value is rounded up. The receiver 212 of the MN 200M receives the reset information from the UE 100.

[0225] The control unit 120 of the UE 100 may, for example, include the reset information in an RRC Reconfiguration Complete message. The reset information may be sent to the MN 200M via the Reconfiguration Complete message. Furthermore, the control unit 120 may include the reset information in a UE Assistance Information message used to indicate information about the UE 100 to the network. The reset information may be sent to the MN 200M via the UE Assistance Information message.

[0226] The reset information may be, for example, information requesting a reset of a counter value. The reset information may include specific information (eg, a counter value).

[0227] Step S224 is the same as step S203. Based on the reset information, the transmission unit 211 may transmit the reset counter value to the UE 100. Furthermore, when the determination information is included in the reset information, the control unit 230 of the MN 200M may perform the process of step S202.

[0228] As described above, the transmitter 111 of the UE 100 can transmit reset information for resetting the counter value to the MN 200M before the counter value is rounded up. The receiver 212 of the MN 200M receives the reset information from the UE 100. Thus, the MN 200M can receive the reset information before the counter value is rounded up. Thus, by resetting the counter value held by the UE 100 based on the reset information, the MN 200M can prevent the counter value held by the UE 100 from being reset and causing a malfunction.

[0229] [Other embodiments]

[0230] In the above embodiment, the processing of steps S110 and S111 (and similar steps) can be omitted. For example, when selective SCG activation is being performed, the control unit 230 of the MN 200M can suspend (skip) the transmission of the SN Release Request message. When the transmission of the SN Release Request message to the UE 100 is configured in association with the configuration of selective SCG activation (e.g., multiple conditional reconfigurations), the control unit 230 of the MN 200M can suspend (skip) the transmission of the message. In addition, the control unit 230 of the MN 200M can suspend (skip) the transmission of the SN Release Request message based on, for example, confirmation information received from the UE 100.

[0231] In the third example of action in the above embodiment, the process of step S163 may be performed before the process of step S162. In this case, the control unit 230 of the MN 200M may include the determined security key in the SN Reconfiguration Complete message. In step S162, the NW communication unit 220 of the MN 200M may send the security key to the SN 200S2 via the SN Reconfiguration Complete message. In this case, the process of step S164 may be omitted.

[0232] In the above embodiment, the case where the RA procedure is successful is used as an example. If the RA procedure fails, the transmitting unit 111 of the UE 100 may transmit failure information to the MN 200M indicating the failure of the RA procedure. Upon receipt of the failure information, the transmitting unit 211 of the MN 200M may transmit configuration information for configuring a counter value to the UE 100. For example, similar to step S103, the MN 200M may transmit configuration information to the UE 100, which is used to configure multiple conditional reconfigurations for the UE 100. The control unit 120 of the UE 100 may discard the configuration information stored for selective SCG activation and perform selective SCG activation based on the configuration information.

[0233] The action sequence (and action flow) in the above-mentioned embodiment does not have to be executed in chronological order along the order recorded in the flowchart or sequence diagram. For example, the steps in the action can be executed in an order different from the order recorded as a flowchart or sequence diagram, or can be executed in parallel. In addition, a part of the steps in the action can be deleted, and further steps can be added in the process. In addition, the action sequence (and action flow) in the above-mentioned embodiment can be implemented separately, or two or more action sequences (and action flows) can be combined to implement. For example, a part of the steps of an action flow can be added to other action flows, or a part of the steps of an action flow can be replaced with a part of the steps of other action flows.

[0234] In the above embodiment, as the mobile communication system 1, an NR-based mobile communication system is described as an example. However, the mobile communication system 1 is not limited to this example. The mobile communication system 1 may be a TS system that complies with LTE (Long Term Evolution) or any other generation system (e.g., 6th generation) of the 3GPP standard. The base station 200 may be, for example, an eNB that provides an E-UTRA user plane and control plane protocol termination for the UE 100 in LTE. The mobile communication system 1 may also be a TS system that complies with a standard other than the 3GPP standard. The base station 200 may be an IAB (Integrated Access and Backhaul) host or an IAB node.

[0235] A program that causes a computer to execute each process performed by UE 100 or base station 200 may also be provided. The program may be recorded in a computer-readable medium. Using a computer-readable medium, the program can be installed in the computer. Here, the computer-readable medium on which the program is recorded may also be a non-transitory recording medium. The non-transitory recording medium is not particularly limited, but may be a recording medium such as a CD-ROM (Compact Disk Read Only Memory) or a DVD-ROM (Digital Versatile Disc Read Only Memory). In addition, the circuits that execute each process performed by UE 100 or base station 200 may be integrated, and at least a portion of UE 100 or base station 200 may be configured as a semiconductor integrated circuit (chip set, SoC (System On Chip)).

[0236] In the above embodiments, “transmit” may refer to performing processing of at least one layer within the protocol stack for transmission, or may refer to physically sending a signal wirelessly or by wire. Alternatively, “transmit” may refer to a combination of performing processing of at least one layer and physically sending a signal wirelessly or by wire. Similarly, “receive” may refer to performing processing of at least one layer within the protocol stack for reception, or may refer to physically receiving a signal wirelessly or by wire. Alternatively, “receive” may refer to a combination of performing processing of at least one layer and physically receiving a signal wirelessly or by wire. Similarly, “obtain / acquire” may refer to obtaining information from stored information, or may refer to obtaining information from information received from other nodes, or may refer to obtaining the information by generating information. Similarly, unless otherwise expressly stated, the phrases “based on” and “depending on / in response to” do not mean “based only on” or “based only in response to”. The phrase “based on” refers to both “based only on” and “based at least in part on”. Similarly, the record of "in response to" refers to both "only in response to" and "at least in part in response to". Similarly, "include" and "comprise" do not mean to include only the listed items, but may include only the listed items, or may include other items in addition to the listed items. Similarly, in the present disclosure, "or" does not refer to logical exclusive OR, but to logical OR. Furthermore, any reference to elements using the "first", "second" and other titles used in the present disclosure does not limit the quantity or order of these elements as a whole. These titles can be used in the present disclosure as a convenient method to distinguish between two or more elements. Therefore, the reference to the first element and the second element does not mean that only two elements can be adopted therein, or that the first element must precede the second element in some form. In the present disclosure, for example, when articles such as a, an and the in English are added by translation, these articles can include multiple unless the context clearly indicates that multiple are not included.

[0237] It will be understood that although the present disclosure is described in terms of embodiments, the present disclosure is not limited to such embodiments or configurations. The present disclosure also includes various variations and equivalents. In addition, various combinations and methods, and further combinations and methods including only one element, more elements, or fewer elements, also fall within the scope and spirit of the present disclosure.

[0238] (Note)

[0239] Features related to the above-mentioned embodiment are supplementarily noted.

[0240] (Note 1)

[0241] A communication device is a communication device for communicating with a primary cell group and a secondary cell group, wherein the primary cell group is associated with a primary node, and the secondary cell group is associated with a secondary node, and the communication device includes:

[0242] a receiving unit, receiving configuration information from the master node, the configuration information being used to configure a plurality of conditional reconfigurations for the communication device, the plurality of conditional reconfigurations being used to configure a plurality of candidate target primary and secondary (PS) cells;

[0243] a control unit that updates a counter value, the counter value being used to derive a security key of a target secondary node associated with a cell for which an execution condition is satisfied from among the plurality of candidate target PS cells; and

[0244] The sending unit sends identification information to the network, wherein the identification information is used to identify the security key derived based on the updated counter value.

[0245] (Note 2)

[0246] According to the communication device according to Supplementary Note 1, the transmitting unit transmits the identification information to the network, and the identification information includes the security key.

[0247] (Note 3)

[0248] According to the communication device according to Supplementary Note 1 or 2, the transmitting unit transmits the determination information to the network, and the determination information includes the updated counter value.

[0249] (Note 4)

[0250] According to any one of Supplementary Notes 1 to 3, the transmitting unit transmits the determination information to the network, the determination information including calculation information for calculating the updated counter value.

[0251] (Note 5)

[0252] According to the communication device described in any one of Supplementary Notes 1 to 4, the sending unit sends the determination information to the network via a message, and the message is sent to the target secondary node via the primary node.

[0253] (Note 6)

[0254] According to the communication device according to any one of Supplementary Notes 1 to 5, the sending unit sends the determination information to the network through a message with the master node as a termination end.

[0255] (Note 7)

[0256] The communication device according to any one of Supplementary Notes 1 to 6, wherein the transmitting unit transmits reset information for resetting the counter value to the master node before rounding up the counter value.

[0257] (Note 8)

[0258] A base station is a base station that acts as the primary node in a network including a primary node and a secondary node, the primary node being associated with a primary cell group configured for a communication device, the secondary node being associated with a secondary cell group configured for the communication device, the base station comprising:

[0259] a sending unit, configured to send configuration information to the aforementioned communication device, wherein the aforementioned configuration information is used to configure multiple conditional reconfigurations for the aforementioned communication device, wherein the multiple conditional reconfigurations are used to configure multiple candidate target primary and secondary (PS) cells; and

[0260] The receiving unit receives determination information from the aforementioned communication device with updated counter value, wherein the aforementioned counter value is used to derive the security key of the target auxiliary node associated with the cell whose execution condition is met from among the aforementioned multiple candidate target PS cells, and the aforementioned determination information is used to determine the aforementioned security key derived based on the aforementioned updated counter value.

[0261] (Note 9)

[0262] According to the base station described in Supplementary Note 8, the receiving unit receives a message, the message is sent to the target secondary node via the primary node, and includes the determination information.

[0263] The base station includes a network communication unit, and the network communication unit sends the message to the target secondary node.

[0264] (Note 10)

[0265] According to the base station described in Supplementary Note 9, the network communication unit receives the determination information from the target slave node,

[0266] The network communication unit sends the security key or information used to calculate the security key to the target secondary node.

[0267] (Note 11)

[0268] According to any one of supplementary notes 8 to 10, the aforementioned determination information includes the aforementioned security key,

[0269] The receiving unit receives the confirmation information via a message with the master node as the terminal.

[0270] The base station includes a network communication unit, and the network communication unit sends the security key to the target secondary node.

[0271] (Note 12)

[0272] The base station according to any one of Annexes 8 to 10, wherein the determination information includes the updated counter value or calculation information used to calculate the updated counter value.

[0273] The base station includes: a control unit configured to derive the security key based on the updated counter value; and

[0274] The network communication unit sends the security key derived by the control unit to the target slave node.

[0275] (Note 13)

[0276] The base station according to any one of Supplementary Notes 8 to 12, further comprising a control unit configured to determine whether the counter value is rounded up based on the determination information.

[0277] (Note 14)

[0278] According to any one of Supplementary Notes 8 to 12, the receiving unit receives reset information for resetting the counter value from the communication device before rounding up the counter value.

[0279] (Note 15)

[0280] A base station is a base station that acts as the secondary node in a network including a primary node and a secondary node, wherein the primary node is associated with a primary cell group configured for a communication device, and the secondary node is associated with a secondary cell group configured for the communication device.

[0281] The aforementioned base station includes a receiving unit, which receives determination information from the aforementioned communication device whose counter value is updated via the aforementioned master node that sends the aforementioned configuration information to the aforementioned communication device, the aforementioned configuration information is used to configure multiple conditional reconfigurations to the aforementioned communication device, the aforementioned multiple conditional reconfigurations are used to configure multiple candidate target primary and secondary (PS) cells, the aforementioned counter value is used to derive the security key of the target secondary node associated with the cell whose execution condition is met from among the aforementioned multiple candidate target PS cells, and the aforementioned determination information is used to determine the aforementioned security key derived based on the aforementioned updated counter value.

[0282] (Note 16)

[0283] A communication method is performed by a communication device, wherein the communication device communicates with a primary cell group and a secondary cell group, the primary cell group is associated with a primary node, and the secondary cell group is associated with a secondary node, the communication method comprising:

[0284] receiving configuration information from the master node, the configuration information being used to configure a plurality of conditional reconfigurations for the communication device, the plurality of conditional reconfigurations being used to configure a plurality of candidate target primary and secondary (PS) cells;

[0285] a step of updating a counter value, the counter value being used to derive a security key of a target secondary node associated with a cell for which the execution condition is satisfied from among the plurality of candidate target PS cells; and

[0286] The step of sending determination information to the network, wherein the determination information is used to determine the security key derived based on the updated counter value.

[0287] (Note 17)

[0288] A communication device (100) is provided for communicating with a primary cell group and a secondary cell group, wherein the primary cell group is associated with a primary node (MN 200M), and the secondary cell group is associated with a secondary node (SN 200S). The communication device comprises:

[0289] A receiving unit (112) receives a radio resource control (RRC) reconfiguration message from the master node, the RRC reconfiguration message including configuration information and counter value information, the configuration information being used to configure multiple conditional reconfigurations for the communication device, the multiple conditional reconfigurations being used to configure multiple candidate cells, and the counter value information being used to derive a security key of the slave node;

[0290] A control unit (120) determines a cell satisfying the execution condition from among the plurality of candidate cells, and uses the counter value to derive the security key of the secondary node associated with the determined cell; and

[0291] A sending unit (111) sends the counter value used to derive the security key to the network (10).

[0292] (Note 18)

[0293] According to the communication device according to Supplementary Note 17, the transmitting unit transmits the counter value for deriving the security key to the master node.

[0294] (Note 19)

[0295] According to the communication device described in Supplementary Note 17 or 18, the sending unit sends the counter value used to derive the security key to the network through a message, and the message is sent to the slave node via the master node.

[0296] (Note 20)

[0297] According to the communication device according to any one of Supplementary Notes 17 to 19, the sending unit sends the counter value used to derive the security key to the network through a message with the master node as a termination end.

[0298] (Note 21)

[0299] According to any one of Supplementary Notes 17 to 20, the transmitting unit transmits an RRC reconfiguration complete message including the counter value to the network.

[0300] (Note 22)

[0301] A base station is a base station (200) that acts as the master node in a network (10) including a master node (MN 200M) and a secondary node (SN 200S), wherein the master node is associated with a primary cell group configured for a communication device (100), and the secondary node is associated with a secondary cell group configured for the communication device, and the base station comprises:

[0302] A sending unit (211) sends a radio resource control (RRC) reconfiguration message including configuration information to the communication device, wherein the configuration information is used to configure multiple conditional reconfigurations to the communication device, and the multiple conditional reconfigurations are used to configure multiple candidate cells; and

[0303] A receiving unit (212) receives a counter value used when the communication device derives a security key of the secondary node associated with a cell whose execution condition is satisfied from among the plurality of candidate cells.

[0304] (Note 23)

[0305] The base station according to Supplementary Note 22, wherein the receiving unit receives a message, the message being sent to the secondary node via the primary node and including the counter value used to derive the security key.

[0306] The base station includes a network communication unit (220), and the network communication unit sends the message to the secondary node.

[0307] (Note 24)

[0308] According to the base station described in Supplement 23, the aforementioned network communication unit sends an SNRRC reconfiguration completion message including the aforementioned message to the aforementioned secondary node.

[0309] (Note 25)

[0310] A base station (200) is a base station that acts as a secondary node in a network (10) including a master node (MN 200M) and a secondary node (SN 200S), wherein the master node is associated with a primary cell group configured for a communication device (100), and the secondary node is associated with a secondary cell group configured for the communication device.

[0311] The base station includes a receiving unit (212), the receiving unit receives a counter value from the master node, the master node sends configuration information to the communication device, the configuration information is used to configure multiple conditional reconfigurations for the communication device, the multiple conditional reconfigurations are used to configure multiple candidate cells, and the counter value is used at the communication device to derive the security key of the secondary node associated with the cell whose execution condition is met from among the multiple candidate cells.

[0312] (Note 26)

[0313] The base station according to Supplementary Note 25 further includes a control unit (230) configured to derive the security key based on the counter value received from the master node.

[0314] (Note 27)

[0315] A communication method is performed by a communication device (100), wherein the communication device communicates with a primary cell group and a secondary cell group, wherein the primary cell group is associated with a primary node (MN 200M) and the secondary cell group is associated with a secondary node (SN 200S), and the communication method comprises:

[0316] receiving a radio resource control (RRC) reconfiguration message from the primary node, the RRC reconfiguration message including configuration information and counter value information, the configuration information being used to configure multiple conditional reconfigurations for the communication device, the multiple conditional reconfigurations being used to configure multiple candidate cells, and the counter value information being used to derive a security key for the secondary node;

[0317] The step of determining a cell whose execution condition is satisfied from the plurality of candidate cells;

[0318] a step of deriving the security key of the secondary node associated with the determined cell using the counter value; and

[0319] The step of sending the aforementioned counter value used to derive the aforementioned security key to the network (10).

Claims

1. A communication device, comprising: a communication device (100) for communicating with a primary cell group and a secondary cell group, wherein the primary cell group is associated with a master node (MN 200M), and the secondary cell group is associated with a secondary node (SN 200S), the communication device comprising: A receiving unit (112) receives a radio resource control (RRC) reconfiguration message from the primary node, the RRC reconfiguration message including configuration information and counter value information, the configuration information being used to configure multiple conditional reconfigurations for the communication device, the multiple conditional reconfigurations being used to configure multiple candidate cells, and the counter value information being used to derive a security key of the secondary node; A control unit (120) determines a cell whose execution condition is satisfied from among the plurality of candidate cells, and uses the counter value to derive the security key of the secondary node associated with the determined cell; as well as A sending unit (111) sends the counter value used to derive the security key to a network (10).

2. The communication device according to claim 1, The transmitting unit transmits the counter value used to derive the security key to the master node.

3. The communication device according to claim 1 or 2, The transmitting unit transmits the counter value used for deriving the security key to the network via a message, and the message is transmitted to the secondary node via the primary node.

4. The communication device according to claim 1 or 2, The sending unit sends the counter value used to derive the security key to the network through a message with the master node as a termination end.

5. The communication device according to claim 1 or 2, The sending unit sends an RRC reconfiguration complete message including the counter value to the network.

6. A base station, comprising: a base station (200) acting as a master node in a network (10) comprising a master node (MN 200M) and a secondary node (SN 200S), wherein the master node is associated with a primary cell group configured for a communication device (100); and the secondary node is associated with a secondary cell group configured for the communication device. The base station comprises: A sending unit (211) sends a radio resource control (RRC) reconfiguration message including configuration information to the communication device, wherein the configuration information is used to configure multiple conditional reconfigurations to the communication device, and the multiple conditional reconfigurations are used to configure multiple candidate cells; as well as A receiving unit (212) receives a counter value used when the communication device derives the security key of the secondary node associated with the cell whose execution condition is satisfied from among the plurality of candidate cells.

7. The base station according to claim 6, The receiving unit receives a message, the message being sent to the secondary node via the primary node and including the counter value used to derive the security key, The base station comprises a network communication unit (220) which transmits the message to the secondary node.

8. The base station according to claim 7, The network communication unit sends an SN RRC reconfiguration complete message including the message to the secondary node.

9. A base station, comprising: a base station (200) operating as a secondary node in a network (10) comprising a master node (MN 200M) and a secondary node (SN 200S), wherein the master node is associated with a primary cell group configured for a communication device (100); and the secondary node is associated with a secondary cell group configured for the communication device. The base station comprises a receiving unit (212) which receives a counter value from the master node, the master node sends configuration information to the communication device, the configuration information is used to configure a plurality of conditional reconfigurations for the communication device, the plurality of conditional reconfigurations are used to configure a plurality of candidate cells, the counter value is used at the communication device to derive a security key of the secondary node associated with a cell whose execution condition is satisfied from among the plurality of candidate cells.

10. The base station according to claim 9, The system further includes a control unit (230) configured to derive the security key based on the counter value received from the master node.

11. A communication method, performed by a communication device (100), wherein the communication device (100) communicates with a primary cell group and a secondary cell group, wherein the primary cell group is associated with a primary node (MN 200M) and the secondary cell group is associated with a secondary node (SN 200S), the communication method comprising: receiving a radio resource control (RRC) reconfiguration message from the primary node, the RRC reconfiguration message including configuration information and counter value information, the configuration information being used to configure multiple conditional reconfigurations for the communication device, the multiple conditional reconfigurations being used to configure multiple candidate cells, and the counter value information being used to derive a security key of the secondary node; The step of determining a cell whose execution condition is satisfied from among the plurality of candidate cells; the step of deriving the security key of the secondary node associated with the determined cell using the counter value; as well as The step of sending said counter value used to derive said security key to a network (10).

Images