Access-Specific Security Keys for 5G Multi-Access Handover
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 5G communication systems face a reduction in security level when a communication terminal establishes multiple connections via 3GPP Access and Non-3GPP Access, as current protocols do not provide adequate security mechanisms for handover processing.
Innovation Solution
A communication terminal and core network device equipped with a key derivation unit to derive a second security key from a first security key, ensuring secure communication across both access types, and a key derivation method to synchronize security keys during handover processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple connections are established via 3GPP Access and Non-3GPP Access, then communication versatility is improved, but security level deteriorates
Solution Approach 1:
The patent segments the security key management by deriving separate security keys for each access type (3GPP Access and Non-3GPP Access) from a master security key. This allows independent security processing for each connection, ensuring that security compromises in one access type do not affect the other, thereby maintaining high security levels while supporting multiple connections
Solution Approach 2:
The patent applies local quality by implementing access-specific security key derivation where the security key derivation function takes access type identification as input. Each access type (3GPP or Non-3GPP) receives customized security processing tailored to its specific requirements, allowing optimized security for each connection type while maintaining overall system security
2Reliability
If security keys are derived for each access type, then security level is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal security key derivation function that can handle multiple access types through a single standardized interface. The derivation function accepts access type identification as a parameter and automatically performs the appropriate key derivation, eliminating the need for separate key management systems for each access type and reducing overall device complexity
Solution Approach 2:
The patent introduces an access type identification parameter as an intermediary element that mediates between the security key derivation function and different access types. This intermediary allows the derivation function to distinguish between 3GPP and Non-3GPP Access without requiring complex conditional logic, simplifying the key derivation process while maintaining security
Data Source
AI summary
A communication terminal capable of preventing a reduction in security level that is caused at the time of establishing multiple connections via 3GPP Access and Non-3GPP Access. A communication terminal according to the present disclosure includes: a communication unit configured to communicate with gateway devices disposed in a preceding stage of a core network device via an Untrusted Non-3GPP Access; and a key derivation unit configured to derive a second security key used for security processing of a message transmitted using a defined protocol with the gateway device, from a first security key used for security processing of a message transmitted using a defined protocol with the core network device.