Access Stratum Key Generation for Secure Uu' Air Interface Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The LTE-Hi architecture lacks a method for generating an access stratum key on the Uu' air interface, compromising the security of data transmission over this interface.
Innovation Solution
A method for generating an access stratum key on the Uu' air interface by using a time-varying parameter and/or a parameter related to the serving cell of the second network-side device, ensuring that the network-side device and user equipment have the same access stratum root key KeNB* to secure data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If only an AS key generation method on the Uu air interface is provided, then the existing security mechanism is simple to implement, but the security of data transmission over the Uu' air interface cannot be ensured
Solution Approach 1:
The patent applies universality by enabling the AS key generation method to work on both the Uu air interface and the Uu' air interface. The network-side device calculates the AS key using the same fundamental approach (combining KeNB with time-varying parameters and/or serving cell parameters) for both interfaces, allowing a single method to secure multiple communication paths simultaneously.
Solution Approach 2:
The patent applies parameter changes by introducing time-varying parameters and/or serving cell parameters as inputs to the AS key calculation. These parameters change based on the specific air interface and communication conditions, allowing the system to generate secure keys adapted to different operational contexts while maintaining the same overall key generation framework.
2Adaptability or versatility
If the UE receives data through two links simultaneously, then the system supports multiple access scenarios, but the generation and maintenance of AS security context on two air interfaces becomes complex
Solution Approach 1:
The patent applies universality by providing a unified AS key generation method that works for both the Uu air interface and the Uu' air interface. The network-side device calculates the AS key using the same fundamental approach (combining KeNB with time-varying parameters and/or serving cell parameters) for both interfaces, allowing a single method to secure multiple communication paths simultaneously.
Solution Approach 2:
The patent applies parameter changes by introducing time-varying parameters and/or serving cell parameters as inputs to the AS key calculation. These parameters change based on the specific air interface and communication conditions, allowing the system to generate secure keys adapted to different operational contexts while maintaining the same overall key generation framework.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6
AI summary
Embodiments of the present invention provide a method and a device thereof for generating an access stratum key in a In the communication system, a user equipment UE accesses a core network via a first network-side device by using a first air interface and connects to the first network-side device via a second network-side device by using a second air interface to access the core network. The method includes: acquiring, by the network-side device, an input parameter; calculating, by the network-side device, an access stratum root key KeNB* according to the input parameter and an access stratum root key KeNB on the first air interface, or using, by the network-side device, the KeNB as the KeNB*; and generating, by the second network-side device, an access stratum key on the second air interface according to the KeNB*, or sending, by the first network-side device, the KeNB* to the second network-side device, so that the second network-side device generates the access stratum key on the second air interface according to the KeNB*. In this way, security of data transmission over the second air interface may be improved by using the access stratum key on the second air interface.