Access Network Session Setup After Security Activation

Solution Overview

Problem

In the 5G NR protocol stack, allocating session resources to a UE before performing security activation can lead to collisions between subsequent session requests and security activation processes, resulting in session establishment failures.

Innovation Solution

A method where an access network device receives a session request from a UE, forwards it to a core network device, receives a response message carrying session resources, initiates security activation of the access stratum, and only after successful activation, allocates the session resources to the UE.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the access network device first allocates session resources to the UE and then performs security activation, then the session resource allocation is completed quickly, but collision occurs between the next session request and security activation, resulting in security activation failure

Engineering Contradiction:

Improvesession resource allocation speedVSAvoidsecurity activation success rate

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The access network device performs security activation before allocating session resources to the UE. This preliminary security setup ensures that the security context is established first, preventing collisions between session requests and security activation processes, thereby resolving the reliability issue while maintaining efficient resource allocation

Inventive Principle:

Principle #10Preliminary action

2Reliability

If the access network device performs security activation before allocating session resources, then collision between session requests and security activation is prevented, but the session establishment process becomes more complex

Engineering Contradiction:

Improvesecurity activation success rateVSAvoidsession establishment process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The access network device performs security activation before allocating session resources to the UE. This preliminary security setup ensures that the security context is established first, preventing collisions between session requests and security activation processes, thereby resolving the reliability issue while maintaining efficient resource allocation

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12531756B2Session establishment method and apparatus, access network device and storage medium

Publication Date: 2026.01.20 ZTE CORP

AI summary

The embodiments of the present disclosure relate to the technical field of network communications. Provided is a session establishment method applied to an access network device, comprising: receiving a session request of a UE, and sending the session request to a core network device; receiving a request response message returned by the core network device, wherein the request response message carries a session resource; initiating security activation of an access stratum to the UE; and after it is confirmed that the security activation is successful, sending the session resource to the UE for the UE to establish a session based on the session resource.