Assisting Security Key Generation for Dual Connectivity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In dual connectivity scenarios of LTE wireless telecommunications networks, existing techniques face challenges in securely handling security keys between anchor and assisting base stations, particularly due to the physical separation of these nodes, which can lead to vulnerabilities in key configuration and data transmission.
Innovation Solution
The method involves generating an assisting security key for the assisting base station based on the anchor base station's key, using a key derivation function, to ensure secure communication between the wireless terminal and both base stations, while maintaining compartmentalization of security functions to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security keys are shared between anchor and assisting base stations in dual connectivity, then communication security is maintained, but vulnerability increases due to physical separation of nodes
Solution Approach 1:
The patent segments the security key management by creating separate key sets for anchor base station and assisting base station. Each node uses its own dedicated key (K_eNB for anchor, K_eNB' for assisting) rather than sharing a common key, thereby isolating security vulnerabilities to individual nodes while maintaining overall system security.
Solution Approach 2:
The patent introduces a key derivation function as an intermediary mechanism that generates assisting base station keys from anchor base station keys through a cryptographic transformation. This intermediary process ensures that while keys are related (maintaining security coherence), they remain distinct and compartmentalized, preventing direct exposure of anchor keys in assisting nodes.
2Reliability
If separate key sets are used for anchor and assisting base stations, then security compartmentalization is achieved, but key management complexity increases
Solution Approach 1:
The patent performs preliminary key derivation at the anchor base station before data transmission begins. The assisting base station key is pre-generated from the anchor base station key using a key derivation function, and this derived key is then securely distributed to the assisting node. This preliminary action eliminates the need for complex runtime key management and reduces operational complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Techniques for the secure generation of a set of encryption keys to be used for communication between a wireless terminal and an assisting base station in a dual-connectivity scenario. An example method includes generating (810) an assisting security key for the assisting base station, based on an anchor base station key. The generated assisting security key is sent (820) to the assisting base station, for use by the assisting base station in encrypting data traffic sent to the wireless terminal or in generating one or more additional assisting security keys for encrypting data traffic sent to the wireless terminal while the wireless terminal is dually connected to the anchor base station and the assisting base station. The anchor base station key, or a key derived from the anchor base station key, is used (830) for encrypting data sent to the wireless terminal by the anchor base station.