Cellular-WLAN Aggregation Key Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current technologies face challenges in handling cellular-wireless local area network (WLAN) aggregation, particularly when a user equipment (UE) connects to an evolved Node-B (eNB) and experiences conditions such as WLAN handover, handover to another radio access technology, or detects a radio link failure in the E-UTRAN.

Innovation Solution

The proposed solution involves a communication device that receives a RRC message configuring cellular-WLAN aggregation, derives pairwise master keys for encryption, performs EAP authentication and key agreement procedures, and manages encryption keys to securely handle data transmission and reception between the UE and WLAN, ensuring seamless communication during handovers and radio link failures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If cellular-WLAN aggregation is implemented to increase data rate, then data transmission speed is improved, but system complexity and difficulty of handling handovers and failures increase

Engineering Contradiction:
Improvedata rateVSAvoidhandling complexity
Core Design Contradiction:
SpeedVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by performing EAP authentication and key agreement procedures in advance when the UE connects to the WLAN, so that security keys are already established when handovers or failures occur. This prevents the need for complex real-time authentication during handovers, reducing handling complexity while maintaining high data rates through seamless aggregation.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If EAP authentication and key agreement procedures are performed to ensure secure communication, then security and reliability are improved, but authentication time and processing overhead increase

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs EAP authentication and key agreement procedures as preliminary actions when the UE initially connects to the WLAN, establishing security keys before data transmission begins. This ensures high security and reliability while minimizing authentication time during subsequent handovers or failures, as the authentication is already completed in advance.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If encryption keys are managed to handle handovers and failures, then communication reliability is improved, but key management complexity increases

Engineering Contradiction:
Improvecommunication continuityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies universality by using a single EAP authentication mechanism that serves multiple functions: establishing initial security, supporting handovers between eNBs, and handling radio link failures. This multi-functional approach ensures communication reliability across different scenarios while avoiding the need for separate key management systems for each scenario, thereby reducing overall complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3119118B1Handling of cellular-wireless local area network aggregation
Publication Date: 2020.07.15 HTC CORP
  • EP3119118B1 patent drawingFigure 1
  • EP3119118B1 patent drawingFigure 2
  • EP3119118B1 patent drawingFigure 3

AI summary

A communication device of handling communication with a network including a cellular network and a wireless local area network (WLAN) comprises instructions of receiving a radio resource control (RRC) message configuring cellular-WLAN aggregation (CWA) to the communication device from a base station (BS) of the cellular network; deriving a first pairwise master key (PMK) according to the RRC message; deriving a first encryption key for encrypting first data transmitted to the WLAN or decrypting second data received from the WLAN from the first PMK; releasing the CWA during connecting to the WLAN; performing an extensible authentication protocol (EAP) authentication and key agreement (AKA) procedure with the WLAN to derive a second PMK, when releasing the CWA; and deriving a second encryption key for encrypting third data transmitted to the WLAN or decrypting fourth data received from the WLAN from the second PMK.