Distributed Unit Secondary-Key Processing for Lower-Latency CU-DU Messaging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication networks with a CU-DU split architecture, latency and inefficiency arise due to control and user plane messages needing to traverse multiple hops between the DU and CU, preventing the DU from taking timely actions.
Innovation Solution
The DU node obtains a secondary security key associated with it and processes messages protected with this key, allowing it to take actions based on the information without needing to communicate with the CU for every decision.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If messages are processed by the CU node only, then security is maintained through centralized control, but latency increases due to multiple hops and the DU cannot take timely actions
Solution Approach 1:
The patent segments the security processing function by introducing a secondary security key specific to the DU node, allowing the DU to independently process security-critical messages without requiring CU involvement. This segmentation enables distributed security processing that reduces latency while maintaining overall system security through the hierarchical key structure (primary key for CU, secondary key for DU).
Solution Approach 2:
The patent applies local quality by assigning a secondary security key specifically to the DU node, enabling localized security processing at the DU level for messages requiring immediate action. This allows different parts of the system to use appropriate security mechanisms tailored to their specific needs and operational requirements.
2Loss of time
If the DU node processes messages locally with a secondary security key, then latency is reduced and responsiveness is enhanced, but device complexity increases due to additional security key management
Solution Approach 1:
The patent implements preliminary action by having the CU node provision the secondary security key to the DU node in advance before the DU needs to process security-critical messages independently. This pre-configuration enables the DU to immediately process messages with the secondary key without requiring real-time key establishment, reducing operational complexity despite the additional key management infrastructure.
3Reliability
If all messages traverse through the CU node, then centralized security control is maintained, but productivity decreases due to inefficiency in message processing
Solution Approach 1:
The patent segments message processing by implementing a dual-key system where the primary security key maintains centralized CU control for general messages, while the secondary security key enables distributed DU processing for time-critical messages. This segmentation allows the system to process messages more efficiently by routing them to the appropriate node based on their characteristics.
Solution Approach 2:
The patent enables the DU node to perform self-service by allowing it to independently process security-critical messages using its dedicated secondary security key without requiring CU intervention. This self-service capability improves productivity for specific message types while the CU maintains overall security coordination through the primary key system.
Data Source
AI summary
A method performed by a Distributed Unit, DU, node for handling a message in a communication between a User Equipment, UE, the DU node and a Central Unit, CU, node. The DU node obtains a secondary security key from a network node. The secondary security key is associated with the DU node. The DU node receives the message from the UE or the CU node. The message is security protected with one or both of a first security key, and the secondary security key. The message or a part of the message, is not possible to use by the DU node when security protected with the first security key. The DU node determines that at least a part of the message is security protected with the secondary security key. The DU node uses the at least the part of the message security protected with the secondary security key.