Edge Enabler Client Key Derivation for Wireless Security

The patent segments the key management system by introducing a key derivation function that generates unique keys for each edge server function. Instead of using a single shared derived key, the system now derives separate keys (KAFEEC) for each edge server function using the edge server identifier and edge enabler client identifier as inputs. This segmentation eliminates the security risk of key reuse while maintaining manageable complexity through automated key derivation.

The system implements self-service key management through automated key derivation. The network function automatically derives the unique key (KAFEEC) for each edge server function using the key derivation function with inputs including the edge server identifier and edge enabler client identifier. This eliminates the need for manual key distribution and management, reducing operational complexity despite the increase in unique keys. The encrypted EEC-ID mechanism also automates the protection of identifiers during transmission.

The patent applies parameter changes by encrypting the edge enabler client identifier (EEC-ID) using the KAFEEC key before transmission to the network function. This encryption transforms the plaintext identifier into ciphertext, ensuring that even if intercepted, the identifier cannot be used to derive keys or compromise security. The processing overhead is justified by the significant security enhancement, as the encrypted identifier prevents unauthorized key derivation and protects client identity.