Fast Transition Key Caching for Wireless Network Handover

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems face challenges in optimizing connection establishment between wireless wide area (WWA) and wireless local area (WLA) access networks, leading to delays in user equipment (UE) transitioning between these networks, particularly due to the need for multiple authentication handshakes and message exchanges, which can result in latency and inefficiencies.

Innovation Solution

The proposed solution involves leveraging session keys generated via a 3GPP WWA access network connection to derive Fast Transition (FT) key material for WLA access networks, enabling caching of FT hierarchical keys based on neighbor relationships and UE mobility triggers, thereby facilitating faster authentication and reducing connection establishment time.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple authentication handshakes and message exchanges are performed for UE transitioning between WWA and WLA networks, then authentication reliability is improved, but connection establishment time increases

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidconnection establishment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-establishing and caching Fast Transition (FT) hierarchical keys at WLA access nodes before UE actually needs to transition. The network proactively generates and stores FT keys based on neighbor relationship information, so when UE initiates a transition from WWA to WLA, the authentication keys are already in place, eliminating the need for time-consuming real-time key generation and exchange.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces FT hierarchical keys as an intermediary security mechanism between WWA and WLA networks. These pre-shared keys act as a mediator that enables direct authentication between UE and WLA access nodes without requiring full authentication handshakes through the traditional network path, thus reducing transition time while maintaining security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Speed

If FT keys are cached on WLA access nodes based on neighbor relationships, then connection establishment speed is improved, but network complexity increases

Engineering Contradiction:
Improveconnection establishment speedVSAvoidnetwork complexity
Core Design Contradiction:
SpeedVSDevice complexity

Solution Approach 1:

The network performs preliminary key generation and caching operations at WLA access nodes based on pre-established neighbor relationship information. By proactively creating and storing FT hierarchical keys before UE transitions occur, the system achieves fast connection establishment without adding complexity to the real-time transition process itself.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent employs copying by replicating FT hierarchical keys at multiple WLA access nodes that have neighbor relationships with each other. Instead of creating unique authentication paths for each UE transition, the system copies pre-computed keys across the network infrastructure, enabling parallel authentication capabilities and reducing overall network complexity.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11765581B2Bootstrapping fast transition (FT) keys on wireless local area access network nodes based on private wireless wide area access network information
Publication Date: 2023.09.19 CISCO TECHNOLOGY INC
  • US11765581B2 patent drawing
  • US11765581B2 patent drawing
  • US11765581B2 patent drawing

AI summary

Presented herein are techniques to provide for the ability to optimize the caching of Fast Transition (FT) hierarchical keys based on a derived or statically defined neighbor relationship between wireless wide area (WWA) access network nodes and wireless local area (WLA) access network nodes and also user equipment (UE) mobility triggers in the WWA access network. In one example, a method may include instructing a UE to report detection of a WLA access network and based, at least in part, on obtaining a notification via a WWA access node indicating UE detection of the WLA access network, identifying WLA access nodes that neighbor the WWA access node. The method may further include generating FT key material for the UE and communicating a portion of the FT key material to the WLA access nodes that neighbor the WWA access node to facilitate authenticating the UE to the WLA access network.