Inter-gNB L1/L2 Mobility Security with Independent Key Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in maintaining communication security during inter-gNB Layer 1 or Layer 2 triggered mobility (LTM) handovers, as they lack effective security updates, potentially compromising security without intermediate signaling for key derivation.
Innovation Solution
Implementing security updates for inter-gNB LTM by providing a configuration of candidate network entities and independently updating security material, such as a new NCC value, without updating the candidate network entities' configurations, to maintain communication security while reducing control signaling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security updates are performed for each LTM handover, then communication security is maintained, but control signaling overhead increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring candidate network entities with security material before the actual handover occurs. The source network entity provides security material to candidate network entities in advance, so that when LTM handover is triggered, the security updates are already in place and can be applied immediately without additional signaling overhead during the handover process itself.
Solution Approach 2:
The patent segments the security update process into two distinct phases: a preparation phase where security material is distributed to candidate network entities before handover, and an execution phase where the actual LTM handover occurs using pre-prepared security material. This segmentation allows security updates to be decoupled from the handover signaling, reducing control signaling overhead while maintaining security.
2Reliability
If candidate network entities are reconfigured for each handover, then security is updated, but configuration management complexity increases
Solution Approach 1:
The patent applies preliminary action by performing security material distribution to candidate network entities before the handover event. The source network entity provides security material to candidate network entities in advance, so that when handover occurs, the security configuration is already in place and no additional configuration management is needed during the handover execution.
Solution Approach 2:
The patent uses an intermediary approach where the source network entity acts as a mediator that distributes security material to both the UE and candidate network entities. This intermediary role allows centralized security management without requiring direct reconfiguration of candidate network entities for each handover, simplifying configuration management while ensuring security updates are applied.
3Reliability
If security material is provided to all candidate network entities, then security coverage is maximized, but signaling messages increase
Solution Approach 1:
The patent applies preliminary action by providing security material to candidate network entities in advance before the actual handover occurs. This allows the network to pre-distribute security information to multiple candidates, so that when handover is triggered, the security material is already available and no additional signaling messages are needed to provide security coverage during the handover process itself.
Solution Approach 2:
The patent applies dynamics by making the security material distribution flexible and adaptive. The source network entity can provide security material to candidate network entities dynamically based on the handover situation, allowing security coverage to be maximized only when needed while avoiding unnecessary signaling messages when handover does not occur or when candidates are not required.
Data Source
AI summary
Some wireless communication systems perform handover procedures to transfer user equipment (UE) communications between network entities. In some approaches, handover procedures may be performed via layer 3 (L3) signaling (e.g., L3 mobility). Layer 1 (L1) or Layer 2 (L2) triggered mobility (LTM) may allow handovers to be triggered via L1 or L2 signaling. Some of the techniques described herein may be utilized to handle key derivations when a UE is configured with candidate LTM cells of different network entities. For example, security keys may be updated with one or more inter-network entity LTM handovers after an initial handover. From the UE perspective, the UE may receive a configuration of LTM candidates once, but may perform one or more LTM executions using the configuration of LTM candidates. After the initial LTM procedure for the initial handover, the UE may receive an independent security configuration update for a subsequent LTM execution.