LTE WLAN Aggregation Ciphering Configuration Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In LTE WLAN Aggregation (LWA) systems, there is a need for better management of ciphering configurations to avoid double encryption bottlenecks and ensure secure data transfer, particularly when mobile devices move between heterogeneous networks, as current methods lead to packet discarding and retransmissions due to mismatched ciphering configurations.
Innovation Solution
Implementing methods to manage ciphering configurations by transmitting security keys and configuration messages between evolved Node Bs (eNBs) and user equipment (UEs) to activate or deactivate PDCP and WLAN encryption dynamically, allowing seamless handovers and minimizing packet discarding by using either source or target ciphering configurations based on data serial numbers and network conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If both PDCP encryption and WLAN encryption are applied in LWA systems, then data security is improved, but data transfer rate deteriorates due to double encryption bottlenecks
Solution Approach 1:
The patent implements dynamic ciphering configuration management where the system can switch between different encryption modes (PDCP only, WLAN only, or both) based on network conditions, mobility events, and security requirements. This allows the system to optimize the balance between security and data transfer rate by adjusting encryption levels dynamically rather than applying fixed double encryption always.
Solution Approach 2:
The patent changes the ciphering configuration parameters (encryption algorithms, keys, modes) dynamically based on network conditions and mobility events. By modifying these parameters in response to handovers and network state changes, the system can reduce encryption overhead when appropriate while maintaining security when required, thus resolving the contradiction between security and transfer rate.
2Reliability
If ciphering configuration is changed during mobility events, then security is improved, but packet discarding and retransmissions increase due to mismatched configurations
Solution Approach 1:
The patent prepares ciphering configuration changes in advance of mobility events by pre-synchronizing configuration updates between source and target eNBs. This preliminary action ensures that the UE receives consistent ciphering configurations before handover occurs, preventing packet discarding and retransmissions while still maintaining security through timely configuration updates.
Solution Approach 2:
The patent implements feedback mechanisms where the UE reports its ciphering configuration status and reception of configuration messages to the network. This feedback allows the network to verify that configuration changes are properly synchronized and to make adjustments if mismatches are detected, thereby preventing packet loss while maintaining security.
3Reliability
If ciphering configuration messages are transmitted frequently to maintain security, then security is improved, but signaling overhead and processing complexity increase
Solution Approach 1:
The patent implements periodic ciphering configuration updates triggered by specific events (handovers, security context changes) rather than continuous updates. This periodic approach maintains security by refreshing configurations when necessary while significantly reducing signaling overhead and processing complexity compared to frequent continuous updates.
Solution Approach 2:
The patent applies ciphering configuration updates selectively based on network conditions and security requirements rather than uniformly to all cases. This partial action approach updates configurations only when necessary (excessive updates avoided), thereby maintaining security while reducing unnecessary signaling overhead and processing complexity.
Data Source
AI summary
A method for managing ciphering configurations for LTE WLAN Aggregation includes a source evolved Node B ciphering configuration which is implemented at a mobile device and at a source eNB, for communicating data between the mobile device and the source eNB via a WLAN node. A WLAN ciphering configuration is implemented at the mobile device and at the WLAN node, for communicating data between the mobile device and the source eNB via the WLAN node. In response to determining that the WLAN ciphering configuration has been implemented, a message is transmitted indicating that the WLAN ciphering configuration has been implemented and at least one action is performed in response to the message.