Master eNodeB Security Key Change in Dual Connectivity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security key change methods are inadequate for dual connectivity communication scenarios involving both master eNodeB and secondary eNodeB in wireless networks, leading to inefficiencies and delays in data transmission.
Innovation Solution
A method where the master eNodeB determines the need for a security key change and sends a key change command message to the user equipment (UE), specifying whether to keep access stratum configuration and data transmission settings, allowing the UE to perform the key change and send a completion message, ensuring seamless security key updates between the UE and both eNodeB entities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an existing security key change method is used in dual connectivity communication, then data transmission can occur between UE and base stations, but the security key change process causes transmission interruptions and delays
Solution Approach 1:
The patent segments the security key change process into separate handling for master eNodeB and secondary eNodeB. The master eNodeB independently manages key changes with the UE without requiring coordination with the secondary eNodeB, allowing data transmission to continue uninterrupted through the secondary eNodeB while the master eNodeB performs its own key change procedures.
Solution Approach 2:
The patent implements preliminary action by allowing the UE to maintain data transmission connections with the secondary eNodeB before the master eNodeB completes its security key change. This ensures that data transmission is already established and can continue without interruption during the master eNodeB's key change process.
2Reliability
If security key change is performed in dual connectivity scenario, then security is updated for both master and secondary eNodeB, but the process becomes complex and requires coordination between multiple base stations
Solution Approach 1:
The patent extracts the security key change management function from the secondary eNodeB and concentrates it entirely in the master eNodeB. The master eNodeB independently handles all security key change operations with the UE, while the secondary eNodeB simply maintains existing security parameters, eliminating the need for complex coordination between base stations.
Solution Approach 2:
Instead of having each base station independently manage its own security key changes (which would require coordination), the patent inverts the approach by having the master eNodeB exclusively manage security key changes for both itself and the secondary eNodeB. This centralizes control and simplifies the overall system architecture.
3Adaptability or versatility
If existing intra-cell handover security key change method is applied, then security key can be changed, but it is not applicable to dual connectivity scenario with multiple base stations
Solution Approach 1:
The patent creates a universal security key change mechanism that works for both single-connectivity and dual-connectivity scenarios. The master eNodeB's independent security key change management approach can handle various connectivity configurations, making the solution adaptable to different network architectures while maintaining security effectiveness.
Data Source
Figure 1~2
Figure 3-a
Figure 3-b
AI summary
The present invention provides a security key change method, a base station, and user equipment. The method may include: determining, by a master eNodeB MeNB, that a security key change needs to be performed between a first base station and user equipment UE, where the first base station includes at least one of the master eNodeB and a secondary eNodeB; sending, by the master eNodeB, a key change command message to the UE, so that the UE performs, according to the key change command message, the security key change between the UE and the first base station, and determines, according to the key change command message, whether to keep access stratum configuration information between the UE and the master eNodeB or the secondary eNodeB and/or whether to keep data transmission between the UE and the master eNodeB or the secondary eNodeB; and receiving, by the master eNodeB, a key change complete message sent by the UE, so that the first base station determines that the security key change between the UE and the first base station is completed.