Access-Specific Key Derivation for Multi-Access UE Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing handover technologies fail to efficiently address the security mechanism when a UE of a communication terminal establishes multiple connections via 3GPP Access and Non-3GPP Access, but does not disclose a security mechanism when a UE of a communication terminal establishes multiple connections via 3GPP Access and Non-3GPP Access, but does not disclose a security mechanism when a UE of a communication terminal establishes multiple connections via 3GPP Access and Non-3GPP Access.
Innovation Solution
A communication terminal, a core network device, and a key deriving method capable of preventing a reduction in security level that is caused at the time of establishing multiple connections via 3GPP Access and Non-3GPP Access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple connections are established via 3GPP Access and Non-3GPP Access, then communication versatility is improved, but security level deteriorates
Solution Approach 1:
The patent segments the security key system by deriving distinct security keys for different access types (3GPP Access and Non-3GPP Access) from a common first security key. This segmentation ensures that each access type has its own dedicated security credentials, preventing security degradation while maintaining the ability to establish multiple connections across different access networks.
2Device complexity
If a single security key is used for multiple connections, then device complexity is reduced, but security level deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-defining key derivation relationships between the first security key and the second security key before actual communication occurs. The key derivation rules are established in advance, allowing the system to automatically generate appropriate security keys for different access types without complex real-time decision-making, thus maintaining low device complexity while ensuring security.
3Reliability
If separate security keys are derived for different access types, then security level is improved, but device complexity increases
Solution Approach 1:
The patent uses parameter changes by modifying the input parameters of the key derivation function based on the access type (3GPP or Non-3GPP). Instead of creating entirely separate key management systems, the patent changes specific parameters (such as access type identifiers) in the key derivation process to generate appropriate security keys. This approach improves security through differentiation while keeping the overall system complexity manageable through a unified derivation framework.
Data Source
AI summary
A communication terminal capable of preventing a reduction in security level that is caused at the time of establishing multiple connections via 3GPP Access and Non-3GPP Access. A communication terminal according to the present disclosure includes: a communication unit configured to communicate with gateway devices disposed in a preceding stage of a core network device via an Untrusted Non-3GPP Access; and a key derivation unit configured to derive a second security key used for security processing of a message transmitted using a defined protocol with the gateway device, from a first security key used for security processing of a message transmitted using a defined protocol with the core network device.