NAS-Based Security Key Refresh for UE-AF Wireless Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems, particularly in the context of 6G, face challenges in managing and updating security keys for user equipment (UE) and application functions (AF) to ensure secure communication, especially when the expiration time of security keys is reached.
Innovation Solution
A method and apparatus are introduced to manage security key updates by generating a master key at the authentication server function (AUSF) upon receiving a notification of key expiration, involving random number information exchange between the UE, AMF, and AUSF to refresh the security keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security keys are updated manually or through traditional methods, then security management is simple, but key update timeliness is poor and security reliability deteriorates when expiration is reached
Solution Approach 1:
The system performs preliminary actions by establishing key expiration monitoring mechanisms in advance. The AUSF and AMF are configured to track security key expiration times before they occur, enabling proactive key renewal initiation rather than reactive updates after expiration. This ensures continuous security validity without interruption.
Solution Approach 2:
The patent implements feedback mechanisms where the AUSF receives expiration notifications and automatically initiates key renewal procedures. The system continuously monitors key status and provides feedback loops between network functions (AUSF, AMF, UE) to ensure timely detection and response to key expiration conditions, maintaining security reliability.
2Loss of time
If automatic key renewal procedures are implemented, then key update timeliness is improved, but system complexity increases due to additional messaging and coordination
Solution Approach 1:
The patent leverages existing multi-functional network elements to perform key renewal tasks. The AUSF, which already handles authentication, is extended to also manage key expiration monitoring and renewal initiation. The AMF's existing role in mobility management is augmented with key update coordination functions. This avoids adding dedicated new components, reducing overall system complexity while achieving automatic renewal.
Solution Approach 2:
The patent merges key expiration monitoring, renewal decision-making, and execution into a coordinated workflow between existing network functions. Instead of separate independent mechanisms, the system combines these functions into an integrated process where AUSF, AMF, and UE work together using extended versions of existing messaging procedures, reducing the need for additional separate systems.
3Reliability
If frequent key updates are performed, then security reliability is improved, but network signaling overhead and energy consumption increase
Solution Approach 1:
The system implements periodic key updates based on predetermined expiration times rather than continuous or frequent updates. Security keys are renewed at regular intervals determined by their configured validity periods, allowing the system to balance security requirements with resource consumption. This periodic approach ensures keys are updated sufficiently often to maintain security while avoiding unnecessary frequent updates that would waste energy.
Solution Approach 2:
The patent dynamically adjusts key update parameters such as validity periods and renewal timing based on security requirements and network conditions. By optimizing these parameters, the system achieves adequate security protection while minimizing unnecessary signaling and energy consumption associated with overly frequent updates.
Data Source
AI summary
The present disclosure relates to a technique of supporting security in a wireless communication system. According to an embodiment of the disclosure, in case that a master key of a security key is generated at an authentication server function (AUSF) according to a message for notifying about expiration of the security key used in communication between the UE and an application function (AF) being received at the AUSF, the UE may receive an authentication request message including random number information used in generation of the masker key from an access and mobility management function (AMF) connected to the AUSF, may transmit an authentication request response message, based on reception of the authentication request message, and may generate the master key, based on the received random number information, wherein the authentication request message is transmitted from the AMF to the UE when a key refresh triggering message including the random number information is received by the AMF from the AUSF.