RAN Notification Area Security Algorithm Configuration for 5G Integrity Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a 5G network environment, when a User Equipment (UE) transitions from an RRC_INACTIVE state to an RRC_CONNECTED state, the current serving base station may not support the security algorithm used by the anchor base station, leading to challenges in performing integrity protection on RRC connection resume messages.
Innovation Solution
A method where a first base station configures a RAN notification area with a security algorithm supported by all base stations, ensuring that both the first and second base stations can perform integrity security protection on RRC connection resume messages, and the terminal can verify these messages using the same algorithm, with a fallback algorithm available if necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the anchor base station uses a security algorithm selected for the UE, then security protection is performed, but the current serving base station may not support this algorithm and cannot perform integrity protection
Solution Approach 1:
The network side performs preliminary configuration by pre-defining a mapping relationship between RAN notification areas and security algorithms. When configuring the UE with a RAN notification area, the network side simultaneously configures a specific security algorithm that is guaranteed to be supported by all base stations in that area. This preliminary action ensures that when the UE moves to any base station within the configured area, the integrity protection can be performed without algorithm compatibility issues.
2Adaptability or versatility
If the UE moves to a different base station in the RAN notification area, then mobility is supported, but the serving base station may not support the original security algorithm
Solution Approach 1:
The patent applies local quality by making the security algorithm configuration local to each RAN notification area. Each RAN notification area is associated with a specific security algorithm that is suitable for all base stations within that area. When the UE moves to a different base station, it remains within the same RAN notification area, so the locally configured security algorithm continues to be supported, ensuring both mobility and integrity protection.
3Area of stationary object
If a RAN notification area is configured with multiple base stations, then coverage area is expanded, but not all base stations may support the same security algorithm
Solution Approach 1:
Before the UE enters the RAN notification area, the network side performs preliminary configuration by pre-defining the mapping relationship between the RAN notification area and a specific security algorithm. This ensures that all base stations within the coverage area are pre-configured to support the designated algorithm, eliminating compatibility issues when the UE moves within the area.
Data Source
AI summary
Disclosed are a method and device for determining a security algorithm, and a computer storage medium. The method comprises: a first base station configures an RAN notification area for a terminal, wherein all base stations in the RAN notification area at least support a first security algorithm; the first base station configures the terminal for the first security algorithm.