Secondary Cell Access Security Using Dynamic DRB ID Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication apparatuses face security risks when switching between secondary nodes due to the use of identical input parameters for security protection, leading to potential vulnerabilities in data transmission.
Innovation Solution
Implementing a method where different Data Radio Bearer (DRB) IDs are allocated to the same candidate cell during different access moments, using distinct root keys and DRB IDs for ciphering and integrity protection, ensuring unique security parameters for each access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the same input parameters are used for security protection when switching between secondary nodes, then the security configuration process is simple, but security risks increase due to identical security parameters
Solution Approach 1:
The patent changes the security parameter by introducing a secondary node identifier (SN ID) to modify the input parameters of the security protection algorithm. When switching between secondary nodes, the SN ID changes, which results in different security protection keys being generated even though the algorithm remains the same. This resolves the contradiction by maintaining parameter simplicity while ensuring security uniqueness.
2Reliability
If different DRB IDs are allocated for the same candidate cell at different access moments, then communication security is enhanced, but the complexity of security parameter management increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring multiple DRB IDs for each candidate cell before actual access occurs. When the communication apparatus accesses a candidate cell, it selects an appropriate DRB ID from the pre-configured list based on the access moment or other criteria. This allows different DRB IDs to be used at different access moments while maintaining manageable complexity through pre-planned configuration.
Solution Approach 2:
The patent introduces dynamics by making the DRB ID selection adaptive rather than fixed. The DRB ID used for security protection can dynamically change based on the access moment, candidate cell state, or security requirements. This dynamic selection mechanism enhances security while keeping the management complexity manageable through systematic selection rules.
Data Source
AI summary
This application provides a communication method and a communication apparatus, to improve communication security between the communication apparatus and a secondary node. The method includes: A reconfiguration message received by the communication apparatus from a network side includes configuration information of at least two candidate cells, and the at least two candidate cells include a first candidate cell and a second candidate cell. When accessing the first candidate cell, the communication apparatus selects an unused DRB ID from a plurality of DRB IDs carried in the configuration information of the first candidate cell, to protect communication data transmitted between the communication apparatus and the first candidate cell through a first DRB.