Security Credential Handling in 5G Cell Reselection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In wireless communication systems, especially in 5G networks, the process of updating security credentials during cell reselection introduces latency and disrupts seamless data communication due to the involvement of the core network in signaling procedures.

Innovation Solution

A method and apparatus that utilize an intermediate radio resource control state to initiate and manage security credential updates within the radio access network, allowing communication devices to transition between cells using existing security configurations and minimizing signaling with the core network, thereby enabling seamless data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security credentials are updated through core network signaling during cell reselection, then security configuration is updated, but communication latency increases and seamless data transmission is disrupted

Engineering Contradiction:
Improvesecurity configuration updateVSAvoidcommunication latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent introduces an intermediate signaling mechanism where security credential information is transmitted through the radio access network (base station) rather than directly through core network signaling. The base station acts as an intermediary that receives security information from the core network and forwards it to the communication device during cell reselection, thereby maintaining security updates while reducing latency and avoiding disruption to seamless data transmission.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If core network signaling is used for security credential updates during handover, then security credentials are updated, but seamless data communication is prevented

Engineering Contradiction:
Improvesecurity credential updateVSAvoidseamless data communication
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the security update process into two independent parts: (1) core network to base station signaling for security credential delivery, and (2) base station to communication device signaling for credential transmission. This segmentation allows the security update to occur through the radio access network infrastructure without requiring interruption of the data communication path, thereby maintaining seamless data transmission while achieving security credential updates.

Inventive Principle:
Principle #1Segmentation

3Reliability

If extensive core network signaling is performed during cell reselection, then security configuration is updated, but latency is introduced

Engineering Contradiction:
Improvesecurity configurationVSAvoidsignaling latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by having the base station pre-configure security parameters and maintain security context information before cell reselection occurs. The base station prepares security credential updates in advance and can quickly transmit them to the communication device during handover, reducing the need for extensive real-time core network signaling and thereby minimizing latency while ensuring security configuration is properly updated.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3479614B1Secure communications
Publication Date: 2024.10.16 NOKIA TECHNOLOGIES OY
  • EP3479614B1 patent drawingFigure 1
  • EP3479614B1 patent drawingFigure 2~3
  • EP3479614B1 patent drawingFigure 4

AI summary

Methods and apparatus for handling a security aspect after cell reselection are disclosed. In a method a cell reselection is determined at a communication device that is in an intermediate radio resource control state where the communication device is inactive but connected to a radio access system. Subsequent to the determining, communication of security credential information is initiated with a selected cell of the radio access system while the communication device is in the intermediate radio resource control state. Communications with the selected cell are based on a security configuration according to the security credential information.