SRNS Relocation Key Derivation for Wireless Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless communication systems, particularly in WCDMA networks, lack the ability to efficiently change keys during handover processes, leading to security vulnerabilities as keys are exposed and difficult to manage, especially with the introduction of LTE standards which move key termination to more exposed base stations.
Innovation Solution
A method where a first node serving a mobile terminal maintains information about the mobile terminal's key management capabilities and modifies the key only if enhanced key management is supported, creating a new key that is sent to the second node during relocation, ensuring secure communication by matching keys on both network and mobile sides.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If keys are distributed to multiple base stations for communication security, then communication security is improved, but the risk of key exposure increases due to more accessible nodes
Solution Approach 1:
The system performs key derivation in advance during handover preparation, so that when handover occurs, the new key is already ready and the old key can be immediately discarded. This preliminary key derivation eliminates the window of vulnerability where keys might be exposed during transition.
Solution Approach 2:
The system changes the key parameter itself during handover by deriving a new key from the old key using a key derivation function. This parameter change ensures that even if an attacker compromises one base station, they cannot derive keys for other base stations, thus reducing key exposure risk while maintaining security.
2Reliability
If keys are changed at every handover to reduce exposure, then security is improved, but key management complexity increases
Solution Approach 1:
The system uses the existing key to automatically derive the new key through a deterministic key derivation function. This self-service mechanism eliminates the need for manual key distribution or complex key management infrastructure, reducing key management complexity while maintaining frequent key changes for security.
Solution Approach 2:
The key derivation function serves multiple purposes: it generates new keys for security, ensures backward compatibility with legacy systems, and works across different handover scenarios. This multi-functionality reduces overall system complexity by using a single mechanism for multiple objectives.
3Reliability
If enhanced key management capability is implemented, then key security during relocation is improved, but compatibility with legacy systems deteriorates
Solution Approach 1:
The system implements enhanced key management partially by using key derivation only when both the serving base station and mobile station support the enhanced capability. This partial application maintains security for capable devices while preserving compatibility with legacy systems that cannot perform key derivation.
Solution Approach 2:
The system dynamically adapts its key management approach based on the capabilities of the communicating parties. If enhanced key management is supported, key derivation is performed; otherwise, traditional key management is used. This dynamic behavior allows the system to optimize security when possible while maintaining universal compatibility.
Data Source
AI summary
A method that comprises maintaining, in a first node serving a mobile terminal over a connection protected by at least one first key, said first key and information about the key management capabilities of the mobile terminal. Upon relocation of the mobile terminal to a second node the method includes: if, and only if, said key management capabilities indicate an enhanced key management capability supported by the mobile terminal, modifying, by said first node, the first key, thereby creating a second key; sending, from the first node to the second node, the second key; and transmitting to the second node the information about the key management capabilities of the mobile terminal.