METHOD, APPARATUS, AND SYSTEM FOR PROVIDING ENCRYPTION OR INTEGRITY PROTECTION IN A WIRELESS NETWORK

摘要

A method in a core network node (105a/117a/117b) for establishing encryption or integrity protection is presented. The core network node (105a/117a/117b) identifies a non-USIM based authentication procedure to be utilized by a wireless communication device, WCD (902), being served by the core network node (105a/117a/117b). The node obtains a session key associated with the identified non-USIM based authentication procedure. The node converts the session key associated with the identified non-USIM based authentication procedure to at least one of: i) a first key, K1 for use by the WCD (902) and a base station (103) serving the WCD (902) to derive an encryption or integrity protection key, Kenc/int, for enabling encryption or integrity protection of a communication between the WCD (902) and the base station (103) and ii) a second key, K2, for use by the WCD (902) and the core network node (105a/117a/117b) to derive the first key K1. The node performs at least one of: i) sending K1 to the base station (103) and ii) sending K2 to another core network node (105a) that is configured to derive K1 from K2. K1 and K2 each has a length that is at least one of the following: i) equal to a length of an evolved packet system authentication and key agreement (EPS AKA) key, and ii) different than a length of the session key.