Systems, apparatus and methods to facilitate handover security

摘要

Systems, methods and apparatus for facilitating handover security are provided. In some embodiments, the method can include deriving a key value for handover from a GERAN/UTRAN system to an E-UTRAN system using a first input value. The method can also include deriving a key value for a connection establishment using a second input value, wherein the first input value is different from the second input value and is different from input values derived subsequent to the second input value, and wherein the first input value, the second input value and the input values derived subsequent to the second input value are configured to be input to a same key derivation function configured to output a key for use between a network entity and user equipment.

主权项

1. A method to facilitate handover security, the method comprising:
deriving a key value using a key derivation function (KDF) for handover from a Global System for Mobile Communications Enhanced Data rates for GSM Evolution Radio Access Network/Universal Terrestrial Radio Access Network (“GERAN/UTRAN”) to an Evolved Universal Terrestrial Radio Access Network (“E-UTRAN”) system using a first input value; performing the handover using the key value derived using the first input value; and deriving a key value using the KDF for a connection establishment using a second input value, wherein the first input value is different from the second input value and is different from input values derived subsequent to the second input value, and establishing the connection using the key value derived using the second input value; wherein the first input value, the second input value and the input values derived subsequent to the second input value are input to a same key derivation function that outputs a key for use between a network entity and user equipment during the handover and connection establishment; and wherein the first input value and the second input value are indicative of uplink non-access stratum count values, the second input value and the input values derived subsequent to the second input value are values within a range of [0,224], and the first input value is a value outside of the range of [0,224].