SESSION KEY GENERATION AND DISTRIBUTION WITH MULTIPLE SECURITY ASSOCIATIONS PER PROTOCOL INSTANCE

摘要

A single instance of a session key generation protocol is executed in a manner that generates a plurality of security associations between user equipment and a first network element of a communication system. In one aspect, a first one of the security associations is utilized to secure data sent between the user equipment and the first network element in an ongoing communication. In conjunction with a handoff of the ongoing communication from the first network element to a second network element of the communication system, another one of the security associations is selected, and the other selected security association is utilized to secure data sent between the user equipment and the second network element in the ongoing communication. The security associations may comprise respective sets of session keys derived from a single pairwise master key.

主权项

1. A method comprising:
executing in user equipment of a communication system a designated portion of a single instance of a session key generation protocol in order to generate a plurality of security associations between the user equipment and a first network element of the communication system; utilizing a first one of the security associations to secure data sent between the user equipment and the first network element in an ongoing communication; in conjunction with a handoff of the ongoing communication from the first network element to a second network element, selecting another one of the security associations, and utilizing the selected other one of the security associations to secure data sent between the user equipment and the second network element in the ongoing communication.