MUTUAL AUTHENTICATION BETWEEN USER EQUIPMENT AND AN EVOLVED PACKET CORE

    公开(公告)号:US20190110203A1

    公开(公告)日:2019-04-11

    申请号:US16210721

    申请日:2018-12-05

    Abstract: Methods and apparatuses are provided for operations in a wireless communication system. A universal subscriber identity module (USIM) application is identified that is configured with security credentials comprising an isolated evolved universal mobile telecommunications system terrestrial radio access network (E-UTRAN) operation for public safety (IOPS) identity and an access class for an IOPS operation. An authentication procedure is performed with an evolved node B (eNB) based on the security credentials. The security credentials are a distinct set of security credentials for the IOPS operation separate from those used for a normal operation.

    SYSTEM AND METHOD FOR VALIDATING AUTHENTICITY OF BASE STATION AND/OR INFORMATION RECEIVED FROM BASE STATION

    公开(公告)号:US20170295489A1

    公开(公告)日:2017-10-12

    申请号:US15480847

    申请日:2017-04-06

    Abstract: A communication method and a system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for internet of things (IoT) are provided. The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A system and a method for validating authenticity of a base station and/or information received from the base station are provided. The method for determining authenticity of system information received from a base station and a cell operated by the base station includes receiving, from a base station, system information, receiving, from a base station, system information, receiving, from the base station, first authenticity information associated with the system information, determining whether the system information is authentic based on the first authenticity information, and determining that a cell operated by the base station is authentic if the system information is authentic.

    METHOD AND SYSTEM TO ENABLE SECURE COMMUNICATION FOR INTER-ENB TRANSMISSION
    33.
    发明申请
    METHOD AND SYSTEM TO ENABLE SECURE COMMUNICATION FOR INTER-ENB TRANSMISSION 有权
    实现安全通信用于中间传输的方法和系统

    公开(公告)号:US20160044506A1

    公开(公告)日:2016-02-11

    申请号:US14781450

    申请日:2014-09-11

    Abstract: The embodiments herein provide a method and system for creating a secure connection for a User Equipment (UE) in a wireless network including a UE, carrier aggregated with at least one first serving frequency served by a first eNB and at least one second serving frequency served by a second eNB. A unique non-repetitive security base key associated with the second eNB is generated using a freshness parameter and security key associated with the first eNB. The use of a different freshness parameter for each security base key derivation avoids key stream repetition. Further, a user plane encryption key is derived based on the generated unique non-repetitive security base key associated with the second eNB for encrypting data transfer over at least one data radio bearer.

    Abstract translation: 这里的实施例提供了一种用于在无线网络中为用户设备(UE)创建安全连接的方法和系统,该无线网络包括UE,由第一eNB服务的至少一个第一服务频率和服务的至少一个第二服务频率聚合的载波 由第二eNB。 使用与第一eNB相关联的新鲜度参数和安全密钥来生成与第二eNB相关联的唯一的非重复安全基础密钥。 对于每个安全基础密钥导出使用不同的新鲜度参数避免了密钥流重复。 此外,基于与第二eNB相关联的所生成的唯一非重复安全基础密钥来导出用户平面加密密钥,用于通过至少一个数据无线电承载来加密数据传输。

    METHOD AND SYSTEM FOR PROVIDING SIMULTANEOUS CONNECTIVITY BETWEEN MULTIPLE E-NODEBS AND USER EQUIPMENT
    35.
    发明申请
    METHOD AND SYSTEM FOR PROVIDING SIMULTANEOUS CONNECTIVITY BETWEEN MULTIPLE E-NODEBS AND USER EQUIPMENT 有权
    提供多个E-NODEBS与用户设备之间同时连接的方法和系统

    公开(公告)号:US20140241317A1

    公开(公告)日:2014-08-28

    申请号:US14188274

    申请日:2014-02-24

    CPC classification number: H04W76/15 H04L5/0032 H04W36/28 H04W40/36

    Abstract: A method and a system for providing simultaneous transmission and reception across multiple evolved NodeBs (eNBs) from a User Equipment (UE) in a Long Term Evolution (LTE) network are provided. The method includes establishing a first connection between the UE and a core network through a Serving-eNB (S-eNB), considering at least one Target-eNB (T-eNB) for at least one connection between the UE and a Packet Data Network (PDN), determining availability of the T-eNB, wherein the determining of the availability of the at least one T-eNB is triggered based on available resource in the S-eNB and the T-eNB, and establishing at least one connection between the UE and the PDN through one or more T-eNBs, at least one Serving-GateWay (S-GW), and at least one PDN gateway.

    Abstract translation: 提供了一种用于在长期演进(LTE)网络中的用户设备(UE)提供跨多个演进的节点B(eNB)同时发送和接收的方法和系统。 该方法包括:通过服务eNB(S-eNB)建立UE与核心网之间的第一连接,考虑到至少一个Target-eNB(T-eNB)用于UE与分组数据网络 (PDN),确定所述T-eNB的可用性,其中基于所述S-eNB和所述T-eNB中的可用资源来触发确定所述至少一个T-eNB的可用性,以及建立至少一个T-eNB之间的至少一个连接 UE和PDN通过一个或多个T-eNB,至少一个Serving-GateWay(S-GW)和至少一个PDN网关。

    METHOD AND SYSTEM FOR OPTIMIZING AKMA KEY REFRESH MECHANISM IN WIRELESS NETWORK

    公开(公告)号:US20240397317A1

    公开(公告)日:2024-11-28

    申请号:US18794590

    申请日:2024-08-05

    Abstract: The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). A method performed by a user equipment (UE) in a wireless network, the method comprising: establishing a communication with an application function (AF) server using a first authentication and key management for applications (AKMA) application key (KAF); receiving a message over the established communication from the AF server, the message indicating that a lifetime of the first KAF has expired; and configuring a back-off flag in the UE to optimize an AKMA key refresh mechanism in the wireless network in response to receiving the message, wherein the back-off flag prevents a request for a first AKMA anchor key (KAKMA) until a fresh primary authentication is performed.

    APPARATUS AND METHOD FOR COMMUNICATION ESTABLISHMENT IN AUTHENTICATION AND KEY MANAGEMENT FOR APPLICATIONS (AKMA)

    公开(公告)号:US20240292212A1

    公开(公告)日:2024-08-29

    申请号:US18573219

    申请日:2022-07-28

    CPC classification number: H04W12/0433 H04L5/0053 H04W12/06 H04W12/106

    Abstract: The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein provide a system and method for key refresh in Authentication and Key Management for Applications (AKMA). The proposed method is to support KAKMA refresh by requesting the refreshing parameters from the network once the KAF is about to expire. Further, the proposed method is to support KAF refresh by requesting the refreshing parameters from the network once the KAF is about to expire. Further, the proposed method is used to support a mechanism to address the Key synchronisation issue at a User Equipment (UE) side, an Application Function (AF) side and at an AAnF using a key index included as a part of AKMA key identifier (A-KID). Further the proposed method uses certain mechanisms to provide the refresh parameter to the AUSF, the AAnF and the UE as a part of AKMA Refresh procedure or as a part of UPU procedure. Further, the proposed method supports AKMA key refresh with limited impacts on AKMA services in 5G system.

    METHODS AND SYSTEMS FOR RESTRICTED SERVICE ACCESS BETWEEN NETWORK FUNCTIONS IN WIRELESS NETWORK

    公开(公告)号:US20240121610A1

    公开(公告)日:2024-04-11

    申请号:US18276191

    申请日:2022-02-14

    CPC classification number: H04W12/084

    Abstract: The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein disclose a method for providing restricted service access in a wireless network by a first network entity (i.e., target AMF entity (400)). The method includes requesting a NRF entity (600) to grant an access-token to access a second network entity (i.e., initial AMF entity (300)). Further, the method includes receiving a message comprising a restricted service access to the second network entity based on the access-token. Further, the method includes sending a restricted UE context transfer request to the second network entity based on the message comprising the restricted service access. Further, the method includes receiving a UE context transfer response from the second network entity based on the restricted UE context transfer request.

Patent Agency Ranking