Patent ID: 11924629
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method implemented by an apparatus in a communication system, the method comprising:
generating an intermediate key based on a cipher key (CK), an integrity key (IK), and an operator type identifier comprising a service network (SN) identifier;
generating an anchor key based on the intermediate key;
generating a key (Kamf) based on the anchor key;
deriving a base station key based on the Kamf; and
deriving, based on the base station key, a user plane cipher key for performing encryption protection on user plane data, a user plane integrity key for performing integrity protection on the user plane data, a control plane cipher key for performing encryption protection on control plane data, and a control plane integrity key for performing integrity protection on the control plane data,
wherein the intermediate key is shared between the apparatus and an authentication server of the communication system, the anchor key is shared between the apparatus and a security anchor of the communication system, and the Kamf is shared between the apparatus and an access and mobility control function network element of the communication system.