Patent ID: 11889304
Assignee: NOKIA SOLUTIONS AND NETWORKS OY
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method comprising:
requesting, by a security anchor function or a common control network function, authentication of a user equipment with an authentication server;
in an instance in which the authentication by the authentication server is successful, receiving, at the security anchor function or the common control network function, during an authentication and key agreement protocol, from the authentication server, authentication vectors comprising a particular master key from among a plurality of master keys and authentication parameters;
storing, at the security anchor function or the common control network function, the particular master key and the authentication parameters;
verifying, at the security anchor function or the common control network function, validity of the authentication parameters;
in an instance in which the verification has been successful, instantiating, by the security anchor function or the common control network function, a security context for the user equipment and assigning a security context identifier for next generation system security context to the user equipment;
sending, from the security anchor function or the common control network function, to the user equipment, a security mode command message to instruct the user equipment to instantiate a non-access stratum (NAS) security context using the security context identifier,
wherein the security context identifier comprises a next generation key set identifier (NG-KSI) that is usable by the user equipment and the security anchor function or the common control network function to identify the NAS security context during mobility events without the security anchor function or the common control network function providing the authentication parameters to the user equipment, and
wherein the NG-KSI comprises a first field indicating an assigned index value and a second field indicating a type of security context parameter, wherein the second field further indicates whether a next generation security context is a native next generation security context derived out of next generation authentication of the user equipment or a mapped next generation security context derived out of a non-next generation authentication of the user equipment; and
receiving, at the security anchor function or the common control network function, from the user equipment, in response to the security mode command message, a security mode command acceptance message indicating that the user equipment has instantiated the NAS security context using the NG-KSI.