Patent ID: 11889304
Assignee: NOKIA SOLUTIONS AND NETWORKS OY
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 5:
6. A method comprising:
sending, from a user equipment, to an access node of a communication system, an attach request;
after authentication verification of the user equipment at an authentication server of the communication system, receiving, at the user equipment, from a security anchor function or a common control network function of the communication system, via the access node, a security mode command message, wherein the security mode command message comprises a security context identifier for a next generation system security context;
instantiating, at the user equipment, a non-access stratum (NAS) security context using the security context identifier; and
sending, from the user equipment, to the access node, a security mode command acceptance message indicating that the user equipment has instantiated the NAS security context using the security context identifier,
herein the security context identifier comprises a next generation key set identifier (NG-KSI) that is usable by the user equipment and the security anchor function or the common control network function to identify the NAS security context during mobility events without the user equipment receiving authentication parameters from the security anchor function or the common control network function, and
wherein the NG-KSI comprises a first field indicating an assigned index value and a second field indicating a type of security context parameter, wherein the second field further indicates whether a next generation security context is a native next generation security context derived out of next generation authentication of the user equipment or a mapped next generation security context derived out of a non-next generation authentication of the user equipment.