Patent ID: 9641494
Date: 2017-05-02
CPC Classifications: H04L,H04W

Claim:
1. A method, as executed in a service control node in a communication network comprising a plurality of service points, of providing keys for protecting communication between a terminal and said plurality of service points, the method comprising: establishing a basic key for the terminal and initializing a key version parameter corresponding to the terminal, to an initial value known by the service control node and the terminal, during a registration procedure when the terminal has entered the communication network; creating a modified key by applying a predetermined function to at least the basic key and the initial value of the key version parameter, when the terminal starts a communication session, wherein the service control node generates the modified key in a same manner as the terminal, and does not receive the modified key or the initial value; sending the modified key to a first service point among the plurality of service points to which the terminal is attached, the modified key being used to protect communication between the terminal and the first service point; after creating said modified key, updating said key version parameter by applying a predetermined scheme to the initial value of the key version parameter to obtain an updated value of the key version parameter, said key version parameter thereby being updated in a same way as it is updated by the terminal; receiving a key request from a key requesting service point among the plurality of service points to which the terminal is attached; creating a new modified key by applying said predetermined function to at least the basic key and said updated value of said key version parameter, wherein the service control node generates the new modified key in the same manner as the terminal, and does not receive the new modified key or the updated value of the key version parameter; sending the new modified key to the key requesting service point, the new modified key being then used to protect communication between the terminal and the key requesting service point.