Patent Description:
To meet the increasing demand for wireless data traffic after commercialization of <NUM> th generation (<NUM>) communication systems, efforts have been made to develop <NUM> th generation (<NUM>) or pre-<NUM> communication systems. For this reason, <NUM> or pre-<NUM> communication systems are called 'beyond <NUM> network' communication systems or 'post-long-term evolution (post-LTE) systems. <NUM> communication systems defined by the <NUM> rd generation partnership project (3GPP) are called New Radio (NR) systems. To achieve high data rates, implementation of <NUM> communication systems in an ultra-high frequency or millimeter-wave (mmWave) band (e.g., a <NUM>-GHz band) is being considered. To reduce path loss and increase a transmission distance in the ultra-high frequency band for <NUM> communication systems, various technologies such as beamforming, massive multiple-input multiple-output (massive MIMO), full-dimensional MIMO (FD-MIMO), array antennas, analog beamforming, and large-scale antennas are being studied and applied to NR systems. To improve system networks for <NUM> communication systems, various technologies such as evolved small cells, advanced small cells, cloud radio access networks (cloud RAN), ultra-dense networks, device-to-device communication (D2D), wireless backhaul, moving networks, cooperative communication, coordinated multi-points (CoMP), and interference cancellation have been developed. In addition, for <NUM> communication systems, advanced coding modulation (ACM) technologies such as hybrid frequency-shift keying (FSK) and quadrature amplitude modulation (QAM) (hybrid FSK and QAM (FQAM)) and sliding-window superposition coding (SWSC), and advanced access technologies such as filter bank multi-carrier (FBMC), non-orthogonal multiple access (NOMA), and sparse code multiple access (SCMA), have been developed.

The internet has evolved from a human-based connection network, where humans create and consume information, to the internet of things (IoT), where distributed elements such as objects exchange information with each other to process the information. Internet of everything (IoE) technology, in which the IoT technology is combined with, for example, technology for processing big data through connection with a cloud server, is emerging. To implement the IoT, various technological elements such as sensing technology, wired/wireless communication and network infrastructures, service interface technology, and security technology are required. In recent years, technologies related to sensor networks for connecting objects, machine-to-machine (M2M) communication, and machine-type communication (MTC) have been studied. In the IoT environment, intelligent internet technology (IT) services may be provided to collect and analyze data obtained from connected objects to create new value in human life. As existing information technology (IT) and various industries converge and combine with each other, the IoT may be applied to various fields such as smart homes, smart buildings, smart cities, smart cars or connected cars, smart grids, health care, smart home appliances, and advanced medical services.

Various attempts are being made to apply <NUM> communication systems to the IoT network. For example, technologies related to sensor networks, M2M communication, MTC, etc. are being implemented by using <NUM> communication technology including beamforming, MIMO, array antennas, etc. The application of Cloud-RAN as the above-described big data processing technology may be an example of the convergence of <NUM> communication technology and IoT technology.

Because various services may be provided due to the development of mobile communication systems, methods capable of effectively providing these services are required.

Prior art is known from 3GPPP TS <NUM> V1. <NUM> which discloses principles for the handling of <NUM> NAS security contexts in a user equipment, UE, and in an access and mobility management function, AMF, and the procedures used for the security protection of NAS messages between the UE and the AMF.

In accordance with an aspect of the disclosure, a method of performing a security mode control procedure by a user equipment (UE) is provided. The method includes performing, over a <NUM> rd generation partnership project (3GPP) access, a first authentication procedure and a first key agreement procedure with an access and mobility management function (AMF), wherein a key set identifier (ngKSI) is changed during the first authentication procedure and the first key agreement procedure, receiving, from the AMF over the 3GPP access, a first security mode command message including the ngKSI, and receiving, from the AMF over a non-3GPP access, a second security mode command message including the ngKSI, wherein the UE is registered to the AMF and a same public land mobile network (PLMN) over both the 3GPP access and the non-3GPP access.

While describing embodiments of the disclosure, technical content that is well-known in the art and not directly related to the disclosure will not be provided. By omitting redundant descriptions, the essence of the disclosure will not be obscured and may be clearly explained.

For the same reasons, elements may be exaggerated, omitted, or schematically illustrated in the drawings for clarity. Also, the size of each element does not completely reflect a real size thereof. In the drawings, like reference numerals denote like elements.

One or more embodiments of the disclosure and methods of accomplishing the same may be understood more readily by reference to the following detailed description of the embodiments of the disclosure and the accompanying drawings. In this regard, the embodiments of the disclosure may have different forms and should not be construed as being limited to the descriptions set forth herein. Rather, these embodiments of the disclosure are provided so that this disclosure will be thorough and complete and will fully convey the concept of the embodiments of the disclosure to one of ordinary skill in the art, and the disclosure will only be defined by the appended claims.

It will be understood that blocks in flowcharts or combinations of the flowcharts may be performed by computer program instructions. Because these computer program instructions may be loaded into a processor of a general-purpose computer, a special-purpose computer, or another programmable data processing apparatus, the instructions, which are performed by a processor of a computer or another programmable data processing apparatus, create units for performing functions described in the flowchart block(s). The computer program instructions may be stored in a computer-usable or computer-readable memory capable of directing a computer or another programmable data processing apparatus to implement a function in a particular manner, and thus the instructions stored in the computer-usable or computer-readable memory may also be capable of producing manufacturing items containing instruction units for performing the functions described in the flowchart block(s). The computer program instructions may also be loaded into a computer or another programmable data processing apparatus, and thus, instructions for operating the computer or the other programmable data processing apparatus by generating a computer-executed process when a series of operations are performed in the computer or the other programmable data processing apparatus may provide operations for performing the functions described in the flowchart block(s).

In addition, each block may represent a portion of a module, segment, or code that includes one or more executable instructions for executing specified logical function(s). It should also be noted that, in some alternative implementations, functions mentioned in blocks may occur out of order. For example, two consecutive blocks may also be executed simultaneously or in reverse order depending on functions corresponding thereto.

As used herein, the term "unit" denotes a software element or a hardware element such as a field-programmable gate array (FPGA) or an application-specific integrated circuit (ASIC), and performs a certain function. However, the term "unit" is not limited to software or hardware. The "unit" may be formed so as to be in an addressable storage medium, or may be formed so as to operate one or more processors. Thus, for example, the term "unit" may include elements (e.g., software elements, object-oriented software elements, class elements, and task elements), processes, functions, attributes, procedures, subroutines, segments of program code, drivers, firmware, micro-codes, circuits, data, a database, data structures, tables, arrays, or variables. Functions provided by the elements and "units" may be combined into the smaller number of elements and "units", or may be divided into additional elements and "units". Furthermore, the elements and "units" may be embodied to reproduce one or more central processing units (CPUs) in a device or security multimedia card. Also, the "unit" may include at least one processor.

In the following description, terms identifying access nodes, terms indicating network entities, terms indicating messages, terms indicating interfaces between network entities, terms indicating various types of identification information, etc. are merely selected for convenience of explanation. Therefore, the disclosure is not limited to these terms and other terms having technically equivalent meanings may also be used.

To facilitate explanation, the disclosure uses terms and names defined in the <NUM> th generation (<NUM>) or New Radio (NR), and long-term evolution (LTE) communication standards. However, the disclosure is not limited to these terms and names and may be equally applied to systems conforming to other standards.

That is, although embodiments of the disclosure will be described mainly based on the communication standards of the <NUM> rd generation partnership project (3GPP), it will be understood by one of ordinary skill in the art that the main concept of the disclosure may be slightly modified and applied to other communication systems having similar technical backgrounds without departing from the scope of the disclosure.

In a <NUM> or NR system, an access and mobility management function (AMF) serving as an entity for managing user equipment (UE) mobility is separate from a session management function (SMF) serving as an entity for managing sessions. As such, unlike a <NUM> th generation (<NUM>) LTE system in which a mobility management entity (MME) manages both mobility and sessions, a mobility management entity is separate from a session management entity and thus a communication scheme and a communication management scheme between a UE and a network entity are changed.

In the <NUM> or NR system, for a non-3GPP access, mobility management is performed though a N3 interworking function (N3IWF) and the AMF and session management is performed through the SMF.

Therefore, a method of protecting information used for communication between a UE and a network not only via a 3GPP access but also via a non-3GPP access when an AMF is separate from a SMF, and of creating, storing, updating, and managing security-related context is required.

As such, the disclosure proposes a method and apparatus related to creation, storage, updating, and management of security context used for security protection of a UE and a network entity in a mobile communication system.

Accordingly, an aspect of the disclosure is to provide an apparatus and method capable of effectively providing services in a mobile communication system.

In accordance with an aspect of the disclosure, a method of performing a security mode control procedure by a user equipment (UE) is provided. The method includes performing, over a <NUM> rd generation partnership project (3GPP) access, a first authentication procedure and a first key agreement procedure with an access and mobility management function (AMF), wherein a key set identifier (ngKSI) is changed during the first authentication procedure and the first key agreement procedure, receiving, from the AMF over the 3GPP access, a first security mode command message including the ngKSI, and receiving, from the AMF over a non-3GPP access, a second security mode command message including the ngKSI, wherein the UE is registered to the AMF and a same public land mobile network (PLMN) over both the 3GPP access and the non-3GPP access.

The ngKSI may correspond to security context changed based on the first authentication procedure and the first key agreement procedure.

The method may further include transmitting, to the AMF, a first security mode complete message in response to the first security mode command message, and transmitting, to the AMF, a second security mode complete message in response to the second security mode command message.

The method may further include performing, over a non-3GPP access, a second authentication procedure and a second key agreement procedure with the AMF, wherein a ngKSI is changed during the second authentication procedure and the second key agreement procedure, receiving, from the AMF over the non-3GPP access, a third security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure, and receiving, from the AMF over a 3GPP access, a fourth security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure.

The ngKSI changed during the second authentication procedure and the second key agreement procedure may correspond to security context changed based on the second authentication procedure and the second key agreement procedure.

According to another embodiment of the disclosure, a user equipment (UE) includes a transceiver, and at least one controller (e.g., at least one processor) connected to the transceiver and configured to perform, over a <NUM> rd generation partnership project (3GPP) access, a first authentication procedure and a first key agreement procedure with an access and mobility management function (AMF), wherein a key set identifier (ngKSI) is changed during the first authentication procedure and the first key agreement procedure, receive, from the AMF over the 3GPP access, a first security mode command message including the ngKSI, and receive, from the AMF over a non-3GPP access, a second security mode command message including the ngKSI, wherein the UE is registered to the AMF and a same public land mobile network (PLMN) over both the 3GPP access and the non-3GPP access.

The at least one controller may be further configured to transmit, to the AMF, a first security mode complete message in response to the first security mode command message, and transmit, to the AMF, a second security mode complete message in response to the second security mode command message.

The at least one controller may be further configured to perform, over a non-3GPP access, a second authentication procedure and a second key agreement procedure with the AMF, wherein a ngKSI is changed during the second authentication procedure and the second key agreement procedure, receive, from the AMF over the non-3GPP access, a third security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure, and receive, from the AMF over a 3GPP access, a fourth security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure.

In accordance with another aspect of the disclosure, a method of performing a security mode control procedure by an access and mobility management function (AMF) includes performing, over a <NUM> rd generation partnership project (3GPP) access, a first authentication procedure and a first key agreement procedure with a user equipment (UE), wherein a key set identifier (ngKSI) is changed during the first authentication procedure and the first key agreement procedure, transmitting, to the UE over the 3GPP access, a first security mode command message including the ngKSI, and transmitting, to the UE over a non-3GPP access, a second security mode command message including the ngKSI, wherein the UE is registered to the AMF and a same public land mobile network (PLMN) over both the 3GPP access and the non-3GPP access.

The method may further include receiving, from the UE, a first security mode complete message in response to the first security mode command message, and receiving, from the UE, a second security mode complete message in response to the second security mode command message.

The method may further include performing, over a non-3GPP access, a second authentication procedure and a second key agreement procedure with the UE, wherein a ngKSI is changed during the second authentication procedure and the second key agreement procedure, transmitting, to the UE over the non-3GPP access, a third security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure, and transmitting, to the UE over a 3GPP access, a fourth security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure.

In accordance with another embodiment of the disclosure, an access and mobility management function (AMF) includes a transceiver, and at least one controller connected to the transceiver and configured to perform, over a <NUM> rd generation partnership project (3GPP) access, a first authentication procedure and a first key agreement procedure with a user equipment (UE), wherein a key set identifier (ngKSI) is changed during the first authentication procedure and the first key agreement procedure, transmit, to the UE over the 3GPP access, a first security mode command message including the ngKSI, and transmit, to the UE over a non-3GPP access, a second security mode command message including the ngKSI, wherein the UE is registered to the AMF and a same public land mobile network (PLMN) over both the 3GPP access and the non-3GPP access.

The at least one controller may be further configured to receive, from the UE, a first security mode complete message in response to the first security mode command message, and receive, from the UE, a second security mode complete message in response to the second security mode command message.

The at least one controller may be further configured to perform, over a non-3GPP access, a second authentication procedure and a second key agreement procedure with the UE, wherein a ngKSI is changed during the second authentication procedure and the second key agreement procedure, transmit, to the UE over the non-3GPP access, a third security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure, and transmit, to the UE over a 3GPP access, a fourth security mode command message including the ngKSI changed during the second authentication procedure and the second key agreement procedure.

<FIG> is a diagram illustrating a network environment to which a security protection method and apparatus, according to an embodiment of the disclosure.

Referring to <FIG>, a wireless communication system is assumed as a <NUM> or NR system. Referring to <FIG>, the wireless communication system may include entities such as a user plane function (UPF) 2a-<NUM>, a session management function (SMF) 2a-<NUM>, an access and mobility management function (AMF) 2a-<NUM>, a <NUM> radio access network (RAN) 2a-<NUM>, a user data management (UDM) 2a-<NUM>, and a policy control function (PCF) 2a-<NUM>. To authenticate the above-mentioned entities, the wireless communication system may include entities such as an authentication server function (AUSF) 2a-<NUM> and an authentication, authorization and accounting (AAA) 2a-<NUM>.

For communication of a user equipment (UE) 2a-<NUM> via a non-3GPP access 2a-<NUM>, the wireless communication system may include a N3 interworking function (N3IWF) 2a-<NUM>. When the UE 2a-<NUM> communicates via the non-3GPP access 2a-<NUM>, session management is controlled by the UE 2a-<NUM>, the non-3GPP access 2a-<NUM>, the N3IWF 2a-<NUM>, and the SMF 2a-<NUM>, and mobility management is controlled by the UE 2a-<NUM>, the non-3GPP access 2a-<NUM>, the N3IWF 2a-<NUM>, and the AMF 2a-<NUM>.

Although the wireless communication system is assumed as a <NUM> or NR system in <FIG>, embodiments of the disclosure are not limited thereto and are also applicable to other systems as far as one of ordinary skill in the art may understand.

<FIG> is a flowchart of a security protection method according to an embodiment of the disclosure.

Referring to <FIG>, initially, in operations <NUM> and <NUM>, each of the UE 2a-<NUM> and the AMF 2a-<NUM> has security context <NUM> via a 3GPP access and security context <NUM> via a non-3GPP access. That is, the UE 2a-<NUM> may be connected to the AMF 2a-<NUM> via the 3GPP access and, simultaneously, be connected to the AMF 2a-<NUM> via the non-3GPP access through a registration procedure.

In an embodiment of the disclosure, connection may be enabled via a 3GPP next-generation (NG) RAN, i.e., the 3GPP access, and the non-3GPP access, and the UE 2a-<NUM> may be connected to the same AMF 2a-<NUM> and registered to the same public land mobile network (PLMN) over the two accesses. Although connected to the same AMF 2a-<NUM> via the 3GPP access and the non-3GPP access, when different PLMNs are used, security contexts may be managed separately. That is, the security context via the 3GPP access and the security context via the non-3GPP access may be managed separately.

In operations <NUM> and <NUM>, the AMF 2a-<NUM> transmits an authentication request to the UE 2a-<NUM>. In operations <NUM> and <NUM>, the UE 2a-<NUM> transmits an authentication response to the AMF 2a-<NUM>.

Through operations <NUM> to <NUM>, a master key value related to security is changed through <NUM> authentication and key agreement (AKA) or extensible authentication protocol-authentication and key agreement (EAP-AKA'). That is, a security anchor function key (Kseaf) is changed. Consequently, an access and mobility management function key (Kamf) is changed.

That is, through operations <NUM> to <NUM>, the UE 2a-<NUM> and the AMF 2a-<NUM> have a partial security context, i.e., a <NUM> key set identifier (ngKSI) and Kamf associated therewith. In an embodiment of the disclosure, when AKA is performed via the 3GPP access, Kseaf is changed, Kamf is changed, and ngKSI associated therewith is also changed. For example, the ngKSI may be changed from ngKSI <NUM> to ngKSI <NUM>.

After the AKA procedure is performed, a full security context may be created through a security mode command (SMC) procedure.

In operations <NUM> and <NUM>, the AMF 2a-<NUM> transmits a security mode command to the UE 2a-<NUM>. In an embodiment of the disclosure, operations <NUM> and <NUM> are performed to give an indication of triggering SMC not only for the 3GPP access, via which AKA is performed and thus SMC is correspondingly performed, but also for the non-3GPP access other than the 3GPP access. That is, "when the master key is changed through the authentication operation between the UE 2a-<NUM> and the AMF 2a-<NUM> and the change in the master key corresponding to a result of the AKA is desired to be applied to connection via the non-3GPP access", the AMF 2a-<NUM> sends an indication thereof to the UE 2a-<NUM>. Although the 3GPP access is initially changed and then the non-3GPP access is changed in <FIG>, embodiments of the disclosure are not limited thereto and the non-3GPP access may be initially changed and then the 3GPP access may be changed.

Then, in operations <NUM> and <NUM>, the UE 2a-<NUM> sends a security mode complete message to the AMF 2a-<NUM>. After operations <NUM> and <NUM> are performed, the UE 2a-<NUM> and the AMF 2a-<NUM> have the full security context.

In operations <NUM> and <NUM>, the AMF 2a-<NUM> sends a security mode command to the UE 2a-<NUM> via the non-3GPP access other than the 3GPP access via which the authentication operation is newly performed, that is, the reauthentication operation is performed.

In an embodiment of the disclosure, because the same AMF and the same PLMN are used and the AKA is performed via another access, i.e., the 3GPP access, to change the master key, i.e., Kseaf, Kamf may be changed. For example, when the same ngKSI is used, the above-described operation may be performed. The same ngKSI indicates the same security key related to the ngKSI. In this case, Kseaf or Kamf obtained through the AKA procedure via the 3GPP access may be used.

As described above, when the master key or the like is changed through the authentication procedure via the 3GPP access, the change in the master key may also be applied to the non-3GPP access. In an embodiment of the disclosure, ngKSI related to the security key, i.e., Kamf or Kseaf, obtained through the above-described authentication procedure via the 3GPP access is sent. For example, ngKSI <NUM> may be set as the ngKSI and be transmitted from the AMF 2a-<NUM> to the UE 2a-<NUM>.

Then, in operations <NUM> and <NUM>, the UE 2a-<NUM> sends a security mode complete message to the AMF 2a-<NUM>.

<FIG> is a flowchart of a security protection method according to another embodiment of the disclosure.

In an embodiment of the disclosure, connection may be enabled via a 3GPP NG RAN, i.e., the 3GPP access, and the non-3GPP access, and the UE 2a-<NUM> may be connected to the same AMF 2a-<NUM> and registered to the same PLMN over the two accesses.

Although connected to the same AMF 2a-<NUM> via the 3GPP access and the non-3GPP access, when different PLMNs are used, security contexts may be managed separately. That is, the security context via the 3GPP access and the security context via the non-3GPP access may be managed separately.

Through operations <NUM> to <NUM>, a master key value related to security is changed through <NUM> AKA or EAP-AKA'. That is, Kseaf is changed. Consequently, Kamf is changed.

That is, through operations <NUM> to <NUM>, the UE 2a-<NUM> and the AMF 2a-<NUM> have a partial security context, i.e., ngKSI and Kamf associated therewith. In an embodiment of the disclosure, when AKA is performed via the 3GPP access, Kseaf is changed, Kamf is changed, and ngKSI associated therewith is also changed. For example, the ngKSI may be changed from ngKSI <NUM> to ngKSI <NUM>.

After the AKA procedure is performed, a full security context may be created through a SMC procedure.

In operations <NUM> and <NUM>, the AMF 2a-<NUM> transmits a security mode command to the UE 2a-<NUM>. In operations <NUM> and <NUM>, the UE 2a-<NUM> sends a security mode complete message to the AMF 2a-<NUM>.

In an embodiment of the disclosure, operations <NUM> and <NUM> are performed to give an indication of triggering SMC not only for the 3GPP access, via which AKA is performed and thus SMC is correspondingly performed, but also for the non-3GPP access. That is, "when the master key is changed through the authentication operation between the UE 2a-<NUM> and the AMF 2a-<NUM> and the change in the master key corresponding to a result of the AKA is desired to be applied to connection via the non-3GPP access", the UE 2a-<NUM> sends an indication thereof to the AMF 2a-<NUM>.

Then, after operations <NUM> and <NUM> are performed, the UE 2a-<NUM> and the AMF 2a-<NUM> have the full security context.

Subsequently, in operations <NUM> and <NUM>, the AMF 2a-<NUM> sends a security mode command to the UE 2a-<NUM> via the non-3GPP access other than the 3GPP access via which the authentication operation is newly performed, that is, the re-authentication operation is performed.

In an embodiment of the disclosure, because the same AMF and the same PLMN are used and the AKA is performed via another access, i.e., the 3GPP access, to change the master key, i.e., Kseaf, Kamf may be changed. For example, when the same ngKSI is used, the above-described operation may be performed.

The same ngKSI indicates the same security key related to the ngKSI. In this case, Kseaf or Kamf obtained through the AKA procedure via the 3GPP access may be used.

As described above, when the master key or the like is changed through the authentication procedure via the 3GPP access, the change in the master key may also be applied to the non-3GPP access.

In an embodiment of the disclosure, ngKSI related to the security key, i.e., Kamf or Kseaf, obtained through the above-described authentication procedure via the 3GPP access is sent.

For example, ngKSI <NUM> may be set as the ngKSI and be transmitted from the AMF 2a-<NUM> to the UE 2a-<NUM>.

Referring to <FIG>, in operations <NUM> and <NUM>, each of the UE 2a-<NUM> and the AMF 2a-<NUM> has security context <NUM> via a 3GPP access and security context <NUM> via a non-3GPP access. That is, the UE 2a-<NUM> may be connected to the AMF 2a-<NUM> via the 3GPP access and, simultaneously, be connected to the AMF 2a-<NUM> via the non-3GPP access through a registration procedure.

In an embodiment of the disclosure, connection may be enabled via a 3GPP NG RAN, i.e., the 3GPP access, and the non-3GPP access, and the UE 2a-<NUM> may be connected to the same AMF 2a-<NUM> and registered to the same PLMN over the two accesses. Although connected to the same AMF 2a-<NUM> via the 3GPP access and the non-3GPP access, when different PLMNs are used, security contexts may be managed separately. That is, the security context via the 3GPP access and the security context via the non-3GPP access may be managed separately.

Operations <NUM> and <NUM> are performed to give an indication of triggering SMC not only for the 3GPP access, via which AKA is performed and thus SMC is correspondingly performed, but also for the non-3GPP access. When the master key is changed through the authentication operation between the UE 2a-<NUM> and the AMF 2a-<NUM> and the change in the master key corresponding to a result of the AKA is desired to be applied to connection via the non-3GPP access, the UE 2a-<NUM> sends an indication thereof to the AMF 2a-<NUM>.

After the AKA procedure is performed, a full security context may be created through a SMC procedure. In operations <NUM> and <NUM>, the AMF 2a-<NUM> transmits a security mode command to the UE 2a-<NUM>.

After operations <NUM> and <NUM> are performed, the UE 2a-<NUM> and the AMF 2a-<NUM> have the full security context.

Subsequently, in operations <NUM> and <NUM>, the AMF 2a-<NUM> sends a security mode command to the UE 2a-<NUM> via the non-3GPP access other than the 3GPP access via which the authentication operation is newly performed, that is, the reauthentication operation is performed.

In an embodiment of the disclosure, because the same AMF and the same PLMN are used and the AKA is performed via another access (i.e., the 3GPP access) to change the master key, i.e., Kseaf, Kamf may be changed. For example, when the same ngKSI is used, the above-described operation may be performed.

In operations <NUM> and <NUM>, the AMF 2a-<NUM> transmits a security mode command to the UE 2a-<NUM>.

In operations <NUM> and <NUM>, the AMF 2a-<NUM> sends a security mode command to the UE 2a-<NUM> via the non-3GPP access other than the 3GPP access via which the authentication operation is newly performed, that is, the re-authentication operation is performed.

In an embodiment of the disclosure, an explicit indication may not be transmitted.

In an embodiment of the disclosure, because the same AMF and the same PLMN are used and the AKA is performed via another access (i.e., the 3GPP access) to change the master key, i.e., Kseaf, Kamf may be changed. For example, when the same ngKSI is used, the above-described operation may be performed. The same ngKSI indicates the same security key related to the ngKSI. In this case, Kseaf or Kamf obtained through the AKA procedure via the 3GPP access may be used.

In an embodiment of the disclosure, when a case in which the same ngKSI is used is not known or when the same ngKSI is received, the ngKSI may be treated as an error.

Key derivation and ngKSI usage will now be described.

Initially, when AKA occurs via a non-3GPP access and a 3GPP access, separate non-access stratum (NAS) counts are used for the non-3GPP access and the 3GPP access to derive a NAS integrity key and a NAS encryption key.

In an embodiment of the disclosure, because the same ngKSI is used, the same Kamf is indicated by the ngKSI. However, when Kseaf is changed and Kamf is changed due to primary authentication, Kn3iwf derived from Kamf and Kgnb derived from Kamf may be changed due to the change in Kamf.

In an embodiment of the disclosure, a NAS algorithm, an algorithm Id, and an uplink NAS count per access may serve as input values of Knasenc and Knasint. That is, a non-3GPP uplink NAS count may be input for the non-3GPP access and a 3GPP uplink NAS count may be input for the 3GPP access.

In an embodiment of the disclosure, an access type distinguisher may be included to derive Knasenc and Knasint. For example, a distinguisher value of 0x01 may be included for the 3GPP access and a distinguisher value of 0x02 may be included for the non-3GPP access.

In an embodiment of the disclosure, Kseaf may be changed and Kamf may be derived differently for the 3GPP access and the non-3GPP access.

A security mode command (SMC) message will now be described.

In an embodiment of the disclosure, when a SMC message is transmitted from an AMF to a UE, it may be transmitted together with access type information to refer to a parameter related to security.

The access type information may be used to identify whether an access type corresponds to a 3GPP access or a non-3GPP access. In an embodiment of the disclosure, <NUM> bit may be used as an on/off switch to identify whether the access type corresponds to a 3GPP access or a non-3GPP access. In another embodiment of the disclosure, <NUM> bits may be used to express a distinguisher value (e.g., 0x01 or 0x02) for identifying whether the access type corresponds to a 3GPP access or a non-3GPP access. For example, a distinguisher value for the 3GPP access may be 0x01, and a distinguisher value for the non-3GPP access may be 0x02.

In an embodiment of the disclosure, the content of the SMC message is as shown below.

In an embodiment of the disclosure, an access type of Table <NUM> may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>.

Table <NUM> Access type information element.

The access type of Table <NUM> may be configured as shown in Table <NUM> and be coded as shown in Table <NUM> or Table <NUM>.

In an embodiment of the disclosure, the access type of Table <NUM> may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>-a or Table <NUM>-b.

Table <NUM>-a Access type information element.

Table <NUM>-b Access type information element.

In an embodiment of the disclosure, ngKSI of Table <NUM> may be configured as shown below.

Table <NUM> NAS key set identifier information element.

According to another embodiment of the disclosure, the access type information may be sent together with NAS key set identifier information of Table <NUM>. The NAS key set identifier information may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>-a or Table <NUM>-b.

Table <NUM>-a NAS key set identifier information element.

Table <NUM>-b NAS key set identifier information element.

According to another embodiment of the disclosure, the access type information may be sent together with the NAS key set identifier information of Table <NUM>. The NAS key set identifier information may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>.

A NAS connection identifier in Table <NUM> may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>.

Table <NUM> NAS connection identifier information element.

The NAS connection identifier in Table <NUM> may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>.

A security mode complete message will now be described.

In an embodiment of the disclosure, when a security mode complete message is transmitted from an AMF to a UE, it may be transmitted together with access type information to refer to a parameter related to security.

In an embodiment of the disclosure, the content of the security mode complete message is as shown below.

An access type may be configured and coded as shown above in the previous embodiments of the disclosure.

A NAS connection identifier may be configured and coded as shown above in the previous embodiments of the disclosure.

A SMC message will now be described in association with a NAS security change triggering indication.

The content of the SMC message used in <FIG> and <FIG> is as shown below.

A triggering NAS security change indication in Table <NUM> may be configured as shown in Table <NUM> and be coded as shown in Table <NUM> or Table <NUM>.

Table <NUM> Triggering NAS security change indication information element.

In <FIG>, an indication of whether to trigger SMC not only for a current access, via which authentication is performed, but also for an access other than the current access is given as shown in Table <NUM>.

In <FIG>, when there is an access that has performed authentication, SMC is performed to change current security context of another access and a reason why SMC is performed may be given to the current access.

In <FIG>, a security mode complete message shown below is referred.

A triggering NAS security change indication may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>.

The triggering NAS security change indication of whether to trigger SMC for an access other than a current access via which authentication is performed is given from a UE to a network entity as shown in Table <NUM>.

An authentication response message will now be described.

A triggering NAS security change indication in Table <NUM> may be configured as shown in Table <NUM> and be coded as shown in Table <NUM>.

The triggering NAS security change indication of whether to trigger SMC not only for a current access, via which authentication is performed, but also for an access other than the current access is given from a UE to a network entity as shown in Table <NUM>.

An authentication request message will now be described.

The triggering NAS security change indication of whether to trigger SMC not only for a current access, via which authentication is performed, but also for an access other than the current access is given as shown in Table <NUM>.

A key derivation method according to an embodiment of the disclosure will now be described.

In an embodiment of the disclosure, when keys are derived, a NAS counter may be used. Herein, the NAS counter may include at least one of four counters described below.

The 3GPP uplink NAS counter may be used to derive 3GPP Knasint and 3GPP Knasenc for NAS message protection. In an embodiment of the disclosure, 3GPP Knasint and 3GPP Knasenc may be a NAS integrity protection key and a NAS encryption protection key, respectively. <NUM>) An input key of 3GPP Knasint and 3GPP Knasenc may be Kamf, and <NUM>) a string included in a key derivation function may be configured as shown below.

FC = 0x69 or value to be determined by standard.

In the afore-described embodiment of the disclosure, because a 3GPP uplink NAS count is used, an access type distinguisher may not be used for an input string.

The non-3GPP uplink NAS counter is used to derive non-3GPP Knasint and non-3GPP Knasenc for non-3GPP NAS message protection. Non-3GPP Knasint and non-3GPP Knasenc may be a NAS integrity protection key and a NAS encryption protection key, respectively. <NUM>) An input key of non-3GPP Knasint and non-3GPP Knasenc may be Kamf, and <NUM>) a string included in a key derivation function may be configured as shown below.

FC = 0x69 or FC=0x?? to be determined by standard.

In the afore-described embodiment of the disclosure, because a non-3GPP uplink NAS count is used, an access type distinguisher may not be used for an input string.

An uplink NAS counter is used to derive Knasint and Knasenc for NAS message protection. Knasint and Knasenc may be a NAS integrity protection key and a NAS encryption protection key, respectively. In an embodiment of the disclosure, in addition to the uplink NAS counter, an access type distinguisher may be used as an input string. <NUM>) An input key of Knasint and Knasenc may be Kamf, and <NUM>) a string included in a key derivation function may be configured as shown below.

Herein, 0x01 may be used for a 3GPP access, and 0x02 may be used for a non-3GPP access.

In the afore-described embodiment of the disclosure, P3 and L3 are included in the input string as a distinguisher, i.e., an access type distinguisher. In an embodiment of the disclosure, P2 and L2 may use an uplink NAS count. P2 and L2 may use a 3GPP uplink NAS count for a 3GPP access. P2 and L2 may use a non-3GPP uplink NAS count for a non-3GPP access.

A key derivation method according to another embodiment of the disclosure will now be described.

In an embodiment of the disclosure, when keys are generated, a NAS counter may be used. Herein, when the NAS counter is used for both of a 3GPP access and a non-3GPP access, two types of counters and access type information may be used.

In an embodiment of the disclosure, an NAS access may include a unique NAS connection identifier. In an embodiment of the disclosure, the NAS connection identifier may include a pair of an uplink NAS counter and a downlink NAS counter for a 3GPP access, and may include a pair of an uplink NAS counter and a downlink NAS counter for a non-3GPP access.

In this case, by transmitting the NAS connection identifier in a SMC message and a security mode complete message, the NAS connection identifier may be used in the SMC message and the security mode complete message to reset a NAS count value or to perform verification for integrity protection.

In this case, a NAS encryption key may equal a NAS integrity key.

In an embodiment of the disclosure, an uplink NAS counter may be used to derive Knasint and Knasenc for NAS message protection. Knasint and Knasenc may be a NAS integrity protection key and a NAS encryption protection key, respectively.

In another embodiment of the disclosure, in addition to the uplink NAS counter, a NAS connection identifier may be used. In this case, the NAS connection identifier may be used to determine whether to refer to a security context related to a 3GPP access or a security context related to a non-3GPP access. At this time, when Kamf is derived, a NAS counter is shared for a 3GPP access and a non-3GPP access and thus a NAS counter value may not be reset.

In an embodiment of the disclosure, <NUM>) an input key of Knasint and Knasenc may be Kamf, and <NUM>) a string included in a key derivation function may be configured as shown below.

In the afore-described embodiment of the disclosure, P3 and L3 are included in the input string as a distinguisher, i.e., a NAS connection identifier, and thus P2 and L2 may use an uplink NAS count.

According to an embodiment of the disclosure, in a mobile communication system, information transmitted from a UE to a network entity may be protected. Specifically, when information is transmitted between a UE and a network entity, security of communication may be enhanced by efficiently performing procedures related to creation, storage, updating, and management of security context used for security protection.

<FIG> is a block diagram of a UE according to an embodiment of the disclosure.

Referring to <FIG>, the UE may include a transceiver <NUM>, a memory <NUM>, and a processor <NUM>. According to the above-described communication method of the UE, the transceiver <NUM>, the memory <NUM>, and the processor <NUM> of the UE may operate. However, elements of the UE are not limited to the above-mentioned examples. For example, the UE may include a larger or smaller number of elements compared to the above-mentioned elements. In addition, the transceiver <NUM>, the memory <NUM>, and the processor <NUM> may be configured as a single chip.

The transceiver <NUM> may transmit and receive signals to and from a base station. Herein, the signals may include control information and data. To this end, the transceiver <NUM> may include, for example, a radio frequency (RF) transmitter for up-converting a frequency of and amplifying a signal to be transmitted, and a RF receiver for low-noise-amplifying and down-converting a frequency of a received signal. However, the above-mentioned elements are merely examples and elements of the transceiver <NUM> are not limited to the RF transmitter and the RF receiver.

The transceiver <NUM> may receive a signal through a wireless channel and provide the signal to the processor <NUM>, and may transmit a signal output from the processor <NUM>, through the wireless channel.

The memory <NUM> may store programs and data required for operation of the UE. The memory <NUM> may also store control information or data included in signals obtained by the UE. The memory <NUM> may include any or a combination of storage media such as read-only memory (ROM), random access memory (RAM), a hard disk, a compact disc (CD)-ROM, and a digital versatile disc (DVD). The memory <NUM> may include a plurality of memories. In an embodiment of the disclosure, the memory <NUM> may store a program for supporting beam-based cooperative communication.

The processor <NUM> may control a series of procedures to operate the UE according to the afore-described embodiments of the disclosure. The processor <NUM> may control only some procedures according to the afore-described embodiments of the disclosure. However, the processor <NUM> is not limited thereto and may control all procedures to operate the UE according to all or some of the afore-described embodiments of the disclosure.

<FIG> is a block diagram of a network entity according to an embodiment of the disclosure.

Referring to <FIG>, the network entity may include a transceiver <NUM>, a memory <NUM>, and a processor <NUM>. According to the above-described communication method of the network entity, the transceiver <NUM>, the memory <NUM>, and the processor <NUM> of the network entity may operate. However, elements of the network entity are not limited to the above-mentioned examples. For example, the network entity may include a larger or smaller number of elements compared to the above-mentioned elements. In addition, the transceiver <NUM>, the memory <NUM>, and the processor <NUM> may be configured as a single chip. In an embodiment of the disclosure, the network entity may include a base station or an entity included in a core network, e.g., an AMF or a SMF.

The transceiver <NUM> may transmit and receive signals to and from a UE. Herein, the signals may include control information and data. To this end, the transceiver <NUM> may include, for example, a radio frequency (RF) transmitter for up-converting a frequency of and amplifying a signal to be transmitted, and a RF receiver for low-noise-amplifying and down-converting a frequency of a received signal. However, the above-mentioned elements are merely examples and elements of the transceiver <NUM> are not limited to the RF transmitter and the RF receiver.

The memory <NUM> may store programs and data required for operation of the network entity. The memory <NUM> may also store control information or data included in signals obtained by the network entity. The memory <NUM> may include any or a combination of storage media such as ROM, RAM, a hard disk, a CD-ROM, and a DVD. The memory <NUM> may include a plurality of memories. In an embodiment of the disclosure, the memory <NUM> may store a program for supporting beam-based cooperative communication.

The processor <NUM> may control a series of procedures to operate the network entity according to the afore-described embodiments of the disclosure. The processor <NUM> may control only some procedures according to the afore-described embodiments of the disclosure. However, the processor <NUM> is not limited thereto and may control all procedures to operate the network entity according to all or some of the afore-described embodiments of the disclosure.

According to the embodiments of the disclosure, a mobile communication system may effectively provide services.

The methods according to the embodiments of the disclosure as described herein or in the following claims may be implemented as hardware, software, or a combination of hardware and software.

When implemented as software, a computer-readable storage medium or computer program product storing one or more programs (e.g., software modules) may be provided. The one or more programs stored in the computer-readable storage medium or computer program product may be configured for execution by one or more processors in an electronic device. The one or more programs may include instructions directing the electronic device to execute the methods according to the embodiments of the disclosure as described herein or in the following claims.

The programs (e.g., software modules or software) may be stored in non-volatile memory including random access memory (RAM) or flash memory, read only memory (ROM), electrically erasable programmable read only memory (EEPROM), a magnetic disc storage device, a compact disc (CD)-ROM, a digital versatile disc (DVD), another optical storage device, or a magnetic cassette tape. Alternatively, the programs may be stored in memory including a combination of some or all of the above-mentioned storage media. A plurality of such memories may be included.

In addition, the programs may be stored in an attachable storage device accessible through any or a combination of communication networks such as the internet, an intranet, a local area network (LAN), a wide LAN (WLAN), and a storage area network (SAN). Furthermore, an additional storage device on the communication network may access the electronic device.

In the afore-described embodiments of the disclosure, an element or elements included in the disclosure are expressed in a singular or plural form depending on the described embodiments of the disclosure. However, the singular or plural form is selected appropriately for a situation assumed for convenience of description and the disclosure is not limited to the singular or plural form. An element expressed in a singular form may include a plurality of elements, and elements expressed in a plural form may include a single element.

It should be understood that embodiments of the disclosure described herein should be considered in a descriptive sense only and not for purposes of limitation. That is, it will be understood by one of ordinary skill in the art that various changes in form and details may be made in the embodiments of the disclosure without departing from the scope as defined by the following claims. The embodiments of the disclosure may be combined as necessary. For example, a part of an embodiment of the disclosure may be combined with a part of another embodiment of the disclosure. The embodiments of the disclosure may be applied to other systems, e.g., a Long-Term Evolution (LTE) system and a <NUM> or NR system, through modification without departing from the scope as defined by the following claims.

Claim 1:
A method of performing a security mode control procedure by a user equipment, UE, the method comprising:
registering to an access and mobility management function, AMF, and a public land mobile network, PLMN, over a 3rd generation partnership project, 3GPP, access;
registering to the AMF and the PLMN over a non-3GPP access;
performing, over the 3GPP access, a first authentication procedure and a first key agreement procedure with an the AMF, wherein a key set identifier, ngKSI, is changed from a first ngKSI to a second ngKSI during the first authentication procedure and the first key agreement procedure, the second ngKSI corresponding to a new security context; and
based on performing the first authentication procedure and the first key agreement procedure with the AMF over the 3GPP access:
receiving, from the AMF over the 3GPP access, a first security mode command message including the second ngKSI, and
receiving, from the AMF over the non-3GPP access, a second security mode command message including the second ngKSI.