Communication system

Patent metadata

Field	Value
Publication number	US-10237787-B2
Application number	US-201715851597-A
Country	US
Kind code	B2
Filing date	Dec 21, 2017
Priority date	Jan 17, 2013
Publication date	Mar 19, 2019
Grant date	Mar 19, 2019

Abstract

A communication system is described in which user plane communication and control plane communication for a particular mobile communication device can be split between a base station that operates a small cell and a macro base station. Appropriate security for the user plane and control plane communications is safeguarded by ensuring that each base station is able to obtain or derive the correct security parameters for protecting the user plane or control plane communication for which it is responsible.

First claim

The invention claimed is:

1. A base station (eNB) comprising:
a processor; and
a transceiver;
wherein the processor is configured to provide user plane communication to a user equipment (UE);
wherein the transceiver is configured:
to receive, from another base station, a first security key derived by the another eNB;

wherein the processor is further configured to derive a user plane security key, for use in protection of user plane traffic, using the security key derived by the another eNB; and
wherein the another eNB provides control plane signalling to the mobile communication device.

2. A method in a base station (eNB) comprising:
providing user plane communication to a user equipment (UE);
receiving, from another eNB, a security key derived by the another eNB; and
deriving a user plane security key, for use in protection of user plane traffic, using the security key derived by the another eNB;
wherein the another eNB provides control plane signalling to the eNB.

3. User equipment comprising:
a processor; and
a transceiver;
wherein the transceiver is configured:
to receive control plane signalling from a first base station (eNB);
to receive user plane signalling from a second eNB;

wherein the processor is configured:
to derive a security key of the first eNB;
to derive, using the derived security key of the eNB, a security key of the second eNB; and
to derive, using the security key of the second eNB, a user plane security key for use in protection of user plane traffic.

4. A method performed by user equipment, the method comprising:
receiving control plane signalling from a first base station (eNB) and user plane signalling from a second eNB; ;
deriving a security key of the first eNB;
deriving, using the derived security key of the first eNB, a security key of the second eNB; and
deriving, using the security key of the second eNB, a user plane security key for use in protection of user plane traffic.

5. A base station (eNB) according to claim 1 , wherein the user plane security key is a K upenc security key.

6. A base station (eNB) according to claim 1 , wherein the security key derived by the another eNB is a K eNB security key of the eNB that is derived from a K eNB of the another eNB using an appropriate key derivation function (KDF).

7. A user equipment according to claim 3 , wherein the user plane security key is a K UPenc security key.

8. A user equipment according to claim 3 , wherein the security key of the first eNB is a first K eNB security key and the security key of the second eNB is a second K eNB that is derived from the first K eNB using an appropriate key derivation function (KDF).

Assignees

• Nec Corp

Inventors

• Sharma Vivek

Classifications

• H04W12/04 Primary

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L2209/24

  Key scheduling, i.e. generating round keys or sub-keys for block encryption · CPC title

• H04W16/32

  Hierarchical cell structures · CPC title

• H04W84/045

  using private Base Stations, e.g. femto Base Stations, home Node B · CPC title

• H04W36/0038 Primary

  of security context information · CPC title