Method and apparatus for reducing overhead for integrity check of data in wireless communication system

Patent metadata

Field	Value
Publication number	US-10542425-B2
Application number	US-80686110-A
Country	US
Kind code	B2
Filing date	Aug 20, 2010
Priority date	Aug 20, 2009
Publication date	Jan 21, 2020
Grant date	Jan 21, 2020

Abstract

A method and an apparatus reduce overhead for data integrity checks in a wireless communication system. When receiving a message, a first Integrity Check Value (ICV) is compared with a second ICV to detect an integrity error in the message. When the integrity error exists in the message, a frequency of the integrity error is counted. When the frequency of the integrity error is more than a threshold, a key update procedure is performed. Therefore, the overhead of the information for integrity check may be reduced in the wireless communication system.

First claim

What is claimed is:

1. A method for operating a base station in a wireless communication system, the method comprising:
receiving, from a terminal, a message;
detecting an integrity check value (ICV) error of the message, while a first traffic encryption key (TEK) for downlink is a first key and a second TEK for uplink is a second key;
determining that update of the second TEK used for encrypting data by the terminal is required due to the ICV error;
performing a first key update procedure by discarding the first key, using the second key associated with the ICV error as the first TEK, deriving a third key, and using the third key as the second TEK;
after performing the first key update procedure, performing a second key update procedure by discarding the second key, using the third key as the first TEK, deriving a fourth key, and using the fourth key as the second TEK;
transmitting, to the terminal, a TEK invalid message informing that a TEK is invalid, after performing the second key update procedure;
receiving, from the terminal, a TEK request message, after transmitting the TEK invalid message; and
transmitting, to the terminal, a TEK_reply message comprising the third key and the fourth key.

2. The method of claim 1 , wherein the message comprises one of a control message and a medium access control (MAC) protocol data unit (MPDU).

3. The method of claim 1 , wherein detecting the ICV error of the message comprises detecting the ICV error of the message by comparing a first ICV with a second ICV.

4. The method of claim 3 , wherein the first ICV comprises a value included in the message, and the second ICV comprises a value derived from the second key.

5. The method of claim 1 , further comprising: discarding the received message.

6. The method of claim 1 , wherein the first TEK is updated based on a key agreement algorithm.

7. The method of claim 1 , wherein the TEK request message is transmitted from the terminal when the terminal determines that a MPDU received from the base station is encrypted using the second TEK held by the terminal.

8. An apparatus of a base station in a wireless communication system, the apparatus comprising:
a transceiver; and
at least one processor coupled to the transceiver and configured to:
receive, from a terminal, a message,
detect an integrity check value (ICV) error of the message, while a first traffic encryption key (TEK) for downlink is a first key and a second TEK for uplink is a second key,
determine that update of the second TEK used for encrypting data by the terminal is required due to the ICV error,
perform a first key update procedure by discarding the first key, using the second key associated with the ICV error as the first TEK, deriving a third key, and using the third key as the second TEK,
after performing the first key update procedure, perform a second key update procedure by discarding the second key, using the third key as the first TEK, deriving a fourth key, and using the fourth key as the second TEK,
transmit, to the terminal, a TEK invalid message informing that a TEK is invalid, after performing the second key update procedure,
receive, from the terminal, a TEK request message, after transmitting the TEK invalid message, and
transmit, to the terminal, a TEK_reply message comprising the third key and the fourth key.

9. The apparatus of claim 8 , wherein the message comprises one of a control message and a medium access control (MAC) protocol data unit (MPDU).

10. The apparatus of claim 8 , wherein the at least one processor is further configured to detect the ICV error of the received message by comparing a first ICV with a second ICV.

11. The apparatus of claim 10 , wherein the first ICV comprises a value included in the received message, and the second ICV comprises a value derived from the second key.

12. The apparatus of claim 8 , wherein the at least one processor is further configured to discard the message.

13. The apparatus of claim 8 , wherein the first TEK is updated based on a key agreement algorithm.

14. The apparatus of claim 8 , wherein the TEK request message is transmitted from the terminal when the terminal determines that a MPDU received from the base station is encrypted using the second TEK held by the terminal.

Assignees

• Baek Young Kyo
• Lee Ji Cheol
• Son Jung Je
• Samsung Electronics Co Ltd

Inventors

• Baek Young-Kyo
• Lee Ji-Cheol
• Son Jung-Je

Classifications

• H04W12/04 Primary

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04W12/041 Primary

  Key generation or derivation · CPC title

• H04W12/106

  Packet or message integrity · CPC title