Method of handling handover security configuration and related communication device

Patent metadata

Field	Value
Publication number	US-9344924-B2
Application number	US-61354209-A
Country	US
Kind code	B2
Filing date	Nov 6, 2009
Priority date	Nov 27, 2008
Publication date	May 17, 2016
Grant date	May 17, 2016

Abstract

A method of handling handover security configuration for a mobile device of a wireless communication system includes performing an inter-radio access technology, hereinafter called RAT, handover procedure from a serving network including a service domain to a target network including a plurality of service domains when receiving a handover command, wherein the mobile device includes security configuration corresponding to the service domain of the serving network and security configuration corresponding to the plurality of service domains of the target network, and updating the security configuration corresponding to at least one of the plurality of service domains according to the handover command no later than the time a connection with the target network is successfully established during the inter-RAT handover procedure.

First claim

What is claimed is:

1. A method of handling handover security configuration for a mobile device of a wireless communication system, the method comprising:
performing an inter-radio access technology, hereinafter called RAT, handover procedure from a long-term evolution (LTE) network including only packet-switched (PS) domain to a universal terrestrial radio access network (UTRAN) including both circuit-switched (CS) and PS domains when receiving a handover command, wherein the mobile device includes security configuration including a mobility-management-level key and an evolved key set identifier corresponding to the PS domain of the LTE network, security configuration including a cipher key and an integrity key corresponding to the CS domain of the UTRAN and security configuration including a cipher key and an integrity key corresponding to the PS domain of the UTRAN;
when the handover command includes a radio access bearer (RAB) info information element (IE) including CS RAB of the UTRAN, updating the security configuration corresponding to the CS domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network, no later than the time a connection with the UTRAN is successfully established during the inter-RAT handover procedure, wherein the inter-RAT handover procedure is used for a Single Radio Voice Call Continuity handover; and
when the handover command includes a RAB info IE including PS RAB of the UTRAN, updating the security configuration corresponding to the PS domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network, no later than the time a connection with the UTRAN is successfully established during the inter-RAT handover procedure;
wherein updating the security configuration corresponding to the CS domain of the UTRAN with the security configuration including the mobility-management-level key and the evolved key set identifier corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is established successfully during the inter-RAT handover procedure comprises:
setting a key set identifier corresponding to the CS domain of the UTRAN to a value of the evolved key set identifier corresponding to the LTE network;
deriving a cipher key of the CS domain of the UTRAN and an integrity key of the CS domain of the UTRAN from the mobility-management-level key and a non-access stratum downlink COUNT with a one-way key derivation function; and
setting the cipher key and the integrity key corresponding to the CS domain of the UTRAN to the cipher key of the CS domain of the UTRAN and the integrity key of the CS domain of the UTRAN respectively; and

wherein updating the security configuration corresponding to the PS domain of the UTRAN with the security configuration including the mobility-management-level key and the evolved key set identifier corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is established successfully during the inter-RAT handover procedure comprises:
setting a key set identifier corresponding to the PS domain of the UTRAN to the value of the evolved key set identifier corresponding to the LTE network;
deriving a cipher key of the PS domain of the UTRAN and an integrity key of the PS domain of the UTRAN from the mobility-management-level key and a non-access stratum downlink COUNT with a one-way key derivation function; and
setting the cipher key and the integrity key corresponding to the PS domain of the UTRAN to the cipher key of the PS domain of the UTRAN and the integrity key of the PS domain of the UTRAN respectively.

2. The method of claim 1 , wherein the security configuration of the UTRAN corresponding to the CS domain of the UTRAN is updated and used no later than the time the connection is established successfully during the inter-RAT handover procedure.

3. The method of claim 2 , wherein the security configuration corresponding to the CS domain of the UTRAN includes a START parameter updated to zero.

4. The method of claim 1 further comprising:
when the handover command does not include any connection configuration corresponding to the PS domain of the UTRAN, retaining the security configuration corresponding to the PS domain of the UTRAN.

5. The method of claim 1 , wherein updating the security configuration corresponding to the CS domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is established successfully during the inter-RAT handover procedure comprises:
setting a START parameter corresponding to the CS domain of the UTRAN to zero no later than the time the connection with the UTRAN is established successfully during the inter-RAT handover procedure.

6. The method of claim 1 , wherein updating the security configuration corresponding to the CS domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is established successfully during the inter-RAT handover procedure comprises:
deriving a ciphering key from the cipher key of the CS domain of the UTRAN and the integrity key of the CS domain of the UTRAN.

7. The method of claim 1 further comprising:
when the handover command does not include any connection configuration corresponding to one of the CS domain and the PS domain of the UTRAN, updating the security configuration corresponding to a predetermined service domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is successfully established during the inter-RAT handover procedure.

8. The method of claim 7 , wherein the security configuration of the UTRAN corresponding to the predetermined service domain is updated and used no later than the time the connection is established successfully during the inter-RAT handover procedure.

9. The method of claim 8 , wherein the security configuration corresponding to the CS domain of the UTRAN includes a START parameter updated to zero.

10. The method of claim 7 , wherein when the handover command does not include any connection configuration corresponding to one of the CS domain and PS domain of the UTRAN, updating the security configuration corresponding to the predetermined service domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is successfully established during the inter-RAT handover procedure comprises:
when the handover command does not include any radio bearer configuration information corresponding to one of the CS domain and PS domain of the UTRAN, updating the security configuration corresponding to the predetermined service domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is successfully established during the inter-RAT handover procedure.

11. The method of claim 7 , wherein updating the security configuration corresponding to the predetermined service domain of the UTRAN with the security configuration corresponding to the PS domain of the LTE network no later than the time the connection with the UTRAN is successfully established during the inter-RAT handover procedure comprises:
setting a START parameter corresponding to the predetermined service domain of the UTRAN to zero no later than the time the connection with the UTRAN is successfully established during the inter-RAT handover procedure.

Assignees

• Wu Chih-Hsiang
• Htc Corp

Inventors

• Wu Chih-Hsiang

Classifications

• H04W36/0033 Primary

  with transfer of context information · CPC title

• H04W36/0066

  of control information between different types of networks in order to establish a new radio link in the target network · CPC title

• H04W12/06

  Authentication · CPC title

• H04W12/062

  Pre-authentication · CPC title