Method for distributing security keys during hand-off in a wireless communication system

• US 20070003062A1
• Filed: 06/30/2005
• Published: 01/04/2007
• Est. Priority Date: 06/30/2005
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Mizikovsky, Semyon, Rance, Robert
• Granted Patent: US 7,602,918 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 36/0038 of security context information
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

The present invention provides a method of wireless communication involving at least one first base station associated with a first access serving network and at least one second base station associated with a second access serving network is provided. The method may include generating a first key associated with the first access serving network and the second base station, receiving information indicating that the first key is temporary, and establishing a communication link with the second base station using the first key.

Claims

1. A method of wireless communication involving at least one first base station associated with a first access serving network and at least one second base station associated with a second access serving network, comprising:

generating a first key associated with the first access serving network and the second base station;

receiving information indicating that the first key is temporary; and

establishing a temporary security association with the second base station using the first key.

2. The method of claim 1, wherein generating the first key comprises generating the first key using a first master key associated with the first access serving network and an identifier associated with the second base station.

3. The method of claim 2, wherein receiving the information indicating that the first key is temporary comprises receiving information indicating that the first key was generated using the first master key.

4. The method of claim 3, wherein receiving the information indicating that the first key is temporary comprises receiving information indicating that a second master key is to be generated by the second access serving network.

5. The method of claim 4, comprising negotiating the second master key with the second access serving network.

6. The method of claim 5, wherein negotiating the second master key comprises negotiating the second master key in response to receiving the information indicating that the first key is temporary.

7. The method of claim 5, wherein negotiating the second master key comprises:

determining a channel condition associated with the communication link with the second base station; and

negotiating the second master key based on the channel condition.

8. The method of claim 1, comprising receiving encrypted data from the second base station, the encrypted data being provided to the second base station by the first base station.

9. A method of wireless communication involving a mobile unit, at least one first base station associated with a first access serving network, and at least one second base station associated with a second access serving network, the method comprising:

providing information indicative of a first key associated with the first access serving network and the second base station; and

providing information indicating that the first key is temporary.

10. The method of claim 9, comprising generating the first key using a first master key associated with the first access serving network and an identifier associated with the second base station.

11. The method of claim 9, wherein providing the information indicative of the first key comprises providing the information indicative of the first key to at least one of the mobile unit, the second base station, and the second access serving network.

12. The method of claim 9, wherein providing the information indicative of the first key comprises providing the information indicative of the first key in response to determining that the mobile unit is being handed off to the second base station.

13. The method of claim 9, wherein providing the information indicating that the first key is temporary comprises providing the information indicating that the first key is temporary to at least one of the mobile unit, the second base station, and the second access serving network.

14. The method of claim 9, wherein providing the information indicating that the first key is temporary comprises providing the information indicating that the first key is temporary in response to determining that the mobile unit is being handed off to the second base station.

15. The method of claim 9, comprising providing a random number and data encrypted using the random number to the second base station.

16. A method of wireless communication involving a mobile unit, at least one first base station associated with a first access serving network, and at least one second base station associated with a second access serving network, the method comprising:

receiving information indicative of a first key associated with the first access serving network and the second base station;

receiving information indicating that the first key is temporary; and

establishing a temporary security association with the mobile unit using the first key.

17. The method of claim 16, wherein receiving said information indicative of the first key comprises receiving information indicative of a first key generated using a first master key associated with the first access serving network and an identifier associated with the second base station.

18. The method of claim 17, wherein receiving the information indicating that the first key is temporary comprises receiving information indicating that a second master key is to be generated by the second access serving network.

19. The method of claim 18, comprising negotiating the second master key with the mobile unit.

20. The method of claim 19, comprising receiving a request to negotiate the second master key from the mobile unit, and wherein negotiating the second master key comprises negotiating the second master key in response to receiving the request from the mobile unit.

21. The method of claim 16, comprising receiving a random number and data encrypted using the random number from the second base station.