FAST-ACCESSING METHOD AND APPARATUS

• US 20140337935A1
• Filed: 02/06/2012
• Published: 11/13/2014
• Est. Priority Date: 02/06/2012
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Liu, Yang, Li, Haitao, Lei, Yixue, Zhang, Da Jiang
• Granted Patent: US 9,807,072 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 36/0038 of security context information
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00

Abstract

A fast-accessing method may comprise: establishing a first security connection between a first network node and a user equipment; obtaining first information from a second network node, wherein the first information comprises at least one of system information of the second network node and an identifier of a security algorithm selected by the second network node for the user equipment; providing second information to the second network node, in response to an indication of the second network node from the user equipment, wherein the second information comprises security information related to the user equipment; and sending the first information to the user equipment for establishing a second security connection between the user equipment and the second network node.

Claims

1-36. -36. (canceled)

36. A method, comprising:

establishing a first security connection between a first network node and a user equipment;

obtaining first information from a second network node, wherein the first information comprises at least one of;

system information of the second network node, and an identifier of a security algorithm selected by the second network node for the user equipment;

providing second information to the second network node, in response to an indication of the second network node from the user equipment, wherein the second information comprises security information related to the user equipment; and

sending the first information to the user equipment for establishing a second security connection between the user equipment and the second network node.

37. The method according to claim 36, wherein establishing the first security connection between the first network node and the user equipment comprises obtaining a first security key for the first security connection, and wherein the security information related to the user equipment comprises:

an identifier of the user equipment, and a second security key generated based at least in part on the first security key.

38. The method according to claim 36, wherein the first information is obtained through a direct interface or an indirect interface between the first network node and the second network node.

39. The method according to claim 36, wherein the first security connection is still maintained when the second security connection is established.

40. An apparatus, comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

establish a first security connection between the apparatus and a user equipment;

obtain first information from another apparatus, wherein the first information comprises at least one of;

system information of the another apparatus, and an identifier of a security algorithm selected by the another apparatus for the user equipment;

provide second information to the another apparatus, in response to an indication of the another apparatus from the user equipment, wherein the second information comprises security information related to the user equipment; and

send the first information to the user equipment for establishing a second security connection between the user equipment and the another apparatus.

41. The apparatus according to claim 40, wherein establish the first security connection between the apparatus and the user equipment comprises obtain a first security key for the first security connection, and wherein the security information related to the user equipment comprises:

an identifier of the user equipment, and a second security key generated based at least in part on the first security key.

42. The apparatus according to claim 40, wherein the first information is obtained through a direct interface or an indirect interface between the apparatus and the another apparatus.

43. The apparatus according to claim 40, wherein the first security connection is still maintained when the second security connection is established.

44. A method, comprising:

establishing a first security connection between a first network node and a user equipment;

sending an indication of a second network node to the first network node; and

receiving first information from the first network node for establishing a second security connection between the user equipment and the second network node, wherein the first information comprises at least one of;

system information of the second network node, and an identifier of a security algorithm selected by the second network node for the user equipment.

45. The method according to claim 44, wherein establishing the second security connection between the user equipment and the second network node comprises:

performing an authentication procedure based at least in part on the first information and second information comprising security information related to the user equipment.

46. The method according to claim 45, wherein establishing the first security connection between the first network node and the user equipment comprises obtaining a first security key for the first security connection, and wherein the security information related to the user equipment comprises:

an identifier of the user equipment, and a second security key generated based at least in part on the first security key.

47. The method according to claim 44, wherein the first security connection is still maintained when the second security connection is established.

48. An apparatus, comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

establish a first security connection between a first network node and the apparatus;

send an indication of a second network node to the first network node; and

receive first information from the first network node for establishing a second security connection between the apparatus and the second network node, wherein the first information comprises at least one of;

system information of the second network node, and an identifier of a security algorithm selected by the second network node for the apparatus.

49. The apparatus according to claim 48, wherein establish the second security connection between the apparatus and the second network node comprises:

perform an authentication procedure based at least in part on the first information and second information comprising security information related to the apparatus.

50. The apparatus according to claim 49, wherein establish the first security connection between the first network node and the apparatus comprises obtain a first security key for the first security connection, and wherein the security information related to the apparatus comprises:

an identifier of the apparatus, and a second security key generated based at least in part on the first security key.

51. The apparatus according to claim 48, wherein the first security connection is still maintained when the second security connection is established.