SECURE DISTRIBUTED HANDOVER SIGNALING

• US 20070171871A1
• Filed: 12/27/2006
• Published: 07/26/2007
• Est. Priority Date: 01/04/2006
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Forsberg, Dan
• Granted Patent: US 7,864,731 B2
• Time in Patent Office: Days
• US Class Current: 370/331
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 36/0038 of security context information

Abstract

Provided are apparatuses and methods for providing security measures for a handover execution procedure in a communication network. In one example, the handover procedure is initiated by more than one base station. In another example, a base station may not launch a Denial or Service (DoS) attack towards other base stations or towards a core network using handover signaling messages. For example, a user device may send at least one encryption parameter, such as a Nonce associated with the user device to a source base station. Handover of the user device from the source base station to a target base station may be accomplished based on the at least one encryption parameter to avoid the DoS attack.

Claims

1. A method comprising:

sending a measurement report associated with a mobile communication device to a source base station, the measurement report including a first encryption parameter;

receiving a handover command including a second encryption parameter corresponding to a target base station from the source base station; and

sending a handover confirmation message to the target base station, the handover confirmation message including identification information corresponding to at least one of the source base station and the target base station.

2. The method of claim 1 wherein the measurement report includes a Nonce associated with the mobile communication device.

3. The method of claim 1 wherein the measurement report is configured to cause the source base station to send a context push message to the target base station.

4. The method of claim 3 wherein the context push message includes at least one of an identifier associated with the source base station, an identifier associated with the target base station, a Session Keys Context (SKC), a Nonce associated with the mobile communication device, a Nonce associated with a network, or a network context.

5. The method of claim 1 further comprising receiving contents of a context confirm message from the source base station.

6. The method of claim 5 wherein the mobile communication device determines a session key responsive to receiving the contents of the context confirm message.

7. The method of claim 6 wherein the handover confirmation message further includes at least one of:

a Nonce associated with the mobile communication device and a Nonce associated with a network.

8. A computer readable medium storing computer readable instructions that, when executed by a processor, cause the processor to perform a method comprising:

sending a measurement report associated with a mobile communication device to a source base station, the measurement report including a first encryption parameter;

receiving a handover command including a second encryption parameter corresponding to a target base station from the source base station; and

sending a handover confirmation message to the target base station, the handover confirmation message including identification information corresponding to at least one of the source base station or the target base station.

9. The computer readable medium of claim 8 wherein the measurement report includes a Nonce associated with the mobile communication device.

10. The computer readable medium of claim 8 wherein the measurement report is configured to cause the source base station to send a context push message to the target base station.

11. The computer readable medium of claim 10 wherein the context push message includes at least one of an identifier associated with the source base station, an identifier associated with the target base station, a Session Keys Context (SKC), a Nonce associated with the mobile communication device, a Nonce associated with a network, or a network context.

12. The computer readable medium of claim 8 further including instructions for receiving contents of a context confirm message from the source base station.

13. The computer readable medium of claim 12 wherein the mobile communication device determines a session key responsive to receiving the contents of the context confirm message.

14. The computer readable medium of claim 13 wherein the handover confirmation message further includes at least one of:

a Nonce associated with the mobile communication device and a Nonce associated with a network.

15. An apparatus comprising:

a processor; and

memory storing computer readable instructions that, when executed by the processor, cause the apparatus to perform a method comprising;

sending a measurement report to a source base station, the measurement report including a first encryption parameter;

receiving a handover command including a second encryption parameter corresponding to a target base station from the source base station; and

sending a handover confirmation message to the target base station, the handover confirmation message including identification information corresponding to at least one of;

the source base station or the target base station.

16. The apparatus of claim 15, wherein the apparatus comprises a mobile communication device.

17. The apparatus of claim 15, wherein the memory further stores instructions for receiving contents of a context confirm message from the source base station.

18. The apparatus of claim 15, wherein the handover confirmation message further includes at least one of:

a Nonce associated with the mobile communication device and a Nonce associated with a network.

19. A computer readable medium storing computer readable instructions that, when executed by a processor, cause the processor to perform a method comprising:

receiving, at a source base station, a measurement report associated with a mobile communication device, the measurement report including an encryption parameter;

transmitting a context push message to a target base station, the context push message configured to initiate a handoff of the mobile communication device;

receiving a context confirmation message from the target base station;

transmitting a handover command to the mobile communication device; and

upon completion of the handover of the mobile communication device from the source base station to the target base station, receiving a handover completion message from the target base station.

20. The computer readable medium of claim 19, further comprising instructions for transmitting a change mapping message to a core network including at least one of the mobility management entity (MME) and the user plane entity (UPE).

21. The computer readable medium of claim 19, further comprising instructions for transmitting a relocation indication message to a mobility management entity (MME) of a core network.

22. The computer readable medium of claim 19 wherein the context push message includes at least one of an identifier associated with the source base station, an identifier associated with the target base station, a Session Keys Context (SKC), a Nonce associated with the mobile communication device, a Nonce associated with a network, or a network context.

23. The computer readable medium of claim 19 wherein the measurement report includes a Nonce associated with the mobile communication device.

24. The computer readable medium of claim 19 wherein the handover command includes a second encryption parameter identifying the target base station.

25. The computer readable medium of claim 19 wherein the context confirmation message includes at least one of an identifier associated with the source base station, an identifier associated with the target base station, a Nonce associated with the mobile communication device, a Nonce associated with a network, a radio link ID associated with the target base station, or a context ID associated with the target base station.

26. The computer readable medium of claim 19 wherein the context confirmation message is signed by the target base station with an integrity key.

27. The computer readable medium of claim 26 wherein the integrity key is derived from an SKC Protection key (SPK) associated with the mobile communication device.

28. The computer readable medium of claim 19 wherein the context push message includes a network context.

29. An apparatus comprising:

means for sending a measurement report to a source base station, the measurement report including a first encryption parameter;

means for receiving a handover command including a second encryption parameter corresponding to a target base station from the source base station; and

means for sending a handover confirmation message to the target base station, the handover confirmation message including identification information corresponding to at least one of;

the source base station or the target base station.

30. The apparatus of claim 29, wherein the measurement report includes a Nonce associated with the mobile communication device.