Apparatus, system and method for sce

Abstract

In order for supporting separate ciphering at an MeNB (20) and an SeNB (30), the MeNB (20) derives separate first and second keys (KUPenc-M, KUPenc-S) from a third key (KeNB). The first key (KUPenc-M) is used for confidentially protecting first traffic transmitted over U-Plane between the MeNB (20) and a UE (10). The first key (KUPenc-M) may be the same as current KUPenc or a new key. The second key (KUPenc-S) is used for confidentially protecting second traffic transmitted over the U-Plane between the UE (10) and the SeNB (30). The MeNB (20) sends the second key (KUPenc-S) to the SeNB (30). The UE (10) negotiates with the MeNB (20), and derives the second key (KUPenc-S) based on a result of the negotiation.

1 - 27 . (canceled) 
     
     
         28 . A UE (User Equipment) that is connected to a MN (Master Node) and a SN (Secondary Node) for dual connectivity, the UE comprising:
 at least one memory that stores a set of instructions; and   at least one processor configured to execute the set of instructions to:
 receive, from the MN, algorithm information and a parameter to derive a key, the algorithm information being obtained when the MN negotiates the algorithm information without using a handover procedure; 
 derive a ciphering key for a user plane based on the parameter; 
 perform secure communication with the SN using the ciphering key; and 
 control deletion of the ciphering key. 
   
     
     
         29 . The UE according to  claim 28 , wherein the MN receives the algorithm information from the SN. 
     
     
         30 . The UE according to  claim 28 , wherein the algorithm information is supported by the SN. 
     
     
         31 . The UE according to  claim 28 , wherein the MN controls PDCP (Packet Data Convergence Protocol) count. 
     
     
         32 . The UE according to  claim 28 , wherein the ciphering key comprise K UPenc . 
     
     
         33 . A method for a UE (User Equipment) in a communication system, the UE being connected to a MN (Master Node) and a SN (Secondary Node) for dual connectivity, the method comprising:
 receiving, from the MN, algorithm information and a parameter to derive a key, the algorithm information being obtained when the MN negotiates the algorithm information without using a handover procedure;   deriving a ciphering key for a user plane based on the parameter;   performing secure communication with the SN using the ciphering key; and   controlling deletion of the ciphering key.   
     
     
         34 . The method according to  claim 33 , wherein the MN receives the algorithm information from the SN. 
     
     
         35 . The method according to  claim 33 , wherein the algorithm information is supported by the SN. 
     
     
         36 . The method according to  claim 33 , wherein the MN controls PDCP (Packet Data Convergence Protocol) count. 
     
     
         37 . The method according to  claim 33 , wherein the ciphering key comprise K UPenc . 
     
     
         38 . A MN (Master Node) in a communication system, wherein a UE (User Equipment) in the communication system is connected to the MN and a SN (Secondary Node) for dual connectivity, the MN comprising:
 at least one memory that stores a set of instructions; and   at least one processor configured to execute the set of instructions to:
 receive a first key from a network node; 
 send the first key to the SN; 
 negotiate algorithm information without using a handover procedure; 
 send, to the UE, the algorithm information and a parameter so that the UE derives a ciphering key for a user plane based on the parameter and performs secure communication with the SN using the ciphering key; and 
 control PDCP (Packet Data Convergence Protocol) count. 
   
     
     
         39 . The MN according to  claim 38 , wherein the MN receives the algorithm information from the SN. 
     
     
         40 . The MN according to  claim 38 , wherein the algorithm information is supported by the SN. 
     
     
         41 . The MN according to  claim 38 , wherein the ciphering key comprise K UPenc . 
     
     
         42 . A method for a MN (Master Node) in a communication system, wherein a UE (User Equipment) in the communication system is connected to the MN and a SN (Secondary Node) for dual connectivity, the method comprising:
 receiving a first key from a network node;   sending the first key to the SN;   negotiating algorithm information without using a handover procedure;   sending, to the UE, the algorithm information and a parameter so that the UE derives a ciphering key for a user plane based on the parameter and performs secure communication with the SN using the ciphering key; and   controlling PDCP (Packet Data Convergence Protocol) count.   
     
     
         43 . The method according to  claim 42 , further comprising:
 receiving the algorithm information from the SN.   
     
     
         44 . The method according to  claim 42 , wherein the algorithm information is supported by the SN. 
     
     
         45 . The method according to  claim 42 , wherein the ciphering key comprise K UPenc .