Mtc key management for key derivation at both ue and network

Abstract

There is provided a new IWF SMC procedure for establishing security association between an MTC UE (10) and an MTC-IWF (20). The MTC-IWF (20) sends to the UE (10) at least an algorithm identifier which instructs the UE (10) to select one of algorithms for deriving a root key (K_iwf). The UE (10) derives the root key (K_iwf) in accordance with the selected algorithm, and derives at least a subkey for checking the integrity of messages transferred between the UE (10) and the MTC-IWF (20) by using the derived root key (K_iwf). The UE (10) protects uplink messages transmitted to the MTC-IWF (20) with the derived subkey. The MTC-IWF (20) protects downlink messages transmitted to the UE (10) with the same subkey derived at a core network.

What is claimed is: 
     
         1 . A User Equipment (UE) in a communication system including a network node, the UE comprising:
 at least one processor; and   at least one memory coupled to the at least one processor, the at least one memory storing instructions that when executed by the at least one processor cause the at least one processor to:
 receive, from the network node, a message comprising a parameter, the parameter related to derivation of a confidentiality key and an integrity key, wherein the message is protected by the integrity key; 
 derive the confidentiality key and the integrity key based on the parameter; 
 verify integrity of the message using the integrity key; and 
 send a reject message to the network node if there is a failure of verification of the integrity of the message. 
   
     
     
         2 . The UE of  claim 1 , wherein, upon execution of the instructions, the at least one processor is further caused to:
 perform secure communication with the network node using the confidentiality key and the integrity key if there is a successful verification of the integrity of the message.   
     
     
         3 . The UE of  claim 1 , wherein the UE is a Machine Type Communication (MTC) device. 
     
     
         4 . A method of a User Equipment (UE) in a communication system including a network node, the method comprising:
 receiving, from the network node, a message comprising a parameter, the parameter related to derivation of a confidentiality key and an integrity key, wherein the message is protected by the integrity key;   deriving the confidentiality key and the integrity key based on the parameter;   verifying integrity of the message using the integrity key; and   sending a reject message to the network node if there is a failure of verification of the integrity of the message.   
     
     
         5 . The method of  claim 4 , further comprising:
 performing secure communication with the network node using the confidentiality key and the integrity key if there is a successful verification of the integrity of the message.   
     
     
         6 . The method of  claim 4 , wherein the UE is a Machine Type Communication (MTC) device.