Apparatus, system and method for security management

Abstract

There is provided a network system including one or more first MMEs ( 30 ), and a second MME ( 40 ) separated from the first MMEs ( 30 ). In one of operation cases, the first MME ( 30 ) pushes, to the second MME ( 40 ), security context for a UE ( 10 ) that attaches to the first MME ( 30 ). The second MME ( 40 ) stores the security context. The first MME ( 30 ) further pushes the latest security context to the second MME ( 40 ), during a switch-off procedure for the first MME ( 30 ). The second MME ( 40 ) updates the stored security context with the latest security context. The first MME ( 30 ) pulls the security context from the second MME ( 40 ), when the UE ( 10 ) re-attaches to the first MME ( 30 ) or is handovered from different one of the first MMEs ( 30 ).

What is claimed is: 
     
         1 .- 8 . (canceled) 
     
     
         9 . A method for a user equipment comprising:
 sending a request message to a first communication apparatus via a base station;   being authenticated by a second communication apparatus that has received a request for authenticating the user equipment (UE) from the first communication apparatus; and   receiving an accept message from the first communication apparatus via the base station,   wherein the second communication apparatus, by receiving the request for authenticating the UE from the first communication apparatus, obtains authentication information on the UE from a third communication apparatus,   wherein based on the authentication information, the UE is authenticated by the second communication apparatus, and   wherein the UE receives the accept message from the first communication apparatus, which has obtained security related information from the second communication apparatus, via the base station.   
     
     
         10 . A method performed by a first communication apparatus, the method comprising:
 receiving a request for authenticating a user equipment (UE) from a second communication apparatus;   obtaining authentication information on the UE from a third communication apparatus according to reception of the request for authenticating the UE;   authenticating the UE using the authentication information; and   sending security related information to the second communication apparatus once the UE is authenticated.