Supporting interworking and/or mobility between different wireless communication systems

Abstract

There is provided a method performed by a network unit, and a corresponding network unit as well as a corresponding wireless communication device, for supporting interworking and/or idle mode mobility between different wireless communication systems, including a higher generation wireless system and a lower generation wireless system, to enable secure communication with the wireless communication device. The method comprises selecting, in connection with a registration procedure and/or a security context activation procedure of the wireless communication device with the higher generation wireless system, at least one security algorithm of the lower generation wireless system, also referred to as lower generation security algorithm(s). The method also comprises sending a control message including information on the selected lower generation security algorithm(s) to the wireless communication device. The method further comprises storing information on the selected lower generation security algorithm(s) in the network unit.

1 . A network unit, comprising:
 processing circuitry, memory, and transceiver circuitry collectively configured to perform operations comprising:
 selecting, in connection with a registration procedure and/or a security context activation procedure of a wireless communication device with a higher generation wireless system, at least one security algorithm of a lower generation wireless system, also referred to as lower generation security algorithm(s); 
 sending a control message including information on the selected lower generation security algorithm(s) to the wireless communication device; and 
 storing information on the selected lower generation security algorithm(s) in the network unit. 
   
     
     
         2 . The network unit of  claim 1 , wherein the operations are performed by a network unit of the higher generation wireless system when the wireless communication device registers and initiates establishment of a security context with the higher generation wireless system. 
     
     
         3 . The network unit of  claim 2 , wherein the network unit of the higher generation wireless system is a core network unit configured for mobility management, and/or a cloud-based network unit. 
     
     
         4 . The network unit of  claim 2 , wherein the network unit of the higher generation wireless system is an Access and Mobility management Function, AMF, unit. 
     
     
         5 . The network unit of  claim 1 , wherein the control message is a security context activation procedure command. 
     
     
         6 . The network unit of  claim 1 , wherein the control message is a Non-Access Stratum, NAS, Security Mode Command, SMC, message. 
     
     
         7 . The network unit of  claim 1 , wherein the lower generation security algorithm(s) is/are selected based on security capabilities of the wireless device in the higher generation wireless system, which is a superset of the security capabilities of the wireless device in the lower generation wireless system. 
     
     
         8 . The network unit of  claim 7 , wherein information on the security capabilities of the wireless device in the lower generation wireless system is/are included in information on the security capabilities of the wireless device in the higher generation wireless system. 
     
     
         9 . The network unit of  claim 7 , wherein information on the security capabilities of the wireless device is received in a Registration Request in the higher generation wireless system. 
     
     
         10 . The network unit of  claim 1 , wherein the control message also includes information on selected higher generation security algorithm(s). 
     
     
         11 . The network unit of  claim 1 , wherein the higher generation wireless system is a 5G/NGS system and the lower generation wireless system is a 4G/EPS system, or the higher generation wireless system is a 5G/NGS system and the lower generation wireless system is a 3G/UMTS system, or the higher generation wireless system is a 4G/EPS system and the lower generation wireless system is a 3G/UMTS system. 
     
     
         12 . The network unit of  claim 1 , further comprising activating Non-Access Stratum, NAS, security and/or GPRS Mobility Management, GMM, security with the lower generation wireless system based on the stored selected lower generation security algorithm(s) during idle mode mobility of the wireless communication device. 
     
     
         13 . The network unit of  claim 1 , wherein the operations further comprise sending information to the wireless communication device indicating a security context to be used for integrity protection of a Tracking Area Update, TAU, message. 
     
     
         14 . The network unit of  claim 13 , wherein the information indicating a security context to be used for integrity protection of a TAU message is sent together with the information on the selected lower generation security algorithm(s) in the control message. 
     
     
         15 . The network unit of  claim 13 , wherein the information indicating a security context to be used for integrity protection of a TAU message includes information indicating whether a higher generation security context or a lower generation security context is to be used for integrity protection of the TAU message. 
     
     
         16 . A wireless communication device, comprising:
 processing circuitry, memory, and transceiver circuitry collectively configured to perform operations comprising:
 receiving, in connection with a security context activation procedure of the wireless communication device with a higher generation wireless system, a control message including information on at least one security algorithm of a lower generation wireless system, also referred to as lower generation security algorithm(s); 
 storing information on the selected lower generation security algorithm(s) in the wireless communication device. 
   
     
     
         17 . The wireless communication device of  claim 16 , wherein the control message is a security context activation procedure command. 
     
     
         18 . The wireless communication device of  claim 16 , wherein the control message is a Non-Access Stratum, NAS, Security Mode Command, SMC, message. 
     
     
         19 . The wireless communication device of  claim 16 , wherein the operations further comprise receiving information indicating a security context to be used for integrity protection of a Tracking Area Update, TAU, message. 
     
     
         20 . The wireless communication device of  claim 16 , wherein the higher generation wireless system is a 5G/NGS system and the lower generation wireless system is a 4G/EPS system, or the higher generation wireless system is a 5G/NGS system and the lower generation wireless system is a 3G/UMTS system, or the higher generation wireless system is a 4G/EPS system and the lower generation wireless system is a 3G/UMTS system.