Telefonaktiebolaget Lm Ericsson (publ)

Karl Norrman

Rolf Blom

Mats Näslund

Monica Wifvesson

Gunnar Mildh

Stefan Wager

Vesa Lehtovirta

Fredrik Gunnarsson

Icaro L J Da Silva

Magnus Stattin

Jari Tapio Vikberg

Osman Nuri Can Yilmaz

Fredrik Lindholm

Noamen Ben Henda

Niklas Johansson

Johan Rune

Paul Schliwa-Bertling

Qingyu Miao

Jari Arkko

Rui Fan

Pradeepa Ramachandra

Andreas Bergström

Prajwol Kumar Nakarmi

Robert Baldemair

Stefan Parkvall

Bengt Lindoff

Jinhua Liu

Yi-Pin Eric Wang

Erik Bengt Dahlman

Andres Reial

Erik A Eriksson

Pål Frenger

Henrik Sahlin

Dennis Hui

Martin Hessler

Sven Oscar Petersson

Joakim Axmon

Qianxi Lu

Johan Torsner

Gabor Fodor

Fredrik Athley

Walter Müller

Janne Peisa

Kumar Balachandran

Joachim Sachs

Ali S Khayrallah

Gen Li

Claes Tidestav

Thorsten Lohmar

Zhang Zhang

Bo Hagerman

Lars Lindbom

Niclas Wiberg

Johan Furuskog

Jonas Fröberg Olsson

Torgny Palenius

Jianfeng Wang

Hai Feng Wang

Lars Sundström

Zhan Zhang

Peter Alriksson

Jose Luis Pradas

Pontus Wallentin

Patrik Rugeland

Henrik Asplund

Martin Johansson

Karl Werner

Mikael Coldrey

Patrik Torgny Karlsson

Johan Axnäs

Jonas Kronander

Mårten Ericson

Shehzad Ali Ashraf

Fredrik Lindqvist

Reza Moosavi

Ning He

Dennis Sundman

Mikael Prytz

Stefan Rommer

Anders Furuskär

Vesa Torvinen

Håkan Björkegren

Oumer Teyeb

Bernard Smeets

Oscar Ohlsson

Stefan Engström

Johan Nilsson

Tomas Hedberg

Dinand Roeland

Filip Mestanov

Bo Lincoln

Angelo Centonza

Anders Wallén

Wassim Michel Haddad

Qian Chen

Ghyslain Pelletier

Alex Krister Raith

György Miklós

Henrik Rydén

Patrik Salmela

The present disclosure relates to methods and apparatus for flexible, security context management during AMF changes. One aspect of the disclosure is a mechanism for achieving backward security during AMF changes in idle mode. Instead of passing the current NAS key to the target AMF, the source AMF derives a new NAS key, provides the new NAS key to the target AMF, along with a key change indication indicating that the NAS key has changed. The target AMF sends the key change indication to the user equipment.

Security context handling in 5G during idle mode

A method performed by a co-ordination network entity in a communications network includes transmitting a request message to a network registration entity in the communications network for identification information for a plurality of candidate network entities in the communications network capable of performing collaborative learning, and receiving identification information for the plurality of candidate network entities from the network registration entity. The method further includes initiating, at one or more network entities of the plurality of candidate network entities, training of a model using a machine-learning algorithm as part of a collaborative learning process.

Methods, apparatus and machine-readable media relating to machine-learning in a communication network

Methods and apparatus in a fifth-generation wireless communications network, including an example method, in a wireless device, that includes determining a reporting quality threshold for a parameter related to channel state information (CSI); performing a measurement for each of a plurality of beams from a first predetermined set of beams for evaluation; evaluating the measurement for each of the plurality of beams against the reporting quality threshold; discontinuing the performing and evaluating of measurements in response to determining that the reporting quality threshold is met for one of the beams, such that one or more beams in the first predetermined set of beams are not measured and evaluated; and reporting, to the wireless communications network, CSI for the one of the beams.

Network architecture, methods, and devices for a wireless communications network

The present disclosure generally relates to the field of security context setup. More specifically, the present disclosure relates to techniques of supporting security context setup in a wireless communication network. A method embodiment relates to supporting security context setup in a wireless communication network, the method comprising initiating (S), by a radio access network (RAN) element of the wireless communication network, Access Stratum (AS) security context setup for a first Radio Access Technology (RAT) and a second RAT in a common signaling procedure.

Multi-RAT access stratum security

Core network equipment is configured for use in a core network of a wireless communication system. The core network equipment is configured to switch switching to using a new non-access stratum, NAS, security context between a user equipment and the core network equipment. The core network equipment is also configured to, during or in association with a handover procedure for handover of the user equipment, signal from the core network equipment that the new NAS security context between the user equipment and the core network equipment is to be used as a basis for an access stratum (AS) security context between the user equipment and radio access network equipment.

Security context in a wireless communication system

A method performed by a first network entity in a communications network is provided. The method comprises receiving a request from a second network entity, the request comprising one or more selection criteria for selecting network entities to participate in a collaborative learning process to train a model using a machine learning algorithm. The method further comprises transmitting a response message comprising an indication of whether or not the first network entity satisfies the one or more selection criteria.

A method for operating a User Equipment (UE) is disclosed, the UE configured to connect to a communication network. The method comprises: indicating to the communication network an Integrity Protection for User Plane (IPUP) mode supported by the UE when requesting registration with the communication network. The IPUP mode comprises one of: use of Integrity Protection for User Plane data exchanged with the UE, non-use of Integrity Protection for User Plane data exchanged with the UE, or use of Integrity Protection for User Plane data, and non-use of Confidentiality Protection for User Plane data.

Methods for integrity protection of user plane data

Methods and apparatus in a fifth-generation wireless communications, including an example method, in a wireless device, that includes receiving a downlink signal comprising an uplink access configuration index, using the uplink access configuration index to identify an uplink access configuration from among a predetermined plurality of uplink access configurations, and transmitting to the wireless communications network according to the identified uplink access configuration. The example method further includes, in the same wireless device, receiving, in a first subframe, a first Orthogonal Frequency-Division Multiplexing (OFDM) transmission formatted according to a first numerology and receiving, in a second subframe, a second OFDM transmission formatted according to a second numerology, the second numerology differing from the first numerology. Variants of this method, corresponding apparatuses, and corresponding network-side methods and apparatuses are also disclosed.

According to certain embodiments, a method by a wireless device includes detecting an integrity check failure associated with a Packet Data Convergence Protocol (PDCP) data Protocol Data Unit (PDU). In response to detecting the integrity check failure, the PDCP data PDU is discarded and an indication is sent to a network node. The indication informs the network node of the integrity check failure.

Systems and methods for the handling of data radio bearer integrity protection failure in NR

A message authentication code, for a message transmitted and received over a communications network, is formed by applying inputs to an integrity algorithm acting on the message. The inputs comprise: an integrity key; a value indicating a transfer direction; and a frame-dependent integrity input, wherein the frame-dependent integrity input is a frame-dependent modulo count value that also depends on a random value and on a frame-specific sequence number.

Integrity protection

A method in a User Equipment (UE) of an Evolved Packet System (EPS) establishes a security key (K_eNB) for protecting Radio Resource Control/User Plane (RRC/UP) traffic exchanged with a serving eNodeB. The method comprises sending a Non-Access Stratum (NAS) Service Request to a Mobility Management Entity (MME), the request indicating a NAS uplink sequence number (NAS_U_SEQ). The method further comprises receiving an indication of the NAS_U_SEQ of the NAS Service Request sent to the MME, back from the MME via the eNodeB. The method further comprises deriving the K_eNB from at least the received indication of the NAS_U_SEQ and from a stored Access Security Management Entity-key (K_ASME) shared with said MME.

Method and arrangement in a telecommunication system

A method of verifying that a first device and a second device are physically interconnected is disclosed. The method is performed by a verifier and includes sending a challenge Rto the first device, for use as basis for input to a first physical unclonable function, PUF, &#x2014;part of the first device, receiving, a response, RES, from the second device, the response RESbeing based on an output of a second PUF part of the second device, and verifying that the first device and the second device are interconnected for the case that the received response, RES, and an expected response fulfills a matching criterion. A method in a first device and a method in a second device and corresponding devices, computer programs and computer program products are also disclosed.

Methods of verifying that a first device and a second device are physically interconnected

According to an aspect, there is provided a method of operating a first radio access node in a communication network, the method comprising determining () whether a first base key that is used to determine a first encryption key for encrypting communications between a communication device and the first radio access node can be used by a second radio access node for determining a second encryption key for encrypting communications between the communication device and the second radio access node; and if the first base key can be used by the second radio access node, sending () the first base key to the second radio access node during handover of the communication device from the first radio access node to the second radio access node.

Nodes for use in a communication network and methods of operating the same

The present disclosure relates to methods and apparatus for flexible, security context management during AMF changes. One aspect of the disclosure is a mechanism for achieving backward security during AMF changes. Instead of passing the current NAS key to the target AMF, the source AMF derives a new NAS key, provides the new NAS key to the target AMF, and sends a key change indication to the UE, either directly or through some other network node. The UE can then derive the new NAS key from the old NAS key. In some embodiments, the AMF may provide a key generation parameter to the UE to use in deriving the new NAS key. In other embodiments, the target AMF may change one or more security algorithms.

Security context handling in 5G during connected mode

Growing community of inventors

Stockholm, Sweden

Karl Norrman