Apparatus and method for communication establishment in authentication and key management for applications (AKMA)
The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein provide a system and method for key refresh in Authentication and Key Management for Applications (AKMA). The proposed method is to support K AKMA refresh by requesting the refreshing parameters from the network once the K AF is about to expire. Further, the proposed method is to support K AF refresh by requesting the refreshing parameters from the network once the K AF is about to expire. Further, the proposed method is used to support a mechanism to address the Key synchronisation issue at a User Equipment (UE) side, an Application Function (AF) side and at an AAnF using a key index included as a part of AKMA key identifier (A-KID). Further the proposed method uses certain mechanisms to provide the refresh parameter to the AUSF, the AAnF and the UE as a part of AKMA Refresh procedure or as a part of UPU procedure. Further, the proposed method supports AKMA key refresh with limited impacts on AKMA services in 5G system.
1 . A method performed by a unified data management (UDM) entity, in a mobile communication system, the method comprising:
receiving, from an authentication and key management for application (AKMA) anchor function (AAnF) entity, a first request message including a AKMA refresh indication and a key index;
triggering a AKMA key refresh procedure, based on the first request message; and
transmitting, to an authentication server function (AUSF) entity, a second request message including the AKMA refresh indication,
wherein the key index is used to identify a refreshed key, and
wherein the key index is monotonically incremented for each additional calculation of an application function (AF) key from the refreshed key.
2 . The method of claim 1 ,
wherein a AKMA key and a AKMA key identifier (A-KID) is generated based on the second request message, and
wherein one of bits in the A-KID includes the key index.
3 . The method of claim 2 ,
wherein the AKMA key and the A-KID are transmitted to the AAnf entity.
4 . The method of claim 2 , further comprising:
receiving, from the AUSF entity, a first response message including at least one of a message authentication code integrity (MAC-I) parameter, a counter, the A-KID, the key index, or an AKMA refresh parameter (AKMARP),
wherein the MAC-I parameter and the counter are used to secure a refresh parameter.
5 . The method of claim 4 , further comprising:
providing, to a user equipment (UE) via an access and mobility management function (AMF) entity, AKMA key refresh data, wherein the AKMA key refresh data includes at least one of the AKMARP, whether the UE need to send an acknowledgement (ACK) to the UDM entity, the key index, the MAC-I parameter, or the counter.
6 . The method of claim 5 ,
wherein an application session between the UE and at least one AF entity is established based on the AKMA key refresh data.
7 . A method performed by an authentication server function (AUSF) entity, in a mobile communication system, the method comprising:
receiving, from a unified data management (UDM) entity, a request message including an Authentication and Key Management for Application (AKMA) refresh indication;
generating a AKMA key and a AKMA key identifier (A-KID) based on the request message; and
transmitting, to the UDM entity, a response message including at least one of a message authentication code integrity (MAC-I) parameter, a counter, the A-KID, a key index, or an AKMA refresh parameter (AKMARP),
wherein the key index is used to identify a refreshed key, and
wherein the key index is monotonically incremented for each additional calculation of an application function (AF) key from the refreshed key.
8 . The method of claim 7 ,
wherein one of bits in the A-KID includes the key index.
9 . The method of claim 7 , further comprising:
transmitting, to an AKMA anchor function (AAnF) entity, the AKMA key and the A-KID.
10 . A unified data management (UDM) entity, in a mobile communication system, the UDM entity comprising:
a transceiver; and
a controller couple with the transceiver, and configured to:
receive, from an authentication and key management for application (AKMA) anchor function (AAnF) entity, a first request message including a AKMA refresh indication and a key index,
trigger a AKMA key refresh procedure, based on the first request message, and
transmit, to an authentication server function (AUSF) entity, a second request message including the AKMA refresh indication,
wherein the key index is used to identify a refreshed key, and
wherein the key index is monotonically incremented for each additional calculation of an application function (AF) key from the refreshed key.
11 . The UDM entity of claim 10 ,
wherein a AKMA key and a AKMA key identifier (A-KID) is generated based on the second request message, and
wherein one of bits in the A-KID includes the key index.
12 . The UDM entity of claim 11 ,
wherein the AKMA key and the A-KID are transmitted to the AAnf entity.
13 . The UDM entity of claim 11 , wherein the controller is further configured to:
receive, from the AUSF entity, a first response message including at least one of a message authentication code integrity (MAC-I) parameter, a counter, the A-KID, the key index, or an AKMA refresh parameter (AKMARP),
wherein the MAC-I parameter and the counter are used to secure a refresh parameter.
14 . The UDM entity of claim 13 , wherein the controller is further configured to:
providing, to a user equipment (UE) via an access and mobility management function (AMF) entity, AKMA key refresh data, wherein the AKMA key refresh data includes at least one of the AKMARP, whether the UE need to send an acknowledgement (ACK) to the UDM entity, the key index, the MAC-I parameter, or the counter.
15 . The UDM entity of claim 14 ,
wherein an application session between the UE and at least one AF entity is established based on the AKMA key refresh data.
16 . An authentication server function (AUSF) entity, in a mobile communication system, the AUSF entity comprising:
a transceiver; and
a controller couple with the transceiver, and configured to:
receive, from a unified data management (UDM) entity, a request message including an Authentication and Key Management for Application (AKMA) refresh indication,
generate a AKMA key and a AKMA key identifier (A-KID) based on the request message, and
transmit, to the UDM entity, a response message including at least one of a message authentication code integrity (MAC-I) parameter, a counter, the A-KID, a key index, or an AKMA refresh parameter (AKMARP),
wherein the key index is used to identify a refreshed key, and
wherein the key index is monotonically incremented for each additional calculation of an application function (AF) key from the refreshed key.
17 . The AUSF entity of claim 16 ,
wherein one of bits in the A-KID includes the key index.
18 . The AUSF entity of claim 16 , wherein the controller is further configured to:
transmit, to an AKMA anchor function (AAnF) entity, the AKMA key and the A-KID.