Method and apparatus for applying security information in wireless communication system
A method and apparatus for applying security information in a wireless communication system is provided. A user equipment (UE) obtains first security information and second security information, applies the first security information to a first set of radio bearers (RBs) which is served by a master eNodeB (MeNB), and applies the second security information to a second set of RBs which is served by a secondary eNodeB (SeNB).
1. A method for applying, by a user equipment (UE), a security key in a wireless communication system, the method comprising:
establishing both a first connection with a first evolved NodeB (eNB) and a second connection with a second eNB;
obtaining a first security key used for the first eNB;
deriving a second security key used for the second eNB from the first security key;
deriving a user traffic key for the second eNB from the second security key with a ciphering algorithm for the second eNB; and
applying the user traffic key for encryption or decryption of user traffic for the second eNB,
applying the first security key,
wherein the second security key is derived, by the first eNB, from the first security key and transmitted, by the first eNB, to the second eNB, and used by the second eNB, and
wherein applying the first security key comprises:
deriving a signaling key for integrity protection or ciphering of radio resource control (RRC) messages from the first security key; and
applying the signaling key.
2. The method of claim 1 , wherein the first eNB is a master eNB (MeNB); and
wherein the second eNB is a secondary eNB (SeNB).
3. The method of claim 2 , wherein the user traffic key is K UPenc .
4. The method of claim 2 , wherein the second security key is applied to radio bearers (RBs) of the SeNB.
5. The method of claim 2 , wherein the second security key is applied to one or more cells of the SeNB.
6. The method of claim 2 , further comprising obtaining a first security parameter indicating a first encryption algorithm for the MeNB.
7. The method of claim 2 , wherein the first connection is a radio resource control (RRC) connection for signaling.
8. The method of claim 2 , wherein the second connection is an L2 connection for user traffic.
9. The method of claim 1 , wherein the signaling key is at least one of K RRCint or K RRCenc .
10. A user equipment (UE) comprising:
a memory;
a radio frequency (RF) unit; and
a processor, coupled to the memory and the RF unit, that:
establishes both a first connection with a first evolved NodeB (eNB) and a second connection with a second eNB;
obtains a first security key used for the first eNB;
derives a second security key used for the second eNB from the first security key;
derives a user traffic key for the second eNB from the second security key with a ciphering algorithm for the second eNB; and
applies the user traffic key for encryption or decryption of user traffic for the second eNB,
applies the first security key,
wherein the second security key is derived, by the first eNB, from the first security key and transmitted, by the first eNB, to the second eNB, and used by the second eNB, and
wherein applying the first security key comprises:
deriving a signaling key for integrity protection or ciphering of radio resource control (RRC) messages from the first security key; and
applying the signaling key.