Method and device for generating access stratum key in communications system

1. A method for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, and the method comprises:

acquiring, by the first network-side device, an input parameter, wherein the input parameter is a new parameter each time it is used;

receiving, by the first network-side device, configuration information generated by the second network-side device;

generating, by the first network-side device, radio resource connection (RRC) reconfiguration information, wherein the RRC reconfiguration information comprises the configuration information;

sending, by the first network-side device, the RRC reconfiguration information to the UE, wherein the RRC reconfiguration information carries the input parameter;

calculating, by the first network-side device, an access stratum root key KeNB* for the second air interface according to the input parameter and an access stratum root key KeNB on the first air interface; and

sending, by the first network-side device, the KeNB* to the second network-side device.

2. The method according to claim 1 , wherein the input parameter comprises a value of a counter.

3. The method according to claim 2 , wherein the input parameter comprises a Packet Data Convergence Protocol count (PDCP COUNT) value of a bearer of the UE on the first air interface.

4. The method according to claim 3 , wherein the PDCP COUNT value corresponds to a configuration message and the configuration message is a configuration message used for the first network-side device to configure the second air interface.

5. A method for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, and the method comprises:

acquiring, by the UE, an input parameter, wherein the input parameter is a new parameter each time it is used;

sending, by the UE, configuration information generated by the second network-side device;

receiving, by the UE, RRC reconfiguration information from the first network-side device, wherein the RRC reconfiguration information comprises the configuration information, and the RRC reconfiguration information carries the input parameter;

calculating, by the UE, an access stratum root key KeNB* on the second air interface according to the input parameter and an access stratum root key KeNB on the first air interface; and

generating, by the UE, an access stratum key on the second air interface according to the KeNB*.

6. The method according to claim 5 , wherein the input parameter comprises a value of a counter.

7. The method according to claim 5 , wherein:

the input parameter comprises a random number generated by the first network-side device and/or a random number generated by the UE;

the acquiring, by the UE, an input parameter comprises:

acquiring, by the UE, the random number generated by the first network-side device and/or the random number generated by the UE; and

after the acquiring, by the UE, an input parameter, the method further comprises:

sending, by the UE, the random number generated by the UE to the first network-side device, or receiving the random number generated by the network-side network-side device.

8. The method according to claim 7 , wherein the sending, by the UE, the random number generated by the UE to the first network-side device comprises:

sending, by the UE, a setup completion message used to indicate that a radio link is successfully set up on the second air interface to the second network-side device, wherein the setup completion message carries the random number generated by the UE.

9. The method according to claim 7 , wherein the receiving the random number generated by the first network-side device comprises:

receiving a configuration message that is sent by the first network-side device to the UE and used for configuring the second air interface, wherein the configuration message carries the random number generated by the first network-side device.

10. A network-side device in a communications system, wherein a a user equipment (UE) is connected to the network-side device and to a second network-side device through a first air interface and a second air interface separately, only the network-side device connects to a control plane entity of a core network (CN), the second network-side device is connects to the network-side device via non-ideal backhaul, and the device comprises:

a processor, configured to acquire an input parameter, wherein the input parameter is a new parameter each time it is used;

a receiver, configured to receive configuration information generated by the second network-side device;

the processor, configured to generate radio resource connection (RRC) reconfiguration information, wherein the RRC reconfiguration information comprises the configuration information generated by the second network-side device;

a transmitter, configured to send the RRC reconfiguration information to the UE, wherein the RRC reconfiguration information carries the input parameter;

the processor, configured to calculate an access stratum root key KeNB* on the second air interface according to the input parameter and an access stratum root key KeNB on the first air interface; and

the transmitter, configured to send the KeNB* calculated by the processor to the second network-side device.

11. The network-side device according to claim 10 , wherein the input parameter acquired by the processor comprises a value of a counter.

12. The network-side device according to claim 11 , wherein the input parameter acquired by the processor comprises a Packet Data Convergence Protocol count (PDCP COUNT) value of a bearer of the UE on the first air interface.

13. The network-side device according to claim 12 , wherein the PDCP COUNT value acquired by the processor corresponds to a configuration message and the configuration message is a configuration message used for the network-side device to configure the second air interface.

14. A user equipment in a communications system, wherein the user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul and the user equipment comprises:

a processor, configured to acquire an input parameter, wherein the input parameter is a new parameter each time it is used;

a transmitter, configured to send configuration information generated by the second network-side device;

a receiver, configured to receive RRC reconfiguration information from the first network-side device, wherein the RRC reconfiguration information comprises the configuration information generated by the second network-side device, and the RRC reconfiguration information carries the input parameter;

the processor, configured to calculate an access stratum root key KeNB* on the second air interface according to the input parameter and an access stratum root key KeNB on the first air interface; and

the processor, configured to generate an access stratum key on the second air interface according to the KeNB*.

15. The user equipment according to claim 14 , wherein the input parameter acquired by the processor comprises a value of a counter.

16. The user equipment according to claim 14 , wherein the input parameter acquired by the processor comprises a random number generated by the first network-side device and/or a random number generated by the UE;

the processor is specifically configured to:

acquire the random number generated by the first network-side device and/or the random number generated by the UE; and

the transmitter is configured to send the random number that is generated by the processor to the first network-side device, or receive the random number generated by the first network-side device.

17. The user equipment according to claim 16 , wherein:

the transmitter is specifically configured to send a setup completion message used to indicate that a radio link is successfully set up on the second air interface to the second network-side device, wherein the setup completion message carries the random number generated by the UE.

18. The user equipment according to claim 16 , wherein

the receiver is configured to receive a configuration message that is sent by the first network-side device to the UE and used for configuring the second air interface, wherein the configuration message carries the random number generated by the first network-side device.

19. A non-transitory computer readable medium storing program codes for use by a network-side device for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, wherein the program codes comprise instructions to configure the network-side device for:

acquiring an input parameter, wherein the input parameter is a new parameter each time it is used;

receiving configuration information generated by the second network-side device;

generating a radio resource connection (RRC) reconfiguration information, wherein the RRC reconfiguration information comprises the configuration information generated by the second network-side device;

sending the RRC reconfiguration information to the UE, wherein the RRC reconfiguration information carries the input parameter;

calculating an access stratum root key KeNB* for the second air interface according to the input parameter and an access stratum root key KeNB on the first air interface; and

sending the KeNB* to the second network-side device.

20. A non-transitory computer readable medium storing program codes for use by a user equipment (UE) for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, wherein the program codes comprise instructions to configure the UE for:

acquiring an input parameter, wherein the input parameter is a new parameter each time it is used;

sending configuration information generated by the second network-side device;

receiving RRC reconfiguration information from the first network-side device, wherein the RRC reconfiguration information comprises the configuration information generated by the second network-side device, and the RRC reconfiguration information carries the input parameter;

calculating an access stratum root key KeNB* on the second air interface according to the input parameter and an access stratum root key KeNB on the first air interface; and

generating an access stratum key on the second air interface according to the KeNB*.