Handovers with simplified network topology
Systems and methods for handovers with simplified network topology are disclosed. In a first embodiment, a method is disclosed, comprising: at a coordinating gateway during a handover of a mobile device from a first base station to a second base station, receiving a first handover request from the first base station; discarding a first shared security key received in the first handover request; sending a tunnel switching request to a core network node; obtaining precursors for a second shared security key from the core network node in a response to the switching request; sending a second handover request to the second base station with the precursors to calculate the second shared security key for securing a data connection for the mobile device following the handover; deriving the second shared security key from the obtained precursors at the first base station; and deriving the second shared security key from the obtained precursors at the coordinating gateway.
1. A method, comprising:
at a coordinating gateway during a handover of a mobile device from a first base station to a second base station,
receiving a first handover request from the first base station, wherein the first handover request is an X2 handover request;
discarding a first shared security key received in the first handover request;
sending a tunnel switching request to a core network node;
obtaining precursors for a second shared security key from the core network node in a response to the switching request;
sending a second handover request to the second base station with the precursors to calculate the second shared security key for securing a data connection for the mobile device following the handover, wherein the second handover request is an S1 request remapped from the X2 handover request using at least one of decoding, encoding, interworking, translating and proxying S1 to and from X2;
deriving the second shared security key from the obtained precursors at the first base station;
deriving the second shared security key from the obtained precursors at the coordinating gateway; and
proxying the core network node to the second base station by providing Mobility Management Entity (MME) functionality including authentication and authorization and proxying the second base station to the core network node for all communications between the core network node and the second base station.
2. The method of claim 1 , wherein the core network node is a mobility management entity (MME) in a Long Term Evolution (LTE) network.
3. The method of claim 1 , wherein the tunnel switching request is an S1 path switch message, and wherein the precursors are next hop (NH) and next hop chaining count (NCC) values.
4. The method of claim 1 , wherein the first shared security key and the second shared security key are KeNB* keys.
5. The method of claim 1 , further comprising caching data between sending the tunnel switching request and completing the second handover request.
6. The method of claim 1 , further comprising deriving the second shared security key from the obtained precursors using a carrier frequency of the second base station and a cell identifier of the second base station.
7. A method, comprising:
at a coordinating gateway during a handover of a mobile device from a first base station to a second base station, the coordinating gateway providing proxy services to the first base station, obtaining a first security key for the mobile device from a core network node;
receiving a first handover request from the first base station, wherein the first handover request is an X2 handover request;
sending a tunnel switching request to a core network node;
calculating a second security key based on the first security key, a carrier frequency of the second base station, and a cell identifier of the second base station;
sending a second handover request to the second base station with the second security key for securing a data connection for the mobile device following the handover, wherein the second handover request is an S1 request remapped from the X2 handover request using at least one of decoding, encoding, interworking, translating and proxying S1 to and from X2;
proxying the core network node to the second base station by providing Mobility Management Entity (MME) functionality including authentication and authorization, and proxying the second base station to the core network node for all communications.
8. The method of claim 7 , wherein the core network node is a mobility management entity (MME) in a Long Term Evolution (LTE) network.
9. The method of claim 7 , further comprising obtaining the first security key during an attach procedure for the mobile device to the core network node.
10. The method of claim 7 , wherein the carrier frequency is an Evolved Absolute Radio Frequency Channel Number (EARFCN) and the cell identifier is a physical cell identifier (PCI).
11. The method of claim 7 , further comprising obtaining the carrier frequency and the cell identifier of the second base station during a prior handover involving the second base station and the coordinating gateway.
12. The method of claim 7 , wherein the first shared security key is a KeNB key and the second shared security key is a KeNB* key.
13. The method of claim 7 , further comprising caching data between receiving the first handover request and completing the second handover request.