Method and device for generating access stratum key in communications system
In the communications system, a user equipment UE accesses a core network via a first network-side device by using a first air interface and connects to the first network-side device via a second network-side device by using a second air interface to access the core network. The method includes: acquiring, by the network-side device, an input parameter; calculating, by the network-side device, an access stratum root key KeNB* according to the input parameter and an access stratum root key KeNB on the first air interface, or using, by the network-side device, the KeNB as the KeNB*; and generating, by the second network-side device, an access stratum key on the second air interface according to the KeNB*, or sending, by the first network-side device, the KeNB* to the second network-side device.
1. A method for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, and the method comprises:
acquiring, by the first network-side device, an input parameter, wherein the input parameter is a new parameter each time it is used;
calculating, by the first network-side device, an access stratum root key KeNB* for the second air interface according to an access stratum root key KeNB on the first air interface and the input parameter;
sending, by the first network-side device, the KeNB* to the second network-side device;
generating, by the first network-side device, radio resource control (RRC) connection reconfiguration information, wherein the RRC connection reconfiguration information carries the input parameter; and
sending, by the first network-side device, the RRC reconfiguration information to the UE, wherein the input parameter comprises a value of a counter.
2. The method according to claim 1 , wherein the input parameter comprises a Packet Data Convergence Protocol count (PDCP COUNT) value of a bearer of the UE on the first air interface.
3. The method according to claim 2 , wherein the PDCP COUNT value corresponds to a configuration message and the configuration message is a configuration message used for the first network-side device to configure the second air interface.
4. A method for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, and the method comprises:
receiving, by the UE, radio resource control (RRC) connection reconfiguration information, wherein the RRC connection reconfiguration information carries an input parameter, wherein the input parameter is a new parameter each time it is used;
calculating, by the UE, an access stratum root key KeNB* on the second air interface according to an access stratum root key KeNB on the first air interface and the input parameter; and
generating, by the UE, an access stratum key on the second air interface according to the KeNB*, wherein the input parameter comprises a value of a counter.
5. The method according to claim 4 , wherein:
the input parameter comprises a random number generated by the first network-side device and/or a random number generated by the UE;
the acquiring, by the UE, an input parameter comprises:
acquiring, by the UE, the random number generated by the first network-side device and/or the random number generated by the UE; and
after the acquiring, by the UE, an input parameter, the method further comprises:
sending, by the UE, the random number generated by the UE to the first network-side device, or receiving the random number generated by the network-side network-side device.
6. The method according to claim 5 , wherein the sending, by the UE, the random number generated by the UE to the first network-side device comprises:
sending, by the UE, a setup completion message used to indicate that a radio link is successfully set up on the second air interface to the second network-side device, wherein the setup completion message carries the random number generated by the UE.
7. The method according to claim 5 , wherein the receiving the random number generated by the first network-side device comprises:
receiving a configuration message that is sent by the first network-side device to the UE and used for configuring the second air interface, wherein the configuration message carries the random number generated by the first network-side device.
8. A network-side device in a communications system, wherein a a user equipment (UE) is connected to the network-side device and to a second network-side device through a first air interface and a second air interface separately, only the network-side device connects to a control plane entity of a core network (CN), the second network-side device is connects to the network-side device via non-ideal backhaul, and the device comprises:
a processor, configured to acquire an input parameter, wherein the input parameter is a new parameter each time it is used;
the processor, configured to calculate an access stratum root key KeNB* on the second air interface according to an access stratum root key KeNB on the first air interface and the input parameter;
the transmitter, configured to send the KeNB* calculated by the processor to the second network-side device;
the processor, configured to generate radio resource control (RRC) connection reconfiguration information, wherein the RRC connection reconfiguration information carries the input parameter;
a transmitter, configured to send the RRC reconfiguration information to the UE, wherein the input parameter comprises a value of a counter.
9. The network-side device according to claim 8 , wherein the input parameter acquired by the processor comprises a Packet Data Convergence Protocol count (PDCP COUNT) value of a bearer of the UE on the first air interface.
10. The network-side device according to claim 9 , wherein the PDCP COUNT value acquired by the processor corresponds to a configuration message and the configuration message is a configuration message used for the network-side device to configure the second air interface.
11. A user equipment in a communications system, wherein the user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, and the user equipment comprises:
a receiver, configured to receive radio resource control (RRC) connection reconfiguration information, wherein the RRC connection reconfiguration information carries an input parameter, wherein the input parameter is a new parameter each time it is used;
the processor, configured to calculate an access stratum root key KeNB* on the second air interface according to an access stratum root key KeNB on the first air interface and the input parameter; and
the processor, configured to generate an access stratum key on the second air interface according to the KeNB*, wherein the input parameter comprises a value of a counter.
12. The user equipment according to claim 11 , wherein the input parameter acquired by the processor comprises a random number generated by the first network-side device and/or a random number generated by the UE;
the processor is specifically configured to:
acquire the random number generated by the first network-side device and/or the random number generated by the UE; and
the transmitter is configured to send the random number that is generated by the processor to the first network-side device, or receive the random number generated by the first network-side device.
13. The user equipment according to claim 12 , wherein:
the transmitter is specifically configured to send a setup completion message used to indicate that a radio link is successfully set up on the second air interface to the second network-side device, wherein the setup completion message carries the random number generated by the UE.
14. The user equipment according to claim 12 , wherein
the receiver is configured to receive a configuration message that is sent by the first network-side device to the UE and used for configuring the second air interface, wherein the configuration message carries the random number generated by the first network-side device.
15. A non-transitory computer readable medium storing program codes for use by a network-side device for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, wherein the program codes comprise instructions to configure the network-side device for:
acquiring an input parameter, wherein the input parameter is a new parameter each time it is used;
calculating an access stratum root key KeNB* for the second air interface according to an access stratum root key KeNB on the first air interface and the input parameter; and
sending the KeNB* to the second network-side device;
generating a radio resource control (RRC) connection reconfiguration information, wherein the RRC reconfiguration information comprises carries the input parameter; and
sending the RRC reconfiguration information to the UE, wherein the input parameter comprises a value of a counter.
16. A non-transitory computer readable medium storing program codes for use by a user equipment (UE) for generating an access stratum key in a communications system, wherein a user equipment (UE) is connected to a first network-side device and to a second network-side device through a first air interface and a second air interface separately, only the first network-side device connects to a control plane entity of a core network (CN), the second network-side device connects to the first network-side device via a non-ideal backhaul, wherein the program codes comprise instructions to configure the UE for:
receiving radio resource control (RRC) connection reconfiguration information, wherein the RRC reconfiguration information carries input parameter, wherein the input parameter is a new parameter each time it is used;
calculating an access stratum root key KeNB* on the second air interface according to an access stratum root key KeNB on the first air interface and the input parameter; and
generating an access stratum key on the second air interface according to the KeNB*, wherein the input parameter comprises a value of a counter.