Method and apparatus for implementing bearer specific changes as part of a connection reconfiguration that impacts the security keys being used

1. A method in a user equipment having a communication connection including a plurality of radio bearers having security keys for use with a communication network, the method comprising:

receiving a connection reconfiguration message, which identifies bearer specific changes to be made to a subset of radio bearers including less than all of the plurality of radio bearers, that impact the security keys being used by the subset of radio bearers, where the connection reconfiguration message includes a bearer identification field that identifies the radio bearers included in the subset and a chaining counter; and

applying the requested changes to the subset of radio bearers associated with the bearer identification field without resetting the communication connection with the communication network.

2. A method in accordance with claim 1 , further comprising one or more buffers associated with the communication connection, wherein each of the one or more buffers are associated with at least some of the plurality of radio bearers, and wherein when applying the requested changes to the subset of radio bearers, at least some of the contents of at least some of the buffers associated with the subset of radio bearers for which a reconfiguration has been requested are maintained.

3. A method in accordance with claim 1 , wherein as part of applying the requested changes to the subset of radio bearers, a radio link control entity is re-established, which includes flushing of radio link control transmission and retransmission buffers.

4. A method in accordance with claim 1 , wherein as part of applying the requested changes to the subset of radio bearers, a packet data convergence protocol entity is re-established with a new set of derived keys.

5. A method in accordance with claim 4 , wherein prior to re-establishment of the packet data convergence protocol entity, the packet data convergence protocol entity will perform retransmission and transmission of service data units already associated with a sequence number in ascending order using an earlier set of keys.

6. A method in accordance with claim 4 , wherein after re-establishment of the packet data convergence protocol entity, the packet data convergence protocol entity will perform security of the service data units using the new set of derived keys.

7. A method in accordance with claim 1 , wherein the connection reconfiguration message includes a new logical channel identity, which will be used for an identified radio bearer to replace a prior logical channel identity.

8. A method in accordance with claim 7 , wherein after the new logical channel identity is associated for use with the identified radio bearer, packets of data received for the replaced prior logical channel identity will not be delivered, and will be discarded by a receiving Medium Access Control entity.

9. A method in accordance with claim 1 , wherein as part of applying the requested changes to the subset of radio bearers, a radio link control entity is maintained.

10. A method in accordance with claim 1 , wherein as part of applying the requested changes to the subset of radio bearers, a packet data convergence protocol entity is maintained.

11. A method in accordance with claim 1 , wherein as part of applying the requested changes to the subset of radio bearers, a new set of security keys will be derived.

12. A method in accordance with claim 1 , wherein a count value or sequence number of a first packet (PDCP PDU) is determined by the transmitting PDCP entity and then this count value or sequence number is signaled to the receiving PDCP entity either in the reconfiguration complete message or using a separate PDCP Control PDU.

13. A method in accordance with claim 12 , wherein packet data units for a particular radio bearer having an assigned count value, which is less than the determined value of the count included as part of either the connection reconfiguration complete message, or as part of received PDCP Control PDU, for the particular radio bearer will use an earlier set of security keys, and wherein packet data units for a particular radio bearer having an assigned count value, which is greater than or equal to the determined value of the count included as part of either the connection reconfiguration complete message, or as part of received PDCP Control PDU for the particular radio bearer will use a new set of security keys, which were derived as part of applying the requested changes to the subset of radio bearers.

14. A method in accordance with claim 12 , wherein as part of applying the requested changes to the subset of radio bearers, buffers related to a hybrid automatic repeat request for radio bearers for which a change of security keys have been requested will not be flushed.

15. A method in accordance with claim 1 , wherein the connection reconfiguration message is at least one of (a) received as part of a secondary node change, (b) received as part of a bearer type change, or (c) received in response to a detected count wrap around.

16. A user equipment having a communication connection including a plurality of radio bearers with a communication network, the user equipment comprising:

a transceiver that receives a connection reconfiguration message, which identifies bearer specific changes to be made to a subset of radio bearers including less than all of the plurality of radio bearers, that impact the security keys being used by the subset of radio bearers, where the connection reconfiguration message includes a bearer identification field and a NH chaining counter (NCC) that identifies the radio bearers included in the subset; and

a controller that applies the requested changes to the subset of radio bearers associated with the bearer identification field without resetting the communication connection with the communication network.

17. A user equipment in accordance with claim 16 , wherein each radio bearer is associated with a packet data convergence protocol entity, where as part of applying the requested changes to the subset of radio bearers, a packet data convergence protocol entity derives a new set of keys to be used in place of an earlier set of keys.

18. A user equipment in accordance with claim 16 , wherein a count value or sequence number of a first packet (PDCP PDU) is determined by the transmitting PDCP entity and then this count value or sequence number is signaled to the receiving PDCP entity either in the reconfiguration complete message or using a separate PDCP Control PDU;

where packet data units for a particular radio bearer having an assigned count value, which is less than the determined value of the count included as part of the connection reconfiguration complete message for the particular radio bearer will use an earlier set of security keys; and

where packet data units for a particular radio bearer having an assigned count value, which is greater than or equal to the determined value of the count included as part of the connection reconfiguration complete message for the particular radio bearer will use a new set of security keys, which were derived as part of applying the requested changes to the subset of radio bearers.

19. A user equipment in accordance with claim 16 , further comprising one or more buffers associated with the communication connection, wherein each of the one or more buffers are associated with at least some of the plurality of radio bearers, and wherein when applying the requested changes to the subset of radio bearers, at least some of the contents of at least some of the buffers associated with the subset of radio bearers for which a reconfiguration has been requested are maintained.