Security key generation for communications between base station and terminal based on beam selection
To enable security enhancement in the case of employing beamforming. A first apparatus according to the present invention includes: an information obtaining unit configured to obtain information related to beam selection; and a key generating unit configured to generate a security key for radio communication between a base station and a terminal apparatus based on the information related to the beam selection.
1. An apparatus comprising:
a memory storing instructions; and
one or more processors configured to execute the instructions to:
obtain information related to selection of a beam to be used for radio communication between a base station and a terminal apparatus; and
generate a security key for the radio communication between a base station and a terminal apparatus based on the information related to the selection of the beam,
wherein the information related to the selection of the beam is
identification information for identifying the beam, or
a counter which is incremented when the beam is selected.
2. The apparatus according to claim 1 , wherein the one or more processors are configured to execute the instructions to generate the security key based on the information related to the beam selection at the time of beam selection.
3. The apparatus according to claim 1 , wherein the base station is a secondary base station of dual connectivity of the terminal apparatus.
4. The apparatus according to claim 1 , wherein the base station is a target base station of a handover of the terminal apparatus.
5. The apparatus according to claim 1 , wherein the one or more processors are configured to execute the instructions to perform radio communication with the terminal apparatus using the security key.
6. The apparatus according to claim 1 , wherein the apparatus is the base station, one or more of a plurality of apparatuses included in the base station, or a module for one of the plurality of apparatuses.
7. The apparatus according to claim 5 , wherein
the apparatus is a master base station of dual connectivity of the terminal apparatus, one or more of a plurality of apparatuses included in the master base station, or a module of one of the plurality of apparatuses;
the base station is a secondary base station of dual connectivity of the terminal apparatus; and
the one or more processors are configured to execute the instructions to perform radio communication with the terminal apparatus via the base station using the security key.
8. The apparatus according to claim 5 , wherein
the base station includes a first unit which performs processing of an upper protocol layer, and a second unit which performs processing of a lower protocol layer;
the apparatus is the first unit or a module for the first unit; and
the one or more processors are configured to execute the instructions to perform radio communication with the terminal apparatus via the second unit using the security key.
9. The apparatus according to claim 1 , wherein the one or more processors are configured to execute the instructions to transmit the security key to the base station.
10. The apparatus according to claim 9 , wherein the security key is a key to be used for key generation by the base station.
11. The apparatus according to claim 9 , wherein
the base station is a secondary base station of dual connectivity of the terminal apparatus;
the one or more processors are configured to execute the instructions to transmit, to the base station, a message for addition or change of a secondary base station; and
the message includes the security key.
12. The apparatus according to claim 9 , wherein
the base station is a target base station of a handover of the terminal apparatus;
the one or more processors are configured to execute the instructions to transmit a message to the base station in a handover procedure for the handover; and
the message includes the security key.
13. The apparatus according to claim 1 , wherein
the base station is a second base station which is different from a first base station; and
the apparatus is the first base station, one or more of a plurality of apparatuses included in the first base station, or a module for one of the plurality of the apparatuses.
14. The apparatus according to claim 1 , wherein the apparatus is a core network node, or a module for a core network node.
15. An apparatus comprising:
a memory storing instructions; and
one or more processors configured to execute the instructions to:
generate a security key for radio communication with a base station based on information related to selection of a beam to be used for the radio communication; and
perform the radio communication with the base station using the security key,
wherein the information related to the selection of the beam is
identification information for identifying the beam, or
a counter which is incremented when the beam is selected.
16. A method comprising:
obtaining information related to selection of a beam to be used for radio communication between a base station and a terminal apparatus; and
generating a security key for the radio communication between a base station and a terminal apparatus based on the information related to the selection of the beam,
wherein the information related to the selection of the beam is
identification information for identifying the beam, or
a counter which is incremented when the beam is selected.