Indication of additional security capabilities using NAS signaling in 5G mobile communications
Examples pertaining to indication of additional security capabilities using non-access stratum (NAS) signaling in 5 th Generation (5G) mobile communications are described. A processor of an apparatus (e.g., a user equipment (UE)) transmits an initial NAS message to a communication entity of a 5G mobile network. The processor then receives a message from the communication entity responsive to the transmitting, the message comprising an additional 5G security parameter information element (IE). The processor proceeds to perform a security mode control procedure using information contained in the additional 5G security parameter IE pertaining to at least one 5G security parameter.
1. A method, comprising:
transmitting, by a processor of an apparatus, an initial non-access stratum (NAS) message to a communication entity of a 5 th Generation (5G) mobile network;
receiving, by the processor, a message from the communication entity responsive to the transmitting, the message comprising additional 5G security information; and
using, by the processor, the additional 5G security information in a security mode control procedure,
wherein the additional 5G security information is comprised in an information element (IE) including a horizontal derivation parameter (HDP),
wherein at least one of a plurality of bits of the IE indicates whether derivation of a key for an Access and Mobility management Function (K AMF ) is required, and
wherein the at least one of the plurality of bits of the IE is a least significant bit (LSB) in an octet.
2. The method of claim 1 , wherein the message comprises a security mode command message that includes the additional 5G security information providing at least the HDP to the apparatus.
3. The method of claim 1 , wherein the receiving of the message comprises receiving a security mode command message or another NAS message as the message that includes the additional 5G security information as a new optional information element added by the 5G mobile network in the security mode command message or the another NAS message.
4. The method of claim 1 , wherein the additional 5G security information is comprised in an information element (IE).
5. The method of claim 4 , wherein a value of at least one of a plurality of bits of the IE indicates whether derivation of a key for an Access and Mobility management Function (K AMF ) is required.
6. The method of claim 5 , wherein a first part of the IE identifying the additional 5G security information is included in the IE, and wherein a second part of the IE includes information of a length of the IE.
7. The method of claim 1 , wherein the at least one 5G security parameter further comprises an Anti-Bidding down Between Architectures (ABBA) parameter.
8. The method of claim 1 , wherein the performing of the security mode control procedure comprises:
deriving a same key for an Access and Mobility management Function (K AMF ) as that used by an Access and Mobility management Function (AMF) of the 5G mobile network by using a downlink NAS count value;
resetting corresponding uplink and downlink NAS counters; and
deriving one or more new NAS keys from the K AMF and one or more algorithms in use,
wherein the K AMF is horizontally derived.
9. An apparatus, comprising:
a transceiver which, during operation, wirelessly communicates with a communication entity of a 5 th Generation (5G) mobile network; and
a processor coupled to the transceiver such that, during operation, the processor performs operations comprising:
transmitting, via the transceiver, an initial non-access stratum (NAS) message to the communication entity of the 5G mobile network;
receiving, via the transceiver, a message from the communication entity responsive to the transmitting, the message comprising additional 5G security information; and
using the additional 5G security information in a security mode control procedure,
wherein the additional 5G security information is comprised in an information element (IE) including a horizontal derivation parameter (HDP),
wherein at least one of a plurality of bits of the IE indicates whether derivation of a key for an Access and Mobility management Function (K AMF ) is required, and
wherein the at least one of the plurality of bits of the IE is a least significant bit (LSB) in an octet.
10. The apparatus of claim 9 , wherein a first part of the IE identifying the additional 5G information is included in the IE, and wherein a second part of the IE includes information of a length of the IE.
11. The apparatus of claim 9 , wherein the at least one 5G security parameter further comprises an Anti-Bidding down Between Architectures (ABBA) parameter, wherein the additional 5G security information comprises one or more bits of a plurality of bits indicating the ABBA parameter.