Communication terminal, network device, communication method, and non-transitory computer readable medium
A communication terminal ( 10 ) according to the present disclosure includes: a control unit ( 12 ) configured to, in a case of a movement from a communication area formed by the 5GS to a communication area formed by the EPS or a movement from a communication area formed by the EPS to a communication area formed by the 5GS, determine whether or not a communication system forming a communication area at a movement destination can satisfy requirements of services; and a communication unit ( 11 ) configured to, when it is determined that the communication system forming the communication area at the movement destination can satisfy the requirements of the services, send a connection request message to the communication system forming the communication area at the movement destination.
1. An access and mobility management function (AMF) device in a first communication network, the AMF device comprising:
at least one processor comprising hardware; and
at least one memory operatively coupled with the at least one processor, wherein the at least one processor is configured to:
check, by the AMF device, access rights and security capabilities of a communication terminal during a handover procedure to handover the communication terminal from the first communication network to a second communication network having a mobility management entity (MME) device, and
send, by the AMF device, a relocation request message including a security context of the communication terminal to the MME device after the check, wherein
the first communication network comprises a 5th generation system (5GS) network and the second communication network comprises an evolved packet system (EPS) network.
2. The AMF device according to claim 1 , wherein
the security context of the communication terminal includes information for deriving at least one security key to be used in the second communication network.
3. The AMF device according to claim 2 , wherein
the at least one security key is a Non-Access Stratum (NAS) key for integrity protection or a NAS key for encryption of a NAS message transmitted between the MME device and the communication terminal.
4. A mobility management entity (MME) device in a second communication network, the second network device MME device comprising:
at least one processor, comprising hardware; and
at least one memory operatively coupled with the at least one processor, wherein the at least one processor is configured to:
receive a relocation request message including a security context of a communication terminal from an access and mobility management function (AMF) device in a first communication network, after access rights and security capabilities of the communication terminal are checked by the AMF device during a handover procedure to handover the communication terminal from the first communication network to the second communication network, and
derive, using information included in the security context of the communication terminal, at least one security key to be used in the second communication network, wherein
the first communication network comprises a 5th generation system (5GS) network and the second communication network comprises an evolved packet system (EPS) network.
5. The MME device according to claim 4 , wherein
the at least one security key is a Non-Access Stratum (NAS) key for integrity protection or a NAS key for encryption of a NAS message transmitted between the MME device and the communication terminal.
6. A method performed by an access and mobility management function (AMF) device in a first communication network, the method comprising:
checking, by the AMF device, access rights and security capabilities of a communication terminal during a handover procedure to handover the communication terminal from the first communication network to a second communication network having a mobility management entity (MME) device; and
sending, by the AMF device, a relocation request message including a security context of the communication terminal to the MME device after the checking, wherein
the first communication network comprises a 5th generation system (5GS) network and the second communication network comprises an evolved packet system (EPS) network.
7. The method according to claim 6 , wherein
the security context of the communication terminal includes information for deriving at least one security key to be used in the second communication network.
8. The method according to claim 7 , wherein
the at least one security key is a Non-Access Stratum (NAS) key for integrity protection or a NAS key for encryption of a NAS message transmitted between the MME device and the communication terminal.