Method and apparatus for identifying security key in next generation mobile communication system
The disclosure relates to a communication scheme and system for converging a 5 th generation (5G) communication system for supporting a data rate higher than that of a 4 th generation (4G) system with an internet of things (IoT) technology. The disclosure is applicable to intelligent services (e.g., smart home, smart building, smart city, smart car or connected car, health care, digital education, retail, and security and safety-related services) based on the 5G communication technology and the IoT-related technology. The disclosure relates to a method and apparatus for allowing a base station to identify a ciphering key (COUNT value) for security enhancement.
1. A method of a terminal in a wireless communication system, the method comprising:
receiving, from a base station, a first message for checking one or more count values associated with one or more bearers, the first message including first information, the first information including a first identity of a first bearer, a first downlink count value associated with the first bearer and a first uplink count value associated with the first bearer; and
transmitting, to the base station, a second message as a response to the first message,
wherein in at least one case in which a most significant bits of a second downlink count value of the terminal associated with the first bearer is different from a most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a second uplink count value of the terminal associated with the first bearer is different from a most significant bits of the first uplink count value associated with the first bearer, second information is included in the second message, the second information including the first identity of the first bearer, the second downlink count value of the terminal associated with the first bearer, and the second uplink count value of the terminal associated with the first bearer, the second downlink count value of the terminal associated with the first bearer being set to a value of TX_NEXT- 1 and the second uplink count value of the terminal associated with the first bearer being set to a value of RX_NEXT- 1 ,
wherein in case that a second identity of a second bearer established on the terminal is not included in the first message, third information is included in the second message, the third information including the second identity of the second bearer, a third downlink count value of the terminal associated with the second bearer, and a third uplink count value of the terminal associated with the second bearer, the third downlink count value of the terminal associated with the second bearer being set to a value of TX_NEXT- 1 and the third uplink count value of the terminal associated with the second bearer being set to a value of RX_NEXT- 1 , and
wherein the TX_NEXT is a count value of a next packet data convergence protocol (PDCP) service data unit (SDU) to be transmitted and the RX NEXT is a count value of a next PDCP SDU expected to be received.
2. The method of claim 1 , wherein in case that the first bearer is not configured with a new radio (NR) PDCP, and at least one case in which a most significant bits of a fourth downlink count value of the terminal associated with the first bearer is different from the most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a fourth uplink count value of the terminal associated with the first bearer is different from the most significant bits of the first uplink count value associated with the first bearer, fourth information is included in the second message, the fourth information including the first identity of the first bearer, the fourth downlink count value of the terminal associated with the first bearer, and the fourth uplink count value of the terminal associated with the first bearer.
3. The method of claim 1 , wherein in case that the first bearer is a uni-directional bearer, fifth information is included in the second message, the fifth information including at least one of a fifth downlink count value of the terminal associated with the first bearer or a fifth uplink count value of the terminal associated with the first bearer set to be 0 for an unused direction.
4. The method of claim 1 , wherein in case that the first bearer corresponding to the first identity included in the first message is not established on the terminal, sixth information is included in the second message, the sixth information including the first identity of the first bearer, a sixth downlink count value of the terminal associated with the first bearer with most significant bits set identical to the first downlink count value associated with the first bearer and least significant bits set to 0, and a sixth uplink count value of the terminal associated with the first bearer with most significant bits set identical to the first uplink count value associated with first bearer and least significant bits set to 0.
5. A method of a base station in a wireless communication system, the method comprising:
transmitting, to a terminal, a first message for checking one or more count values associated with one or more bearers, the first message including first information, the first information including a first identity of a first bearer, a first downlink count value associated with the first bearer, and a first uplink count value associated with the first bearer; and
receiving, from the terminal, a second message as a response to the first message,
wherein in at least one case in which a most significant bits of a second downlink count value of the terminal associated with the first bearer is different from a most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a second uplink count value of the terminal associated with the first bearer is different from a most significant bits of the first uplink count value associated with the first bearer, second information is included in the second message, the second information including a first identity of the first bearer, the second downlink count value of the terminal associated with the first bearer, and the second uplink count value of the terminal associated with the first bearer, the second downlink count value of the terminal associated with the first bearer being set to a value of TX_NEXT- 1 and the second uplink count value of the terminal associated with the first bearer being set to a value of RX_NEXT- 1 ,
wherein in case that a second identity of a second bearer established on the terminal is not included in the first message, third information is included in the second message, the third information including the second identity of the second bearer, a third downlink count value of the terminal associated with the second bearer, and a third uplink count value of the terminal associated with the second bearer, the third downlink count value of the terminal associated with the second bearer being set to a value of TX_NEXT- 1 and the third uplink count value of the terminal associated with the second bearer being set to a value of RX_NEXT- 1 , and
wherein the TX_NEXT is a count value of a next packet data convergence protocol (PDCP) service data unit (SDU) to be transmitted and the RX_NEXT is a count value of a next PDCP SDU expected to be received.
6. The method of claim 5 , wherein in case that the first bearer is not configured with a new radio (NR) PDCP, and at least one case in which a most significant bits of a fourth downlink count value of the terminal associated with the first bearer is different from the most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a fourth uplink count value of the terminal associated with the first bearer is different from the most significant bits of the first uplink count value associated with the first bearer, fourth information is included in the second message, the fourth information including the first identity of the first bearer, the fourth downlink count value of the terminal associated with the first bearer, and the fourth uplink count value of the terminal associated with the first bearer.
7. The method of claim 5 , wherein in case that the first bearer is a uni-directional bearer, fifth information is included in the second message, the fifth information including at least one of a fifth downlink count value of the terminal associated with the first bearer or a fifth uplink count value of the terminal associated with the first bearer set to be 0 for an unused direction.
8. The method of claim 5 , wherein in case that the first bearer corresponding to the first identity included in the first message is not established on the terminal, sixth information is included in the second message, the sixth information including the first identity of the first bearer, a sixth downlink count value of the terminal associated with the first bearer with most significant bits set identical to the first downlink count value associated with the first bearer and least significant bits set to 0, and a sixth uplink count value of the terminal associated with the first bearer with most significant bits set identical to the first uplink count value associated with the first bearer and least significant bits set to 0.
9. A terminal in a wireless communication system, the terminal comprising:
a transceiver; and
a controller configured to:
control the transceiver to receive, from a base station, a first message for checking one or more count values associated with one or more bearers, the first message including first information, the first information including a first identity of a first bearer, a first downlink count value associated with the first bearer, and a first uplink count value associated with the bearer, and
control the transceiver to transmit, to the base station, a second message as a response to the first message,
wherein in at least one case in which a most significant bits of a second downlink count value of the terminal associated with the first bearer is different from a most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a second uplink count value of the terminal associated with the first bearer is different from a most significant bits of the first uplink count value associated with the first bearer, second information is included in the second message, the second information including the first identity of the first bearer, the second downlink count value of the terminal associated with the first bearer, and the second uplink count value of the terminal associated with the first bearer, the second downlink count value of the terminal associated with the first bearer being set to a value of TX_NEXT- 1 and the second uplink count value of the terminal associated with the first bearer being set to a value of RX_NEXT- 1 ,
wherein in case that a second identity of a second bearer established on the terminal is not included in the first message, third information is included in the second message, the third information including the second identity of the second bearer, a third downlink count value of the terminal associated with the second bearer, and a third uplink count value of the terminal associated with the second bearer, the third downlink count value of the terminal associated with the second bearer being set to a value of TX_NEXT- 1 and the third uplink count value of the terminal associated with the second bearer being set to a value of RX_NEXT- 1 , and
wherein the TX_NEXT is a count value of a next packet data convergence protocol (PDCP) service data unit (SDU) to be transmitted and the RX_NEXT is a count value of a next PDCP SDU expected to be received.
10. The terminal of claim 9 , wherein in case that the first bearer is not configured with a new radio (NR) PDCP, and at least one case in which a most significant bits of a fourth downlink count value of the terminal associated with the first bearer is different from the most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a fourth uplink count value of the terminal associated with the first bearer is different from the most significant bits of the first uplink count value associated with the first bearer, fourth information is included in the second message, the fourth information including the first identity of the first bearer, the fourth downlink count value of the terminal associated with the first bearer, and the fourth uplink count value of the terminal associated with the first bearer.
11. The terminal of claim 9 , wherein in case that the first bearer is a uni-directional bearer, fifth information is included in the second message, the fifth information including at least one of a fifth downlink count value of the terminal associated with the first bearer or a fifth uplink count value of the terminal associated with the first bearer set to be 0 for an unused direction.
12. The terminal of claim 9 , wherein in case that the first bearer corresponding to the first identity included in the first message is not established on the terminal, sixth information is included in the second message, the sixth information including the first identity of the first bearer, a sixth downlink count value of the terminal associated with the first bearer with most significant bits set identical to the first downlink count value associated with the first bearer and least significant bits set to 0, and a sixth uplink count value of the terminal associated with the first bearer with most significant bits set identical to a first uplink count value associated with the first bearer and least significant bits set to 0.
13. A base station in a wireless communication system, the base station comprising:
a transceiver; and
a controller configured to:
control the transceiver to transmit, to a terminal, a first message for checking one or more count values associated with one or more bearers, the first message including first information, the first information including a first identity of a first bearer, first downlink count value associated with the first bearer, and a first uplink count value associated with the first bearer, and
control the transceiver to receive, from the terminal, a second message as a response to the first message,
wherein in at least one case in which a most significant bits of a second downlink count value of the terminal associated with the first bearer is different from a most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a second uplink count value of the terminal associated with the first bearer is different from a most significant bits of the first uplink count value associated with the first bearer, second information is included in the second message, the second information including a first identity of the first bearer, the second downlink count value of the terminal associated with the first bearer, and the second uplink count value of the terminal associated with the first bearer, the second downlink count value of the terminal associated with the first bearer being set to a value of TX_NEXT- 1 and the second uplink count value of the terminal associated with the first bearer being set to a value of RX_NEXT- 1 ,
wherein in case that a second identity of a second bearer established on the terminal is not included in the first message, third information is included in the second message, the third information including the second identity of the second bearer, a third downlink count value of the terminal associated with the second bearer, and a third uplink count value of the terminal associated with the second bearer, the third downlink count value of the terminal associated with the second bearer being set to a value of TX_NEXT- 1 and the third uplink count value of the terminal associated with the second bearer being set to a value of RX_NEXT- 1 , and
wherein the TX_NEXT is a count value of a next packet data convergence protocol (PDCP) service data unit (SDU) to be transmitted and the RX_NEXT is a count value of a next PDCP SDU expected to be received.
14. The base station of claim 13 , wherein in case that the first bearer is not configured with a new radio (NR) PDCP, and at least one case in which a most significant bits of a fourth downlink count value of the terminal associated with the first bearer is different from the most significant bits of the first downlink count value associated with the first bearer or a most significant bits of a fourth uplink count value of the terminal associated with the first bearer is different from the most significant bits of the first uplink count value associated with the first bearer, fourth information is included in the second message, the fourth information including the bearer identity of the first bearer, the fourth downlink count value of the terminal associated with the first bearer, and the fourth uplink count value of the terminal associated with the first bearer.
15. The base station of claim 13 , wherein in case that the first bearer is a uni-directional bearer, fifth information is included in the second message, the fifth information including at least one of a fifth downlink count value of the terminal associated with the first bearer or a fifth uplink count value of the terminal associated with the first bearer set to be 0 for an unused direction.
16. The base station of claim 13 , wherein in case that the first bearer corresponding to the first identity included in the first message is not established on the terminal, sixth information is included in the second message, the sixth information including the first identity of the first bearer, a sixth downlink count value of the terminal associated with the first bearer with most significant bits set identical to the first downlink count value associated with the first bearer and least significant bits set to 0, and a sixth uplink count value of the terminal associated with the first bearer with most significant bits set identical to the first uplink count value associated with the first bearer and least significant bits set to 0.