Key processing method in dual connectivity mode and device
Embodiments of the present invention disclose a key processing method in dual connectivity mode and a device, which ensure communication security of UE in dual connectivity mode. The method according to the embodiments of the present invention includes: of a first base station and a second base station that have a communication connection to a terminal each, receiving, by the second base station, first request information sent by the first base station, where the first request information is used to request the second base station to generate a key used for communication with the terminal, and generating, by the second base station based on a security key carried in the first request information, the key used for communication with the terminal.
1. A method implemented by a mobile terminal device, the method comprising:
receiving indication information from a MeNB (Master Evolved Node B) first network device,
wherein the indication information informs the mobile terminal device to update a first key used for communicating with the MeNB and a second key used for communicating with a SeNB (Secondary Evolved Node B);
generating an access security management entity key KASME2 in response to the indication information;
generating a security key KeNB2 according to the KASME2 and a COUNT value of a non-access stratum (NAS);
generating the first key used for communicating with the MeNB according to the KeNB2 and a security algorithm of the MeNB, wherein the security algorithm of the MeNB is not used to generate the KeNB2;
generating the second key used for communicating with the SeNB according to the KeNB2 and a security algorithm of the SeNB, wherein the security algorithm of the SeNB is not used to generate the KeNB2; and
sending notification information to the MeNB in order to notify the MeNB that the updating of the first key and the second key has been completed, wherein each of the MeNB and the SeNB has a wireless communication connection to the mobile terminal device.
2. The method according to claim 1 , wherein the indication information comprises information about a cell associated with the second network device for random access performed by the mobile terminal device in the cell.
3. The method according to claim 1 , wherein the indication information comprises at least one of the following:
a physical cell identity (PCI) and frequency information of a target cell, wherein the PCI and the frequency information are used for updating the keys,
a next hop (NH) value used for updating the keys, or
information for updating the keys using a PCI and frequency information of a primary cell of the terminal device.
4. A mobile apparatus comprising:
a processor; and
a non-transitory computer-readable storage medium coupled to the processor and storing programming instructions for execution by the processor, the programming instructions instructing the processor to provide at least the following operations:
receive, from a MeNB (Master Evolved Node B), indication information informing the mobile apparatus to update a first key used for communicating with the MeNB and a second key used for communicating with a SeNB (Secondary Evolved Node B);
generate an access security management entity key KASME2 according to the indication information;
generate a security key KeNB2 according to the KASME2 and a COUNT value of a non-access stratum (NAS);
generate the first key used for communicating with the MeNB according to the KeNB2 and a security algorithm of the MeNB, wherein the security algorithm of the MeNB is not used to generate the KeNB2;
generate a second key used for communicating with the SeNB according to the KeNB2 and a security algorithm of the SeNB, wherein the security algorithm of the SeNB is not used to generate the KeNB2; and
send, to the MeNB, notification information in order to notify the MeNB that the updating of the first key and the second key has been completed, wherein each of the MeNB and the SeNB has a wireless communication connection to the mobile apparatus.
5. The mobile apparatus according to claim 4 , wherein the indication information comprises information about a cell associated with the second network device for random access performed by the mobile apparatus.
6. The mobile apparatus according to claim 4 , wherein the indication information comprises at least one of:
a physical cell identity (PCI) and frequency information of a target cell, wherein the PCI and the frequency information are used for the current key updating,
a next hop (NH) value used for the current key updating, or
information for updating the keys using a PCI and frequency information of a primary cell of the apparatus.