Method and a device for enabling key re-usage in a communication network
The present disclosure relates to method of enabling key re-usage for an electronic device. The method comprising: receiving a request message from the electronic device, wherein the request message comprises a first information being indicative of a preference for one of a first key associated with a first network node in a first network or a second key associated with a second network node in a second network; processing the request message to determine the preference indicated in the first information; and transmitting a response message to the electronic device for reusing the first key or second key, the electronic device is configured to derive a third key based on the first key or the second key as indicated in the determined preference, and the second network is able to access to the first key and the second key whereas the first network cannot access the second key.
1. A method of a network node for an Authentication and Key Management for Applications (AKMA) procedure in a fifth generation mobile network (5G), the method comprising:
receiving, from an Authentication Server Function (AUSF), an AKMA Anchor Key (KAKMA), derived based on KAUSF (AUSF key), for an authentication of an application within 5G;
receiving a message, from an application function for the AKMA procedure, including a temporary identifier of a User Equipment (UE) and an identifier unique to the application function;
deriving an application key (KAF) based on the identifier unique to the application function and the KAKMA; and
sending the KAF to the application function,
wherein the application function is different from the UE, and
wherein the network node is different from the UE; and
using the KAF to secure a communication between the UE and the application function.
2. The method according to claim 1 , wherein the message is a message to request a key for the application.
3. The method according to claim 1 , further comprising:
deriving another application key (KAF) for another application,
wherein the temporary identifier of the UE is sent from the UE to the application function.
4. The method according to claim 1 , wherein the KAF is sent along with an expiration time of the KAF.
5. A network node for an Authentication and Key Management for Applications (AKMA) procedure in a fifth generation mobile network (5G), the network node comprising:
at least one memory configured to store instructions; and
at least one processor configured to execute the instructions to:
receive, from an Authentication Server Function (AUSF), an AKMA Anchor Key (KAKMA), derived based on KAUSF (AUSF key), for an authentication of an application within 5G;
receive a message, from an application function for the AKMA procedure, including a temporary identifier of a User Equipment (UE) and an identifier of the application function;
derive an application key (KAF) based on the identifier unique to the application function and the KAKMA; and
send the KAF to the application function,
wherein the application function is different from the UE, and
wherein the network node is different from the UE; and
using the KAF to secure a communication between the UE and the application function.
6. The network apparatus according to claim 5 , wherein the message is a message to request a key for the application.
7. The network apparatus according to claim 5 ,
wherein the at least one processor is configured to execute the instructions to derive another application key (KAF) for another application, and the temporary identifier of the UE is sent from the UE to the application function.
8. The network apparatus according to claim 5 , wherein the KAF is sent along with an expiration time of the KAF.
9. A method of a User Equipment (UE) communicating with a fifth generation mobile network (5G), the method comprising:
sending, to an application function for an Authentication and Key Management for Applications (AKMA) procedure in 5G, a first message including a temporary identifier of the UE,
wherein the temporary identifier of the UE and an identifier unique to the application function are received by a network node from the application function, wherein the network node and the application function are different from the UE;
deriving an AKMA Anchor Key (KAKMA) based on an Authentication Server Function (AUSF) key (KAUSF), for authentication of an application within 5G,
wherein the KAKMA is used for deriving a first application key (KAF), corresponding to a second KAF derived by the network node communicating with the application function, wherein the identifier unique to the application function and the KAKMA are used for deriving the second KAF, and wherein the second KAF is sent from the network node to the application function; and
using the first KAF to secure a communication between the UE and the application function.
10. The method according to claim 9 , further comprising:
deriving the first KAF, corresponding to the second KAF derived by the network node communicating with the application function, from the KAKMA.
11. The method according to claim 9 ,
wherein an expiration time of the second KAF is sent from the network node to the application function.
12. A User Equipment (UE) communicating with a fifth generation mobile network (5G), the UE comprising:
at least one memory configured to store instructions; and
at least one processor configured to execute the instructions to:
send, to an application function for an Authentication and Key Management for Applications (AKMA) procedure in 5G, a first message including a temporary identifier of the UE,
wherein the temporary identifier of the UE and an identifier unique to the application function are received by a network node from the application function, wherein the network node and the application function are different from the UE; and
derive an AKMA Anchor Key (KAKMA) based on an Authentication Server Function (AUSF) key (KAUSF), for authentication of an application within 5G,
wherein the KAKMA is used for deriving a first application key (KAF), corresponding to a second KAF derived by the network node communicating with the application function wherein the identifier unique to the application function and the KAKMA are used for deriving the second KAF, and wherein the second KAF is sent from the network node to the application function; and
using the first KAF to secure a communication between the UE and the application function.
13. The UE according to claim 12 , wherein the at least one processor is configured to execute the instructions to derive the first KAF, corresponding to the second KAF derived by the network node communicating with the application function, from the KAKMA.
14. The UE according to claim 12 ,
wherein an expiration time of the second KAF is sent from the network node to the application function.