Release of conditional primary secondary cell addition/modification configurations
A wireless terminal includes processor circuitry configured to establish, using a first master key, a first security context on a first radio connection with a master access node, and receiver circuitry configured to receive a re-configuration message including one or more conditional secondary cell configurations and at least one counter. Each conditional secondary cell configuration may include an identity of a candidate primary secondary cell and at least one triggering condition, the candidate primary secondary cell being used for Dual-Connectivity. The at least one counter and the first master key may be used for derivation of a second master key to be used for an establishment of a second security context with one of candidate primary secondary cells. The processor circuitry is further configured to invalidate the one or more conditional secondary cell configurations upon a change of the first master key.
1. A wireless terminal comprising:
processor circuitry configured to establish, using a first Access Stratum (AS) master key, a first security context on a first radio connection with a master access node;
receiver circuitry configured to receive a re-configuration message comprising one or more conditional primary cell of secondary cell group (PSCell) configurations and at least one counter, each conditional PSCell configuration comprising an identity of a candidate PSCell and at least one triggering condition, the at least one counter and the first AS master key being used for derivation of a second AS master key to be used for an establishment of a second security context with a candidate PSCell comprised in one of the one or more conditional PSCell configurations, wherein
the processor circuitry is further configured to store the one or more conditional PSCell configurations, and
the stored one or more conditional PSCell configurations are released upon a change of the first AS master key.
2. The wireless terminal of claim 1 , wherein the processor circuitry is further configured to release the stored one or more conditional PSCell configurations upon the change of the first AS master key.
3. The wireless terminal of claim 1 , wherein the first AS master key changes during a connection re-establishment procedure to recover the first radio connection from a radio link failure (RLF).
4. The wireless terminal of claim 1 , wherein the first AS master key changes upon or after a handover of the first radio connection.
5. The wireless terminal of claim 1 , wherein the first AS master key changes upon receiving a message instructing the change of the first AS master key.
6. A method for a wireless terminal comprising:
establishing, using a first Access Stratum (AS) master key, a first security context on a first radio connection with a master access node;
receiving a re-configuration message comprising one or more conditional primary cell of secondary cell group (PSCell) configurations and at least one counter, each conditional PSCell configuration comprising an identity of a candidate PSCell and at least one triggering condition, the at least one counter and the first AS master key being used for derivation of a second AS master key to be used for an establishment of a second security context with one of a candidate PSCell comprised in one of the one or more conditional PSCell configurations; and
storing the one or more conditional PSCell configurations, wherein
the stored one or more conditional PSCell configurations are released upon a change of the first AS master key.
7. An access node comprising:
processor circuitry configured to establish, using a first Access Stratum (AS) master key, a first security context on a first radio connection with a wireless terminal; and
transmitter circuitry configured to transmit a re-configuration message comprising one or more conditional primary cell of secondary cell group (PSCell) configurations and at least one counter, each conditional PSCell configuration comprising an identity of a candidate PSCell and at least one triggering condition, the at least one counter and the first AS master key being used for derivation of a second AS master key to be used for an establishment of a second security context with a candidate PSCell comprised in one of the one or more conditional PSCell configurations,
wherein
the one or more conditional PSCell configurations are released upon a change of the first AS master key.
8. The access node of claim 7 , wherein the processor circuitry is further configured to generate the re-configuration message.
9. The access node of claim 7 , wherein the first AS master key changes during a connection re-establishment procedure to recover the first radio connection from a radio link failure (RLF).
10. The access node of claim 7 , wherein the first AS master key changes upon or after a handover of the first radio connection.
11. The access node of claim 7 , wherein the first AS master key changes upon or after transmitting, to the wireless terminal, a message instructing the change of the first AS master key.