Method and apparatus for authentication of integrated access and backhaul (IAB) node in wireless network
Accordingly, the embodiments herein provide a method for authentication of an IAB node by an IAB-donor node in a wireless network. The method includes obtaining an IAB authorization information of the IAB node from one of an Access and Mobility Management Function (AMF) and a Mobility Management Entity (MME) of the wireless network, determining whether the IAB authorization information of the IAB node indicates the IAB node is authorized, and allocating a unique identity/parameter to the IAB node during an IAB-Mobile Termination (MT) setup and/or Backhaul Radio Link Control (RLC) channel establishment and/or Routing update phase. Further, the method includes storing the unique identity/parameter in a user equipment (UE)-context, which is used to identify the UE-context during an IAB-Distributed Unit (DU) part setup for authorization check and/or authentication.
1. A method performed by an Integrated Access and Backhaul (IAB)-donor node for authentication of an IAB node in a wireless network, the method comprising:
receiving, from the IAB node, a request for one or more Internet Protocol (IP) addresses via Radio Resource Control (RRC);
sending, to the IAB node, an IP address of a Distributed Unit (DU) of the IAB node to identify security context information of the IAB node;
identifying the security context information of the IAB node based on the IP address of the DU of the IAB node;
generating a security parameter, based on the security context information of the IAB node; and
establishing an Internet Protocol Security (IPsec) Security Association (SA) with the IAB node, based on the generated security parameter,
wherein the security parameter is used as Pre-shared Key (PSK) for Internet Key Exchange (IKEv2), authentication.
2. The method of claim 1 , wherein identifying the security context information of the IAB node comprises:
identifying the security context information of the IAB node by using at least one of:
a Cell Radio Network Temporary Identifier (C-RNTI);
a Globally Unique Temporary ID (GUTI) of the IAB node;
an IAB node DU ID; or
an IAB node context ID.
3. The method of claim 1 , wherein the security context information of the IAB node comprises an Access Stratum (AS) context established with the IAB-donor node.
4. The method of claim 1 , wherein the IP address of the DU of the IAB node is allocated by at least one of an Operations, Administration and Management (OAM) server, a Central Unit (CU) of the IAB-donor node, and a DU of the IAB-donor node.
5. An Integrated Access and Backhaul (IAB)-donor node for authentication of an IAB node in a wireless network, the IAB-donor node comprising:
a memory;
a processor coupled with the memory; and
an authentication controller, coupled with the processor, configured to:
receive, from the IAB node, a request for one or more Internet Protocol (IP) addresses via Radio Resource Control (RRC);
send, to the IAB node, an IP address of a Distributed Unit (DU) of the IAB node to identify security context information of the IAB node;
identify the security context information of the IAB node based on the IP address of the DU of the IAB node;
generate a security parameter, based on the security context information of the IAB node; and
establish an Internet Protocol Security (IPsec) Security Association (SA) with the IAB node, based on the generated security parameter,
wherein the security parameter is used as Pre-shared Key (PSK) for Internet Key Exchange (IKEv2) authentication.
6. The IAB-donor node of claim 5 , wherein the identifying of the security context information of the IAB node comprises:
identifying the security context information of the IAB node by using at least one of:
a Cell Radio Network Temporary Identifier (C-RNTI);
a Globally Unique Temporary ID (GUTI) of the IAB node;
an IAB node DU ID; or
an IAB node context ID.
7. The IAB-donor node of claim 5 , wherein the security context information of the IAB node comprises an Access Stratum (AS) context established with the IAB-donor node.
8. The IAB-donor node of claim 5 , wherein the IP address of the DU of the IAB node is allocated by at least one of an Operations, Administration and Management (OAM) server, a Central Unit (CU) of the IAB-donor node, and a DU of the IAB-donor node.
9. A method performed by an Integrated Access and Backhaul (IAB) node for authentication in a wireless network, the method comprising:
performing an IAB-Mobile Termination (MT) setup procedure;
requesting an Internet Protocol (IP) address of a Distributed Unit (DU) of the IAB node used to identify security context information of the IAB node from an IAB-donor node, after proceeding the IAB-MT setup procedure;
receiving the IP address of the DU of the IAB node from the IAB-donor node;
transmitting an F1 setup message to the IAB-donor node; and
establishing an Internet Protocol Security (IPsec) Security Association (SA) with the IAB-donor node, based on a security parameter generated by the IAB-donor node,
wherein the security parameter is used as Pre-shared Key (PSK) for Internet Key Exchange (IKEv2) authentication.
10. The method of claim 9 , wherein the IAB-MT setup procedure comprises at least one of:
performing Radio Resource Control (RRC) connection establishment with the IAB-donor node;
performing authentication with a core network; or
performing establishment of an Access Stratum (AS) context with the IAB-donor node.
11. The method of claim 9 , wherein the F1 setup message comprises an IAB node DU ID.
12. The method of claim 9 , wherein the security parameter is generated based on the security context information which is identified by using the IP address of the DU of the IAB node.