Method and apparatus for refreshing the security keys of a subset of configured radio bearers

1. A method in a user equipment to refresh security keys of a subset of configured radio bearers including less than all of the configured radio bearers which are currently configured, the method comprising:

receiving an indication from a network entity to release one or more radio bearers from the subset of configured radio bearers for which the refresh of the security keys is desired; and

adding a new radio bearer for each one of the one or more radio bearers being released, where each one of the new radio bearers being added has new security keys; and

wherein the new radio bearer is added before the radio bearer being released, that is associated with the new radio bearer being added, is released.

2. The method in accordance with claim 1 , wherein adding the new radio bearer is in response to a message from the network entity.

3. The method in accordance with claim 2 , wherein the message for adding the new radio bearer is part of the indication received from the network entity to release the one or more radio bearers.

4. The method in accordance with claim 2 , wherein the message from the network entity prompting the addition of the new radio bearer includes security relevant parameters that are used in deriving the new security keys.

5. The method in accordance with claim 1 , wherein each radio bearer has an associated logical channel identity, and wherein the logical channel identity associated with the new radio bearer being added is different than the logical channel identity associated with the radio bearer being released, that is associated with the new radio bearer being added.

6. The method in accordance with claim 5 , wherein a configuration of the new radio bearer being added is the same as a configuration of the radio bearer being released, that is associated with the new radio bearer being added.

7. The method in accordance with claim 1 , wherein upon receiving data for a radio bearer with an associated logical channel identity not configured, discarding the received data for that particular radio bearer.

8. The method in accordance with claim 1 , wherein each one of the radio bearers has a related packet data convergence protocol entity.

9. The method in accordance with claim 8 , wherein the related packet data convergence protocol entity of the radio bearer being released, prior to being released, deciphers already received and processed information from the information flow, which has not yet been acknowledged as having been received, and transfers the deciphered information to the related packet data convergence protocol entity of the new radio bearer being added, in ascending order of an associated count value, treating the deciphered information as newly arrived information via the new radio bearer being added.

10. The method in accordance with claim 1 , wherein each one of the radio bearers has a hybrid automatic repeat request buffer, where the hybrid automatic repeat request buffer is flushed when the indication from the network to release the one or more radio bearers from the subset of the configured radio bearers is received.

11. The method in accordance with claim 10 , wherein a retransmission request, related to a hybrid automatic repeat request for information that was flushed from the hybrid automatic repeat request buffer related to the radio bearer being released, will be treated by the user equipment as a new transmission using the new security keys of the new radio bearer being added.

12. A method in a user equipment to refresh security keys of a subset of configured radio bearers including less than all of the configured radio bearers which are currently configured, the method comprising:

receiving an indication from a network entity to release one or more radio bearers from the subset of configured radio bearers for which the refresh of the security keys is desired; and

adding a new radio bearer for each one of the one or more radio bearers being released, where each one of the new radio bearers being added has new security keys;

wherein each radio bearer has a related packet data convergence protocol entity; and

wherein any information in a transmit buffer of a transmitter of the related packet data convergence protocol entity of the radio bearer being released, which has not been acknowledged as having been received, will be processed again using the new security keys of the new radio bearer being added which is related to the radio bearer being released, and the information that has been processed again will be retransmitted.

13. A user equipment to refresh security keys of a subset of configured radio bearers including less than all of the configured radio bearers which are currently configured, the user equipment comprising:

a transceiver that receives an indication from a network entity to release one or more radio bearers from the subset of configured radio bearers for which the refresh of the security keys is desired; and

a controller that adds a new radio bearer for each one of the one or more radio bearers being released, where each one of the new radio bearers being added has new security keys; and

wherein the new radio bearer is added before the related radio bearer being released, that is associated with the new radio bearer being added, is released.

14. The user equipment in accordance with claim 13 , wherein the controller adds the new radio bearer, in response to the transceiver receiving a corresponding message from the network entity.

15. The user equipment in accordance with claim 14 , wherein the message for adding the new radio bearer is part of the indication received from the network entity to release the one or more radio bearers.

16. The user equipment in accordance with claim 13 , wherein each one of the radio bearers has a related packet data convergence protocol entity.

17. The user equipment in accordance with claim 16 , wherein the related packet data convergence protocol entity of the radio bearer being released, prior to being released, deciphers already received and processed information from the information flow, which has not yet been acknowledged as having been received, and transfers the deciphered information to the related packet data convergence protocol entity of the new radio bearer being added, in ascending order of an associated count value, treating the deciphered information as newly arrived information via the new radio bearer being added.