Method and device for communicating in wireless communication system
View Patent ↗The present disclosure relates to a 5G or pre-5G communication system for supporting a higher data transfer rate beyond a 4G communication system such as LTE. A terminal according to an embodiment of the present disclosure performs the operations of: transmitting a registration request message to a network node; receiving an authentication request message containing information on a security related capability from the network node; verifying the security related capability by using the authentication request message; transmitting a first message as a response to the authentication request message; receiving a security mode command message from the network node; and transmitting, to the network node, a security mode completion message as a response to the security mode command message, wherein the information on the security related capability includes information on a capability related to security between the terminal and the network node.
1. A method of performing communication by a UE in a wireless communication system, the method comprising:
transmitting, to a network node, a registration request message;
receiving, from the network node, an authentication request message including information on a security-related capability and information on freshness of the security-related capability, wherein the information on the security-related capability includes security-related capability of the UE and security-related capability of the network node;
verifying the security-related capability, based on the authentication request message;
transmitting a first message in response to the authentication request message;
receiving, from the network node, a security mode command message; and
transmitting, to the network node, a security mode complete message in response to the security mode command message,
wherein the information on freshness of the security-related capability is a counter number, a nonce, or a sequence number.
2. The method of claim 1 , wherein transmitting the first message in response to the authentication request message comprises transmitting an authentication response message when verifying the security-related capability is successful.
3. The method of claim 1 , wherein transmitting the first message in response to the authentication request message comprises transmitting an authentication failure message when verifying the security-related capability fails.
4. The method of claim 1 , wherein the information on the security-related capability includes information on a security key generation capability.
5. The method of claim 1 , wherein the network node is an Access and mobility Management Function (AMF).
6. A method of performing communication by a network node in a wireless communication system, the method comprising:
receiving, from a UE, a registration request message;
transmitting, to the UE, an authentication request message including information on a security-related capability and information on freshness of the security-related capability, wherein the information on the security-related capability includes security-related capability of the UE and security-related capability of the network node;
receiving a first message in response to the authentication request message;
transmitting, to the UE, a security mode command message; and
receiving, from the UE, a security mode complete message in response to the security mode command message,
wherein the UE performs verification of the security-related capability based on the authentication request message, and
wherein the information on freshness of the security-related capability is a counter number, a nonce, or a sequence number.
7. The method of claim 6 , wherein the first message includes an authentication response message when the UE succeeds in verifying the security-related capability.
8. The method of claim 6 , wherein the first message includes an authentication failure message when the UE fails in verifying the security-related capability.
9. The method of claim 6 , wherein the information on the security-related capability includes information on a security key generation capability.
10. The method of claim 6 , wherein the network node is an Access and mobility Management Function (AMF).
11. A UE in a wireless communication system, the UE comprising:
a transceiver; and
a processor connected to the transceiver, wherein the processor is configured to control to:
transmit, to a network node, a registration request message,
receive, from the network node, an authentication request message including information on a security-related capability and information on freshness of the security-related capability, wherein the information on the security-related capability includes security-related capability of the UE and security-related capability of the network node,
verify the security-related capability, based on the authentication request message,
transmit a first message in response to the authentication request message,
receive, from the network node, a security mode command message, and
transmit, to the network node, a security mode complete message in response to the security mode command message,
wherein the information on freshness of the security-related capability is a counter number, a nonce, or a sequence number.
12. The UE of claim 11 , wherein the first message includes an authentication response message when the UE succeeds in verifying the security-related capability, and includes an authentication failure message when the UE fails in verifying the security-related capability.
13. The UE of claim 11 , wherein the information on the security-related capability includes information on a security key generation capability.
14. A network node in a wireless communication system, the network node comprising:
a transceiver; and
a processor connected to the transceiver, wherein the processor is configured to control to:
receive, from a UE, a registration request message,
transmit, to the UE, an authentication request message including information on a security-related capability and information on freshness of the security-related capability, wherein the information on the security-related capability includes security-related capability of the UE and security-related capability of the network node,
receive a first message in response to the authentication request message,
transmit, to the UE, a security mode command message, and
receive, from the UE, a security mode complete message in response to the security mode command message,
wherein the UE verifies the security-related capability, based on the authentication request message, and
wherein the information on freshness of the security-related capability is a counter number, a nonce, or a sequence number.
15. The network node of claim 14 , wherein the first message includes an authentication response message when the UE succeeds in verifying the security-related capability and includes an authentication failure message when the UE fails in verifying the security-related capability, and the information on the security-related capability includes information on a security key generation capability.