Granted Patent B2

US 12,641,426 · App. 18/800,762 · Granted May 26, 2026

Inventor: Suresh P. Nair (Whippany, NJ)

Assignee: NOKIA TECHNOLOGIES OY

H04W12/08H04L9/0866H04L9/0894H04L9/3226H04L63/0428H04L41/0654H04L2209/80H04W8/02H04W76/19

Abstract

Claims (44)

1 . A mobility management entity (MME) in a communication system, the MME being operable to recover a radio link, the MME comprising:

at least one processor; and

at least one memory storing instructions thereon that, when executed by the at least one processor, cause the MME to perform at least:

after a non-access stratum (NAS) security context has been established for communication between the MME and a user equipment (UE) in a communication system, during a data transfer operation over a control plane and in response to a radio link failure between the UE and a source access node of the communication system, receiving, from the UE, via a target access node of the communication system, a message indicating that the radio link failure has occurred, the target access node being different than the source access node, the message received via the target access node being protected using a first key associated with the NAS security context previously established between the UE and the MME;

verifying the UE using the first key associated with the NAS security context previously established between the UE and the MME;

retrieving, from the source access node, data that previously failed to be delivered to the UE when the radio link failure occurred during the data transfer operation over the control plane between the MME and the UE;

initiating set-up of a signaling interface with the target access node;

recovering a radio link for the UE by sending a second message to the target access node, the second message being protected using a second key associated with the NAS security context previously established between the UE and the MME, the second message comprising the data that previously failed to be delivered to the UE when the radio link failure occurred during the data transfer operation over the control plane between the MME and the UE.

2 . The MME of claim 1 , wherein the instructions stored on the at least one memory, when executed by the at least one processor, further cause the MME to perform at least:

establishing the NAS security context for communication between the MME and the UE;

generating the first and second keys associated with the NAS security context established between the MME and the UE; and

providing the first and second keys to the UE.

3 . The MME of claim 1 , wherein the second key is a cryptographic key associated with the NAS security context previously established between the UE and the MME, and wherein the second message is protected using the cryptographic key associated with the NAS security context previously established between the UE and the MME.

4 . The MME of claim 1 , wherein the first key is an integrity key associated with the NAS security context previously established between the UE and the MME.

5 . The MME of claim 4 , wherein the verifying the UE is carried out using the integrity key associated with the NAS security context previously established between the UE and the MME.

6 . The MME of claim 4 , wherein the integrity key is generated using at least an uplink message count or a downlink message count.

7 . The MME of claim 4 , wherein the instructions stored on the at least one memory, when executed by the at least one processor, further cause the MME to perform at least:

verifying, using the integrity key, the message received from the UE.

8 . The MME of claim 1 , wherein the second key is an encryption key created during establishment of the NAS security context previously established between the UE and the MME.

9 . The MME of claim 1 , wherein the communication system comprises a Narrow Band Internet of Things (NB-IoT) network and the UE comprises a cellular IoT UE.

10 . A user equipment (UE) comprising:

at least one processor; and

at least one memory storing instructions thereon that, when executed by the at least one processor, cause the UE to perform at least:

during a data transfer operation over a control plane between a mobility management entity (MME) of a communication system and the UE, in response to a radio link failure occurring between the apparatus and a source access node, generating a first message indicating that the radio link failure has occurred between the UE and the source access node of the communication system, the first message being protected using a first key associated with a non-access stratum (NAS) security context previously established between the UE and the MME of the communication system, the first message indicating that the radio link failure has occurred;

transmitting, to the MME, via a target access node, the first message indicating that the radio link failure has occurred between the UE and the source access node to initiate recovery of a radio link for the UE, the target access node being different than the source access node; and

receiving, in response to the first message, from the MME, via the target access node, a second message protected using a second key associated with the NAS security context previously established between the UE and the MME, the second message comprising data that previously failed to be delivered to the UE when the radio link failure occurred during the data transfer operation over the control plane between the MME and the UE.

11 . The UE of claim 10 , wherein the receiving the second message comprises receiving, in the second message, from the MME, via the target access node, the data that previously failed to be delivered to the UE when the radio link failure occurred during the data transfer operation over the control plane between the MME and the UE.

12 . The UE of claim 10 , wherein the first key is an integrity key associated with the NAS security context previously established between the UE and the MME.

13 . The UE of claim 10 , wherein the first message comprises information regarding a NAS count.

14 . The UE of claim 10 , wherein the instructions stored on the at least one memory, when executed by the at least one processor, further cause the UE to perform at least:

requesting establishment of the NAS security context between the UE and the MME in the communication system; and

receiving, from the MME, via the source access node, with an indication that the NAS security context has been established between the UE and the MME in the communication system, at least one key associated with the NAS security context established between the UE and the MME.

15 . The UE of claim 10 , wherein the radio link failure is detected by the UE.

16 . The UE of claim 10 , wherein the radio link failure is detected by the source access node.

17 . The UE of claim 10 , wherein an access stratum (AS) security context is not established between the UE and the source access node.

18 . The UE of claim 10 , wherein the communication system comprises a Narrow Band Internet of Things (NB-IoT) network, and wherein the UE comprises cellular IoT (CIOT) UE.

19 . The UE of claim 10 , wherein the source access node comprises a first base station and the target access node comprises a second base station, the first and second base stations being distinct from each other and distinct from the MME of the communication system.

20 . A Cellular Internet-of-Things (CIOT) user equipment configured for receiving data in a Narrow Band IoT (NB-IoT) network via a radio link, the CIOT user equipment comprising:

at least one processor; and

at least one memory storing instructions thereon that, when executed by the at least one processor, cause the CIOT user equipment to perform at least:

requesting establishment of a non-access stratum (NAS) security context between the user equipment and a mobility management entity (MME) of the communication system;

receiving, from the MME, with an indication that the NAS security context has been established between the user equipment and the MME, an integrity key or information regarding the integrity key, the integrity key being created during establishment of the NAS security context between the user equipment and the MME;

in response to a radio link failure (RLF) occurring between the user equipment and a source access node of the communication system during a data transfer operation over a control plane between the MME and the user equipment, initiating recovery of the radio link by sending a first message to the MME through a target access node of the communication system, without using the source access node to relay the first message, while maintaining the NAS security context previously established between the user equipment and the MME, wherein the first message is integrity protected using the integrity key created during establishment of the NAS security context between the user equipment and the MME, and wherein the target access node is different from the source access node; and

receiving, from the target access node, a second message protected using the integrity key associated with the NAS security context previously established between the user equipment and the MME, the second message comprising data that previously failed to be delivered to the user equipment when the RLF occurred during the data transfer operation over the control plane between the MME and the user equipment.

Assignments (4)

Continuity (5)

References Cited (158)