Securing communications at a change of connection
There is provided an apparatus comprising means for determining a change of connection at a user equipment from a source access point to a target access point, and means for receiving, from the target access point, an indication that an associated gateway function is the same for the source access point and the target access point. The apparatus also comprising means for generating an access point key based on the received indication from the target access point, and means for securing communications with the target access point using the generated access point key.
1 . An apparatus comprising: at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus at least to:
determine a change of connection at a user equipment from a source access point to a target access point;
receive, from the target access point, an indication that an associated gateway function is the same for the source access point and the target access point;
generate an access point key based on the received indication from the target access point, and a further access point key associated with the gateway function or the source access point; and
secure communications with the target access point using the generated access point key.
2 . The apparatus according to claim 1 , wherein the determining comprises: providing, to a gateway function, a request to change the connection of the user equipment from the source access point to the target access point.
3 . The apparatus according to claim 1 , wherein the further access point key is associated with the gateway function.
4 . The apparatus according to claim 3 , wherein the apparatus is caused to:
receive, from the gateway function, a random number; and
the generating comprises:
generating the access point key based on: i) the received indication, ii) the further access point key associated with the gateway function, and iii) the random number.
5 . The apparatus according to claim 3 , wherein the apparatus is caused to:
maintain a counter;
in response to receiving the indication, increment a value of the counter; and wherein
the generating comprises:
generating the access point key based on: i) the received indication, ii) the further access point key associated with the gateway function, and iii) a current value of the counter.
6 . The apparatus according to claim 3 , wherein the apparatus is caused to:
receive, from the gateway function, a next hop value;
wherein the generating comprises:
generating the access point key based on: i) the received indication, ii) the further access point key associated with the gateway function, and iii) the received next hop value.
7 . The apparatus according to claim 1 , wherein the further access point key is associated with the source access point.
8 . The apparatus according to claim 7 , wherein the apparatus is caused to:
receive a random number value generated by the gateway function, and wherein
the generating comprises:
generating the access point key using the received random number value as an input parameter.
9 . The apparatus according to claim 7 , wherein the apparatus is caused to:
maintain a counter;
in response to receiving the indication, increment the counter, and
wherein the generating comprises:
generating the access point key using a current value of the counter as an input parameter.
10 . The apparatus according to claim 1 , wherein the apparatus is caused to:
provide, to the gateway function, a further indication that the user equipment supports mobility between the source access point and the target access point.
11 . A method comprising:
determining a change of connection at a user equipment from a source access point to a target access point;
receiving, from the target access point, an indication that an associated gateway function is the same for the source access point and the target access point;
generating an access point key based on the received indication from the target access point, and a further access point key associated with the gateway function or the source access point; and
securing communications with the target access point using the generated access point key.
12 . The method according to claim 11 , wherein the determining comprises: providing, to a gateway function, a request to change the connection of the user equipment from the source access point to the target access point.
13 . The method according to claim 11 , wherein the further access point key is associated with the gateway function.
14 . The method according to claim 13 , wherein the method comprises:
receiving, from the gateway function, a random number; and
wherein the generating comprises:
generating the access point key based on: i) the received indication, ii) the further access point key associated with the gateway function, and iii) the random number.
15 . The method according to claim 13 , wherein the method comprises: maintaining a counter;
in response to receiving the indication, incrementing a value of the counter; and wherein
the generating comprises:
generating the access point key based on: i) the received indication, ii) the further access point key associated with the gateway function, and iii) a current value of the counter.
16 . The method according to claim 13 , wherein the method comprises:
receiving, from the gateway function, a next hop value;
wherein the generating comprises:
generating the access point key based on: i) the received indication, ii) the further access point key associated with the gateway function, and iii) the received next hop value.
17 . The method according to claim 11 , wherein the further access point key is associated with the source access point.
18 . The method according to claim 17 , wherein the method comprises:
receiving a random number value generated by the gateway function, and
wherein the generating comprises:
generating the access point key using the received random number value as an input parameter.
19 . The method according to claim 17 , wherein the method comprises:
maintaining a counter;
in response to receiving the indication, incrementing the counter, and
wherein the generating comprises:
generating the access point key using a current value of the counter as an input parameter.
20 . A non-transitory computer readable medium encoded with instructions that, when executed in hardware, perform a process, the process comprising:
determining a change of connection at a user equipment from a source access point to a target access point;
receiving, from the target access point, an indication that an associated gateway function is the same for the source access point and the target access point;
generating an access point key based on the received indication from the target access point, and a further access point key associated with the gateway function or the source access point; and
securing communications with the target access point using the generated access point key.