Security activation in wireless communications networks
Systems and methodologies are described that facilitate security activation within a specified security activation time. Thus, where handover occurs or is initiated within the activation time, security keys can be activated in such a way as to not be substantially affected by the handover. In one example, a handover time can be set to occur beyond the security activation time to ensure the security activation happens first. Additionally, a handover command can comprise security keys that can be activated upon handover in another example. Moreover, in non-real-time contexts, dummy packets can be transmitted to allow timer operability with packet sequence numbering, or security activation times can be substantially ignored by utilizing a verification process.
1. A method for activating security keys in wireless communications networks, comprising:
deriving first security keys from a core network component associated with a security activation time by which the security keys are to be applied, wherein the security activation time is based at least in part on packet sequence numbers;
applying the first security keys within the security activation time; and
handing over communications from a source access point to a target access point within the security activation time after applying the first security keys.
2. The method of claim 1 , further comprising configuring a handover activation time having an expiration before the security activation time, the handing over communications occurs within the handover activation time.
3. The method of claim 1 , further comprising receiving a handover command message comprising second security keys.
4. The method of claim 3 , wherein the second security keys indicate cancellation of the first security keys in favor of security keys received before the first security keys.
5. The method of claim 3 , further comprising applying the second security keys for communication with the target access point.
6. The method of claim 5 , further comprising storing the first keys for subsequent communication with the source access point.
7. The method of claim 1 , further comprising transmitting dummy protocol data units to create packet sequence numbers for non-real-time services.
8. A wireless communications apparatus, comprising:
at least one processor configured to:
apply a first set of security keys determined from a source access point having a specified security activation time, wherein the security activation time is based at least in part on packet sequence numbers; and
complete handover of communications from the source access point to a target access point within the security activation time; and
a memory coupled to the at least one processor.
9. The wireless communications apparatus of claim 8 , wherein the at least one processor is further configured to set a handover activation time expiring subsequent to the security activation time, the handing over communications is completed within the handover activation time.
10. The wireless communications apparatus of claim 8 , wherein the at least one processor is further configured to receive a handover command message comprising a second set of security keys.
11. The wireless communications apparatus of claim 10 , wherein the second set of security keys are in the handover command message to cancel the first set of security keys in favor of a set of security keys earlier derived.
12. The wireless communications apparatus of claim 10 , wherein the at least one processor is further configured to apply the second set of security keys for communication with the target access point.
13. The wireless communications apparatus of claim 12 , wherein the first set of keys are stored for subsequent communication with the source access point.
14. The wireless communications apparatus of claim 8 , wherein the at least on processor is further configured to transmit dummy protocol data units to create consistent packet sequence numbers.
15. A wireless communications apparatus that activates security keys in wireless communications networks, comprising:
means for applying first security keys within a specified security activation time, wherein the security activation time is based at least in part on packet sequence numbers; and
means for initiating communications handover from a source access point to a target access point within the specified security activation time.
16. The wireless communications apparatus of claim 15 , further comprising means for configuring a handover activation time having an expiration time before the security activation time.
17. The wireless communications apparatus of claim 16 , further comprising means for completing the handover within the handover activation time.
18. The wireless communications apparatus of claim 15 , further comprising means for receiving a handover command message comprising second security keys.
19. The wireless communications apparatus of claim 18 , further comprising means for applying the second security keys for communication with the target access point.
20. The wireless communications apparatus of claim 19 , further comprising means for storing the first keys for subsequent communication with the source access point.
21. The wireless communications apparatus of claim 15 , further comprising means for transmitting dummy protocol data units to create packet sequence numbers for non-real-time services.
22. A computer program product, comprising:
a computer-readable storage medium comprising:
code for causing at least one computer to receive first security keys from a core network component associated with a security activation time by which the security keys are to be applied, wherein the security activation time is based at least in part on packet sequence numbers;
code for causing the at least one computer to apply the first security keys within the security activation time; and
code for causing the at least one computer to handover communications from a source access point to a target access point within the security activation time after applying the first security keys.
23. The computer program product of claim 22 , wherein the computer-readable storage medium further includes code for causing the at least one computer to configure a handover activation time having an expiration before the security activation time, the handing over communications occurs within the handover activation time.
24. The computer program product of claim 22 , wherein the computer-readable storage medium further includes code for causing the at least one computer to receive a handover command message comprising second security keys.
25. The computer program product of claim 24 , wherein the second security keys indicate cancellation of the first security keys in favor of security keys received before the first security keys.
26. The computer program product of claim 24 , wherein the computer-readable storage medium further includes code for causing the at least one computer to apply the second security keys for communication with the target access point.
27. The computer program product of claim 26 , wherein the computer-readable storage medium further includes code for causing the at least one computer to store the first keys for subsequent communication with the source access point.
28. The computer program product of claim 22 , wherein the computer-readable storage medium further includes code for causing the at least one computer to transmit dummy protocol data units to create packet sequence numbers for non-real-time services.