Integrity protection and/or ciphering for UE registration with a wireless network

1. A method for wireless communication, comprising:

performing a security procedure with a wireless network of a first network type for a first session and generating user equipment (UE) security context data at a UE;

using the UE security context data for secure communication with the wireless network during the first session;

storing the UE security context data at the UE upon termination of the first session;

de-registering at the end of the first session and powering down after the first session; and

powering up the UE and using the stored UE security context data for registration with the wireless network of the first network type for a second session following the first session;

wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.

2. The method of claim 1 , wherein the using the stored UE security context data for registration comprises

performing integrity protection for at least one message based on the stored UE security context data, and

sending the at least one integrity protected message to the wireless network for registration of the UE with the wireless network.

3. The method of claim 1 , wherein the using the stored UE security context data for registration comprises

performing integrity protection for a registration message based on an integrity key in the stored UE security context data, and

sending the integrity protected registration message to the wireless network for registration of the UE with the wireless network.

4. The method of claim 1 , wherein the using the stored UE security context data for registration comprises

ciphering at least one message based on the stored UE security context data, and

sending the at least one ciphered message to the wireless network for registration of the UE with the wireless network.

5. The method of claim 1 , wherein the using the stored UE security context data for registration comprises

ciphering at least one parameter of a registration message based on a cipher key in the stored UE security context data, and

sending the registration message to the wireless network for registration of the UE with the wireless network.

6. The method of claim 1 , wherein the using the stored UE security context data for registration comprises

ciphering at least one parameter of a registration message based on a cipher key in the stored UE security context data,

performing integrity protection for the registration message based on an integrity key in the stored UE security context data, and

sending the integrity protected registration message comprising the at least one ciphered parameter to the wireless network for registration of the UE with the wireless network.

7. The method of claim 1 , wherein the performing the security procedure with the wireless network comprises performing an Authentication and Key Agreement (AKA) procedure with the wireless network.

8. The method of claim 1 , wherein the stored UE security context data further comprises at least one of a key set identifier (KSI), and a temporary UE identity.

9. An apparatus for wireless communication, comprising:

at least one hardware processor configured to perform a security procedure with a wireless network of a first network type for a first session and to generate user equipment (UE) security context data at a UE, to use the UE security context data for secure communication with the wireless network during the first session, to store the UE security context data at the UE upon termination of the first session, to de-register the UE at the end of the first session and power down the UE after the first session, and to power up the UE and use the stored UE security context data for registration of the UE with the wireless network of the first network type for a second session following the first session;

wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.

10. The apparatus of claim 9 , wherein the at least one hardware processor is configured to perform integrity protection for a registration message based on the stored UE security context data, and to send the integrity protected registration message to the wireless network for registration of the UE with the wireless network.

11. The apparatus of claim 9 , wherein the at least one hardware processor is configured to cipher information for a registration message based on the stored UE security context data, and to send the registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.

12. The apparatus of claim 9 , wherein the at least one hardware processor is configured to cipher information for a registration message based on a cipher key in the stored UE security context data, to perform integrity protection for the registration message based on an integrity key in the stored UE security context data, and to send the integrity protected registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.

13. An apparatus for wireless communication, comprising:

means for performing a security procedure with a wireless network of a first network type for a first session and generating user equipment (UE) security context data at a UE;

means for using the UE security context data for secure communication with the wireless network during the first session;

means for storing the UE security context data at the UE upon termination of the first session;

means for de-registering the UE at the end of the first session and powering down the UE after the first session; and

means for powering up the UE and using the stored UE security context data for registration of the UE with the wireless network of the first network type for a second session following the first session;

wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.

14. The apparatus of claim 13 , wherein the means for using the stored UE security context data for registration comprises

means for performing integrity protection for a registration message based on the stored UE security context data, and

means for sending the integrity protected registration message to the wireless network for registration of the UE with the wireless network.

15. The apparatus of claim 13 , wherein the means for using the stored UE security context data for registration comprises

means for ciphering information for a registration message based on the stored UE security context data, and

means for sending the registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.

16. The apparatus of claim 13 , wherein the means for using the stored UE security context data for registration comprises

means for ciphering information for a registration message based on a cipher key in the stored UE security context data,

means for performing integrity protection for the registration message based on an integrity key in the stored UE security context data, and

means for sending the integrity protected registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.

17. A computer program product, comprising:

a non-transitory computer-readable medium comprising:

code for causing at least one computer to perform a security procedure with a wireless network of a first network type for a first session and to generate user equipment (UE) security context data at a UE,

code for causing at least one computer to use the UE security context data for secure communication with the wireless network during the first session,

code for causing the at least one computer to store the UE security context data at the UE upon termination of the first session,

code for causing the at least one computer de-register the UE at the end of the first session; and

code for causing the at least one computer to use the stored UE security context data after powering up the UE for registration of the UE with the wireless network of the first network type for a second session following the first session;

wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.

18. A method for wireless communication in a wireless network of a first network type, comprising:

performing a security procedure with a user equipment (UE) for a first session and obtaining UE security context data at a network entity;

using the UE security context data for secure communication with the UE during the first session;

storing the UE security context data at the network entity upon termination of the first session;

de-registering the UE at the end of the first session; and

using the stored UE security context data for registration of the UE for a second session following the first session and powering down and powering up the UE;

wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.

19. The method of claim 18 , wherein the using the stored UE security context data for registration comprises

receiving at least one message integrity protected by the UE, and

performing integrity check for the at least one message based on the stored UE security context data.

20. The method of claim 18 , wherein the using the stored UE security context data for registration comprises

receiving a registration message integrity protected by the UE, and

performing integrity check for the registration message based on an integrity key in the stored UE security context data.

21. The method of claim 18 , wherein the using the stored UE security context data for registration comprises

receiving at least one message ciphered by the UE, and

deciphering the at least one message based on the stored UE security context data.

22. The method of claim 18 , wherein the using the stored UE security context data for registration comprises

receiving a registration message from the UE, and

deciphering at least one parameter of the registration message based on a cipher key in the stored UE security context data.

23. The method of claim 18 , wherein the using the stored UE security context data for registration comprises

receiving a registration message from the UE,

deciphering at least one parameter of the registration message based on a cipher key in the stored UE security context data, and

performing integrity check for the registration message based on an integrity key in the stored UE security context data.

24. The method of claim 18 , wherein the performing the security procedure with the UE comprises performing an Authentication and Key Agreement (AKA) procedure with the UE.

25. The method of claim 18 , wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering, an integrity key (IK) used for integrity protection, a key set identifier (KSI), and a temporary UE identity.

26. An apparatus for wireless communication in a wireless network of a first network type, comprising:

at least one hardware processor configured to perform a security procedure with a user equipment (UE) for a first session and obtain UE security context data at a network entity, to use the UE security context data for secure communication with the UE during the first session, to store the UE security context data at the network entity upon termination of the first session, to de-register the UE at the end of the first session, and to use the stored UE security context data for registration of the UE for a second session following the first session and powering down and powering up the UE;

wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.

27. The apparatus of claim 26 , wherein the at least one hardware processor is configured to receive a registration message integrity protected by the UE, and to perform integrity check for the registration message based on the stored UE security context data.

28. The apparatus of claim 26 , wherein the at least one hardware processor is configured to receive a registration message comprising ciphered information from the UE, and to decipher the ciphered information in the registration message based on the stored UE security context data.

29. The apparatus of claim 26 , wherein the at least one hardware processor is configured to receive a registration message comprising ciphered information from the UE, to decipher the ciphered information in the registration message based on a cipher key in the stored UE security context data, and to perform integrity check for the registration message based on an integrity key in the stored UE security context data.

30. The apparatus of claim 26 , wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).

31. The method of claim 18 , wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).

32. The method of claim 1 , wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).

33. The apparatus of claim 9 , wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).

34. The apparatus of claim 13 , wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).

35. The computer program product of claim 17 , wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).