WO2015176462A1

WO2015176462A1 - Dual-connection radio bearer migration processing and migration methods and devices

Info

Publication number: WO2015176462A1
Application number: PCT/CN2014/087718
Authority: WO
Inventors: 和峰; 杜忠达
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-05-23
Filing date: 2014-09-28
Publication date: 2015-11-26
Also published as: CN104219722A; CN104219722B

Abstract

The present invention provides dual-connection radio bearer migration processing and migration methods and devices. The migration processing method comprises: a master base station allocates a new data radio bearer identifier to a data radio bearer to be migrated, the new data radio bearer identifier being different from data radio bearer identifiers that have been used by the master base station and data radio bearer identifiers that have been used by a slave base station; and the master base station sends to a user equipment a message for informing the user equipment of migrating the data radio bearer, the message carrying the new radio bearer identifier. By means of the technical solution provided in the present invention, the problem in the related art that the security is low due to key exposure during the migration of a dual-connection radio bearer between base stations is solved, and the security of the dual-connection bearer of a terminal is improved.

Description

Migration processing, migration method and device for dual-connected wireless bearer

Technical field

The present invention relates to the field of communications, and in particular, to a migration processing and migration method and apparatus for a dual connectivity radio bearer.

Background technique

With the continuous evolution of wireless communication technologies and standards, mobile packet services have been greatly developed, and the data throughput capability of single terminals is constantly improving. Taking the Long Term Evolution (LTE) system as an example, the downlink maximum rate of 100 Mbps data transmission can be supported in the 20 M bandwidth. In the subsequent enhanced LTE (LTE Advanced) network, the data transmission rate will be further improved, and even Up to 1Gbps.

The user plane data protocol stack of the existing LTE is as shown in FIG. 1 , and the GPRS Tunneling Protocol for the User Plane (GTP-TTP) is used from the core network through the user-level general packet radio service (GPRS) protocol. U) Received downlink data, after unpacking, through the Packet Data Convergence Protocol (PDCP) sublayer, Radio Link Control (RLC) protocol sublayer, media access The control (Medium Access Control, MAC for short) protocol sublayer and physical layer (PHYsics, PHY for short) are sent to the user equipment (User Equipment, UE for short); the uplink data is sent in the opposite direction to the downlink. Currently, the data transmission link between the network and the UE is a one-to-one dedicated link, so the signal quality of the link and the size of the resources used determine the data transmission performance between the two. If the resources used by the link are limited or the signal quality is poor, the user experience of the UE will decrease. This is a huge challenge that mobile operators are facing now. Although the network capacity is expanding year by year, it still cannot keep up with the increase in the number of user terminals. And the user's demand for data traffic, in Figure 1, IP is short for Internet Protocol, and UDP/IP is short for User Data Protocol/Internet Protocol.

In order to meet the growing demand for data traffic and the geographically uneven nature of services, operators are also adding low-power nodes (Low Power Nodes, LPN for short) in the process of deploying next-generation communication networks (such as LTE). Or a small cell (Small Cell) or a micro base station (Pico eNB, where eNB is short for evolved Node B, eNB may be called evolved Node B) for hotspot enhancement. As the number of LPN cells increases, the network deployment environment becomes more complicated and brings some problems. First, because the coverage of the LPN cell is relatively small compared to the macro cell (Macro Cell), the capacity is relatively small, and some LPN cells may be easily occupied by the user and cause the load to be too high, thereby affecting the user. Data throughput, while others are small The area or macro cell will be at a relatively low load level. If the load is to be balanced, the network side needs to perform load balancing operations, but the process is not flexible enough, especially when there are many cells, the lack of such flexibility leads to no load. In addition, because the number of LPN cells is relatively large, when a user equipment (or terminal) moves within the network, frequent inter-cell handover (Handover) is caused, resulting in frequent data service terminals or even Problems such as dropped calls, which can also lead to a decline in user data throughput and user experience. At the same time, such frequent handovers may also cause the terminal and the network, especially the core network, to receive a large amount of signaling impact, which may cause system resources to be congested or even paralyzed. With the increase in the number of LPN cells deployed by operators and individuals in the future, this situation will become more and more serious. Therefore, many companies and operators are eager to seek a new enhanced solution. Dual Connectivity is one of them. First, the dual-connected terminal can maintain connection with two network nodes at the same time. For example, the UE maintains connection with the macro cell and the LPN cell at the same time. When the network load is unbalanced, the network side can control the transmission data of the terminal on the two nodes in real time. At the same time, if the UE moves or other reasons cause the LPN cell to change, another cell can still maintain the connection, and this change does not cause excessive signaling impact.

However, the UE must be securely connected to the network. In a single-connection scenario, according to the existing protocol, as shown in FIG. 2, the access layer (Access Stratum, AS for short) between the radio access network element (such as an eNB) and the user equipment has the same security context. The base station key KeNB is included, according to which the encryption key (KRRCenc) and the integrity protection key (KRRCint) of the AS control plane and the encryption key (KUPenc) of the user plane can be derived. When data transmission is performed between the eNB and the UE, the sender uses the control plane integrity protection key (KRRCint) and the encryption key (KRRCenc), and the specified algorithm to perform integrity protection and encryption on the control plane data, and at the receiving end. Reverse operations (decryption and integrity protection verification) are performed according to the same key and algorithm. Both the user plane data transmission and reception sides use the user plane encryption key (KUPenc) to encrypt and decrypt the user plane data. . The base station key initial KeNB is calculated by the core network and then transmitted to the eNB. In the subsequent process, for example, to prevent the PDCP sequence number from being flipped or the UE switching, the KeNB also updates. Taking the handover as an example, if the S1 handover occurs, the KeNB of the handover target side is still calculated by the core network; but if an X2 handover occurs, the derivative method of the KeNB (or KeNB*) of the handover target side may have two As shown in FIG. 3, one is derived from the KeNB on the switching source side, and the other is derived from the Next Hop (NH) key, where the NH key is derived from the core network. Calculated and sent to the eNB.

In the dual-connection scenario, if a non-bearer-separated data offloading method is adopted, the service bearer (Service-Gateway, S-GW for short) is divided into two groups, which are respectively passed through the master base station (Master eNB, referred to as The MeNB) and the secondary base station (Secondary SeNB, SeNB for short) establish a connection with the UE, as shown in FIG. The two nodes connected to the UE need to use different security keys to protect the respective connection bearers. The base station key S-KeNB on the SeNB is derived from the base station key KeNB on the MeNB. When the KeNB of the MeNB changes, the SeNB is deleted; but when the S-KeNB on the SeNB changes, the connection on the MeNB is unaffected. The scenario in which the S-KeNB changes includes: the S-KeNB caused by the KeNB key change on the MeNB. Change, the S-KeNB key modification initiated by the MeNB, the PDCP COUNT value carried on the SeNB is reversed, or the key change caused by other SeNB reconfigurations.

In practice, considering the mobility of the UE and the load of the network, the connection bearer of the UE may be migrated between the MeNB and the SeNB, that is, the bearer on the MeNB may be migrated to the SeNB, and the SeNB shall bear the data transmission and reception; The reverse can occur, ie the bearer on the SeNB is migrated back to the MeNB. During this process, the identity of the bearer does not change. In the LTE system, there are multiple ways to divide the bearer of the UE, and correspondingly, multiple identifiers correspond to the bearer. The data radio bearer (DRB id) (DRB id) is assigned to the base station side; the Evolved Packet System (EPS) bearer identifier (ESP) is assigned to the core network side. Id), and Enhanced Radio Access Bearer (E-RAB id). The DRB id is one-to-one or mapped with the EPS id and the E-RAB id. If the radio bearer corresponding to a DRB id of the access layer is deleted, the ground bearer corresponding to the EPS id of the non-access stratum needs to be deleted. In the bearer migration process in the dual-connection scenario, the actual change is only related to the change of the user plane path, and the bearer does not change. Therefore, the corresponding radio bearer identifier and the ground bearer identifier and their corresponding relationships do not occur. Variety.

However, this kind of migration of bearers may bring security risks of key reuse. Based on the foregoing that the MeNB and the SeNB have their own independent keys, as shown in FIG. 5, the bearer 2 originally on the MeNB is migrated to the SeNB, and during the transmission on the SeNB, the PDCP COUNT value of the bearer 2 is reversed. In turn, according to the existing protocol, the update of the S-KeNB needs to be performed, but this does not affect the MeNB, and its KeNB remains unchanged. However, when the bearer 2 is migrated back to the MeNB again, there may be a problem that the data packet carrying the same count value COUNT is repeatedly encrypted by the same key, as shown in FIG. 6, at this time, all the input keys of the encryption algorithm. The bearer flag, the count value COUNT, etc. are all reused. In the security field, the reuse of encryption parameters such as keys may cause problems such as key leakage, so it is necessary to eliminate the problem.

Summary of the invention

For the related art, the problem that the dual-connection radio bearer has a key leakage during the inter-base station migration process, the present invention provides a dual-connection radio bearer migration processing, migration method and device, to at least solve the above problem. technical problem.

In order to achieve the above object, according to an embodiment of the present invention, a method for processing a dual-connection radio bearer is provided, including: a primary base station assigning a new data radio bearer identifier to a data radio bearer to be migrated, where the new The data radio bearer identifier is different from the data radio bearer identifier used by the master base station and the slave base station; the master base station sends a message to the user equipment to notify the user equipment to perform data radio bearer migration, where the message is Carrying the new radio bearer identity.

Preferably, the new radio bearer identifier has a mapping relationship with the evolved packet system bearer identifier corresponding to the data radio bearer.

Preferably, before the primary base station allocates a new data radio bearer identifier to the data radio bearer to be migrated, the method further includes: clearing the current data radio bearer when the master base station and/or the slave base station performs key update Data radio bearer identification record not used.

Preferably, before the primary base station allocates a new data radio bearer identifier, the method further includes: the primary base station migrating the data radio bearer from the primary base station to the secondary base station, and then the secondary base station migrates the data radio bearer The key back to the primary base station, and/or the source base station carrying the migration is updated, and the key of the target base station carrying the migration is not updated.

In order to achieve the above object, in accordance with still another embodiment of the present invention, a method for migrating a dual-connected radio bearer is provided, including: receiving, by a user equipment, a message from a primary base station for notifying a user equipment to perform data radio bearer migration, where The message carries a new data radio bearer identifier allocated by the primary base station, where the new data radio bearer identifier is used to identify a data radio bearer to be migrated, and the new data radio bearer identifier is associated with the primary base station and The data radio bearer identifiers that have been used by the base station are different; the user equipment migrates the data radio bearers to the target base station according to the new data radio bearer identifier.

Preferably, when the user equipment migrates the data radio bearer to the target base station according to the new data radio bearer identifier, the method further includes: the user equipment, the new data radio bearer identifier, and the Corresponding to the evolved packet system bearer identifier corresponding to the data radio bearer, and deleting the original data radio bearer identifier of the data radio bearer.

In order to achieve the above object, according to still another embodiment of the present invention, a dual-connection radio bearer migration processing apparatus is further provided, which is applied to a primary base station, and includes: an allocation module, configured to allocate a new data radio bearer to be migrated. a data radio bearer identifier, wherein the new data radio bearer identifier is different from the data radio bearer identifier used by the master base station and the slave base station; and the sending module is configured to send the user equipment to notify the user equipment to perform data The radio carries the migrated message, where the message carries the new radio bearer identifier.

Preferably, the allocating module is further configured to allocate the new data radio bearer identifier when the new radio bearer identifier has a mapping relationship with the evolved packet system bearer identifier corresponding to the data radio bearer.

In order to achieve the above object, in accordance with still another embodiment of the present invention, a dual connectivity radio bearer migration apparatus is provided, including: a receiving module, configured to receive, from a primary base station, a user equipment for notifying a data radio bearer migration. a message, wherein the message carries a new data radio bearer assigned by the primary base station The new data radio bearer identifier is used to identify the data radio bearer to be migrated, and the new data radio bearer identifier is different from the data radio bearer identifier used by the master base station and the slave base station; And configured to migrate the data radio bearer to the target base station according to the new data radio bearer identifier.

Preferably, the mapping module is further configured to: the new data radio bearer identifier is associated with the evolved packet system bearer identifier corresponding to the data radio bearer, and the original data radio bearer identifier of the data radio bearer is deleted.

In order to achieve the above object, according to still another embodiment of the present invention, a base station is further provided, including the migration processing apparatus of the dual connectivity radio bearer described above.

In order to achieve the above object, according to still another embodiment of the present invention, there is further provided a user equipment, including the migration device of the dual connectivity radio bearer described above.

The invention solves the problem that the primary base station allocates a new data radio bearer identifier different from the data radio bearer identifier of the primary base station and the data radio bearer identifier that has been used by the base station for the data radio bearer to be migrated, and solves the related art, the dual connection The wireless bearer has problems such as security caused by key leakage during the migration process between the base stations, and improves the security of the dual-connection bearer of the terminal.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a schematic diagram of an LTE user plane protocol stack according to the related art;

2 is a schematic diagram of a key derivation and protection mechanism in a network of the related art;

3 is a schematic diagram of a method for deriving a base station key in a handover scenario according to the related art;

4 is a schematic diagram of a dual connectivity scenario according to the related art;

FIG. 5 is a schematic diagram of a dual connectivity key multiplexing scenario according to the related art; FIG.

6 is a schematic diagram of an encryption method according to the related art;

7 is a flowchart of a migration processing method of a dual connectivity radio bearer according to an embodiment of the present invention;

FIG. 8 is a structural block diagram of a migration processing apparatus for a dual connectivity radio bearer according to an embodiment of the present invention; FIG.

9 is a flowchart of a method for migrating a dual connectivity radio bearer according to an embodiment of the present invention;

FIG. 10 is a structural block diagram of a dual connectivity radio bearer migration apparatus according to an embodiment of the present invention; FIG.

11 is a block diagram showing another structure of a dual connectivity radio bearer migration apparatus according to a preferred embodiment of the present invention;

FIG. 12 is a schematic diagram of a bearer migration process actively triggered by a primary base station according to a preferred embodiment of the present invention; FIG.

FIG. 13 is a schematic diagram of a bearer migration process actively triggered from a base station according to a preferred embodiment of the present invention; FIG.

FIG. 14 is a schematic diagram of a bearer migration process actively triggered from a base station according to a preferred embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

For the related art, in the migration process of the dual-connection radio bearer between the base stations, the following solutions provide corresponding solutions due to security problems such as key multiplexing and the like, as follows.

FIG. 7 is a flowchart of a migration processing method of a dual connectivity radio bearer according to an embodiment of the present invention. As shown in FIG. 7, the method includes steps S702-S706:

Step 702: The primary base station allocates a new data radio bearer identifier to the data radio bearer to be migrated, where the new data radio bearer identifier is different from the data radio bearer identifier used by the master base station and the slave base station;

Step 704: The primary base station sends a message to the user equipment to notify the user equipment that the data radio bearer is migrated, where the message carries the new radio bearer identifier corresponding to the data radio bearer to be migrated.

Preferably, the foregoing various processing steps may be applied to various migration scenarios of the radio bearer, for example, from the original data radio bearer of the base station to the primary base station; or the original data radio bearer of the primary base station is migrated to the secondary base station; or The data radio bearer of the primary base station is migrated to the secondary base station, and then migrated from the secondary base station to the primary base station. Especially in the last case, in the scenario where the data radio bearer is repeatedly migrated, the key information and the like may be repeatedly used, which may lead to key leakage, etc., and the technical means adopting the above various processing steps are adopted as The data radio bearer is allocated with a new data radio bearer identification technology that is different from the primary base station and the radio bearer identifier that has been allocated by the base station. Therefore, the multiplexing of information such as keys is fundamentally avoided, and the dual connectivity bearer is improved. Security when hosting migrations.

In the step S702, the primary base station allocates a new data radio bearer identifier to the data radio bearer, and no longer uses the original data radio bearer identifier. Therefore, after receiving the message, the user equipment needs to re-use the new one. The data radio bearer identifier corresponds to the evolved packet system bearer identifier corresponding to the data radio bearer, and does not trigger the deletion indication of the upper layer radio bearer.

In the step S704, the notification message is implemented in multiple manners, for example, by using a new dedicated message, or by using an existing message.

In order to facilitate the allocation of a new data radio bearer identity, the primary base station can record the data radio bearer identity that the primary base station and the secondary base station have used. The record information may be updated by the key update process to clear the bearer identification record that is not used by the current radio bearer. For example, when the primary base station and/or the base station passively or actively perform key update, the current data radio bearer is not used. The data radio bearer identification record (that is, the data radio bearer identification record that is not used by the current radio bearer). Specifically, it can be expressed as the following implementation forms:

When the key update is initiated, the primary base station clears the data radio bearer identification record that is not used by the current bearer; when there is no new data radio bearer identifier, the primary base station and the secondary base station can also use the key update process to clear unused data wireless. The identity record is carried to retrieve the radio bearer identity resource.

For example, the method for clearing the bearer identifier is as follows: if the used radio bearer identifier of the used data recorded by the primary base station is 1, 2, 3, but there are only two data radio bearers on the current primary base station and the secondary base station, respectively, the identifier 2 is used. And 3, through the key update process, you can clear the record of ID 1 that is no longer used.

The solution in this embodiment may be applied to the following scenarios, but is not limited thereto: the primary base station migrates the data radio bearer from the primary base station to the secondary base station, and then the secondary base station migrates the data radio bearer back to the primary base station, and/or

The key of the source base station carrying the migration is updated and the key of the target base station carrying the migration is not updated. The source/target base station carrying the migration is for the data radio bearer to be migrated. For example, if a data radio bearer is migrated from the A base station to the B base station, the A base station is the source base station for the bearer migration, and the B base station is the target base station carrying the migration.

In this embodiment, a dual-connection radio bearer migration processing apparatus is also provided, which is applied to a primary base station, and is used to implement the foregoing method. As shown in FIG. 8, the apparatus includes:

The allocating module 80 is configured to allocate a new data radio bearer identifier to the data radio bearer to be migrated, where the new data radio bearer identifier is different from the data radio bearer identifier used by the master base station and the slave base station;

The sending module 82 is connected to the distribution module 80, and is configured to send a message to the user equipment to notify the user equipment to perform data radio bearer migration, where the message carries the new radio bearer identifier.

Preferably, the foregoing allocation module 80 is further configured to allocate the new data radio bearer identifier when the new radio bearer identifier has a mapping relationship with the evolved packet system bearer identifier corresponding to the data radio bearer.

It should be noted that each of the above modules may be implemented by software or a hardware module. For the latter, the following implementation forms may be implemented: the distribution module 80 is located in the first processor, and the sending module 82 may be located in the second processor. Or, the allocation module 80 and the transmitting module 82 are all located in the same processor, but are not limited thereto.

In this embodiment, a base station is further provided, including: the migration processing apparatus of the dual connectivity radio bearer described above.

In this embodiment, a method for migrating a dual connectivity radio bearer is also provided. As shown in FIG. 9, the method includes:

Step S902: The user equipment receives a message from the primary base station for informing the user equipment to perform data radio bearer migration, where the message carries a new data radio bearer identifier allocated by the primary base station, where the new data radio bearer identifier is used to identify The data radio bearer to be migrated, the new data radio bearer identifier is different from the data radio bearer identifier used by the primary base station and the slave base station;

Step S904: The user equipment migrates the data radio bearer to the target base station according to the new data radio bearer identifier.

In a preferred embodiment of the present embodiment, when the user equipment migrates the data radio bearer to the target base station according to the new data radio bearer identifier, the user equipment needs to make the new data radio bearer identifier of the data radio bearer and the data. The evolved packet system bearer identifier corresponding to the radio bearer is corresponding, and the original data radio bearer identifier of the data radio bearer is deleted. In this process, deleting the original data radio bearer identifier of the data radio bearer does not trigger the deletion of the evolved packet system bearer corresponding to the data radio bearer and its identifier.

In this embodiment, a dual-connected radio bearer migrating device is also provided. The device is used to implement the foregoing solution, and can be applied to a user equipment. As shown in FIG. 10, the device includes:

The receiving module 102 is configured to receive a message from the primary base station for notifying the user equipment to perform data radio bearer migration, where the message carries a new data radio bearer identifier allocated by the primary base station, where the new data radio bearer identifier is used for Identifying the data radio bearer to be migrated, where the new data radio bearer identifier is different from the data radio bearer identifier used by the primary base station and the slave base station;

The migration module 104 is configured to migrate the data radio bearer to the target base station according to the new data radio bearer identifier.

Preferably, as shown in FIG. 11, the foregoing apparatus may further include: a mapping module 106, configured to establish a mapping relationship between a new data radio bearer identifier and an evolved packet system bearer identifier corresponding to the data radio bearer, and delete the original data radio bearer The mapping relationship between the data radio bearer identifier and the evolved packet system bearer identifier.

In this embodiment, a user equipment is further provided, including: the migration device of the dual connectivity radio bearer described above.

In order to better understand the above embodiments, the following detailed description will be given in conjunction with the preferred embodiments. The following preferred embodiment provides a method for managing a dual-connection radio bearer, so that when the connection bearer of the terminal is migrated between the base stations that are simultaneously connected, the problem of key multiplexing and the like is avoided, thereby ensuring the security of the dual connection. The main idea of the following embodiment is:

When the radio bearer is migrated from the first base station (which may be the primary base station or the secondary base station) to the second base station (which may be the primary base station or the secondary base station), it needs to be assigned a new data radio bearer identifier and the radio bearer with the data The corresponding evolved packet system bearer identity re-corresponds to the new radio bearer identity. The new radio bearer identifier is to be distinguished from other bearer identifiers that have been allocated on the first base station and the second base station. Further, when the key update is initiated, the first base station and/or the second base station clears the bearer identifier that is not used by the current bearer. Recording; when there is no new radio bearer identity, the first base station and the second base station may also use the key update procedure to clear the unused bearer identity record to regain the radio bearer identity resource. It should be noted that the “first” and “second” described in the above embodiments are only used to distinguish the information or entity involved, and do not constitute an improper definition of the information or entity involved.

Embodiment 1

As shown in FIG. 12, the UE maintains dual connectivity with the primary base station (ie, MeNB) and the secondary base station (ie, SeNB), wherein the MeNB wishes to migrate the A bearer (whose data radio identifier is 1) on the base station to the SeNB.

In step S1202, the MeNB initiates a modification request to the SeNB, which carries the A bearer configuration information to be migrated, including the new data radio bearer identifier allocated thereto, and assumes that the new data radio bearer identifier is 2. The MeNB needs to ensure that the data radio bearer identifier 2 has not been used.

Step S1204: The SeNB generates a modification request response message according to the MeNB indication.

Step S1206: The MeNB initiates a reconfiguration command to the UE according to the modification request response message, where the UE is instructed to migrate the A bearer to the SeNB, and a new data radio bearer identifier 2 is allocated thereto.

Step S1208: The UE establishes a connection with the SeNB according to the command message of the MeNB, and completes the migration of the A bearer, and the UE changes the mapping relationship between the radio bearer corresponding to the A bearer and the EPS bearer, and deletes the data radio bearer. After identifying 1, the data radio bearer identifier 2 is re-mapped with the EPS bearer identifier of the bearer. The UE then initiates a flush configuration complete message to the MeNB.

In step S1210, the MeNB sends a modification complete message to the SeNB to notify the completion of the migration.

The MeNB can also use the foregoing process to complete the migration of multiple data radio bearers at the same time.

Embodiment 2:

As shown in FIG. 13, the UE maintains dual connectivity with the primary base station (ie, the MeNB) and the secondary base station (ie, the SeNB), wherein the B bearers on the SeNB are previously migrated by the MeNB, and the keys on the MeNB and the SeNB are KeNB1 and S, respectively. - KeNB1, B carries the PDCP COUNT count value in the transmission process on the SeNB, and the key change on the SeNB becomes S-KeNB2. However, for other reasons (such as excessive load on the SeNB, etc.), the SeNB wishes to re-migrate the B-bearer (the data radio identifier of the base station) on the base station to the MeNB.

Step S1302: The SeNB sends a modification request message to the MeNB, where the B bearer configuration information that needs to be migrated is carried.

In step S1304, the MeNB generates a reconfiguration command to the UE according to the bearer migration request message, where the new configuration information carried by the B on the MeNB is carried, including the data radio bearer identifier (set to 2) that the MeNB reassigns for the B bearer. The MeNB needs to ensure that the new radio bearer identifier 2 is different from the data radio bearer identifier that the MeNB and the SeNB have used.

Step S1306: The UE completes the migration of the B bearer to the MeNB according to the command message of the MeNB, and the UE changes the mapping relationship between the radio bearer corresponding to the B bearer and the EPS bearer, deletes the radio bearer identifier 1, and re-enables the radio bearer identifier 2 and the bearer. The EPS bearer identity establishes a mapping. The UE then initiates a reconfiguration complete message to the MeNB.

In step S1308, the MeNB sends a modification confirmation message to the SeNB to notify the completion of the migration.

Further, in step S1304, the MeNB may actively determine whether the key carried by the B bearer on the SeNB is updated, if the key S-KeNB1 on the SeNB does update, and the local key and the original MeNB migrate the B bearer to the SeNB. If the key KeNB1 is the same, the MeNB may choose not to allocate a new radio bearer identifier for the B bearer.

Further, the MeNB and the SeNB can also use the process to simultaneously perform migration of multiple data radio bearers.

Embodiment 3:

As shown in FIG. 14, the UE maintains dual connectivity with the primary base station (ie, MeNB) and the secondary base station (ie, SeNB,), wherein the SeNB wishes to exit the upper connection (ie, is deleted) due to load or other reasons, and the SeNB base station All data radio bearers (whose data radio identifier is 1) are migrated to the MeNB.

Step S1402: The SeNB sends a release request message to the MeNB, where all data radio bearer configuration information that needs to be migrated is carried.

Step S1404: The MeNB generates a reconfiguration command initiated by the UE, where the new configuration information of all or part of the data radio bearers on the MeNB is carried, including the data radio bearer identifier re-allocated by the MeNB for all or part of the data radio bearers on the SeNB. . The MeNB needs to ensure that the newly allocated data radio bearer identifier is different from the data radio bearer identifier used by the MeNB and the SeNB.

Step S1406: The UE completes the migration of the responding data radio bearer to the MeNB according to the command message of the MeNB, and deletes the radio connection with the SeNB. At the same time, the UE changes the mapping relationship between the radio bearer corresponding to the B bearer and the EPS bearer, and establishes a mapping between the newly allocated data radio bearer identifier and the EPS bearer identifier of the corresponding bearer. The UE then initiates a reconfiguration complete message to the MeNB.

In step S1408, the MeNB sends a release confirmation message to the SeNB.

Further, in step 1404, if the MeNB determines that no redundant radio bearer identifier can be allocated at present, the MeNB needs to initiate a key update procedure of the MeNB. The update process is the same as the existing key update process, and is not described here.

In summary, the embodiment of the present invention achieves the following beneficial effects: the foregoing technical solution provided by the embodiment of the present invention can ensure sufficient security protection for the multi-connection bearer of the terminal, and can prevent the service connection at the terminal from being carried. When a migration occurs between base stations, it poses a hidden danger in key security. At the same time, the management method in the present invention fully multiplexes the existing connection management mechanism, and ensures the backward compatibility of the network and the terminal on the software and hardware to a certain extent.

In another embodiment, software is also provided for performing the technical solutions described in the above embodiments and preferred embodiments.

In another embodiment, a storage medium is further provided, wherein the software includes the above-mentioned software, including but not limited to: an optical disk, a floppy disk, a hard disk, an erasable memory, and the like.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, thereby Storing them in a storage device is performed by a computing device, and in some cases, the steps shown or described may be performed in an order different than that herein, or separately fabricated into individual integrated circuit modules, or Multiple of these modules or steps are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

According to the foregoing technical solution provided by the embodiment of the present invention, the primary base station is configured to allocate a new data radio bearer identifier different from the data radio bearer of the primary base station and the data radio bearer identifier used by the base station for the data radio bearer to be migrated. In the related art, the dual-connection radio bearer has the problem of security caused by key leakage during the migration process between the base stations, and the security of the dual-connection bearer of the terminal is improved.

Claims

A migration processing method for a dual connectivity radio bearer, comprising:

The primary base station allocates a new data radio bearer identifier to the data radio bearer to be migrated, where the new data radio bearer identifier is different from the data radio bearer identifier used by the master base station and the slave base station;

The primary base station sends a message to the user equipment to notify the user equipment to perform data radio bearer migration, where the message carries the new radio bearer identifier.
The method according to claim 1, wherein the new radio bearer identifier has a mapping relationship with an evolved packet system bearer identifier corresponding to the data radio bearer.
The method of claim 1, wherein before the primary base station allocates a new data radio bearer identifier to the data radio bearer to be migrated, the method further includes:

When the primary base station and/or the secondary base station performs key update, the data radio bearer identification record that is not used by the current data radio bearer is cleared.
The method according to any one of claims 1 to 3, wherein before the primary base station allocates a new data radio bearer identifier, the method further comprises:

After the primary base station migrates the data radio bearer from the primary base station to the secondary base station, the slave base station migrates the data radio bearer back to the primary base station, and/or the key of the source base station carrying the migration is updated and carried. The key of the migrated target base station has not been updated.
A method for migrating a dual connectivity radio bearer, comprising:

The user equipment receives a message from the primary base station for informing the user equipment to perform data radio bearer migration, where the message carries a new data radio bearer identifier allocated by the primary base station, and the new data radio bearer identifier is used to identify The data radio bearer to be migrated, the new data radio bearer identifier is different from the data radio bearer identifier used by the primary base station and the slave base station;

The user equipment migrates the data radio bearer to the target base station according to the new data radio bearer identifier.
The method according to claim 5, wherein when the user equipment migrates the data radio bearer to the target base station according to the new data radio bearer identifier, the method further includes:

The user equipment associates the new data radio bearer identifier with the evolved packet system bearer identifier corresponding to the data radio bearer, and deletes the original data radio bearer identifier of the data radio bearer.
A dual-connected radio bearer migration processing apparatus is applied to a primary base station, including:

An allocating module, configured to allocate a new data radio bearer identifier to the data radio bearer to be migrated, where the new data radio bearer identifier is different from the data radio bearer identifier used by the primary base station and the slave base station;

The sending module is configured to send a message to the user equipment to notify the user equipment to perform data radio bearer migration, where the message carries the new radio bearer identifier.
The apparatus according to claim 7, wherein the allocating module is further configured to allocate the new data when the new radio bearer identifier has a mapping relationship with an evolved packet system bearer identifier corresponding to the data radio bearer Wireless bearer identification.
A dual connectivity radio bearer migration device includes:

The receiving module is configured to receive, from the primary base station, a message for notifying the user equipment to perform data radio bearer migration, where the message carries a new data radio bearer identifier allocated by the primary base station, and the new data radio bearer identifier The data radio bearer to be migrated is different, and the new data radio bearer identifier is different from the data radio bearer identifier used by the primary base station and the slave base station;

And a migration module, configured to migrate the data radio bearer to the target base station according to the new data radio bearer identifier.
The apparatus according to claim 9, further comprising:

The mapping module is configured to make the new data radio bearer identifier correspond to the evolved packet system bearer identifier corresponding to the data radio bearer, and delete the original data radio bearer identifier of the data radio bearer.
A base station comprising: the dual-connection radio bearer migration processing apparatus according to claim 7 or 8.
A user equipment comprising: the dual connectivity radio bearer migration apparatus of claim 9 or 10.