1. A method for wireless communication, comprising:
performing a security procedure with a wireless network of a first network type for a first session and generating user equipment (UE) security context data at a UE;
using the UE security context data for secure communication with the wireless network during the first session;
storing the UE security context data at the UE upon termination of the first session;
de-registering at the end of the first session and powering down after the first session; and
powering up the UE and using the stored UE security context data for registration with the wireless network of the first network type for a second session following the first session;
wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.
2. The method of claim 1, wherein the using the stored UE security context data for registration comprises
performing integrity protection for at least one message based on the stored UE security context data, and
sending the at least one integrity protected message to the wireless network for registration of the UE with the wireless network.
3. The method of claim 1, wherein the using the stored UE security context data for registration comprises
performing integrity protection for a registration message based on an integrity key in the stored UE security context data, and
sending the integrity protected registration message to the wireless network for registration of the UE with the wireless network.
4. The method of claim 1, wherein the using the stored UE security context data for registration comprises
ciphering at least one message based on the stored UE security context data, and
sending the at least one ciphered message to the wireless network for registration of the UE with the wireless network.
5. The method of claim 1, wherein the using the stored UE security context data for registration comprises
ciphering at least one parameter of a registration message based on a cipher key in the stored UE security context data, and
sending the registration message to the wireless network for registration of the UE with the wireless network.
6. The method of claim 1, wherein the using the stored UE security context data for registration comprises
ciphering at least one parameter of a registration message based on a cipher key in the stored UE security context data,
performing integrity protection for the registration message based on an integrity key in the stored UE security context data, and
sending the integrity protected registration message comprising the at least one ciphered parameter to the wireless network for registration of the UE with the wireless network.
7. The method of claim 1, wherein the performing the security procedure with the wireless network comprises performing an Authentication and Key Agreement (AKA) procedure with the wireless network.
8. The method of claim 1, wherein the stored UE security context data further comprises at least one of a key set identifier (KSI), and a temporary UE identity.
9. An apparatus for wireless communication, comprising:
at least one hardware processor configured to perform a security procedure with a wireless network of a first network type for a first session and to generate user equipment (UE) security context data at a UE, to use the UE security context data for secure communication with the wireless network during the first session, to store the UE security context data at the UE upon termination of the first session, to de-register the UE at the end of the first session and power down the UE after the first session, and to power up the UE and use the stored UE security context data for registration of the UE with the wireless network of the first network type for a second session following the first session;
wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.
10. The apparatus of claim 9, wherein the at least one hardware processor is configured to perform integrity protection for a registration message based on the stored UE security context data, and to send the integrity protected registration message to the wireless network for registration of the UE with the wireless network.
11. The apparatus of claim 9, wherein the at least one hardware processor is configured to cipher information for a registration message based on the stored UE security context data, and to send the registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.
12. The apparatus of claim 9, wherein the at least one hardware processor is configured to cipher information for a registration message based on a cipher key in the stored UE security context data, to perform integrity protection for the registration message based on an integrity key in the stored UE security context data, and to send the integrity protected registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.
13. An apparatus for wireless communication, comprising:
means for performing a security procedure with a wireless network of a first network type for a first session and generating user equipment (UE) security context data at a UE;
means for using the UE security context data for secure communication with the wireless network during the first session;
means for storing the UE security context data at the UE upon termination of the first session;
means for de-registering the UE at the end of the first session and powering down the UE after the first session; and
means for powering up the UE and using the stored UE security context data for registration of the UE with the wireless network of the first network type for a second session following the first session;
wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.
14. The apparatus of claim 13, wherein the means for using the stored UE security context data for registration comprises
means for performing integrity protection for a registration message based on the stored UE security context data, and
means for sending the integrity protected registration message to the wireless network for registration of the UE with the wireless network.
15. The apparatus of claim 13, wherein the means for using the stored UE security context data for registration comprises
means for ciphering information for a registration message based on the stored UE security context data, and
means for sending the registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.
16. The apparatus of claim 13, wherein the means for using the stored UE security context data for registration comprises
means for ciphering information for a registration message based on a cipher key in the stored UE security context data,
means for performing integrity protection for the registration message based on an integrity key in the stored UE security context data, and
means for sending the integrity protected registration message comprising the ciphered information to the wireless network for registration of the UE with the wireless network.
17. A computer program product, comprising:
a non-transitory computer-readable medium comprising:
code for causing at least one computer to perform a security procedure with a wireless network of a first network type for a first session and to generate user equipment (UE) security context data at a UE,
code for causing at least one computer to use the UE security context data for secure communication with the wireless network during the first session,
code for causing the at least one computer to store the UE security context data at the UE upon termination of the first session,
code for causing the at least one computer de-register the UE at the end of the first session; and
code for causing the at least one computer to use the stored UE security context data after powering up the UE for registration of the UE with the wireless network of the first network type for a second session following the first session;
wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.
18. A method for wireless communication in a wireless network of a first network type, comprising:
performing a security procedure with a user equipment (UE) for a first session and obtaining UE security context data at a network entity;
using the UE security context data for secure communication with the UE during the first session;
storing the UE security context data at the network entity upon termination of the first session;
de-registering the UE at the end of the first session; and
using the stored UE security context data for registration of the UE for a second session following the first session and powering down and powering up the UE;
wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.
19. The method of claim 18, wherein the using the stored UE security context data for registration comprises
receiving at least one message integrity protected by the UE, and
performing integrity check for the at least one message based on the stored UE security context data.
20. The method of claim 18, wherein the using the stored UE security context data for registration comprises
receiving a registration message integrity protected by the UE, and
performing integrity check for the registration message based on an integrity key in the stored UE security context data.
21. The method of claim 18, wherein the using the stored UE security context data for registration comprises
receiving at least one message ciphered by the UE, and
deciphering the at least one message based on the stored UE security context data.
22. The method of claim 18, wherein the using the stored UE security context data for registration comprises
receiving a registration message from the UE, and
deciphering at least one parameter of the registration message based on a cipher key in the stored UE security context data.
23. The method of claim 18, wherein the using the stored UE security context data for registration comprises
receiving a registration message from the UE,
deciphering at least one parameter of the registration message based on a cipher key in the stored UE security context data, and
performing integrity check for the registration message based on an integrity key in the stored UE security context data.
24. The method of claim 18, wherein the performing the security procedure with the UE comprises performing an Authentication and Key Agreement (AKA) procedure with the UE.
25. The method of claim 18, wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering, an integrity key (IK) used for integrity protection, a key set identifier (KSI), and a temporary UE identity.
26. An apparatus for wireless communication in a wireless network of a first network type, comprising:
at least one hardware processor configured to perform a security procedure with a user equipment (UE) for a first session and obtain UE security context data at a network entity, to use the UE security context data for secure communication with the UE during the first session, to store the UE security context data at the network entity upon termination of the first session, to de-register the UE at the end of the first session, and to use the stored UE security context data for registration of the UE for a second session following the first session and powering down and powering up the UE;
wherein the stored UE security context data comprises at least one of a cipher key (CK) used for ciphering and an integrity key (IK) used for integrity protection.
27. The apparatus of claim 26, wherein the at least one hardware processor is configured to receive a registration message integrity protected by the UE, and to perform integrity check for the registration message based on the stored UE security context data.
28. The apparatus of claim 26, wherein the at least one hardware processor is configured to receive a registration message comprising ciphered information from the UE, and to decipher the ciphered information in the registration message based on the stored UE security context data.
29. The apparatus of claim 26, wherein the at least one hardware processor is configured to receive a registration message comprising ciphered information from the UE, to decipher the ciphered information in the registration message based on a cipher key in the stored UE security context data, and to perform integrity check for the registration message based on an integrity key in the stored UE security context data.
30. The apparatus of claim 26, wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).
31. The method of claim 18, wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).
32. The method of claim 1, wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).
33. The apparatus of claim 9, wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).
34. The apparatus of claim 13, wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).
35. The computer program product of claim 17, wherein the wireless network of a first network type comprises a wireless network that implements 3GPP Long Term Evolution (LTE).
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method to query data from an inferencing-enabled metadata system, comprising the steps of:
responsive to a query including an inferencing portion and an attribute predicate portion, issuing an inferencing query to an ontology management system and retrieving inferencing results; and
issuing a relational query by combining inferencing results and the attribute predicate portion.
2. The method as recited in claim 1, wherein the results are provided from the inferencing-enabled metadata system which manages data by linking relationships between ontology class information in the ontology management system to associated attribute schema in the relational database.
3. The method as recited in claim 1, wherein the inferencing portion includes properties of relationships to enrich understanding of the query.
4. The method as recited in claim 1, wherein the attribute predicate portion includes a relational threshold.
5. A computer readable medium comprising a computer readable program to query data from an inferencing-enabled metadata system, wherein the computer readable program when executed on a computer causes the computer to perform the steps of:
responsive to a query including an inferencing portion and an attribute predicate portion, issuing an inferencing query to an ontology management system and retrieving inferencing results; and
issuing a relational query by combining inferencing results and the attribute predicate portion.
6. The computer readable medium as recited in claim 5, wherein the results are provided from the inferencing-enabled metadata system which manages data by linking relationships between ontology class information in the ontology management system to associated attribute schema in the relational database.
7. The computer readable medium as recited in claim 5, wherein the inferencing portion includes properties of relationships to enrich understanding of the query.
8. The computer readable medium as recited in claim 5, wherein the attribute predicate portion includes a relational threshold.