R2-1703278 PDCP Count Rollover in Option 3
R2-1703278 PDCP Count Rollover in Option 3
1.Introduction
TR 38.804 captured the following agreements for security:
Security key refresh is not performed at every mobility procedure (i.e. handover), at least for the case of mobility where
the PDCP anchor point is not changed.
NOTE: It is to be confirmed by SA3 considering whether it has any implication on the inputs for key derivation,
e.g. PCI.
For DC between LTE and NR where the master RAT is LTE, S-KeNB is derived from KeNB of the master node.
In this contribution we look into how to handle PDCP count rollover especially for the SCG split bearer.
RAN2 is still waiting from SA3 on how to derive the keys and the ciphering mechanism to be used on the
NR side. This contribution is based on the assumption that any security parameter which may result in
duplication of the security parameters and need key refresh.
2.Discussion
SCG Split bearer
Figure below describes SCG split bearer user plane architecture and also highlights the problem related to
count rollover in NR-PDCP layer. SCG split bearer will utilise resources in NR-PDCP, NR-RLC, NR-MAC
and LTE-RLC and LTE-MAC sublayers.
Figure 1: SCG split bearer user plane protocol stack and count rollover
If PDCP count or any other parameter’s rollover happens on the NR side, LTE side resources may also need
to be reset. MCG-MAC reset will impact all existing resources like SRBs and other DRBs on the MCG side.
MCG bearer
SCG change procedure can be used whereby intra cell handover is triggered, as discussed above:
Proposal 3: If PDCP count rollover happens in MCG-PDCP, requiring refresh of KeNB, then intra
cell handover is triggered.
SCG bearer
We believe that SCG bearer is a special type of SCG split bearer and same handling as SCG split bearer
should apply. However, SCG change procedure can also apply whereby only SCG side of resources are reset.
Observation 2: Either intra cell handover or SCG change procedure can be applied for PDCP count
rollover for SCG bearer
However, we believe that only SCG split bearer should be standardised. So, it should be SN decision to
trigger either intra cell handover (SCG split bearer) or SCG change procedure (SCG bearer) based on if
resources are being utilised in the MN or not.
Proposal 4: it should be SN decision to trigger either intra cell handover or SCG change procedure
based on if resources are being utilised in the MN. If agreed, RAN3 should be informed about it.
3.Conclusion
We propose RAN2 to discuss and agree on following observations and proposals:
Observation 1: LTE DC SCG change procedure, if applied to SCG split bearer, will result in reset of
SCG-PDCP, SCG-RLC and SCG-MAC on the SCG side and MCG-RLC and MCG-MAC on MCG
side in case of PDCP count rollover.
Proposal 1: MN is informed about NR-PDCP count rollover as security credentials in the SN are based
on KeNB.
Proposal 2: Use intra cell handover when any rollover happens in NR-PDCP for SCG split bearer and
resources in MN are also used.
Proposal 3: If PDCP count rollover happens in MCG-PDCP, requiring refresh of KeNB, then intra
cell handover is triggered.
Observation 2: Either intra cell handover or SCG change procedure can be applied for PDCP count
rollover for SCG bearer
Proposal 4: It should be SN decision to trigger either intra cell handover or SCG change procedure
based on if resources are being utilised in the MN. If agreed, RAN3 should be informed about it.
4. References
[1] RP-170874: New WID on New Radio Access Technology, NTTDOCOMO
[2] 3GPP TR 38.802 Study on New Radio (NR) Access Technology; Physical Layer Aspects (Release 14)
[3] 3GPP TR 38.804 Study on New Radio Access Technology; Radio Interface Protocol Aspects (Release 14)