Abstract: The disclosure relates to a fifth generation (5G) or sixth generation (6G) communication system for supporting a higher data transmission rate. A method performed by a user equipment (UE) for performing network authentication is provided. The method includes determining, by the UE, a K-bit identification indicator indicating whether a length of an authentication key (K) stored in a subscriber identification module (SIM) is identified, selecting, by the UE, at least one security algorithm based on the K-bit identification indicator, and transmitting, by the UE to a network device, a registration request message including the K-bit identification indicator and information about the at least one security algorithm.

Abstract: The disclosure relates to a 5th generation (5G) or 6th generation (6G) communication system for supporting a higher data transmission rate. A method performed by a user equipment (UE) in a wireless communication system is provided. The method includes receiving, from a master node (MN), configuration information associated with subsequent conditional primary secondary cell group cell (PSCell) addition or change (SCPAC), the configuration information includes sk-counter list including a plurality of sk-counters, and executing the SCPAC for a first PSCell associated with a secondary node based on the configuration information, wherein a first security key for the secondary node is generated based on a first sk-counter among the plurality of sk-counters.

Abstract: The disclosure relates to a 5G or 6G communication system supporting a higher data transmission rate. A method and an apparatus for managing keys by a UE in dual connectivity in a wireless communication system. A method performed by a MN in a wireless communication system includes generating a first key for a first SN based on a first SN counter and a second key for a second SN based on a second SN counter; transmitting, to the first SN, a first request message including the first key for the first SN; transmitting, to the second SN, a second request message including the second key for the second SN; and transmitting, to a UE, an RRC connection reconfiguration message including the first SN counter and the second SN counter.

Abstract: The disclosure relates to a fifth generation (5G) or sixth generation (6G) communication system for supporting a higher data transmission rate. A method performed by a user equipment (UE) in a communication system is provided. The method includes receiving, from an access and mobility management function (AMF), a non-access stratum (NAS) security mode command message including information on a public key of an authentication and key management for applications (AKMA) anchor function (AAnF), encrypting, based on the public key, a combination of an AKMA temporary identifier (A-TID) and an application function identifier (AF_ID) of an application function (AF), and transmitting, to the AF, an application session establishment request including information on the encrypted combination of the A-TID and the AF_ID.

Abstract: The disclosure relates to 5G or 6G communication systems to support higher data rates and provide a method and apparatus for an authorization operation.

Abstract: The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method and a first mission critical (MC) server are provided for managing security domain access information of migrated users in a private communication in MC services. A first MC server receives a private call request from an MC service user of a first UE for establishing the private communication with an MC service user of a second UE. It is determined whether the MC service user of the second UE is migrated from the first MC server to at least one secondary MC server. A private call redirection message is generated, and the private call redirection message is transmitted to the MC service user of the first UE to establish the private communication with the MC service user of the second UE based on the private call redirection message.

Abstract: The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Methods and devices in a wireless communication system are provided. System information is received from a base station. The system information includes information related to a public key of a base station. It is determined whether the public key corresponding to the information related to the public key is stored in the terminal. In case that the public key is stored in the terminal and the system information includes signature information of the base station, a signature of the base station is verified. The base station is connected to or another base station is searched for, based on whether the signature of the base station is verified.

Abstract: The disclosure relates to a 5th generation (5G) or 6th generation (6G) communication system for supporting a higher data transmission rate. The disclosure provides a base station authentication method which includes receiving system information from a base station, determining whether the system information includes signature information, in case that the signature information is not included, storing information of whether the signature information is included, obtaining information regarding signing capability for the system information of the base station, and determining whether to continue an attach procedure with the base station, based on at least one of the information of whether the signature information is included and the signing capability for the system information of the base station.

Abstract: The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method of a first terminal in a wireless communication system is provided. The method comprising: generating an AGK for an adhoc group; transmitting an adhoc group communication request message including a list including IDs of a plurality of second terminals included in the adhoc group and connected to the first server; receiving an adhoc group communication return message signed by the first server; performing an encryption and signing operation on the AGK based on first authentication information related to the first terminal and the second authentication information; transmitting an adhoc group communication security material request message including the AGK that is encrypted and signed; receiving an adhoc group communication response message in response to transmitting the adhoc group communication security material request message; and performing a secure communication.

Abstract: The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate.

Abstract: The disclosure relates to a 5th generation (5G) or pre-5G communication system for supporting a higher data rate than a beyond 4th generation (4G) communication system such as long term evolution (LTE). A user equipment (UE) in a wireless communication system may include a transceiver and at least one controller controlling the transceiver.

Abstract: A method and device for applying a different security policy, per service traffic, to a protocol data unit (PDU) session in a wireless communication system. The method comprises receiving, by a session management function (SMF) managing a session for a user equipment (UE), first configuration information about a first user plane security policy of the UE from a unified data management (UDM) managing subscription information about the UE, receiving, by the SMF, second configuration information about a second user plane security policy to be applied to a specific service data flow from a policy and control function (PCF) managing a policy and charging control (PCC) rule, and determining a user plane security policy to be applied to the UE based on one selected from the first user plane security policy and the second user plane security policy according to priority.