# US 10,320,754 B2 · Data transmission method and apparatus

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,320,754 B2
- Document ID: US10320754B2
- Status: Granted
- Kind: B2
- Application number: 14/885,235
- Filed: 2015-10-16
- Published: 2016-02-11
- Granted: 2019-06-11
- Earliest claimed: 2013-04-17
- Assignees: Huawei Technologies Co., Ltd.
- Applicants: Huawei Technologies Co., Ltd.
- Inventors: Jiangwei Ying; Jing Chen; Lingli Pang; Xiaoxiao Zheng
- Web page: https://patentgrep.com/patent/US10320754B2

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 12/06: Answer-back mechanisms or circuits
- H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
- H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC]
- H04W 12/037: of the control plane, e.g. signalling traffic
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
- H04W 12/10: Integrity
- H04W 88/02: Terminal devices
- H04W 88/12: Access point controller devices
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

The present invention provides a data transmission method and apparatus, where the method includes: performing, by UE, security processing on a NAS PDU by using a security parameter and a security algorithm, where data to be transmitted is encapsulated in the NAS PDU; and sending, by the UE, the NAS PDU to a serving SGSN by using an RNC. The present invention can improve efficiency of transmitting a small data packet, and further provide a security mechanism to ensure security of transmitting the small data packet.

## Claims

### Claim 1

A data transmission method, comprising:
sending, by the user equipment (UE), a radio resource control (RRC) connection request message to a radio network controller (RNC), wherein the RRC connection request message comprises a security algorithm supported by the UE;
receiving, by the UE, an RRC Connection Setup message sent by the RNC, wherein the RRC Connection Setup message comprises a security algorithm indicated by the RNC that corresponds to the security algorithm supported by the UE;
performing, by the UE, security processing on a non-access stratum protocol data unit (NAS PDU) using a security parameter and the security algorithm indicated by the RNC, wherein data to be transmitted is encapsulated in the NAS PDU; and
sending, by the UE, the NAS PDU to a Serving General Packet Radio Service Support Node (SGSN) by using the RNC.

### Claim 2 (depends on 1)

The method according to claim 1, wherein:
the security parameter comprises: a cipher key CK_small and/or an integrity protection key IK_small; and
the security algorithm comprises: a cipher algorithm and/or an integrity protection algorithm.

### Claim 3 (depends on 1)

The method according to claim 1, wherein sending, by the UE, the NAS PDU to an SGSN comprises:
sending, by the UE, a radio resource control (RRC) Connection Setup Complete message that carries the NAS PDU to the RNC for enabling the RNC to send the NAS PDU to the SGSN.

### Claim 4 (depends on 3)

The method according to claim 3, wherein the RRC Connection Setup Complete message comprises:
the NAS PDU and a key set identifier (KSI), where the KSI enables the SGSN to search for security context for deciphering the NAS PDU.

### Claim 5 (depends on 1)

The method according to claim 1,
wherein the RRC connection request message further comprises a small data indication, and a key set identifier (KSI).

### Claim 6

A user equipment, comprising:
a transmitter, configured to send a radio resource control (RRC) connection request message to a radio network controller (RNC), wherein the RRC connection request message comprises a security algorithm supported by the UE;
a receiver, configured to receive an RRC Connection Setup message sent by the RNC, wherein the RRC Connection Setup message comprises a security algorithm indicated by the RNC that corresponds to the security algorithm supported by the UE;
a processor, configured to perform security processing on a non-access stratum protocol data unit (NAS PDU) using a security parameter and the security algorithm indicated by the RNC, wherein data to be transmitted is encapsulated in the NAS PDU,
wherein the transmitter is further configured to send the NAS PDU to a Serving General Packet Radio Service Support Node (SGSN) by using the RNC.

### Claim 7 (depends on 6)

The user equipment according to claim 6, wherein:
the security parameter comprises: a cipher key CK_small and/or an integrity protection key IK_small; and
the security algorithm comprises: a cipher algorithm and/or an integrity protection algorithm.

### Claim 8 (depends on 6)

The user equipment according to claim 6, wherein the transmitter is further configured to send a radio resource control (RRC) Connection Setup Complete message that carries the NAS PDU to the RNC for enabling the RNC to send the NAS PDU to the SGSN.

### Claim 9 (depends on 8)

The user equipment according to claim 8, wherein the RRC Connection Setup Complete message comprises:
the NAS PDU and a key set identifier (KSI), where the KSI enables the SGSN to search for security context for deciphering the NAS PDU.

### Claim 10 (depends on 6)

The user equipment according to claim 6, wherein the RRC connection request message further comprises a small data indication, and a key set identifier (KSI).