Back to results
US 10,834,630 B2Granted
Methods and apparatus for secure connectionless uplink small data transmission
AssigneeQUALCOMM Incorporated
InventorsMiguel Griot, Hao Xu, Madhavan Srinivasan Vajapeyam
Life of this patent
Estimating the term…
Abstract
Certain aspects of the present disclosure generally relate to techniques for secure connectionless uplink transmissions by a wireless device. Such techniques may provide for negotiation of an encryption mechanism as part of the setup for connectionless transmissions and subsequent secure connectionless uplink transmissions.
Claims67
A method for wireless communications by a user equipment (UE), comprising:
- establishing, via a base station (BS), a secure connection with a network, wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- negotiating, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- entering an idle mode after negotiating the encryption mechanism;
- using the negotiated encryption mechanism, after a transition from the idle mode, to encrypt data to be transmitted to the network;
- and
- transmitting a packet comprising the encrypted data to the BS without an established data radio bearer between the UE and the network.
3 more elements
An apparatus for wireless communication, comprising:
- at least one processor;
- and
- a memory coupled to the at least one processor, the memory including instructions executable by the at least one processor to cause the apparatus to:
- establish, via a base station (BS), a secure connection with a network, wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- negotiate, via the secure connection, an encryption mechanism for the apparatus to use to transmit data without an established data radio bearer between the apparatus and the network;
- enter an idle mode after negotiating the encryption mechanism;
- use the negotiated encryption mechanism, after a transition from the idle mode, to encrypt data to be transmitted to the network;
- and
- transmit a packet comprising the encrypted data to the BS without an established data radio bearer between the apparatus and the network.
6 more elements
An apparatus for wireless communication, comprising:
- means for establishing, via a base station (BS), a secure connection with a network, wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- means for negotiating, via the secure connection, an encryption mechanism for the apparatus to use to transmit data without an established data radio bearer between the apparatus and the network;
- means for entering an idle mode after negotiating the encryption mechanism;
- means for using the negotiated encryption mechanism, after a transition from the idle mode, to encrypt data to be transmitted to the network;
- and
- means for transmitting a packet comprising the encrypted data to the BS without an established data radio bearer between the apparatus and the network.
3 more elements
A non-transitory computer-readable medium having computer executable code stored thereon, which, when executed by one or more processors, cause a user equipment (UE) to:
- establish, via a base station (BS), a secure connection with a network, wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- negotiate, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- enter an idle mode after negotiating the encryption mechanism;
- use the negotiated encryption mechanism, after a transition from the idle mode, to encrypt data to be transmitted to the network;
- and
- transmit a packet comprising the encrypted data to the BS without an established data radio bearer between the UE and the network.
3 more elements
A method for wireless communications in a network by a base station (BS), comprising:
- receiving a packet that comprises encrypted data from a user equipment (UE) without an established data radio bearer between the UE and the network, wherein the packet comprises a mechanism for the network to authenticate the UE;
- communicating with a network entity to perform authentication of the UE, comprising providing the mechanism to the network entity;
- receiving, from the network entity, decryption information for decrypting the encrypted data after the network entity authenticates the UE;
- and
- using the decryption information to decrypt the encrypted data.
2 more elements
An apparatus for wireless communication in a network, comprising:
- at least one processor;
- and
- a memory coupled to the at least one processor, the memory including instructions executable by the at least one processor to cause the apparatus to:
- receive a packet that comprises encrypted data from a user equipment (UE) without an established data radio bearer between the UE and the network, wherein the packet comprises a mechanism for the network to authenticate the UE;
- communicate with a network entity to perform authentication of the UE, comprising providing the mechanism to the network entity;
- receive, from the network entity, decryption information for decrypting the encrypted data after the network entity authenticates the UE;
- and
- use the decryption information to decrypt the encrypted data.
5 more elements
An apparatus for wireless communication in a network, comprising:
- means for receiving a packet that comprises encrypted data from a user equipment (UE) without an established data radio bearer between the UE and the network, wherein the packet comprises a mechanism for the network to authenticate the UE;
- means for communicating with a network entity to perform authentication of the UE, comprising providing the mechanism to the network entity;
- means for receiving, from the network entity, decryption information for decrypting the encrypted data after the network entity authenticates the UE;
- and
- means for using the decryption information to decrypt the encrypted data.
2 more elements
A non-transitory computer-readable medium having computer executable code stored thereon, which, when executed by one or more processors, cause a base station (BS) in a network to:
- receive a packet that comprises encrypted data from a user equipment (UE) without an established data radio bearer between the UE and the network, wherein the packet comprises a mechanism for the network to authenticate the UE;
- communicate with a network entity to perform authentication of the UE, comprising providing the mechanism to the network entity;
- receive, from the network entity, decryption information for decrypting the encrypted data after the network entity authenticates the UE;
- and
- use the decryption information to decrypt the encrypted data.
2 more elements
A method for wireless communications in a network by a network entity, comprising:
- establishing, via a base station (BS), a secure connection with a user equipment (UE);
- negotiating, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- communicating with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- and
- after the authentication of the UE:
- providing the BS with at least one mechanism for the UE to authenticate the network;
- providing the BS decryption information for decrypting the encrypted data;
- and
- receiving, from the BS, data decrypted using the decryption information.
6 more elements
An apparatus for wireless communication in a network, comprising:
- at least one processor;
- and
- a memory coupled to the at least one processor, the memory including instructions executable by the at least one processor to cause the apparatus to:
- establish, via a base station (BS), a secure connection with a user equipment (UE);
- negotiate, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- communicate with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- and
- after the authentication of the UE:
- provide the BS with at least one mechanism for the UE to authenticate the network;
- provide the BS decryption information for decrypting the encrypted data;
- and
- receive, from the B S, data decrypted using the decryption information.
9 more elements
An apparatus for wireless communication in a network, comprising:
- means for establishing, via a base station (BS), a secure connection with a user equipment (UE);
- means for negotiating, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- means for communicating with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- and
- after the authentication of the UE:
- means for providing the BS with at least one mechanism for the UE to authenticate the network;
- means for providing the BS decryption information for decrypting the encrypted data;
- and
- means for receiving, from the BS, data decrypted using the decryption information.
6 more elements
A non-transitory computer-readable medium having computer executable code stored thereon, which, when executed by one or more processors, cause a network entity in a network to:
- establish, via a base station (BS), a secure connection with a user equipment (UE);
- negotiate, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- communicate with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- and
- after the authentication of the UE:
- provide the BS with at least one mechanism for the UE to authenticate the network;
- provide the BS decryption information for decrypting the encrypted data;
- and receive, from the BS, data decrypted using the decryption information.
5 more elements
A method for wireless communications in a network by a network entity, comprising:
- establishing, via a base station (BS), a secure connection with a user equipment (UE), wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- negotiating, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- communicating with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- receiving the encrypted data from the BS;
- and
- using decryption information to decrypt the encrypted data.
3 more elements
An apparatus for wireless communication in a network, comprising:
- at least one processor;
- and
- a memory coupled to the at least one processor, the memory including instructions executable by the at least one processor to cause the apparatus to:
- establish, via a base station (BS), a secure connection with a user equipment (UE), wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- negotiate, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- communicate with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- receive the encrypted data from the B S;
- and
- use decryption information to decrypt the encrypted data.
6 more elements
An apparatus for wireless communication in a network, comprising:
- means for establishing, via a base station (BS), a secure connection with a user equipment (UE), wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- means for negotiating, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- means for communicating with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- means for receiving the encrypted data from the BS;
- and
- means for using decryption information to decrypt the encrypted data.
3 more elements
A non-transitory computer-readable medium having computer executable code stored thereon, which, when executed by one or more processors, cause a network entity in a network to:
- establish, via a base station (BS), a secure connection with a user equipment (UE), wherein establishing the secure connection comprises at least one of a tracking area update (TAU) or an attach procedure;
- negotiate, via the secure connection, an encryption mechanism for the UE to use to transmit data without an established data radio bearer between the UE and the network;
- communicate with the BS to perform authentication of the UE, wherein encrypted data is received in a packet by the BS from the UE;
- receive the encrypted data from the BS;
- and
- use decryption information to decrypt the encrypted data.
3 more elements
Dependencies are inferred from the claim text.