US 10,944,786 B2Granted

Mobile communication method, apparatus, and device

AssigneeHuawei Technologies Co., Ltd.

InventorsJing Chen, Qi Li, Lin Shu

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present disclosure relates to mobile communications technologies, and in particular, to a mobile communication method, apparatus, and device. The method includes receiving, by user equipment (UE), a non-access stratum (NAS) security mode command message from a mobility management entity (MME), where the NAS security mode command message carries first verification matching information used to verify UE capability information received by the MME, determining, by the UE based on the first verification matching information, whether the UE capability information received by the MME is consistent with UE capability information sent by the UE to the MME, and, if the UE capability information received by the MME is consistent with the UE capability information sent by the UE to the MME, sending, by the UE, a NAS security mode complete message to the MME.

Claims20

Dependent claims

A mobile communication method, comprising:

sending, by a user equipment (UE), and attach request message to a mobility management entity, wherein the attach request message includes a first UE security capability of the UE;
receiving, by the UE, a non-access stratum (NAS) security mode command message from the mobility management entity, wherein the NAS security mode command message comprises a first hash value, an integrity algorithm, a key identifier, a first NAS message authentication code (NAS-MAC) of the NAS security mode command message, and a second UE security capability;
calculating, by the UE, a second NAS-MAC of the NAS security mode command message;
determining, by the UE, whether the second NAS-MAC is consistent with the first NAS-MAC and the first UE security capability is consistent with the second UE security capability;
in response to determining that the second NAS-MAC is consistent with the first NAS-MAC and the first UE security capability is consistent with the second UE security capability, determining, by the UE, whether a second hash value is consistent with the first hash value, wherein the second hash value is a hash value of the attach request message;
and
sending, by the UE, the first NAS security mode complete message to the mobility management entity in response to determining that the second hash value is inconsistent with the first hash value, wherein the first NAS security mode complete message having integrity protection comprises the attach request message.

4 more elements

A mobile communications apparatus, wherein the apparatus is deployed in a user equipment (UE) and comprises:

at least one processor;
and
a memory coupled to the at least one processor and having program instructions stored thereon which, when executed by the at least one processor, cause the apparatus to:
send an attach request message to a mobility management entity, wherein the attach request message including a first UE security capability of the UE;
receive a non-access stratum (NAS) security mode command message from the mobility management entity, wherein the NAS security mode command message comprises a first hash value, an integrity algorithm, a key identifier, a first NAS message authentication code (NAS-MAC) of the NAS security mode message, and a second UE security capability;
calculate a second NAS-MAC of the NAS security mode command message;
determine whether the second NAS-MAC is consistent with the first NAS-MAC and the first UE security capability is consistent with the second UE security capability;
in response to determining that the second NAS-MAC is consistent with the first NAS-MAC and the first UE security capability is consistent with the second UE security capability, determine whether a second hash value is consistent with the first hash value, wherein the second has value is a hash value of the attach request message;
and
send a first NAS security mode complete message to the mobility management entity in response to determining that the second hash value is inconsistent with the first hash value, wherein the first NAS security mode complete message having integrity protection comprises the attach request message.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/552,530Filed 27 Aug 2019 · continuation
Priority: 5 Jan 2016
Published: US 2019/0387404 A119 Dec 2019
Granted: 9 Mar 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 63/1466
Countermeasures against malicious traffic: active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g.…
H04L 9/3242
Using cryptographic hash functions: involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04W 8/24
Processing or transfer of terminal data, e.g. status or physical capabilities: transfer of terminal data

Family

PCT/CN2016/070182Parent of this continuation · filed 5 Jan 2016
Application16/026,777Parent of this continuation · filed 3 Jul 2018
US 2019/0387404 A1Pre-grant publication · published 19 Dec 2019
US 10,419,938 B2Parent of this continuation
US 2018/0324594 A1Published application
US 10,944,786 B2This patent

From the US filing history. Foreign family members aren’t listed.