Optimized small data transmission over uplink

A method, comprising:

• establishing, after registration of an application with a network element, a secure data transmission path for the application based on a trigger from the application or a user equipment, based on a policy, or based on a need of the application, wherein the secure data transmission path is used to transmit data between the user equipment and the network element, wherein the network element comprises a gateway or an application server;
• deriving credentials for establishing the secure data transmission path from a universal integrated circuit card in the user equipment;
• transmitting data for the application over the secure data transmission path using a pre-configured radio bearer, wherein the radio bearer is pre-configured for data transmission between the user equipment and an access node located between the user equipment and the network element;
• and
• receiving a response message at the user equipment from the network element through the secure data transmission path.

A method, comprising:

• establishing, after registration of an application with a network element, a secure data transmission path for the application based on a trigger from the application or a user equipment, based on a policy, or based on a need of the application, wherein the secure data transmission path is used to transmit data between the network element and the user equipment, wherein the network element comprises a gateway or an application server;
• receiving data for the application through the secure data transmission path using a pre-configured radio bearer, wherein the radio bearer is pre-configured for data transmission between the user equipment and an access node located between the network element and the user equipment;
• and
• transmitting the data from the network element to a destination server,
• wherein the secure data transmission path comprises a secure tunnel between the user equipment and the network element, and
• wherein the security tunnel provides at least confidentiality or integrity protection on internet protocol (IP) level.

A method, comprising:

• establishing, after registration of an application with a network element, a secure data transmission path for the application based on a trigger from the application or a user equipment, based on a policy, or based on a need of the application, wherein the secure data transmission path is used to transmit data between the network element and the user equipment, wherein the network element comprises a gateway or an application server;
• receiving data for the application through the secure data transmission path using a pre-configured radio bearer, wherein the radio bearer is pre-configured for data transmission between the user equipment and an access node located between the network element and the user equipment;
• and
• transmitting the data from the network element to a destination server
• receiving credentials for establishing a secure data transmission path from a control plane node, wherein the credentials for establishing the secure data transmission path are derived from a universal integrated circuit card in the user equipment.

An apparatus, comprising:

• at least one processor;
• and
• at least one memory including computer program code,
• wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform a process comprising:
• establishing, after registration of an application with a network element, a secure data transmission path for the application based on a trigger from the application or a user equipment, based on a policy, or based on a need of the application, wherein the secure data transmission path is used to transmit data between the user equipment and the network element, wherein the network element comprises a gateway or an application server;
• transmitting data for the application over the secure data transmission path using a pre-configured radio bearer, wherein the radio bearer is pre-configured for data transmission between the user equipment and an access node located between the user equipment and the network element;
• and
• receiving a response message at the user equipment from the network element through the secure data transmission path,
• wherein the secure data transmission path comprises a secure tunnel between the user equipment and the network element, and
• wherein the security tunnel provides at least confidentiality or integrity protection on internet protocol (IP) level.

A computer program product embodied on a non-transitory computer-readable medium, said medium encoding instructions that, when executed in hardware, perform a process, the process comprising:

• establishing, after registration of an application with a network element, a secure data transmission path for the application based on a trigger from the application or a user equipment, based on a policy, or based on a need of the application, wherein the secure data transmission path is used to transmit data between the user equipment and the network element, wherein the network element comprises a gateway or an application server;
• transmitting data for the application over the secure data transmission path using a pre-configured radio bearer, wherein the radio bearer is pre-configured for data transmission between the user equipment and an access node located between the user equipment and the network element;
• and
• receiving a response message at the user equipment from the network element through the secure data transmission path,
• wherein the secure data transmission path comprises a secure tunnel between the user equipment and the network element, and
• wherein the security tunnel provides at least confidentiality or integrity protection on internet protocol (IP) level.