Security enhancements for early data transmissions

A wireless device comprising memory operable to store instructions and processing circuitry operable to execute the instructions, whereby the wireless device is operable to:

• receive an uplink grant;
• determine a connection request and uplink data to transmit in response to a random- access response received from a network node;
• generate 32 bits of security information based at least in part on the uplink data wherein based at least in part on an amount of uplink data to transmit and the uplink grant the 32 bits of security information is divided across a radio resource control (RRC) layer and a Packet Data Convergence Protocol (PDCP) layer security information based at least in part on the uplink data, wherein the security information comprises a security token, and, wherein generating the security information is further based on a ResumeID and a cause value, and wherein the security information is generated based on at least a part of the security information is generated at the RRC layer and at least a part of the security information is generated at the PDCP layer;
• and
• transmit a radio transmission in response to the random-access response, the radio transmission comprising the connection request and the uplink data secured by the security information, wherein the security token is generated based on an early message being sent in the radio transmission.

A method for use in a network node, comprising:

• transmitting an uplink grant;
• transmitting a random-access response to a random-access request from a wireless device to the wireless device;
• and
• receiving a radio transmission in response to the random-access response, the radio transmission comprising a connection request and uplink data secured by 32 bits of security information;
• wherein the security information is generated based on at least in part on an amount of the uplink data and the uplink grant, wherein the 32 bits of security information is divided across a radio resource control (RRC) layer and a Packet Data Convergence Protocol (PDCP) layer, wherein the security information comprises a security token, wherein generating the security information is further based on a ResumelD and a cause value, and wherein the security token is generated based on an early message being sent in the radio transmission, and, wherein the security information is generated based on at least a part of the security information is generated at the RRC layer and at least a part of the security information is generated at the PDCP layer.

A network node comprising memory operable to store instructions and processing circuitry operable to execute the instructions, whereby the network node is operable to:

• transmit an uplink grant;
• transmit a random-access response to a random-access request from a wireless device to the wireless device;
• and
• receive a radio transmission in response to the random-access response, the radio transmission comprising a connection request and uplink data secured by 32 bits of security information;
• wherein the security information is generated based on at least in part on an amount of the uplink data and the uplink grant, wherein the 32 bits of security information is divided across a radio resource control (RRC) layer and a Packet Data Convergence Protocol (PDCP) layer, wherein the security information comprises a security token, wherein generating the security information is further based on a ResumeID and a cause value, and wherein the security token is generated based on an early message being sent in the radio transmission, and, wherein the security information is generated based on at least a part of the security information is generated at the RRC layer and at least a part of the security information is generated at the PDCP layer.