# US 11,451,961 B2 · Security enhancements for early data transmissions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,961 B2 - Document ID: US11451961B2 - Status: Granted - Kind: B2 - Application number: 16/651,127 - Filed: 2018-09-28 - Published: 2020-09-10 - Granted: 2022-09-20 - Earliest claimed: 2017-09-28 - Assignees: Telefonaktiebolaget LM Ericsson (publ) - Applicants: Telefonaktiebolaget Lm Ericsson (Publ) - Inventors: Dung Pham Van; Magnus Stattin; Andreas Höglund; Tuomas Tirronen; Emre Yavuz; Vesa Lehtovirta - Web page: https://patentgrep.com/patent/US11451961B2 ## CPC - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04W 12/10: Integrity - H04W 12/037: of the control plane, e.g. signalling traffic - H04W 74/0833: Random access procedures, e.g. with 4-step access - H04W 76/10: Connection setup - H04L 63/0457: {wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption (cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065)} - H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method is provided for use in a wireless device. The method comprises determining a connection request and uplink data to transmit in response to a random-access response received from a network node. The method further comprises generating security information based at least in part on the uplink data. The method further comprises transmitting a radio transmission in response to the random-access response. The radio transmission comprises the connection request and the uplink data secured by the security information. ## Claims ### Claim 1 A method for use in a wireless device, comprising: receiving an uplink grant; determining a connection request and uplink data to transmit in response to a random- access response received from a network node; generating 32 bits of security information based at least in part on the uplink data, wherein based at least in part on an amount of uplink data and the uplink grant, the 32 bits of security information is divided across a radio resource control (RRC) layer and a Packet Data Convergence Protocol (PDCP) layer, wherein the security information comprises a security token, and wherein generating the security information is further based on a ResumeID and a cause value, and wherein the security information is generated based on at least a part of the security information is generated at the RRC layer and at least a part of the security information is generated at the PDCP layer; and transmitting a radio transmission in response to the random-access response, the radio transmission comprising the connection request and the uplink data secured by the security information, wherein the security token is generated based on an early message being sent in the radio transmission. ### Claim 2 (depends on 1) The method of claim 1, wherein the security information comprises a message authentication code. ### Claim 3 (depends on 1) The method of claim 1, wherein a size of the security information is based on a received uplink grant from the network node. ### Claim 4 (depends on 1) The method of claim 1, further comprising: generating two or more preliminary radio transmissions, wherein the two or more preliminary radio transmissions comprise different message sizes; and selecting to transmit a respective one of the preliminary radio transmissions as the radio transmission based on a transport block size indicated in the random-access response. ### Claim 5 (depends on 4) The method of claim 4, wherein a largest of the two or more preliminary radio transmissions that can be accommodated by the indicated transport block size is selected to transmit as the radio transmission. ### Claim 6 (depends on 1) The method of claim 1, further comprising: generating a first preliminary radio transmission; determining that a transport block size indicated in the random-access response is insufficient to accommodate the first preliminary radio transmission; and generating a second preliminary radio transmission having a largest size that can be accommodated by the indicated transport block size, wherein the second preliminary radio transmission is transmitted as the radio transmission. ### Claim 7 (depends on 1) The method of claim 1, further comprising: generating a first preliminary radio transmission; determining that a transport block size indicated in the random-access response can accommodate a larger radio transmission than the first preliminary radio transmission; generating a second preliminary radio transmission having a largest size that can be accommodated by the indicated transport block size, wherein the second preliminary radio transmission is transmitted as the radio transmission. ### Claim 8 (depends on 6) The method of claim 6, wherein the largest size that can be accommodated by the indicated transport block size corresponds to a longest length that can be used for the security information. ### Claim 9 (depends on 1) The method of claim 1, wherein the radio transmission is secured according to one of the following: with access stratum integrity protection; without access stratum integrity protection. ### Claim 10 (depends on 1) The method of claim 1, further comprising multiplexing the connection request and uplink data to form the radio transmission. ### Claim 11 (depends on 10) The method of claim 10, wherein the connection request is transmitted using a signaling radio bearer 0 (SRB0) radio bearer prior to multiplexing. ### Claim 12 (depends on 10) The method of claim 10, wherein the connection request is transmitting using a signaling radio bearer 1 (SRB1) radio bearer prior to multiplexing. ### Claim 13 (depends on 1) The method of claim 1, further comprising indicating to the network node information from which the network node can identify how the wireless device generated the security information. ### Claim 14 A wireless device comprising memory operable to store instructions and processing circuitry operable to execute the instructions, whereby the wireless device is operable to: receive an uplink grant; determine a connection request and uplink data to transmit in response to a random- access response received from a network node; generate 32 bits of security information based at least in part on the uplink data wherein based at least in part on an amount of uplink data to transmit and the uplink grant the 32 bits of security information is divided across a radio resource control (RRC) layer and a Packet Data Convergence Protocol (PDCP) layer security information based at least in part on the uplink data, wherein the security information comprises a security token, and, wherein generating the security information is further based on a ResumeID and a cause value, and wherein the security information is generated based on at least a part of the security information is generated at the RRC layer and at least a part of the security information is generated at the PDCP layer; and transmit a radio transmission in response to the random-access response, the radio transmission comprising the connection request and the uplink data secured by the security information, wherein the security token is generated based on an early message being sent in the radio transmission. ### Claim 15 (depends on 14) The wireless device of claim 14, wherein the security information comprises a message authentication code. ### Claim 16 (depends on 14) The wireless device of claim 14, wherein a size of the security information is based on a received uplink grant from the network node. ### Claim 17 (depends on 14) The wireless device of claim 14, wherein the wireless device is further operable to: generate two or more preliminary radio transmissions, wherein the two or more preliminary radio transmissions comprise different message sizes; and select to transmit a respective one of the preliminary radio transmissions as the radio transmission based on a transport block size indicated in the random-access response. ### Claim 18 (depends on 17) The wireless device of claim 17, wherein a largest of the two or more preliminary radio transmissions that can be accommodated by the indicated transport block size is selected to transmit as the radio transmission. ### Claim 19 (depends on 14) The wireless device of claim 14, wherein the wireless device is further operable to: generate a first preliminary radio transmission; determine that a transport block size indicated in the random-access response is insufficient to accommodate the first preliminary radio transmission; and generate a second preliminary radio transmission having a largest size that can be accommodated by the indicated transport block size, wherein the second preliminary radio transmission is transmitted as the radio transmission. ### Claim 20 (depends on 14) The wireless device of claim 14, wherein the wireless device is further operable to: generate a first preliminary radio transmission; determine that a transport block size indicated in the random-access response can accommodate a larger radio transmission than the first preliminary radio transmission; and generate a second preliminary radio transmission having a largest size that can be accommodated by the indicated transport block size, wherein the second preliminary radio transmission is transmitted as the radio transmission. ### Claim 21 (depends on 19) The wireless device of claim 19, wherein the largest size that can be accommodated by the indicated transport block size corresponds to a longest length that can be used for the security information. ### Claim 22 (depends on 14) The wireless device of claim 14, wherein the radio transmission is secured according to one of the following: with access stratum integrity protection; or without access stratum integrity protection. ### Claim 23 (depends on 14) The wireless device of claim 14, wherein the wireless device is further operable to multiplexing the connection request and uplink data to form the radio transmission. ### Claim 24 (depends on 23) The wireless device of claim 23, wherein the connection request is transmitted using a signaling radio bearer 0 (SRB0) radio bearer prior to multiplexing. ### Claim 25 (depends on 23) The wireless device of claim 23, wherein the connection request is transmitting using a signaling radio bearer 1 (SRB1) radio bearer prior to multiplexing. ### Claim 26 (depends on 14) The wireless device of claim 14, wherein the wireless device is further operable to indicate to the network node information from which the network node can identify how the wireless device generated the security information. ### Claim 27 A method for use in a network node, comprising: transmitting an uplink grant; transmitting a random-access response to a random-access request from a wireless device to the wireless device; and receiving a radio transmission in response to the random-access response, the radio transmission comprising a connection request and uplink data secured by 32 bits of security information; wherein the security information is generated based on at least in part on an amount of the uplink data and the uplink grant, wherein the 32 bits of security information is divided across a radio resource control (RRC) layer and a Packet Data Convergence Protocol (PDCP) layer, wherein the security information comprises a security token, wherein generating the security information is further based on a ResumelD and a cause value, and wherein the security token is generated based on an early message being sent in the radio transmission, and, wherein the security information is generated based on at least a part of the security information is generated at the RRC layer and at least a part of the security information is generated at the PDCP layer. ### Claim 28 A network node comprising memory operable to store instructions and processing circuitry operable to execute the instructions, whereby the network node is operable to: transmit an uplink grant; transmit a random-access response to a random-access request from a wireless device to the wireless device; and receive a radio transmission in response to the random-access response, the radio transmission comprising a connection request and uplink data secured by 32 bits of security information; wherein the security information is generated based on at least in part on an amount of the uplink data and the uplink grant, wherein the 32 bits of security information is divided across a radio resource control (RRC) layer and a Packet Data Convergence Protocol (PDCP) layer, wherein the security information comprises a security token, wherein generating the security information is further based on a ResumeID and a cause value, and wherein the security token is generated based on an early message being sent in the radio transmission, and, wherein the security information is generated based on at least a part of the security information is generated at the RRC layer and at least a part of the security information is generated at the PDCP layer.