Back to results
US 11,637,871 B2Granted
System and method for dynamic activation and deactivation of user plane integrity in wireless networks
AssigneeNokia of America Corporation
InventorSuresh P. Nair
Life of this patent
Estimating the term…
Abstract
User equipment (UE) and a network node may establish data radio bearers (DRBs) for wireless communication of user plane data. For each DRB, the UE and network node may signal static integrity protection for the user plane data during set-up of the DRB. When the DRB has static integrity protection, integrity protection is applied to the user plane data for a duration of the DRB.
Claims18
A network node configured for operation in a wireless network, comprising:
- a wireless transceiver configured to communicate with user equipment (UE);
- processing circuitry including at least one processor and at least one memory, wherein the at least one memory stores instructions that, when executed by the at least one processor, cause the network node to:
- initiate a first connection request for a first data radio bearer (DRB) with the UE for wireless communication of user plane data, wherein the user plane data that is communicated in the first DRB is generated from internet protocol (IP) packets;
- determine whether user plane (UP) integrity protection is to be activated for the first DRB, wherein UP integrity protection is activated per DRB according to one or more rules for integrity protection;
- determine UP integrity protection is activated for the first DRB and activate UP integrity protection for the first DRB by generating an indication for activation of UP integrity protection for the first DRB in a first RRC Connection Reconfiguration Request to the UE;
- receive from the UE a first RRC Connection Reconfiguration Complete response and perform UP integrity protection on the user plane data generated from the IP packets for the first DRB;
- initiate a second connection request for a second DRB with the UE for wireless communication of user plane data;
- determine UP integrity protection is not activated for the second DRB and indicate non-activation of UP integrity protection for the second DRB in a second RRC Connection Reconfiguration Request to the UE;
- receive from the UE a second RRC Connection Reconfiguration Complete response;
- transmit user plane data for the second DRB, wherein the user plane data does not include UP integrity protection;
- and
- wherein the first DRB and the second DRB are active during a same period.
9 more elements
A method of a network node configured for operation in a wireless network, comprising:
- performing an AS security mode command procedure with a UE;
- determining whether user plane (UP) integrity protection is to be activated for a plurality of DRBs with the UE using a policy for integrity protection, wherein each of the plurality of DRBs are for communicating user plane data;
- when UP integrity protection is activated for a first DRB of the plurality of DRBs, generating an indication for activation of UP integrity protection for the first DRB in a first RRC Connection Reconfiguration Request to the UE;
- processing a RRC Connection Reconfiguration Complete message from the UE and performing UP integrity protection on user plane data generated from the IP layer for the first DRB;
- when UP integrity protection is not activated for a second DRB of the plurality of DRBs, indicating non-activation of UP integrity protection for the second DRB and not performing UP integrity protection on user plane data for the second DRB;
- and
- wherein the first DRB and the second DRB are active during a same period.
4 more elements
A network node configured for operation in a wireless network, comprising:
- a wireless transceiver configured to communicate with user equipment (UE);
- processing circuitry including at least one processor and at least one memory, wherein the at least one memory stores instructions that, when executed by the at least one processor, cause the network node to:
- perform an AS Security Mode Command Procedure with the UE;
- receive and store a policy that indicates integrity protection for one or more types of data flows;
- perform a first Connection Set-Up procedure for establishing a first data radio bearer (DRB), wherein the first DRB is for communicating user plane data;
- determine whether user plane (UP) integrity protection is to be activated for the first DRB, wherein UP integrity protection is activated per DRB;
- when user plane (UP) integrity protection is activated for the first DRB, activate UP integrity protection for the first DRB by generating an indication for activation of UP integrity protection for the first DRB in a first RRC Connection Reconfiguration Request to the UE;
- receive from the UE a first RRC Connection Reconfiguration Complete response and perform UP integrity protection on the user plane data generated from the IP packets for the first DRB;
- perform a second Connection Set-Up procedure for establishing a second DRB;
- determine whether user plane (UP) integrity protection is to be activated for the second DRB;
- when user plane (UP) integrity protection is not activated for the second DRB, transmit user plane data over the second DRB, wherein the user plane data does not include UP integrity protection;
- and
- wherein the first DRB and the second DRB are active during a same period.
10 more elements
Dependencies are inferred from the claim text.