Back to results
US 11,895,498 B2Granted
Method and device for negotiating security and integrity algorithms
AssigneeFuturewei Technologies, Inc.
InventorsAhmad Shawky Muhanna, Xin Zeng
Life of this patent
Estimating the term…
Abstract
Embodiments of this disclosure provide techniques for communicating in a wireless communication system. In particular, a user equipment (UE) may receiving a security command message from a base station comprising an indication of an integrity protection algorithm and an indication of an encryption algorithm. The first security command message may trigger a radio resource control (RRC) traffic signaling protection procedure between the UE and the base station. The UE transmits a security command complete message to the base station. The security command complete message may trigger a packet data unit (PDU) session establishment procedure to establish a PDU session between the UE and the base station.
Claims21
A method for establishing secure communications in a wireless network, the method comprising:
- receiving, by a user equipment (UE) from a base station, an access stratum (AS) security mode command (SMC) message during an AS SMC procedure, the AS SMC message being integrity protected with a radio resource control (RRC) integrity key and indicating a first integrity protection algorithm and a first encryption algorithm for a RRC traffic signaling protection procedure between the UE and the base station;
- transmitting, by the UE to the base station, a security command complete message that is integrity protected with the RRC integrity key and the first integrity protection algorithm as indicated in the AS SMC message;
- and
- receiving, by the UE from the base station during a data radio bearer (DRB) establishment procedure that is performed after transmitting the security command complete message, a RRC message comprising a user plane (UP) integrity indication and a UP encryption indication for a DRB of a protocol data unit (PDU) session between the UE and the base station.
1 more element
A method for providing security policy in a wireless network, the method comprising:
- transmitting, by a base station to a user equipment (UE), an access stratum (AS) security mode command (SMC) message during an AS SMC procedure, the AS SMC message being integrity protected with a RRC integrity key and indicating a first integrity protection algorithm and a first encryption algorithm for a radio resource control (RRC) traffic signaling protection procedure between the base station and the UE;
- receiving, by the base station from the UE, a security command complete message that is integrity protected with the RRC integrity key and the first integrity protection algorithm as indicated in the AS SMC message;
- and
- transmitting, by the base station to the UE during a data radio bearer (DRB) establishment procedure that is performed after receiving the security command complete message, a RRC message comprising a user plane (UP) integrity indication and a UP encryption indication for a DRB of a protocol data unit (PDU) session between the base station and the UE.
1 more element
A user equipment (UE), comprising:
- a non-transitory memory storage comprising instructions;
- and
- one or more processors in communication with the non-transitory memory storage, wherein the one or more processors execute the instructions to:
- receive a first security command message from a base station, an access stratum (AS) security mode command (SMC) message during an AS SMC procedure, the AS SMC message being integrity protected with a radio resource control (RRC) integrity key and indicating a first integrity protection algorithm and a first encryption algorithm for a RRC traffic signaling protection procedure between the UE and the base station;
- transmit a security command complete message to the base station, the security command complete being integrity protected with the RRC integrity key and the first integrity protection algorithm as indicated in the AS SMC message;
- and
- receive, from the base station during a data radio bearer (DRB) establishment procedure that is performed after transmitting the security command complete message, a RRC message comprising a user plane (UP) integrity indication and a UP encryption indication for a DRB of a protocol data unit (PDU) session between the UE and the base station.
4 more elements
A base station, comprising:
- a non-transitory memory storage comprising instructions;
- and
- one or more processors in communication with the non-transitory memory storage, wherein the one or more processors execute the instructions to:
- transmit, to a user equipment (UE), an access stratum (AS) security mode command (SMC) message during an AS SMC procedure, the AS SMC message being integrity protected with a radio resource control (RRC) integrity key and indicating a first integrity protection algorithm and a first encryption algorithm for a RRC traffic signaling protection procedure between the base station and the UE;
- receive a security command complete message from the UE, the security command complete message being integrity protected with the RRC integrity key and the first integrity protection algorithm as indicated in the AS SMC message;
- and
- transmit, to the UE during a data radio bearer (DRB) establishment procedure that is performed after receiving the security command complete message, a RRC message comprising a user plane (UP) integrity indication and a UP encryption indication for a DRB of a protocol data unit (PDU) session between the base station and the UE.
4 more elements
Dependencies are inferred from the claim text.