# US 11,910,232 B2 · Schemes and methods of integrity protection in mobile communication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,910,232 B2
- Document ID: US11910232B2
- Status: Granted
- Kind: B2
- Application number: 17/542,658
- Filed: 2021-12-06
- Published: 2022-03-24
- Granted: 2024-02-20
- Earliest claimed: 2018-11-02
- Assignees: NEC Corporation
- Applicants: NEC Corporation
- Inventors: Sander De Kievit; Hironori Ito; Anand Raghawa Prasad; Takahito Yoshizawa
- Web page: https://patentgrep.com/patent/US11910232B2

## CPC

- H04L 1/0002: {by adapting the transmission rate}
- H04W 28/04: Error control
- H04L 1/0023: {characterised by the signalling}
- H04L 1/1671: {the supervisory signal being transmitted together with control information}
- H04L 1/203: {Details of error rate determination, e.g. BER, FER or WER}
- H04W 8/24: Transfer of terminal data
- H04W 12/10: Integrity
- H04W 12/106: Packet or message integrity
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

This invention introduces methods and mechanisms of partial integrity protection in mobile systems. A user equipment (UE), comprising: a memory configured to store instructions; and a processor configured to execute the instructions to: receive, from a network device, user plane data having integrity protection; send an error indication indicating an integrity protection error relating to the user plane data; and receive retransmitted user plane data from the network device with a reduced data rate, based on the error indication.

## Claims

### Claim 1

User Equipment (UE), comprising:
one or more memories configured to store instructions; and
one or more processors configured to execute the instructions to:
send, to a Radio Access Network (RAN) node, first security information for User Plane (UP) integrity protection,
receive, from the RAN node, second security information for the UP integrity protection, wherein the second security information is decided by the RAN node for security information negotiation, and
generate a Packet Data Convergence Protocol (PDCP) Protocol Data Unit (PDU) including a PDCP header, data, and a Message Authentication Code-Integrity (MAC-I) using the second security information, wherein the PDCP header comprises at least one bit that indicates whether the integrity protection is used in the PDU or not.

### Claim 2 (depends on 1)

The UE of claim 1, wherein the RAN node is a Next-generation NodeB (gNB).

### Claim 3

A method of a User Equipment (UE), the method comprising:
sending, to a Radio Access Network (RAN) node, first security information for User Plane (UP) integrity protection;
receiving, from the RAN node, second security information for the UP integrity protection, wherein the second security information is decided by the RAN node for security information negotiation; and
generating a Packet Data Convergence Protocol (PDCP) Protocol Data Unit (PDU) including a PDCP header, data, and a Message Authentication Code-Integrity (MAC-I) using the second security information, wherein the PDCP header comprises at least one bit that indicates whether the integrity protection is used in the PDU or not.

### Claim 4 (depends on 3)

The method of claim 3, wherein the RAN node is a Next-generation NodeB (gNB).

### Claim 5 (depends on 1)

The UE of claim 1, wherein the one or more processors further configured to execute the instructions to:
when the UE receives a PDCP Protocol Data Unit (PDU) which fails integrity check, discard the received PDU and send an error indication related to the failed integrity check.

### Claim 6

A Radio Access Network (RAN) node, comprising:
one or more memories configured to store instructions; and
one or more processors configured to execute the instructions to:
receive, from a User Equipment (UE), first security information for User Plane (UP) integrity protection,
send, to the UE, second security information for the UP integrity protection, wherein the second security information is decided by the RAN node for security information negotiation, and
generate a Packet Data Convergence Protocol (PDCP) Protocol Data Unit (PDU) including a PDCP header, data, and a Message Authentication Code-Integrity (MAC-I) using the second security information, wherein the PDCP header comprises at least one bit that indicates whether the integrity protection is used in the PDU or not.

### Claim 7 (depends on 3)

The method of claim 3, further comprising:
when the UE receives a PDCP Protocol Data Unit (PDU) which fails integrity check, discarding the received PDU and sending an error indication related to the failed integrity check.

### Claim 8

A method of a Radio Access Network (RAN) node, comprising:
receiving, from a User Equipment (UE), first security information for User Plane (UP) integrity protection;
sending, to the UE, second security information for UP integrity protection, wherein the second security information is decided by the RAN node for security information negotiation; and
generating a Packet Data Convergence Protocol (PDCP) Protocol Data Unit (PDU) including a PDCP header, data, and a Message Authentication Code-Integrity (MAC-I) using the second security information, wherein the PDCP header comprises at least one bit that indicates whether the integrity protection is used in the PDU or not.