# US 12,192,766 B2 · Method and apparatus for enhancing security of MAC layer entity in next-generation mobile communication system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,766 B2 - Document ID: US12192766B2 - Status: Granted - Kind: B2 - Application number: 17/581,461 - Filed: 2022-01-21 - Published: 2022-07-28 - Granted: 2025-01-07 - Earliest claimed: 2021-01-22 - Assignees: Samsung Electronics Co., Ltd. - Applicants: Samsung Electronics Co., Ltd. - Inventors: Donggun Kim; Soenghun Kim; Anil Agiwal - Web page: https://patentgrep.com/patent/US12192766B2 ## CPC - H04W 12/108: Source integrity - H04W 12/03: Protecting confidentiality, e.g. by encryption - H04W 12/106: Packet or message integrity - H04W 12/71: Hardware identity - H04W 80/02: Data link layer protocols - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. It is possible to provide methods for enhancing security when a UE and a base station perform data communication in a next-generation mobile communication system according to an embodiment of the disclosure. ## Claims ### Claim 1 A method performed by a transmitting apparatus in a wireless communication system, the method comprising: generating at least one medium access control (MAC) sub protocol data unit (subPDU); generating a first field, by applying an integrity protection procedure configured in a MAC layer of the transmitting apparatus, to the at least one MAC subPDU; generating a MAC PDU including the at least one MAC subPDU and the first field; and transmitting, to a receiving apparatus, the MAC PDU, wherein the MAC PDU further includes an indicator indicating that the at least one MAC subPDU is integrity protected. ### Claim 2 (depends on 1) The method of claim 1, wherein transmitting the MAC PDU comprises: ciphering the MAC PDU including the at least one MAC subPDU and the first field; and transmitting, to the receiving apparatus, the ciphered MAC PDU. ### Claim 3 (depends on 1) The method of claim 1, wherein the at least one MAC subPDU comprises at least one of a packet data convergence protocol (PDCP) control PDU, a radio link control (RLC) control PDU, a MAC control element (CE), a PDCP header, an RLC header, a MAC sub-header, a radio resource control (RRC) message, or system information. ### Claim 4 (depends on 1) The method of claim 1, wherein the first field is placed after the at least one MAC subPDU or before the at least one MAC subPDU. ### Claim 5 A method performed by a receiving apparatus in a wireless communication system, the method comprising: receiving, from a transmitting apparatus, a medium access control (MAC) protocol data unit (PDU) including at least one MAC subPDU and a first field; identifying the first field; and verifying, by a MAC layer of the receiving apparatus, an integrity protection of the at least one MAC subPDU based on the first field, wherein the MAC PDU further includes an indicator indicating that the at least one MAC subPDU is integrity protected. ### Claim 6 (depends on 5) The method of claim 5, further comprising: deciphering the MAC PDU in case that the MAC PDU including at least one MAC subPDU and the first field is ciphered. ### Claim 7 (depends on 5) The method of claim 5, wherein the at least one MAC subPDU comprises at least one of a packet data convergence protocol (PDCP) control PDU, a radio link control (RLC) control PDU, a MAC control element (CE), a PDCP header, an RLC header, a MAC sub-header, a radio resource control (RRC) message, or system information. ### Claim 8 (depends on 5) The method of claim 5, wherein the first field is placed after the at least one MAC subPDU or before the at least one MAC subPDU. ### Claim 9 A transmitting apparatus in a wireless communication system, the transmitting apparatus comprising: a transceiver; and a controller coupled with the transceiver and configured to: generate at least one medium access control (MAC) sub protocol data unit (subPDU), generate a first field, by applying an integrity protection procedure configured in a MAC layer of the transmitting apparatus, to the at least one MAC subPDU, generate a MAC PDU including the at least one MAC subPDU and the first field, and transmit, to a receiving apparatus, the MAC PDU, wherein the MAC PDU further includes an indicator indicating that the at least one MAC subPDU is integrity protected. ### Claim 10 (depends on 9) The transmitting apparatus of claim 9, wherein the controller is further configured to: cipher the MAC PDU including the at least one MAC subPDU and the first field, and transmit, to the receiving apparatus, the ciphered MAC PDU. ### Claim 11 (depends on 9) The transmitting apparatus of claim 9, wherein the at least one MAC subPDU comprises at least one of a packet data convergence protocol (PDCP) control PDU, a radio link control (RLC) control PDU, a MAC control element (CE), a PDCP header, an RLC header, a MAC sub-header, a radio resource control (RRC) message, or system information. ### Claim 12 (depends on 9) The transmitting apparatus of claim 9, wherein the first field is placed after the at least one MAC subPDU or before the at least one MAC subPDU. ### Claim 13 A receiving apparatus in a wireless communication system, the receiving apparatus comprising: a transceiver; and a controller coupled with the transceiver and configured to: receive, from a transmitting apparatus, a medium access control (MAC) protocol data unit (PDU) including at least one MAC subPDU and a first field, identify the first field, and verifying, by a MAC layer of the receiving apparatus, an integrity protection of the at least one MAC subPDU based on the first field, wherein the MAC PDU further includes an indicator indicating that the at least one MAC subPDU is integrity protected. ### Claim 14 (depends on 13) The receiving apparatus of claim 13, wherein the controller is further configured to: decipher the MAC PDU in case that the MAC PDU including at least one MAC subPDU and the first field is ciphered. ### Claim 15 (depends on 13) The receiving apparatus of claim 13, wherein the at least one MAC subPDU comprises at least one of a packet data convergence protocol (PDCP) control PDU, a radio link control (RLC) control PDU, a MAC control element (CE), a PDCP header, an RLC header, a MAC sub-header, a radio resource control (RRC) message, or system information. ### Claim 16 (depends on 13) The receiving apparatus of claim 13, wherein the first field is placed after the at least one MAC subPDU or before the at least one MAC subPDU.