# US 2018/0323971 A1 · Data transmission method, apparatus, and device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0323971 A1 - Document ID: US20180323971A1 - Status: Published application - Kind: A1 - Application number: 16/023,170 - Filed: 2018-06-29 - Published: 2018-11-08 - Earliest claimed: 2015-12-31 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Jing LIU; Min HUANG; Bing SHU - Web page: https://patentgrep.com/patent/US20180323971A1 ## CPC - H04W 12/08: Access security - H04L 5/0055: {Physical resource allocation for ACK/NACK (for physical mapping arrangements in ARQ protocols H04L1/1861)} - H04L 9/00: {Cryptographic mechanisms or cryptographic} arrangements for secret or secure communications; Network security protocols - H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy - H04L 9/32: including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} - H04L 12/66: Arrangements for connecting between networks having differing types of switching systems, e.g. gateways - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 12/0433: Key management protocols - H04W 12/106: Packet or message integrity - H04W 12/108: Source integrity - H04W 76/27: Transitions between radio resource control [RRC] states - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Embodiments of the present disclosure provide a data transmission method, apparatus, and device. The method includes: performing, by a terminal, encryption and integrity protection on a data packet by using a public key of a network device and a private key of the terminal, where the data packet includes user data; and sending, by the terminal, the data packet to the network device, to send the user data to a server by using the network device. Encryption and integrity protection are performed on the data packet respectively by using the public key of the network device and the private key of the terminal, and when no radio resource control RRC connection is established, the data packet is sent to the network device. ## Claims ### Claim 1 A data transmission method, the method comprising: obtaining, by a terminal, a public key of a network device; performing, by the terminal, encryption on a data packet by using the public key of the network device, and performing integrity protection on the data packet by using a private key of the terminal, wherein the data packet comprises user data; and sending, by the terminal, the data packet to the network device. ### Claim 2 (depends on 1) The method according to claim 1, wherein obtaining, by the terminal, the public key of the network device comprises: receiving, by the terminal, system information from a base station, wherein the system information comprises the public key of the network device; and obtaining, by the terminal, the public key of the network device from the system information. ### Claim 3 (depends on 1) The method according to claim 1, wherein sending, by the terminal, the data packet to the network device comprises: sending, by the terminal, the data packet to the network device when no radio resource control (RRC) connection is established. ### Claim 4 (depends on 3) The method according to claim 3, wherein sending, by the terminal, the data packet to the network device when no RRC connection is established comprises: when no RRC connection to the base station is established, sending, by the terminal, the data packet to the network device by using an uplink resource allocated by the base station. ### Claim 5 (depends on 1) The method according to claim 1, wherein the data packet further comprises a user identifier and a uniform resource locator of the server, and the user identifier is used to identify the terminal in a data transmission process. ### Claim 6 (depends on 5) The method according to claim 5, further comprising: when receiving an acknowledgment data packet from the network device, performing, by the terminal, an integrity check on the acknowledgment data packet by using the public key of the network device, to verify validity of a network device identity and integrity of the acknowledgment data packet; and updating, by the terminal, the user identifier when the acknowledgment data packet passes the integrity check, wherein the acknowledgment data packet is sent after the network device receives the data packet and the data packet passes the integrity check. ### Claim 7 (depends on 1) The method according to claim 1, wherein the network device is a base station or a gateway. ### Claim 8 A data transmission apparatus, wherein the apparatus comprises: a processor, configured to: obtain a public key of a network device, perform encryption on a data packet by using the public key of the network device, and perform integrity protection on the data packet by using a private key of a terminal, wherein the data packet comprises user data; and a communications unit, configured to send the data packet to the network device. ### Claim 9 (depends on 8) The apparatus according to claim 8, wherein processor is configured to: obtain the public key of the network device from a system information received from a base station, wherein the system information comprises the public key of the network device. ### Claim 10 (depends on 8) The apparatus according to claim 8, wherein the communications unit is configured to: send the data packet to the network device when no radio resource control (RRC) connection is established. ### Claim 11 (depends on 10) The apparatus according to claim 10, wherein the communications unit is configured to: when no RRC connection to the base station is established, send the data packet to the network device by using an uplink resource allocated by the base station. ### Claim 12 (depends on 8) The apparatus according to claim 8, wherein the data packet further comprises a user identifier and a uniform resource locator of the server, and the user identifier is used to identify the terminal in a data transmission process. ### Claim 13 (depends on 12) The apparatus according to claim 12, wherein the processor is further configured to: when an acknowledgment data packet from the network device is received, perform an integrity check on the acknowledgment data packet by using the public key of the network device, to verify validity of a network device identity and integrity of the acknowledgment data packet; and update the user identifier when the acknowledgment data packet passes the integrity check, wherein the acknowledgment data packet is sent after the network device receives the data packet and the data packet passes the integrity check. ### Claim 14 (depends on 8) The apparatus according to claim 8, wherein the network device is a base station or a gateway. ### Claim 15 A data transmission apparatus, wherein the apparatus comprises: a communications unit, configured to receive a data packet from a terminal, wherein the data packet is encrypted by using a public key of a network device and is integrity protected by using a private key of the terminal; a processor, configured to decrypt the data packet by using a private key of the network device, to obtain user data, wherein the data packet comprises the user data, and to perform an integrity check on the data packet by using a public key of the terminal, to verify validity of a terminal identity and integrity of the data packet; and the communications unit is further configured to send the user data to a server when the data packet passes the integrity check. ### Claim 16 (depends on 15) The apparatus according to claim 15, wherein the data packet is from the terminal when no radio resource control (RRC) connection is established. ### Claim 17 (depends on 15) The apparatus according to claim 15, wherein the data packet further comprises a user identifier, and the user identifier is used to identify the terminal in a data transmission process. ### Claim 18 (depends on 15) The apparatus according to claim 15, wherein the data packet further comprises a uniform resource locator of the server. ### Claim 19 (depends on 18) The apparatus according to claim 18, wherein the communications unit is configured to: send the uniform resource locator of the server and the user data to a gateway. ### Claim 20 (depends on 15) The apparatus according to claim 15, wherein the communications unit is further configured to: send a network device identifier corresponding to the public key of the network device to the terminal.