# US 2019/0246282 A1 · Communication Method and Related Apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0246282 A1 - Document ID: US20190246282A1 - Status: Published application - Kind: A1 - Application number: 16/386,462 - Filed: 2019-04-17 - Published: 2019-08-08 - Earliest claimed: 2017-05-05 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: He Li; Jing Chen; Li Hu - Web page: https://patentgrep.com/patent/US20190246282A1 ## CPC - H04W 12/033: of the user plane, e.g. user's traffic - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - H04W 8/08: Mobility data transfer - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/03: Protecting confidentiality, e.g. by encryption - H04W 12/037: of the control plane, e.g. signalling traffic - H04W 12/041: Key generation or derivation - H04W 12/08: Access security - H04W 12/10: Integrity - H04W 12/106: Packet or message integrity - H04W 76/27: Transitions between radio resource control [RRC] states - H04W 80/10: adapted for {application} session management, e.g. SIP [Session Initiation Protocol] {(connection management H04W76/00; arrangements for session management H04L67/14)} - H04W 92/10: between terminal device and access point, i.e. wireless air interface - H04W 8/04: Registration at HLR or HSS [Home Subscriber Server] - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A communication method and a related apparatus are provided. A base station obtains a security policy, where the security policy includes integrity protection indication information, and the integrity protection indication information is used to indicate the base station whether to enable integrity protection for a terminal device; and when the integrity protection indication information indicates the base station to enable integrity protection for the terminal device, the base station sends a target user plane integrity protection algorithm to the terminal device. ## Claims ### Claim 1 A communication method, comprising: enabling, by a terminal device, signaling plane protection after receiving an access stratum (AS) security mode command from a base station; receiving, by the terminal device, a Radio Resource Control (RRC) reconfiguration message from the base station; and enabling, by the terminal device, user plane integrity protection when the RRC reconfiguration message includes integrity protection indication information and the integrity protection indication information is configured to instruct to enable the user plane integrity protection. ### Claim 2 (depends on 1) The method according to claim 1, wherein the enabling, by the terminal device, user plane integrity protection, comprising: generating, by the terminal device, user plane integrity protection key based on an integrity protection algorithm included in the AS SMC; and performing, by the terminal device, the user plane integrity protection by using the user plane integrity protection key. ### Claim 3 (depends on 1) The method according to claim 1, wherein the enabling, by a terminal device, signaling plane protection, comprising: generating, by the terminal device, signaling plain keys; performing, by the terminal device, signaling plain protection by using the signaling plain keys; and generating, by the terminal device, user plane integrity protection key based on an integrity protection algorithm included in the AS SMC; wherein the enabling, by the terminal device, user plane integrity protection, comprising: performing, by the terminal device, the user plane integrity protection by using the user plane integrity protection key. ### Claim 4 (depends on 1) The method according to claim 1, wherein the integrity protection indication information is expressed by one bit, and the integrity protection indication information indicates enabling the user plain integrity protection when the value of the bit is1. ### Claim 5 (depends on 1) The method according to claim 1, further comprising: enabling, by the terminal device, user plane encryption protection when the RRC reconfiguration message includes encryption protection indication information and the encryption protection indication information is configured to instruct to enable the user plane encryption protection. ### Claim 6 (depends on 5) The method according to claim 5, wherein the enabling, by a terminal device, signaling plane protection, comprising: generating, by the terminal device, signaling plain keys; performing, by the terminal device, signaling plain protection by using the signaling plain keys; and generating, by the terminal device, user plane encryption protection key based on an encryption protection algorithm included in the AS SMC; wherein the enabling, by the terminal device, user plane encryption protection, comprising: performing, by the terminal device, the user plane encryption protection by using the user plane encryption protection key. ### Claim 7 (depends on 5) The method according to claim 5, wherein the enabling, by the terminal device, user plane encryption protection, comprising: generating, by the terminal device, user plane encryption protection key based on an encryption protection algorithm included in the AS SMC; and performing, by the terminal device, the user plane encryption protection by using the user plane encryption protection key. ### Claim 8 (depends on 5) The method according to claim 5, wherein the encryption protection indication information is expressed by one bit, and the encryption protection indication information indicates enabling the user plain encryption protection when the value of the bit is 1. ### Claim 9 (depends on 1) The method according to claim 1, wherein after the step of enabling, by a terminal device, signaling plane protection, the method further comprises: sending, by the terminal device, an AS security mode command complete message to the base station. ### Claim 10 An apparatus, comprising: a processor coupled to a transceiver; a memory storing instructions which when executed by a processor, cause the processor to implement: enabling signaling plane protection after receiving an access stratum (AS) security mode command from a base station; receiving a Radio Resource Control (RRC) reconfiguration message from the base station; and enabling user plane integrity protection when the RRC reconfiguration message includes integrity protection indication information and the integrity protection indication information is configured to instruct to enable the user plane integrity protection. ### Claim 11 (depends on 10) The apparatus according to claim 10, wherein the instructions cause the processor to implement: generating user plane integrity protection key based on an integrity protection algorithm included in the AS SMC; and performing the user plane integrity protection by using the user plane integrity protection key. ### Claim 12 (depends on 10) The apparatus device according to claim 10, wherein the instructions cause the processor to implement: generating signaling plain keys; performing signaling plain protection by using the signaling plain keys; generating user plane integrity protection key based on an integrity protection algorithm included in the AS SMC; and performing the user plane integrity protection by using the user plane integrity protection key. ### Claim 13 (depends on 10) The apparatus according to claim 10, wherein the integrity protection indication information is expressed by one bit, and the integrity protection indication information indicates enabling the user plain integrity protection when the value of the bit is 1. ### Claim 14 (depends on 10) The apparatus according to claim 10, wherein the instructions cause the processor to implement: enabling user plane encryption protection when the RRC reconfiguration message includes encryption protection indication information and the encryption protection indication information is configured to instruct to enable the user plane encryption protection. ### Claim 15 (depends on 14) The apparatus according to claim 14, wherein the instructions cause the processor to implement: generating signaling plain keys; performing signaling plain protection by using the signaling plain keys; and generating user plane encryption protection key based on an encryption protection algorithm included in the AS SMC; and performing the user plane encryption protection by using the user plane encryption protection key. ### Claim 16 (depends on 14) The apparatus according to claim 14, wherein the instructions cause the processor to implement: generating user plane encryption protection key based on an encryption protection algorithm included in the AS SMC; and performing the user plane encryption protection by using the user plane encryption protection key. ### Claim 17 (depends on 14) The apparatus according to claim 14, wherein the encryption protection indication information is expressed by one bit, and the encryption protection indication information indicates enabling the user plain encryption protection when the value of the bit is 1. ### Claim 18 (depends on 10) The apparatus according to claim 10, wherein the instructions cause the processor to implement: sending an AS security mode command complete message to the base station. ### Claim 19 A computer storage medium, wherein the computer readable storage medium stores instructions which when executed by a processor, cause the processor to implement: enabling signaling plane protection after receiving an access stratum (AS) security mode command from a base station; receiving a Radio Resource Control (RRC) reconfiguration message from the base station; enabling user plane integrity protection when the RRC reconfiguration message includes integrity protection indication information and the integrity protection indication information is configured to instruct to enable the user plane integrity protection. ### Claim 20 (depends on 19) The computer storage medium according to claim 19, wherein the instructions cause the processor to implement: generating user plane integrity protection key based on an integrity protection algorithm included in the AS SMC; and performing the user plane integrity protection by using the user plane integrity protection key. ### Claim 21 (depends on 19) The computer storage medium according to claim 19, wherein the instructions cause the processor to implement: generating signaling plain keys; performing signaling plain protection by using the signaling plain keys; generating user plane integrity protection key based on an integrity protection algorithm included in the AS SMC; and performing the user plane integrity protection by using the user plane integrity protection key. ### Claim 22 (depends on 19) The computer storage medium according to claim 19, wherein the integrity protection indication information is expressed by one bit, and the integrity protection indication information indicates enabling the user plain integrity protection when the value of the bit is 1. ### Claim 23 (depends on 19) The computer storage medium according to claim 19, wherein the instructions cause the processor to implement: enabling user plane encryption protection when the RRC reconfiguration message includes encryption protection indication information and the encryption protection indication information is configured to instruct to enable the user plane encryption protection. ### Claim 24 (depends on 23) The computer storage medium according to claim 23, wherein the instructions cause the processor to implement: generating signaling plain keys; performing signaling plain protection by using the signaling plain keys; and generating user plane encryption protection key based on an encryption protection algorithm included in the AS SMC; and performing the user plane encryption protection by using the user plane encryption protection key. ### Claim 25 (depends on 23) The computer storage medium according to claim 23, wherein the instructions cause the processor to implement: generating user plane encryption protection key based on an encryption protection algorithm included in the AS SMC; and performing the user plane encryption protection by using the user plane encryption protection key. ### Claim 26 (depends on 23) The computer storage medium according to claim 23, wherein the encryption protection indication information is expressed by one bit, and the encryption protection indication information indicates enabling the user plain encryption protection when the value of the bit is 1. ### Claim 27 (depends on 19) The computer storage medium according to claim 19, wherein the instructions cause the processor to implement: sending an AS security mode command complete message to the base station.