# US 2022/0191701 A1 · Method and Device for Obtaining UE Security Capabilities > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2022/0191701 A1 - Document ID: US20220191701A1 - Status: Published application - Kind: A1 - Application number: 17/683,022 - Filed: 2022-02-28 - Published: 2022-06-16 - Earliest claimed: 2017-10-30 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Ahmad Shawky Muhanna; He Li; Mazin Ali Al-Shalash - Web page: https://patentgrep.com/patent/US20220191701A1 ## CPC - H04W 12/60: Context-dependent security - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - H04W 12/122: Counter-measures against attacks; Protection against rogue devices - H04W 12/128: Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware - H04W 8/24: Transfer of terminal data - H04W 36/0038: {of security context information} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method and apparatus are provided for delivering user equipment (UE) new radio (NR) security capabilities and mobility management entity interworking. In the embodiments, adding the UE NR security capabilities in a new information element over a non-access stratum (NAS) is compatible with a legacy mobility management entity and eliminate any potential of bidding-down attack and is more advantageous and serves the security solution better. As long as the UE is connected to the long term evolution (LTE) and all UE security capabilities including LTE security capabilities have been replayed correctly and successfully in the NAS security mode command (SMC) message, the UE may not consider the absence of the UE NR security capabilities in the NAS SMC as a security vulnerability. ## Claims ### Claim 1 A communications method, comprising: receiving, by a legacy mobility management entity (MME), an attach request message from a user equipment, wherein the attach request message comprises user equipment (UE) security capabilities including UE new radio (NR) security capabilities; and replaying, by the legacy MME, UE security capabilities included in the attach request message to the UE, the replayed UE security capabilities being without comprising the UE NR security capabilities. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: dropping, by the legacy MME, the UE NR security capabilities. ### Claim 3 (depends on 1) The method according to claim 1, wherein the UE security capabilities comprise the UE NR security capabilities and UE long term evolution (LTE) security capabilities, and the attach request message comprises a first information element for carrying the UE NR security capabilities and a second information element for carrying the UE LTE security capabilities. ### Claim 4 (depends on 3) The method according to claim 3, wherein the UE security capabilities further comprises UE universal mobile telecommunications system (UMTS) security capabilities, the second information element further comprises the UE UMTS security capabilities. ### Claim 5 (depends on 1) The method according to claim 1, wherein the attach request message is received from a legacy evolved NodeB (eNB). ### Claim 6 (depends on 5) The method according to claim 5, wherein the attach request message is received from the legacy eNB in a S1 application protocol (S1AP) message. ### Claim 7 A method for attaching, comprising: transmitting, by a user equipment (UE), a tracking area update (TAU) request message to a mobility management entity, wherein the TAU request message includes UE security capabilities comprising UE new radio (NR) security capabilities; receiving, by the UE, a non-access stratum (NAS) security mode command (SMC) message from the mobility management entity, wherein the NAS SMC message includes replayed UE security capabilities without including the UE NR security capabilities; determining, by the UE, no bidding down attack has happened based on a mismatch of the UE security capabilities comprised in the TAU request message and the replayed UE security capabilities; and attaching, by the UE, to the mobility management entity. ### Claim 8 (depends on 7) The method according to claim 7, wherein the UE security capabilities comprise the UE NR security capabilities and UE long term evolution (LTE) security capabilities, and the TAU request message comprises a first information element for carrying the UE NR security capabilities and a second information element for carrying the UE LTE security capabilities. ### Claim 9 (depends on 8) The method according to claim 8, wherein the UE security capabilities further comprises UE universal mobile telecommunications system (UMTS) security capabilities, the second information element further comprises the UE UMTS security capabilities. ### Claim 10 (depends on 7) The method according to claim 7, further comprising, prior to transmitting the TAU request message, receiving, by the UE, a TAU trigger following an X2 or S1 handover. ### Claim 11 (depends on 7) The method according to claim 7, wherein the TAU request message is transmitted to a master evolved NodeB (MeNB) for forwarding to the mobility management entity, the MeNB serving the UE. ### Claim 12 A communications method, comprising: receiving, by a legacy mobility management entity (MME), a tracking area update (TAU) request message from a user equipment, wherein the TAU request message comprises user equipment (UE) security capabilities including UE new radio (NR) security capabilities; and replaying, by the legacy MME, UE security capabilities included in the TAU request message to the UE, the replayed UE security capabilities being without comprising the UE NR security capabilities. ### Claim 13 (depends on 12) The method according to claim 12, further comprising: dropping, by the legacy MME, the UE NR security capabilities. ### Claim 14 (depends on 12) The method according to claim 12, wherein the UE security capabilities comprise the UE NR security capabilities and UE long term evolution (LTE) security capabilities, and the TAU request message comprises a first information element for carrying the UE NR security capabilities and a second information element for carrying the UE LTE security capabilities. ### Claim 15 (depends on 14) The method according to claim 14, wherein the UE security capabilities further comprises UE universal mobile telecommunications system (UMTS) security capabilities, the second information element further comprises the UE UMTS security capabilities.