Method for integrity protection of user plane data

Abstract

The present disclosure relates to a method for integrity protection of user plane data, in particular a method of operation of a user equipment, UE, wherein the UE is configured to connect to a communication network, the method comprising: indicating, to the communication network, an integrity protection for user plane, IPUP, mode supported by the UE when requesting to register to the communication network; wherein the IPUP mode comprises one of: using integrity protection for user plane data exchanged with the UE; not using integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and not using confidentiality protection for user plane data; receiving, from the communication network, an indication of an IPUP mode to be used by the communication network for the UE decided by a core node of the communication network.

Description

[0001] This application is a divisional application of the PCT international application PCT / EP2018 / 052285 filed on January 30, 2018, which entered the Chinese national phase with application number 201880017371.7 and entitled "Method for Integrity Protection of User Plane Data". Technical Field

[0002] This disclosure relates to methods for operating user equipment (UE), radio access nodes, and core network nodes in a communication network. This disclosure also relates to apparatus and computer programs configured to perform methods for operating the UE, radio access nodes, and core network nodes. Background Technology

[0003] In 3GPP Release 13, Enhanced GPRS for Internet of Things (IoT) devices introduces integrity protection for user plane (UP) data between the UE and the core network. Integrity protection for UP data is optional, both in the UE and in the network, through negotiation between integrity protection supported at the LLC layer in the core network and the implementation of integrity protection for UP data occurring at the NAS layer (mobility management layer).

[0004] Negotiation for UP data integrity protection is not considered in the standards used for Long Term Evolution (4G) networks, therefore, UP data integrity protection is not possible in these networks. However, UP data integrity protection between the UE and the base station is likely a desirable feature for next-generation (5G) networks.

[0005] In next-generation networks, the radio access network (RAN) can adopt the RAN architecture and interface described in TR 33.801 v1.0.0[x]. Figure 1 The diagram illustrates a possible new RAN architecture for next-generation networks. (Reference) Figure 1 It is expected that gNB 102 and eLTE eNB 104 can be connected to the same next-generation core network (NGC) 106. gNB 102 will be able to connect to other gNB 102 or (e)LTE eNB 104 via a new RAN interface named Xn interface 108. Summary of the Invention

[0006] This disclosure provides examples of methods for addressing the operation of a UE, a radio access node in a communication network, and a core network node. These methods involve using integrity protection for user plane data exchanged between the UE and the communication network.

[0007] According to one aspect of this disclosure, a method for operating a user equipment (UE) is provided, wherein the UE is configured to connect to a communication network. The method includes: upon requesting registration with the communication network, indicating to the communication network an IPUP mode for user plane integrity protection supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data.

[0008] The method may further include: indicating to the communication network a UE preference regarding the IPUP mode to be used by the UE by the communication network. The indicated UE preference may be applied to at least one of the following: all data exchanged with the communication network, or data exchanged with a specific slice or multiple slices of the communication network.

[0009] The method may further include receiving from the communication network an indication of the IPUP mode to be used by the communication network for the UE. This indication may be applied to at least one of the following: all data exchanged with the communication network, or data exchanged with a specific slice or multiple slices of the communication network.

[0010] An IPUP mode that instructs the communication network to apply integrity protection to user plane data exchanged with the UE, or to apply integrity protection to user plane data but not to apply confidentiality protection to user plane data, may include: instructing the communication network to the maximum data rate of user plane data to which integrity protection can be applied. This data rate may be the maximum total data rate.

[0011] The method may also include: informing the UE user that the communication network will use the IPUP mode for the UE.

[0012] The method may further include: if the IPUP mode indicated by the communication network does not match the UE preference regarding which IPUP mode the UE should use, then performing at least one of the following: refusing to connect to the network; disconnecting from the network; and notifying the UE's user that the IPUP mode indicated by the communication network does not match the UE preference regarding which IPUP mode the UE should use.

[0013] The method may further include: if the UE performs at least one of refusing to connect to the network or disconnecting from the network, then performing at least one of the following: requesting registration with the communication network via a different radio access node of the communication network, or requesting registration with a different communication network.

[0014] The method may further include: querying a list comprising at least one of the following: radio access nodes or communication networks that support integrity protection for user plane data, and selecting from the list a radio access node or at least one of different communication networks for which registration is requested. This list may be configured in the UE's memory. This list may be received via a radio link.

[0015] The method may further include: during the process of handing over the UE from the source radio access node to the target radio access node, receiving a message from the target radio access node of the communication network, the message including: an indication from the target radio access node that the UE will use an IPUP mode different from the IPUP mode used by the source radio access node.

[0016] The method may further include: if the indication from the target radio access node is that the IPUP mode to be used by the communication network via the target radio access node does not match the UE preference regarding which IPUP mode the UE should use by the communication network, then performing at least one of the following: disconnecting from the network; accepting the handover and notifying the UE user of the IPUP mode to be used by the communication network via the target radio access node; or seeking a handover to a different radio access node of the communication network.

[0017] The method may further include: during the process of adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer, receiving from a radio access node of the communication network an indication of the IPUP mode to be used by the communication network for the UE; and if the indicated IPUP mode involves integrity protection for user plane data, deriving and using a key for integrity protection of user plane data.

[0018] The communication network can receive indications of the IPUP mode used by the UE via an RRC reconfiguration request.

[0019] According to another aspect of this disclosure, a method for operating a radio access node in a communication network is provided. The method includes receiving from a user equipment (UE) requesting registration with the communication network an indication of an IPUP mode for user plane integrity protection supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data. The indication is received from the UE via the communication network.

[0020] The method may further include: receiving from the UE a UE preference regarding the IPUP mode to be used by the communication network for the UE. The indicated UE preference may be applied to at least one of the following: all data exchanged with the communication network, or data exchanged with a specific slice or multiple slices of the communication network.

[0021] The indicated IPUP mode, which involves receiving user plane data exchanged with the UE with integrity protection or with integrity protection but without confidentiality protection, may include: the maximum data rate at which integrity protection can be applied to the user plane data received from the UE. This data rate may be the maximum total data rate.

[0022] The method may also include receiving from the core node of the communication network an indication of the IPUP mode to be used by the communication network for the UE.

[0023] The method may further include: if the radio access node supports the indicated IPUP mode, sending an instruction to the core node that the radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0024] The method may further include: if the indicated IPUP mode received from the core node of the communication network is not supported by the radio access node, then performing at least one of the following: rejecting the registration request received from the UE; or omitting sending an instruction to the core node that the radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0025] The method may also include sending an indication to the UE that the communication network will use the IPUP mode for the UE.

[0026] If the IPUP mode used by the communication network for the UE involves integrity protection of user plane data, the indication of the IPUP mode used by the communication network for the UE may include: an identifier of the algorithm used for integrity protection of UP data.

[0027] The IPUP mode indicated to the UE by the radio access node can be the IPUP mode received from the core node of the communication network.

[0028] The IPUP mode indicated to the UE can be selected by the radio access node according to the retention policy on the radio access node.

[0029] According to another aspect of this disclosure, a method is provided for operating a radio access node of a communication network, the radio access node including a source radio access node. The method includes: during a handover of a user equipment (UE) from the source radio access node to a target radio access node, transmitting an indication by the communication network of a user plane integrity protection IPUP mode to be used by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0030] The method may also include: checking whether an indication is received from the target radio access node that the target radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0031] The method may further include: if no indication is received that the target radio access node will enable the IPUP mode to be used by the communication network for the UE, then it is assumed that the target radio access node will not enable the IPUP mode to be used by the communication network for the UE.

[0032] According to another aspect of this disclosure, a method is provided for operating a radio access node in a communication network, the radio access node including a target radio access node. The method includes receiving, during a handover of a user equipment (UE) from a source radio access node to a target radio access node, an indication by the communication network of an IPUP mode for user plane integrity protection to be used by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data.

[0033] The indication of the IPUP mode used by the UE can be received from at least one of the source radio access node or the core node of the communication network.

[0034] The method may further include: deciding whether to use the indicated IPUP mode, and if deciding not to use the indicated IPUP mode, sending an instruction to the UE that the target radio access node will use an IPUP mode for the UE that is different from the IPUP mode used by the source radio access node.

[0035] The indication of the IPUP mode used by the UE can be received from the source radio access node by the communication network, and the method may further include: sending the indication of the IPUP mode received from the source radio access node to the core node of the communication network.

[0036] The method may further include: if the target radio access node supports the indicated IPUP mode, sending an instruction to at least one of the source radio access node or the core node of the communication network as follows: the target radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0037] The method may further include: if the target radio access node does not support the received indicated IPUP mode, then performing at least one of the following: rejecting the UE handover, or accepting the UE handover and omitting the instruction that the target radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0038] According to another aspect of this disclosure, a method is provided for operating a radio access node in a communication network, the radio access node including a primary radio access node. The method includes sending an indication to a secondary radio access node of a user plane integrity protection IPUP mode to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is sent to the secondary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB).

[0039] If the IPUP mode indicated to the secondary radio access node involves integrity protection for user plane data, the indication of the IPUP mode used by the communication network to the UE may include: a list of supported algorithms for integrity protection of UP data.

[0040] The method may also include: checking whether an instruction is received from a secondary radio access node that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0041] The method may further include: if no indication is received that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE, then it is assumed that the secondary radio access node will not enable the IPUP mode to be used by the communication network for the UE.

[0042] The method may further include: if the indication of the IPUP mode used by the UE is sent by the communication network to the secondary radio access node during the DRB offloading process, sending an RRC reconfiguration request to the UE including the indication of the IPUP mode used by the communication network.

[0043] The RRC reconfiguration request may include the selected integrity algorithm identifier that will be used for UP integrity protection.

[0044] According to another aspect of this disclosure, a method is provided for operating a radio access node in a communication network, the radio access node including a secondary radio access node. The method includes receiving from a primary radio access node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is received from the primary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring key updates, or offloading a data radio bearer (DRB).

[0045] If the IPUP mode indicated by the primary radio access node involves integrity protection for user plane data, the indication of the IPUP mode used by the communication network for the UE may include: an identifier of the integrity algorithm to be used for UP integrity protection.

[0046] The method may further include: if the secondary radio access node supports the indicated IPUP mode, sending an instruction to the primary radio access node that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0047] The method may further include: if the target radio access node does not support the received indicated IPUP mode, then performing at least one of the following: rejecting the requested procedure from the primary radio access node, or accepting the requested procedure from the primary radio access node and omitting sending an instruction to the primary radio access node that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0048] The method may further include: if the indication of the IPUP mode used by the UE by the communication network is received from the primary radio access node during the process of adding a secondary radio access node or modifying a secondary radio access node that requires a key update, and if the IPUP mode indicated by the primary radio access node involves integrity protection for user plane data, then deriving and using a key for integrity protection of the user plane data exchanged with the UE.

[0049] According to another aspect of this disclosure, a method for operating a core node in a communication network is provided. The method includes: transmitting to a radio access node of the communication network an indication by the communication network of a user plane integrity protection IPUP mode to be used by a user equipment (UE) requesting registration with the communication network. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0050] The method may further include: checking whether an instruction is received from a radio access node of the communication network as follows: the radio access node of the communication network will enable the IPUP mode indicated to the radio access node of the communication network.

[0051] The method may further include: if no indication is received that the radio access node will enable the IPUP mode indicated to the radio access node, then it is assumed that the radio access node will not enable the IPUP mode to be used by the communication network for the UE.

[0052] The core network node can be a new core network node for the UE, and the method can also include: sending a request for information related to the UE to the UE's old core network, and receiving from the old core network node an indication of the IPUP mode to be used by the communication network for the UE.

[0053] The method may further include: during the location update process, receiving from the subscription management node corresponding to the UE an indication of the IPUP mode to be used by the communication network for the UE.

[0054] The method may also include: determining the IPUP mode to be used by the communication network for the UE.

[0055] The method may further include: if the IPUP mode determined by the core network node does not match the preference conveyed by the UE for the IPUP mode that the communication network will use for the UE, then perform one of the following: reject the request from the UE to register with the communication network, or accept the request from the UE to register with the communication network and notify the UE of the IPUP determined by the core network node.

[0056] The determined IPUP mode applies to at least one of the following: all data exchanged between the UE and the communication network, or data exchanged between the UE and a specific slice or multiple slices of the communication network.

[0057] The method may also include: instructing the UE to use the determined IPUP mode determined by the communication network.

[0058] According to another aspect of this disclosure, a method is provided for operating a core node in a communication network, the core network node including a legacy core network node for a user equipment (UE) requesting registration with the communication network. The method includes: receiving an information request related to the UE from a new core network for the UE, and sending an indication to the new core network node of an IPUP mode for user plane integrity protection to be used by the communication network for the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0059] The indicated IPUP mode can be applied to at least one of the following: all data exchanged between the UE and the communication network, or data exchanged between the UE and a specific slice or multiple slices of the communication network.

[0060] According to another aspect of this disclosure, a method for operating a core node in a communication network is provided. The method includes: receiving from a target radio access node an indication from the communication network of a user equipment (UE) for use with a user plane integrity protection IPUP mode to which it will be handed over to the target radio access node; verifying whether the IPUP mode indicated by the target radio access node is the same as an IPUP mode for the UE stored by a core network node; and, if there is a mismatch between the indicated IPUP mode and the stored IPUP mode, performing at least one of the following: recording the mismatch as an event or triggering an alarm. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0061] According to another aspect of this disclosure, a method for operating a core node in a communication network is provided. The method includes: sending to a target radio access node an indication from the communication network of a user plane integrity protection IPUP mode to be used by a UE to which the UE will be switched. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0062] The method may also include: checking whether an indication is received from the target radio access node that the target radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0063] According to another aspect of this disclosure, a computer program including instructions is provided that, when executed on at least one processor, causes the at least one processor to perform the method described in any of the foregoing aspects of this disclosure.

[0064] According to another aspect of this disclosure, a carrier comprising a computer program according to the foregoing aspects of this disclosure is provided, wherein the carrier comprises one of an electrical signal, an optical signal, a radio signal, or a computer-readable storage medium.

[0065] According to another aspect of this disclosure, a computer program product is provided, the product comprising a non-transitory computer-readable medium storing a computer program according to the foregoing aspects of this disclosure.

[0066] According to another aspect of this disclosure, an apparatus for operating a user equipment (UE) configured to connect to a communication network is provided. The apparatus includes a processor and a memory containing instructions executable by the processor, enabling the apparatus to operable, upon requesting registration with the communication network, indicate to the communication network an IPUP mode for user plane integrity protection supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data without using confidentiality protection for the user plane data.

[0067] According to another aspect of this disclosure, an apparatus for operating a radio access node in a communication network is provided. The apparatus includes a processor and a memory containing instructions executable by the processor, enabling the apparatus to operatively receive from a user equipment (UE) requesting registration with the communication network an instruction for a user plane integrity protection IPUP mode supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The instruction is received from the UE via the communication network.

[0068] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a source radio access node. The apparatus includes a processor and a memory containing instructions executable by the processor, enabling the apparatus to operable, during a handover of a user equipment (UE) from the source radio access node to a target radio access node, transmit an instruction from the communication network for a user plane integrity protection IPUP mode to be used by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0069] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a target radio access node. The apparatus includes a processor and a memory containing instructions executable by the processor, enabling the apparatus to operable, during a handover of a user equipment (UE) from a source radio access node to a target radio access node, receive an instruction from the communication network regarding an IPUP mode for user plane integrity protection to be used by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data.

[0070] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a primary radio access node. The apparatus includes a processor and a memory containing instructions executable by the processor, causing the apparatus to operatively send to a secondary radio access node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is sent to the secondary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB).

[0071] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a secondary radio access node. The apparatus includes a processor and a memory containing instructions executable by the processor, enabling the apparatus to operatively receive from a primary radio access node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is received from the primary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB).

[0072] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided. The apparatus includes a processor and a memory containing instructions executable by the processor, which cause the apparatus to operatively transmit to a radio access node of the communication network an indication of an IPUP mode for user plane integrity protection to be used by a user equipment (UE) requesting registration with the communication network. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data without using confidentiality protection for the user plane data.

[0073] According to another aspect of this disclosure, an apparatus is provided for operating a core node in a communication network, the core network node including a legacy core network node for a user equipment (UE) requesting registration with the communication network. The apparatus includes a processor and a memory containing instructions executable by the processor to enable the apparatus to operatively receive UE-related information requests from a new core network for the UE and to send to the new core network node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data without using confidentiality protection for the user plane data.

[0074] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided. The apparatus includes a processor and a memory containing instructions executable by the processor to enable the apparatus to operatively receive from a target radio access node an indication from the communication network of a user equipment (UE) for use by the UE to which it will be handed over to the target radio access node, verify whether the IPUP mode indicated by the target radio access node is identical to an IPUP mode for the UE stored by a core network node; and, if there is a mismatch between the indicated IPUP mode and the stored IPUP mode, perform at least one of the following: record the mismatch as an event or trigger an alarm. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0075] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided. The apparatus includes a processor and a memory containing instructions executable by the processor, which cause the apparatus to operatively send to a target radio access node an indication from the communication network of a user equipment (UE) to which it will be handed over an IPUP mode for user plane integrity protection. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data without using confidentiality protection for the user plane data.

[0076] According to another aspect of this disclosure, an apparatus is provided for operating a user equipment (UE) configured to connect to a communication network. The apparatus is configured to, upon requesting registration with the communication network, indicate to the communication network an IPUP mode for user plane integrity protection supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data but not using confidentiality protection for the user plane data.

[0077] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node in a communication network, the apparatus being configured to receive from a user equipment (UE) requesting registration with the communication network an indication of an IPUP mode for user plane integrity protection supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data, the indication being received from the UE via the communication network.

[0078] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a source radio access node, the apparatus being configured to: during a handover of a user equipment (UE) from the source radio access node to a target radio access node, transmit an indication by the communication network of a user plane integrity protection IPUP mode to be used by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0079] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a target radio access node, the apparatus being configured to: during a handover of a user equipment (UE) from a source radio access node to the target radio access node, receive an indication from the communication network of an IPUP mode for user plane integrity protection to be used by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data.

[0080] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a primary radio access node, the apparatus being configured to send an indication to a secondary radio access node of a user plane integrity protection IPUP mode to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is sent to the secondary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB).

[0081] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a secondary radio access node, the apparatus being configured to receive from a primary radio access node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is received from the primary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB).

[0082] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided, the apparatus being configured to send to a radio access node of the communication network an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a user equipment (UE) requesting registration with the communication network. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0083] According to another aspect of this disclosure, an apparatus is provided for operating a core node in a communication network, the core network node including an old core network node for a user equipment (UE) requesting registration with the communication network, the apparatus being configured to: receive a request for information relating to the UE from a new core network for the UE, and send to the new core network node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for the UE, the IPUP mode including one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0084] According to another aspect of this disclosure, an apparatus is provided for operating a core node in a communication network. The apparatus is configured to receive from a target radio access node an indication from the communication network of a user equipment (UE) for use with user plane integrity protection IPUP mode to be switched to the target radio access node; verify whether the IPUP mode indicated by the target radio access node is the same as an IPUP mode for the UE stored by the core network node; and, if there is a mismatch between the indicated IPUP mode and the stored IPUP mode, perform at least one of the following: record the mismatch as an event or trigger an alarm. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0085] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided, the apparatus being configured to: send to a target radio access node an indication from the communication network of a user equipment (UE) for use by the UE to which it will be switched, specifying an IPUP mode for user plane integrity protection. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data without using confidentiality protection for the user plane data.

[0086] According to another aspect of this disclosure, an apparatus is provided for operating a user equipment (UE) configured to connect to a communication network. The apparatus includes a transmitting module for instructing the communication network, upon requesting registration with the communication network, a user plane integrity protection IPUP mode supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data.

[0087] According to another aspect of this disclosure, an apparatus for operating a radio access node in a communication network is provided. The apparatus includes a receiving module for receiving from a user equipment (UE) requesting registration with the communication network an indication of an IPUP mode for user plane integrity protection supported by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is received from the UE via the communication network.

[0088] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a source radio access node. The apparatus includes a transmitting module for transmitting, during a handover of a user equipment (UE) from the source radio access node to a target radio access node, an indication of an IPUP mode for user plane integrity protection to be used by the communication network for the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data.

[0089] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a target radio access node. The apparatus includes a receiving module for receiving, during a handover of a user equipment (UE) from a source radio access node to the target radio access node, an indication by the communication network of an IPUP mode for user plane integrity protection to be used by the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for the user plane data.

[0090] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a primary radio access node. The apparatus includes a transmitting module for transmitting to a secondary radio access node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is transmitted to the secondary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB).

[0091] According to another aspect of this disclosure, an apparatus is provided for operating a radio access node of a communication network, the radio access node including a secondary radio access node. The apparatus includes a receiving module for receiving from a primary radio access node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The indication is received from the primary radio access node during at least one of the following processes: adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB).

[0092] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided. The apparatus includes a transmitting module for transmitting to a radio access node of the communication network an indication of an IPUP mode for user plane integrity protection to be used by the communication network for a user equipment (UE) requesting registration with the communication network. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0093] According to another aspect of this disclosure, an apparatus is provided for operating a core node in a communication network, the core network node including an old core network node for a user equipment (UE) requesting registration with the communication network. The apparatus includes: a receiving module for receiving a request for information relating to the UE from a new core network for the UE; and a sending module for sending to the new core network node an indication of an IPUP mode for user plane integrity protection to be used by the communication network for the UE. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0094] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided. The apparatus includes: a receiving module for receiving from a target radio access node an indication from the communication network of a user equipment (UE) for use with user plane integrity protection IPUP mode to be switched to the target radio access node; and a processing module for verifying whether the IPUP mode indicated by the target radio access node is the same as an IPUP mode for the UE stored by the core network node, and if there is a mismatch between the indicated IPUP mode and the stored IPUP mode, performing at least one of the following: recording the mismatch as an event or triggering an alarm. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0095] According to another aspect of this disclosure, an apparatus for operating a core node in a communication network is provided. The apparatus includes a transmitting module for transmitting to a target radio access node an indication from the communication network of a user equipment (UE) for use by the user plane integrity protection IPUP mode to which it will be switched. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. Attached Figure Description

[0096] To better understand this disclosure, and to more clearly illustrate how this disclosure can be implemented, reference will now be made to the accompanying drawings by way of example, wherein:

[0097] Figure 1 It is a representation of a possible RAN architecture for next-generation networks;

[0098] Figures 2a to 2c A flowchart is shown of the processing steps in a method for operating a user equipment (UE);

[0099] Figure 3 This is a flowchart illustrating the processing steps in a method for operating a radio access node in a communication network;

[0100] Figure 4 This is a flowchart illustrating processing steps in another example of a method for operating a radio access node;

[0101] Figure 5 This is a flowchart illustrating processing steps in another example of a method for operating a radio access node;

[0102] Figure 6 This is a flowchart illustrating processing steps in another example of a method for operating a radio access node;

[0103] Figure 7 This is a flowchart illustrating processing steps in another example of a method for operating a radio access node;

[0104] Figures 8a to 8b This is a flowchart illustrating the processing steps in a method for operating a core node in a communication network;

[0105] Figure 9 This is a flowchart illustrating the processing steps in another example of a method for manipulating core nodes;

[0106] Figure 10 This is a flowchart illustrating the processing steps in another example of a method for manipulating core nodes;

[0107] Figure 11 This is a flowchart illustrating the processing steps in another example of a method for manipulating core nodes;

[0108] Figure 12 This is a block diagram showing the functional units in a device for operating a UE;

[0109] Figure 13 This is a block diagram showing the functional units in an apparatus for operating a radio access node;

[0110] Figure 14 A block diagram of the functional units in a device for operating the core node is shown;

[0111] Figure 15 This is a block diagram showing functional units in another example of a device for operating a UE;

[0112] Figure 16 This is a block diagram showing functional units in another example of a device for operating a radio access node;

[0113] Figure 17 This is a block diagram showing functional units in another example of a device for operating a radio access node;

[0114] Figure 18 This is a block diagram showing a functional unit of another example of a device for operating the core node;

[0115] Figure 19 This is a block diagram showing a functional unit of another example of a device for operating the core node;

[0116] Figure 20This is a block diagram showing a functional unit of another example of a device for operating the core node;

[0117] Figure 21 This is a signaling diagram illustrating the registration process for a UE;

[0118] Figure 22 This is a signaling diagram showing the details of the registration process for the UE;

[0119] Figure 23 This is a signaling diagram illustrating another detail of the registration process for the UE; and

[0120] Figure 24 This shows the signaling diagram for the activation of the secondary eNB encryption / decryption. Detailed Implementation

[0121] The aspects and examples of this disclosure implement integrity protection for user plane data exchanged between the UE and the communication network. For example, the communication network may be a 4G LTE network or a 5G next-generation network; however, it should be understood that the aspects and examples of this disclosure can also be applied to other networks. The operational methods of the UE, radio access node, and core network node according to the examples of this disclosure can jointly implement the negotiation and application of user plane integrity protection during initial UE registration, handover, dual connectivity, etc.

[0122] According to examples in this disclosure, a UE can indicate to the network that it supports UP integrity. The UE can indicate the maximum data rate for integrity protection of UP data as a capability. For example, if the UE indicates 64 kbps as its maximum data rate, the network can assume that UP integrity protection is only enabled for data rates equal to or lower than 64 kbps. Higher data rates will not use UP integrity. This capability indication can be used by the UE to indicate to the network that it supports UP integrity. The UE can indicate its UE preference regarding whether UP integrity protection will be used. Subscriber preferences for using UP integrity protection can be stored in Subscriber Data Management (SDM) / Home Subscriber Service (HSS) and in the UE. The home network can then indicate to the serving network whether UP integrity "should" or "disabled" be enabled.

[0123] Based on the instructions received from the home network and the policies configured for the visited network (Access Management Function (AMF) / Mobility Management Entity (MME)), the visited network can make a policy decision regarding whether the UE requires UP integrity. Based on the policy decision, the core network can indicate to the UE at the NAS layer whether to use UP integrity.

[0124] The core network can notify the base station or RAN (gNB or eNB) whether to use UP data integrity protection. This indication or reference can be sent on the NG2 or S1 interface between the core network and the base station (RAN).

[0125] In other examples, the RAN can decide whether to use UP integrity protection without being informed by the core network. Other options may include the gNB / eNB deciding whether to use UP integrity protection based on UE preferences received from the core network and other possible information. The gNB or eNB may have a local policy (based on the UE's 5GS security capabilities) for whether to enable UP integrity for UEs that support it.

[0126] If the UE does not receive the expected UP integrity protection, it can take a response action. This action could be connecting to another gNB / eNB, or the UE could avoid using a certain application.

[0127] UE users can dynamically configure and change their preferences regarding the use of UP integrity via the UE GUI (user interface). UE preferences can be configured for all UP data, or based on network slice type (e.g., Network Slice Selection Assistance Information, NSSAI) or network slice identifier (e.g., Data Network Name, DNN). Once the registration process with the communication network is complete, the UE can indicate to the user whether UP integrity is enabled or disabled on the network. This indication can be for all data, based on slice type, or slice identifier.

[0128] The UE may be able to detect networks with sub-par security and apply user-configured policies on how to react (e.g., only connecting to networks providing integrity protection for UP). This is advantageous for the security of IoT devices used by subscriber-trusted operators, but requires stronger security than current network providers. In cases where the preferred PLMN does not use UP integrity protection, the user can configure which other PLMNs to select.

[0129] Another option is to set up a new list of PLMNs that support UP integrity protection on the USIM or in the ME. This list can be provided and configured to the UE by the home PLMN operator via over-the-air download. The home PLMN knows which operators it has roaming agreements with and which operators support UP integrity protection.

[0130] During X2 or Xn handover between two base stations, the source base station can notify the target base station whether to enable integrity protection for UP data. This indication or reference can be sent from the source node to the target node on the Xn or X2 interface.

[0131] Users can configure in the UE GUI whether (for example, during handover) to automatically accept UP services protected by non-integrity without asking the user's policy.

[0132] It can also notify users that the new gNB or eNB does not support integrity protection after switching to a new gNB or eNB, and ask users whether they want to continue the connection to the network.

[0133] The UE can be configured to attempt to reconnect to different gNBs or eNBs within the same PLMN if integrity protection is not enabled in the gNB or eNB, in the hope that other gNBs or eNBs will be updated using the UP integrity algorithm and support UP integrity protection.

[0134] In a dual-connectivity setup between two base stations, the primary base station can notify the secondary base station whether to enable integrity protection for UP data. This instruction or reference can be sent from the primary base station to the secondary base station on either the Xn or X2 interface.

[0135] The functionalities discussed above and the additional features can be implemented via methods executed on each entity involved in the relevant process. (See reference) Figures 2a to 11 Examples of these methods are discussed below. Examples are described with reference to 4G and 5G networks, but it should be understood that this is for illustrative purposes only.

[0136] Figures 2a to 2c An example method 200 for operating a user equipment (UE) according to this disclosure is illustrated. The UE is configured to connect to a communication network, which may include, for example, a fourth-generation (4G) or fifth-generation (5G) communication network. The method can be performed by means for operating the UE, which may be incorporated into the UE itself. Reference Figure 2a In the first step 202, the method includes: when requesting registration with the communication network, indicating to the communication network a User Plane Integrity Protection (IPUP) mode supported by the UE. The IPUP mode includes one of the following: "Use integrity protection for user plane data exchanged with the UE" 202a, "Do not use integrity protection for user plane data exchanged with the UE" 202b, or "Use integrity protection for user plane data and do not use confidentiality protection for user plane data" 202c.

[0137] According to examples in this disclosure, fourth-generation (4G) and fifth-generation (5G) communication networks refer to different generations of networks according to 3GPP specifications. According to examples in this disclosure, "requesting registration" may include sending an attach request or a tracking area update request in a 4G network. The message name used for requesting registration in a 5G network has not yet been defined.

[0138] According to the examples in this disclosure, when the IPUP mode supported by the UE is "No integrity protection for user plane data", the indication may be a description of the lack of support for IPUP modes of "Integrity protection for user plane data" or "Integrity protection for user plane data and no confidentiality protection for user plane data".

[0139] According to examples in this disclosure, the IPUP mode "uses integrity protection for user plane data but not confidentiality protection for user plane data" allows the UE to specify that if integrity protection is enabled for UP data, confidentiality protection can be disabled for UP data. Some very small UEs (e.g., those associated with devices in IoT deployments) may have very limited power access, and to extend battery life, it may be useful for the UE to be able to disable encryption related to confidentiality protection if it knows that encryption related to integrity protection will be applied at a higher protocol layer.

[0140] According to examples of this disclosure, the step of instructing a communication network to use an IPUP mode—either integrity protection for user plane data exchanged with the UE, or integrity protection for user plane data but no confidentiality protection—may include instructing the communication network to specify the maximum data rate at which integrity protection can be applied to user plane data. In these examples, the UE indicates its support for UP integrity by indicating the maximum data rate at which UP integrity should be applied. It is assumed that the network enables UP integrity protection for data rates up to the indicated maximum value, but will not use UP integrity protection for higher data rates. For example, this could allow situations where integrity protection for UP data is desired for certain applications (e.g., IoT applications) but not for others (e.g., including mobile broadband).

[0141] Refer again Figure 2a The method may then include, in step 204, instructing the communication network of a UE preference regarding the IPUP mode to be used by the UE by the communication network. The indicated UE preference may apply to at least one of the following: all data 204a exchanged with the communication network, or data exchanged with a specific slice or multiple slices of the communication network. One or more network slices may be identified by slice type and / or by slice identifier. "Network slice" refers to the concept defined in literature relating to next-generation networks.

[0142] The method 200 may then include, in step 206, receiving from the communication network an indication of the IPUP mode to be used by the communication network for the UE. This indication may apply to at least one of the following: all data exchanged with the communication network 206a, or data exchanged with a specific slice or multiple slices of the communication network 206b. This indication may be received in an AS security mode command (e.g., by listing the supported algorithms used for UP data), or as a general indication that UP integrity is supported (assuming the same algorithms used for control plane integrity protection are used for user plane integrity protection). Alternatively, the indication may be received in an RRC connection reconfiguration message.

[0143] In step 208, the method may further include: notifying the user of the UE of the IPUP mode that the communication network will use for the UE. This notification step may be performed during registration with the communication network or after registration with the communication network is completed, and may enable the user to take appropriate action if the IPUP mode to be used is unsuitable for the user's desired communication with the network.

[0144] In step 210, method 200 may include checking whether the IPUP mode indicated by the communication network matches the UE preference regarding which IPUP mode the communication network should use for the UE. If the indicated mode does not match the UE preference regarding which IPUP mode the communication network should use for the UE, then method 200 may include performing at least one of the following: refusing connection to the network in step 212, disconnecting from the network in step 214, or notifying the UE user in step 216 that the IPUP mode indicated by the communication network does not match the UE preference regarding which IPUP mode the communication network should use for the UE.

[0145] If the UE performs at least one of step 212 (denying connection to the network) or step 216 (disconnecting from the network), the method may further include performing at least one of the following: requesting registration with the communication network via a different radio access node of the communication network in step 222, or requesting registration with a different communication network in step 224. Prior to performing step 222 or step 224, the method may include: querying a list in step 218 that includes at least one of radio access nodes or communication networks supporting integrity protection for user plane data, and selecting, in step 220, a radio access node or at least one of different communication networks from the list for requesting registration. This list may be configured in the UE's memory or may be received via a radio link. For example, the list may be received from the UE's home communication network (e.g., home PLMN).

[0146] Following steps 222 and 224, or if the check in step 210 shows that the indicated IPUP mode matches the UE preference, method 200 may further include: at a later time, in step 226, during the handover of the UE from the source radio access node to the target radio access node, receiving a message from the target radio access node of the communication network, the message including: an indication that the target radio access node will use an IPUP mode different from the IPUP mode used by the source radio access node for the UE. This indication may be received in an AS security mode command. Alternatively, this indication may be received in an RRC connection reconfiguration message.

[0147] In step 228, the method 200 may further include: checking whether an indication from the target radio access node indicates that the IPUP mode to be used by the communication network via the target radio access node does not match the UE preference regarding which IPUP mode the communication network should use for the UE. If the check indicates that the IPUP mode to be used does not match the UE preference, the method 200 may further include performing at least one of the following: disconnecting from the network in step 230, accepting a handover in step 232 and notifying the UE user of the IPUP mode to be used by the communication network via the target radio access node, or seeking a handover to a different radio access node of the communication network in step 234.

[0148] Now for reference Figure 2c The method 200 may further include: in step 236, receiving from a radio access node of the communication network an indication of the IPUP mode to be used by the communication network for the UE. The radio access node may be an eNB or a gNB. The radio access node may be the radio access node through which the UE transmits a registration request to the communication network, or it may be a different radio access node. The indication may be received during a process for adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer (DRB). As shown in step 238, the indication may be received using an RRC reconfiguration request. If, as determined by a check in step 240, the indicated IPUP mode involves the use of integrity protection for user plane data, the method may further include: in step 242, deriving and using a key for integrity protection of user plane data.

[0149] It should be understood that, for reference Figures 2a to 2c Some of the steps outlined above can be performed in a different order than that shown in the diagram.

[0150] According to another aspect of this disclosure, an alternative method for operating a user equipment (UE) is provided. The UE is configured to connect to a communication network, which may include, for example, a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the UE, which may be incorporated into the UE itself. The method includes: during a handover of the UE from a source radio access node to a target radio access node, receiving a message from the target radio access node of the communication network, the message including: an indication from the target radio access node that the target radio access node will use an IPUP mode different from the IPUP mode used by the source radio access node for the UE. The method may further include: if the indication from the target radio access node is that the IPUP mode to be used by the communication network via the target radio access node does not match the UE preference regarding which IPUP mode the communication network should use for the UE, performing at least one of the following: disconnecting from the network, accepting the handover and notifying the UE's user of the IPUP mode to be used by the communication network via the target radio access node, or seeking a handover to a different radio access node of the communication network.

[0151] Figure 3 An example method 300 for operating a radio access node in a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation (4G) or fifth-generation (5G) communication network. The method can be performed by means for operating the radio access node, which may be incorporated into the radio access node itself and / or may have appropriate functions for operating the radio access node, such as virtual network functions. The radio access node may be an eNodeB or a gNodeB.

[0152] refer to Figure 3 In the first step 302, the method includes receiving from a UE requesting to register with the communication network an indication of an IPUP mode supported by the UE. The IPUP mode includes one of the following: "Integrity protection is used for user plane data exchanged with the UE" 302a, "Integrity protection is not used for user plane data exchanged with the UE" 302b, or "Integrity protection is used for user plane data and confidentiality protection is not used for user plane data". This indication is received from the UE via the communication network. For example, the message can be sent to the core network of the communication network in a manner transparent to the radio access node, and can subsequently be forwarded from the core network to the radio access node.

[0153] According to examples of this disclosure, step 302, where a UE requesting registration with a communication network receives an indication of either an IPUP mode that uses integrity protection for user plane data exchanged with the UE or uses integrity protection for user plane data but not confidentiality protection, may include receiving from the UE the maximum data rate at which integrity protection can be applied to user plane data. In these examples, the UE indicates its support for UP integrity by indicating the maximum data rate at which UP integrity should be used. It is assumed that the network enables UP integrity protection for data rates up to the indicated maximum value, but will not use UP integrity protection for higher data rates. For example, this may allow situations where integrity protection for UP data is desired for certain applications (e.g., IoT applications) but not for others (e.g., including mobile broadband).

[0154] The method 300 may further include: in step 304, receiving from the UE a UE preference regarding the IPUP mode to be used by the communication network for the UE. The indicated UE preference may apply to at least one of the following: all data exchanged with the communication network as shown in step 304a, or data exchanged with a specific slice or multiple slices of the communication network as shown in step 304b. One or more network slices may be identified by slice type and / or by slice identifier.

[0155] The method 300 may further include: in step 306, receiving from a core node of the communication network an indication of the IPUP mode to be used by the communication network for the UE. This indication may include security capabilities and supported integrity algorithms for integrity protection of UP data. For example, the core node may be a Mobility Management Entity (MME) in an LTE network or an Access Management Function (AMF) in a next-generation network.

[0156] The method 300 may further include: checking in step 308 whether the radio access node supports the indicated IPUP mode. If the radio access node supports the indicated IPUP mode, the method may further include: in step 310, sending an indication to the core node that the radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0157] If the indicated IPUP mode received from the core node of the communication network is not supported by the radio access node, the method may further include performing at least one of the following: rejecting the registration request received from the UE in step 312, or omitting in step 314 sending an instruction to the core node that the radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0158] In step 316, the method 300 may further include sending an indication to the UE of the IPUP mode to be used by the communication network for the UE. If the IPUP mode to be used by the communication network for the UE involves integrity protection for user plane data, the indication of the IPUP mode to be used by the communication network for the UE may indicate the integrity algorithm selected by the radio access node for integrity protection of the UP data, as shown in step 316a. This identifier may be included only if the algorithm differs from the algorithm to be used for protection of control plane data.

[0159] The indication sent to the UE in step 316 can be applied to at least one of the following: all data exchanged with the communication network, or data exchanged with a specific slice or multiple slices of the communication network. In some examples, the indication can be sent in an AS security mode command. Alternatively, the indication can be sent in an RRC connection reconfiguration message.

[0160] The IPUP mode indicated by the radio access node to the UE can be the IPUP mode received from the core node of the communication network, as shown in step 316b, or it can be selected by the radio access node according to a policy reserved on the radio access node. The policy can take into account both the preferences received from the UE and the IPUP mode received from the core network node.

[0161] It should be understood that, for reference Figure 3 Some of the steps outlined above can be performed in a different order than that shown in the diagram.

[0162] Figure 4 Another example method 400 for operating a radio access node in a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the radio access node, which may be incorporated into the radio access node itself and / or may have appropriate functions for operating the radio access node, such as virtual network functions. The radio access node may be an eNodeB or a gNodeB.

[0163] refer to Figure 4The radio access node includes a source radio access node, and the method includes, in a first step 402, during a handover of the UE from the source radio access node to the target radio access node, sending an indication of the IPUP mode to be used by the communication network for the UE. The IPUP mode includes one of the following: "using integrity protection for user plane data exchanged with the UE" 402a, "not using integrity protection for user plane data exchanged with the UE" 402b, or "using integrity protection for user plane data and not using confidentiality protection for user plane data" 402c. In some examples, the indication of the IPUP mode may be sent to the target radio access node using a handover request message. According to examples of this disclosure, the step of sending the indication of the IPUP mode may include: sending the maximum data rate of user plane data to which integrity protection can be applied.

[0164] The method may further include: in step 404, checking whether an indication is received from the target radio access node that the target radio access node will enable the IPUP mode to be used by the communication network for the UE. In step 406, if it is determined that no indication is received that the target radio access node will enable the IPUP mode to be used by the communication network for the UE, the method may further include: assuming that the target radio access node will not enable the IPUP mode to be used by the communication network for the UE. In some examples, the failure to receive the enabling indication from the target node may be due to: the legacy target node, or the target node for any other reason not understanding the indication from the source target node. In this case, the method may further include: continuing the handover process or terminating the handover process in step 410. The decision to continue or terminate the handover process may be based on a retention policy on the source radio access node, which may take into account the received UE preferences and / or subscription information for the UE received from core network nodes such as the MME or AMF.

[0165] Figure 5 Another example method 500 for operating a radio access node in a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the radio access node, which may be incorporated into the radio access node itself and / or may have appropriate functions for operating the radio access node, such as virtual network functions. The radio access node may be an eNodeB or a gNodeB.

[0166] refer to Figure 5The radio access node includes a target radio access node, and the method includes: in a first step 502, during a handover of the UE from the source radio access node to the target radio access node, receiving an indication from the communication network of an IPUP mode to be used by the UE. The IPUP mode includes one of the following: "using integrity protection for user plane data exchanged with the UE" 502a, "not using integrity protection for user plane data exchanged with the UE" 502b, or "using integrity protection for user plane data and not using confidentiality protection for user plane data" 502c. According to an example of this disclosure, the step of receiving the IPUP mode may include: receiving the maximum data rate of user plane data to which integrity protection can be applied.

[0167] The indication of the IPUP mode used by the UE can be received from at least one of the source radio access node or the core node of the communication network. For example, the core node can be the MME in a 4G network or the AMF in a 5G network.

[0168] In step 504, if an indication is received from the source radio access node of the IPUP mode to be used by the communication network for the UE, the method may further include: sending the indication of the IPUP mode received from the source radio access node to the core node of the communication network. For example, the core node may be an MME or an AMF.

[0169] In step 506, the method may include: checking whether the target radio access node supports the indicated IPUP mode, and if the target radio access node does not support the received indicated IPUP mode, the method may include performing one of the following: rejecting the UE handover in step 508, or accepting the UE handover and omitting the indication that the target radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0170] In step 512, the method may include: determining whether to use the indicated IPUP mode, and, if it is determined not to use the indicated IPUP mode 514, sending an indication to the UE in step 518 that the target radio access node will use an IPUP mode different from the IPUP mode used by the source radio access node for the UE. This indication may be sent in an AS security mode command. Alternatively, this indication may be sent in an RRC connection reconfiguration message.

[0171] If the target radio access node supports the indicated IPUP mode, the method may further include: in step 516, sending an indication to at least one of the source radio access node or the core node of the communication network that the target radio access node will enable the IPUP mode to be used by the communication network for the UE. Figure 5As shown, this transmission may depend on the target radio access node determining in step 512 to use the indicated IPUP mode. The indication of enabling the indicated IPUP mode may be sent to the entity from which it receives the indication of the IPUP mode, i.e., sent to the source radio access node or sent to the core radio access node.

[0172] It should be understood that, for reference Figure 5 Some of the steps outlined above can be performed in a different order than that shown in the diagram.

[0173] Figure 6 Another example method 600 for operating a radio access node in a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the radio access node, which may be incorporated into the radio access node itself and / or may have appropriate functions for operating the radio access node, such as virtual network functions. The radio access node may be an eNodeB or a gNodeB.

[0174] refer to Figure 6 The radio access node includes a primary radio access node, and the method includes: in a first step 602, sending an indication to a secondary radio access node of an IPUP mode to be used by the communication network for the UE. The IPUP mode includes one of the following: "using integrity protection for user plane data exchanged with the UE" 602a, "not using integrity protection for user plane data exchanged with the UE" 602b, or "using integrity protection for user plane data and not using confidentiality protection for user plane data" 602c. This indication is sent to the secondary radio access node during a process involving at least one of the following: secondary radio access node addition 602i, secondary radio access node modification requiring key updates 602ii, or data radio bearer (DRB) offloading 602iii, all within a dual-connectivity context. According to an example of this disclosure, the step of sending the IPUP mode may include: sending the maximum data rate of user plane data to which integrity protection can be applied.

[0175] If the IPUP mode indicated to the secondary radio access node involves integrity protection for user plane data (i.e., mode "Integrity protection for user plane data exchanged with the UE" or mode "Integrity protection for user plane data but no confidentiality protection for user plane data"), the indication of the IPUP mode used by the communication network for the UE may include: a list of supported algorithms for integrity protection of UP data. In some examples, the list of supported algorithms for IPUP may be the same as the list for integrity protection of control plane data and is not indicated separately. In other examples, the list may include: a single identified integrity algorithm.

[0176] In step 604, the method may further include: checking whether an indication is received from the secondary radio access node that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE. If no indication is received that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE (step 606), the method may further include: assuming in step 608 that the secondary radio access node will not enable the IPUP mode to be used by the communication network for the UE. The failure to receive the enabling indication from the secondary node may be due to: a conventional secondary node, or a secondary node that does not understand the indication from the source target node for any other reason. In this case, the method may further include: continuing the process or terminating the process in step 610. The decision to continue or terminate the process may be based on a retention policy on the radio access node, which may take into account received UE preferences and / or subscription information for the UE received from core network nodes such as the MME or AMF.

[0177] If an indication is received from the secondary radio access node that the IPUP mode to be used by the communication network for the UE will be enabled, the method may further include: if the indication of the IPUP mode to be used by the communication network for the UE is sent to the secondary radio access node during the DRB offloading process (step 612), then in step 614, an RRC reconfiguration request is sent to the UE, the request including the indication of the IPUP mode to be used by the communication network for the UE. The RRC reconfiguration request may include an algorithm identifier for the algorithm used for integrity protection selection for the UP. This identifier may be included only if the selected algorithm is different from the algorithm to be used to protect the control plane. If the indication of the IPUP mode in the RRC reconfiguration request indicates that the IPUP mode will be enabled and used, then the UE will calculate a new key for integrity protection of user plane data, which is associated with the DRB to be offloaded.

[0178] It should be understood that, for reference Figure 6Some of the steps outlined above can be performed in a different order than that shown in the diagram.

[0179] Figure 7 Another example method 700 for operating a radio access node in a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the radio access node, which may be incorporated into the radio access node itself and / or may have appropriate functions for operating the radio access node, such as virtual network functions. The radio access node may be an eNodeB or a gNodeB.

[0180] refer to Figure 7 The radio access node includes a secondary radio access node, and the method includes: in a first step 702, receiving from the primary radio access node an indication of an IPUP mode to be used by the communication network for the UE. The IPUP mode includes one of the following: "using integrity protection for user plane data exchanged with the UE" 702a, "not using integrity protection for user plane data exchanged with the UE" 702b, or "using integrity protection for user plane data and not using confidentiality protection for user plane data" 702c. This indication is received from the primary radio access node during a process involving at least one of the following: secondary radio access node addition 702i, secondary radio access node modification requiring key update 702ii, or data radio bearer (DRB) offloading 702iii, all within a dual-connectivity context. According to an example of this disclosure, the step of receiving the IPUP mode may include: receiving the maximum data rate of user plane data to which integrity protection can be applied.

[0181] If the IPUP mode indicated by the primary radio access node involves integrity protection for user plane data (i.e., mode "Integrity protection for user plane data exchanged with the UE" or mode "Integrity protection for user plane data but no confidentiality protection for user plane data"), then the indication of the IPUP mode used by the communication network for the UE may include: an identifier of the integrity algorithm to be used for UP integrity protection. This identifier may be included only if the algorithm differs from the algorithm to be used to protect the control plane. In another example, the secondary radio access node may assume that the user plane also supports integrity protection algorithms for control plane data.

[0182] If the secondary radio access node supports the indicated IPUP mode (step 704), the method may further include: in step 706 sending an instruction to the primary radio access node that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0183] If the secondary radio access node does not support the received indicated IPUP mode (step 704), the method may further include performing at least one of the following: rejecting the requested procedure from the primary radio access node in step 708; or accepting the requested procedure from the primary radio access node in step 710, omitting sending an instruction to the primary radio access node that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0184] The method may further include: if the indication of the IPUP mode used by the UE by the communication network is received from the primary radio access node during the process of adding a secondary radio access node or modifying a secondary radio access node that requires a key update, and if the IPUP mode indicated by the primary radio access node involves the use of integrity protection for user plane data (step 712), then in step 714, a key for integrity protection of user plane data exchanged with the UE is derived and used.

[0185] It should be understood that, for reference Figure 7 Some of the steps outlined above can be performed in a different order than that shown in the diagram.

[0186] Figure 8a and Figure 8b An example method 800 for operating a core node of a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the core node, which may be incorporated into the core node itself and / or may have appropriate functions for operating the core node, such as virtual network functions. The core node may be an MME or an AMF.

[0187] refer to Figure 8a The method may first include, in step 802, receiving a registration request for the UE. The method may further include, in step 804, checking whether the core node is a new core node for the UE. If so, the method may further include, in step 806, sending a request for information related to the UE to the UE's old core network, and in step 808, receiving an indication from the old core network node of the IPUP mode to be used by the communication network for the UE. According to an example of this disclosure, step 808 of receiving the IPUP mode may include: receiving the maximum data rate of user plane data to which integrity protection can be applied.

[0188] In step 810, the method may further include: during the location update process, receiving from the subscription management node corresponding to the UE an indication of the IPUP mode to be used by the communication network for the UE. According to an example of this disclosure, step 810 of receiving the IPUP mode may include: receiving the maximum data rate of user plane data to which integrity protection can be applied.

[0189] The method may further include: in step 812, determining the IPUP mode to be used by the communication network for the UE. This determination may be based on policies reserved by the core network node and may take into account instructions received from the legacy core network node and / or subscriber management node. The determined IPUP mode may be applied to at least one of the following: all data 812a exchanged between the UE and the communication network, or data 812b exchanged between the UE and a specific slice or multiple slices of the communication network. One or more network slices may be identified by slice type or slice identifier.

[0190] The method may further include: in step 814 checking whether the IPUP mode determined by the core network node matches the preference conveyed by the UE for the IPUP mode that the communication network will use for the UE. (See reference) Figure 8b If the IPUP mode determined by the core network node does not match the UE's preference for the IPUP mode that the communication network will use for the UE, the method may further include performing one of the following: rejecting the request from the UE to register with the communication network in step 816; or accepting the request from the UE to register with the communication network and notifying the UE of the IPUP determined by the core network node in step 818.

[0191] The method includes, in step 820, sending to a radio access node of a communication network an indication of the IPUP mode to be used by the communication network for a UE requesting registration with the communication network. The IPUP mode includes one of the following: "Integrity protection applied to user plane data exchanged with the UE" 820a, "No integrity protection applied to user plane data exchanged with the UE" 820b, or "Integrity protection applied to user plane data and no confidentiality protection applied to user plane data". The indication may include security capabilities and supported integrity algorithms for integrity protection of UP data. The indicated IPUP mode may be a mode determined by the core network node in step 812. According to an example of this disclosure, step 820 of sending the IPUP mode may include: sending the maximum data rate of user plane data to which integrity protection can be applied.

[0192] The method may further include: in step 822, checking whether an instruction is received from a radio access node of the communication network as follows: the radio access node of the communication network will enable the IPUP mode indicated to the radio access node of the communication network.

[0193] The method may further include: in step 826 instructing the UE of a determined IPUP mode to be used by the communication network for the UE. The transmission of this instruction may be conditionally based on the reception of an instruction by the radio access node of the communication network to enable the IPUP mode indicated to the radio access node.

[0194] If no indication is received from the radio access node that it will enable the IPUP mode indicated to the radio access node (step 824), the method may further include: assuming that the radio access node will not enable the IPUP mode to be used by the communication network for the UE. The failure to receive the enable indication from the radio access node may be due to: a conventional radio access node, or a radio access node that does not understand the indication from the core node for any other reason. In this case, the method may further include: accepting or rejecting the registration request in step 830. This decision may be based on a retention policy on the core node, and the process may take into account the received UE preferences and / or subscription information for the UE.

[0195] It should be understood that, for reference Figure 8a and Figure 8b Some of the steps outlined above can be performed in a different order than that shown in the diagram.

[0196] Figure 9 Another example method 900 for operating a core node of a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the core node, which may be incorporated into the core node itself and / or may have appropriate functions for operating the core node, such as virtual network functions. The core node may be an MME or an AMF.

[0197] refer to Figure 9The core network node includes an old core network node used by the UE to request registration with the communication network, and the method includes: receiving an information request related to the UE from a new core network for the UE in step 902, and sending an indication to the new core network node of the IPUP mode to be used by the communication network for the UE in step 904. The IPUP mode includes one of the following: "using integrity protection for user plane data exchanged with the UE" 904a, "not using integrity protection for user plane data exchanged with the UE" 904b, or "using integrity protection for user plane data and not using confidentiality protection for user plane data" 904c. The indicated IPUP mode can be applied to at least one of the following: all data exchanged between the UE and the communication network 904i, or data exchanged between the UE and a specific slice or multiple slices of the communication network 904ii. According to an example of this disclosure, step 904 of sending the IPUP mode may include: sending the maximum data rate of user plane data to which integrity protection can be applied.

[0198] Figure 10 Another example method 1000 for operating a core node of a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the core node, which may be incorporated into the core node itself and / or may have appropriate functions for operating the core node, such as virtual network functions. The core node may be an MME or an AMF.

[0199] refer to Figure 10 The method includes, in a first step 1002, receiving from a target radio access node an indication from a communication network of an IPUP mode to be used by a UE to which the UE will be switched. The IPUP mode includes one of the following: "Integrity protection is used for user plane data exchanged with the UE" 1002a, "Integrity protection is not used for user plane data exchanged with the UE" 1002b, or "Integrity protection is used for user plane data and confidentiality protection is not used for user plane data" 1002c. According to an example of this disclosure, step 1002 of receiving the IPUP mode may include: receiving the maximum data rate of user plane data to which integrity protection can be applied.

[0200] The method further includes: in step 1004, verifying whether the IPUP mode indicated by the target radio access node is the same as the IPUP mode for the UE stored by the core network node. If the indicated IPUP mode and the stored IPUP mode do not match (step 1006), the method further includes performing at least one of the following: recording the mismatch as an event in step 1008 or triggering an alarm in step 1010.

[0201] Figure 11 Another example method 1100 for operating a core node of a communication network according to this disclosure is shown. For example, the communication network may include a fourth-generation or fifth-generation communication network. The method can be performed by means for operating the core node, which may be incorporated into the core node itself and / or may have appropriate functions for operating the core node, such as virtual network functions. The core node may be an MME or an AMF.

[0202] refer to Figure 11 The method includes, in a first step 1102, sending to a target radio access node an indication from the communication network of the IPUP mode to be used by a UE to which the UE will be handed over. The IPUP mode includes one of the following: "Integrity protection applied to user plane data exchanged with the UE" 1102a, "No integrity protection applied to user plane data exchanged with the UE" 1102b, or "Integrity protection applied to user plane data and no confidentiality protection applied to user plane data" 1102c. In some examples, the indication may be sent in a handover request message. According to examples of this disclosure, step 1102 of sending the IPUP mode may include: sending the maximum data rate of user plane data to which integrity protection can be applied.

[0203] The method may further include, in step 1104, checking whether an indication has been received from the target radio access node that the target radio access node will enable the IPUP mode to be used by the communication network for the UE. If no indication has been received that the target radio access node will enable the IPUP mode indicated to the radio access node (step 1106), the method may further include assuming that the target radio access node will not enable the IPUP mode to be used by the communication network for the UE. The failure to receive the enabling indication from the target node may be due to: a conventional target node, or a target node that does not understand the indication from the core node for any other reason. In this case, the method may further include, in step 1110, continuing the handover process or terminating the handover process. The decision to continue or terminate the handover process may be based on a retention policy on the core network node, which may take into account received UE preferences and / or subscription information for the UE.

[0204] According to an aspect of this disclosure, a computer program including instructions is provided that, when executed on at least one processor, causes the at least one processor to perform actions according to Figures 2 to 3. Figure 11 The method of any of the examples mentioned above.

[0205] According to an aspect of this disclosure, a carrier comprising a computer program as discussed above is provided, wherein the carrier includes one of an electrical signal, an optical signal, a radio signal, or a computer-readable storage medium.

[0206] According to an aspect of this disclosure, a computer program product is provided, the computer program product including a non-transitory computer-readable medium storing a computer program as discussed above.

[0207] Figure 12 This demonstrates the functionality that can be performed as discussed above and as... Figures 2a to 2c This is a first example of an apparatus 1200 for operating a UE. The apparatus can execute these methods, for example, upon receiving appropriate instructions from a computer program. (See reference...) Figure 12 The device includes a processor 1202, a memory 1204, and an interface 1206. The memory 1204 contains instructions executable by the processor 1202, enabling the device 1200 to be operatively used to perform some or all of the steps of the methods for operating the UE described above and in the claims numbered below.

[0208] Figure 13 This demonstrates the functionality that can be performed as discussed above and as... Figures 3 to 7 The first example shown is an apparatus 1300 for operating a radio access node. This apparatus can execute these methods, for example, upon receiving appropriate instructions from a computer program. (See reference...) Figure 13 The device includes a processor 1302, a memory 1304, and an interface 1306. The memory 1304 contains instructions executable by the processor 1302, enabling the device 1300 to be operatively used to perform some or all of the steps of the method for operating a radio access node described above and in the claims numbered below.

[0209] Figure 14 This demonstrates the functionality that can be performed as discussed above and as... Figures 8a to 11 This is a first example of an apparatus 1400 for operating a core node. This apparatus can execute these methods, for example, upon receiving appropriate instructions from a computer program. (See reference...) Figure 14 The device includes a processor 1402, a memory 1404, and an interface 1406. The memory 1404 contains instructions executable by the processor 1402, enabling the device 1400 to be operatively used to perform some or all of the steps of the methods for operating the core node described above and as set forth in the claims numbered below.

[0210] Figure 15An alternative example apparatus 1500 is shown, which, for example, can implement the method for operating the UE as discussed above and described in the claims numbered below, upon receiving appropriate instructions from a computer program. It should be understood that... Figure 15 The modules shown can be implemented in any suitable combination of hardware and / or software. For example, a module may include one or more processors, and one or more memories containing instructions executable by the one or more processors. Modules can be integrated to any extent.

[0211] refer to Figure 15 The apparatus 1500 includes a transmitting module 1502 for indicating to the communication network an IPUP mode supported by the UE when requesting registration with the communication network, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. The apparatus also includes an interface 1504.

[0212] Figure 16 and Figure 17 Alternative examples of the apparatus 1600 and 1700 are shown. For example, alternative examples 1600 and 1700 can implement, upon receiving appropriate instructions from a computer program, the methods for operating a radio access node as discussed above and described in the claims numbered below. It should be understood that... Figure 16 and Figure 17 The modules shown can be implemented in any suitable combination of hardware and / or software. For example, a module may include one or more processors, and one or more memories containing instructions executable by the one or more processors. Modules can be integrated to any extent.

[0213] refer to Figure 16The apparatus 1600 includes a transmitting module 1602 and an interface 1604. The radio access node may be a source radio access node, and the transmitting module 1602 may be configured to, during a handover of the UE from the source radio access node to the target radio access node, transmit an indication of the IPUP mode to be used by the communication network for the UE, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. In another example, the radio access node may be a primary radio access node, and the transmitting module 1602 may be configured to transmit an indication of the IPUP mode to be used by the communication network for the UE to a secondary radio access node, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. This instruction may be sent to the secondary radio access node during a process that includes at least one of the following: secondary radio access node addition, secondary radio access node modification requiring key update, or data radio bearer (DRB) offloading.

[0214] refer to Figure 17 The apparatus 1700 includes a receiving module 1702 and an interface 1704. The receiving module can be used to receive an indication of an IPUP mode supported by a UE requesting to register with a communication network, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data, and wherein the indication is received from the UE via the communication network.

[0215] In other examples, the radio access node may include a target radio access node, and the receiving module 1702 may be configured to receive an indication from the communication network of the IPUP mode to be used by the UE during a handover process from the source radio access node to the target radio access node, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0216] In other examples, the radio access node may include a secondary radio access node, and the receiving module 1702 may be configured to receive from the primary radio access node an indication of the IPUP mode to be used by the communication network for the UE, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data. This indication may be received from the primary radio access node during a process involving at least one of the following: secondary radio access node addition, secondary radio access node modification requiring key updates, or DRB offloading.

[0217] Figures 18 to 20 Alternative examples of the apparatus 1800, 1900, and 2000 are shown. For example, alternative examples 1800, 1900, and 2000 can implement, upon receiving appropriate instructions from a computer program, the methods for operating the core node as discussed above and described in the claims numbered below. It should be understood that... Figures 18 to 20 The modules shown can be implemented in any suitable combination of hardware and / or software. For example, a module may include one or more processors, and one or more memories containing instructions executable by the one or more processors. Modules can be integrated to any extent.

[0218] refer to Figure 18 The apparatus 1800 includes a transmitting module 1802 and an interface 1804. The transmitting module can be used to transmit to a radio access node of a communication network an indication of the IPUP mode to be used by a UE requesting to register with the communication network, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0219] In other examples, the sending module may be used to send to the target radio access node an indication from the communication network of the IPUP mode to be used by the UE to which it will be switched, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0220] refer to Figure 19The apparatus 1900 includes a receiving module 1902, a transmitting module 1904, and an interface 1906. The core network node includes an old core network node used by the UE to request registration with the communication network. The receiving module 1902 is used to receive UE-related information requests from a new core network for the UE. The transmitting module 1904 is used to send an indication to the new core network node of the IPUP mode to be used by the communication network for the UE, wherein the IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0221] refer to Figure 20 The apparatus 2000 includes a receiving module 2002, a processing module 2004, and an interface 2006. The receiving module 2002 is used to receive from the target radio access node an indication from the communication network of the IPUP mode to be used by the UE to be switched to the target radio access node. The processing module is used to verify whether the IPUP mode indicated by the target radio access node is the same as the IPUP mode for the UE stored by the core network node, and if there is a mismatch between the indicated IPUP mode and the stored IPUP mode, to perform at least one of the following: record the mismatch as an event or trigger an alarm. The IPUP mode includes one of the following: using integrity protection for user plane data exchanged with the UE, not using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data.

[0222] The example applications of the methods according to this disclosure are illustrated in the context of communication network processes including UE registration, handover, dual connectivity management, etc. The example applications illustrate how different examples of the methods described above can collectively achieve the function of enabling integrity protection of user plane data. It should be understood that the examples below are for illustrative purposes only and are not intended to limit the scope of this disclosure in any way. The examples below are presented in the context of LTE and 5G / next-generation networks.

[0223] Negotiation of user plane integrity protection during UE registration process

[0224] The UE negotiates with the communication network whether integrity protection for UP data transmitted between the UE and the base station will be enabled or disabled. The UE indicates its support for UP integrity protection or otherwise. The UE can indicate its capability as the maximum data rate for UP data integrity protection. For example, if the UE indicates 64kbps as its maximum data rate, it can be assumed that the network only enables UP integrity protection for data rates equal to or lower than 64kbps. Higher data rates will not use UP integrity. This capability indication can be used as an indication from the UE to the network that it supports UP integrity. The UE can indicate its preference regarding whether UP integrity protection should be used. This preference can apply to all data exchanged with the network, and can apply to specific slice types (e.g., Network Slice Selection Auxiliary Information, NSSAI) or slice identifiers (e.g., Data Network Name, DNN).

[0225] The examples below apply to both 5G and 4G (EPC / LTE). In 4G (EPC / LTE), the registration process described below will be replaced by an attach process or a tracking area update process. The new improvements described in the steps below apply to EPC because a very similar process is used in 4G (EPC).

[0226] register

[0227] SA2 is developed for 5G and Figure 21 The following registration process shown in the figure is improved by using UP's integrity protection negotiation, and the new improvement in the figure is to The text is shown.

[0228]

[0229] refer to Figure 21 Steps 1 to 23 in the process:

[0230] 1. UE to RAN: Registration Request (Registration Type, Permanent ID or Temporary ID, Security Parameters, NSSAI)

[0231] Registration type indicator: Whether the UE wants to perform "initial registration" (i.e., the UE is in an unregistered state) or "normal registration" (i.e., the UE is in a registered state). If a temporary ID is included, the temporary ID indicates the last serving AMF. Security parameters are used for authentication and integrity protection. NSSAI indicates network slice selection auxiliary information (as defined in TS 23.501, TS23.502, and TR 23.799).

[0232]

[0233] 2. If a permanent ID or temporary ID is included but does not indicate a valid AMF, the RAN selects an AMF based on the RAT and NSSAI (if available).

[0234] The RAN selects the AMF as described in TS 23.501, TS 23.502 and TR 23.799.

[0235] 3. RAN to AMF: Registration request (registration type, permanent ID or temporary ID, security parameters, NSSAI) and location information, cell identifier, RAT type.

[0236] Location information, cell identifier and RAT type related to the cell where the UE is camped.

[0237] 4. [Conditional] New AMF to Old AMF: Information Request (Completion Registration Request)

[0238] If the UE's temporary ID is included in the registration request and the serving AMF has changed since the last registration, the new AMF can send an information request, including the registration completion request IE, to the old AMF to request the UE's permanent ID and MM context.

[0239] 5. [Conditional] From old AMF to new AMF: Information response (permanent ID, MM context)

[0240] The old AMF responds to the new AMF with an information response, which includes the UE's permanent ID and MM context.

[0241]

[0242] 6. [Conditional] AMF to UE: Identification Request()

[0243] If neither the UE provides nor the permanent ID is retrieved from the old AMF, the AMF initiates the identification request process by sending an identification request message to the UE.

[0244] 7. [Conditional] UE to AMF: Identification Response ()

[0245] The UE responds using an identification response message that includes a permanent ID.

[0246] 8. If the registration request is not sent, or the protected integrity or integrity protection is indicated as failed (information response in step 5), then the AMF selects the AMF based on the permanent ID.

[0247] AMF selects AMF as described in Section X of TS 23.ABC[xx].

[0248] 9. If the registration request is not sent, or the protected integrity or integrity protection is indicated as failed in step 5 (information response), the AMF can initiate authentication of the UE and NAS security functions. If security is established, the AMF can obtain the IMEI from the UE.

[0249] Perform authentication and security as described in TS 23.502 and SA3 TR 33.799.

[0250] 10. [Conditional] AMF to UE: Identification Request()

[0251] If neither the ME identifier is provided by the UE nor retrieved from the old AMF, the AMF initiates the identifier request process by sending an identifier request message to the UE to retrieve the ME identifier.

[0252] 11. Optionally, the AMF initiates an ME identification check.

[0253] The ME identification check is performed as described in TS 23.502.

[0254] 12. If step 13 is performed, the AMF selects the SDM based on the permanent ID.

[0255] AMF selects SDM as described in TS 23.502.

[0256] 13. If the AMF has changed since the last registration, or if a valid subscription context for the UE does not exist in the AMF, or if the UE provides a permanent ID that does not reference a valid context in the AMF, the AMF initiates a location update procedure. This will include the SDM initiating location cancellation against the old AMF (if it exists). The old AMF deletes the MM context and notifies all potentially associated SMFs.

[0257] The location update process is performed as described in TS 23.502.

[0258]

[0259] 14. Optionally, AMF may select PCF based on permanent ID.

[0260] AMF selects PCF as described in TS 23.502.

[0261] 15. [Optional] AMF to PCF: UE Context Establishment Request

[0262] AMF requests PCF to apply operator policies to UEs.

[0263] 16. PCF to AMF: UE Context Establishment Confirmation

[0264] PCF confirms the UE context establishment request message.

[0265]

[0266] AMF sends a registration acceptance message to the UE, indicating that "initial registration" has been accepted.

[0267] If the AMF assigns a new temporary ID, then the temporary ID is included.

[0268]

[0269]

[0270] 21. [Conditional] UE to AMF: Registration Completed ()

[0271] The UE sends a registration completion message to the AMF to confirm whether a new temporary ID has been assigned.

[0272]

[0273] The core network instructs the RAN whether or not to use UP integrity protection.

[0274] It should be understood that the steps described below are in Figure 22 The new improvements shown in italics apply to both 5G and 4G (EPC / LTE). The core network instructs the RAN whether or not to use UP integrity protection.

[0275] The following registration process for 5G development in SA2 has been improved by leveraging support for indicating whether or not UP integrity protection should be used.

[0276] refer to Figure 22 Step 4 in the process:

[0277]

[0278] The RAN indicates to the UE whether it supports or does not support UP integrity protection.

[0279] It should be understood that the steps described below are in Figure 23 The new improvements shown and indicated by italicized text apply to both 5G and 4G (EPC / LTE).

[0280] refer to Figure 23 Steps 4 to 8 in the process:

[0281]

[0282]

[0283] Initial AS security context establishment

[0284] The new improvements described in the steps below are indicated by using italic text.

[0285] 4G (EPC / LTE)

[0286] Each eNB should be configured via network management using a list of permitted algorithms. There should be a list of integrity algorithms and a list of encryption algorithms. These lists should be ordered according to priority determined by the operator. When an AS security context is established in the eNB, the MME should send the UE EPS security capabilities to the eNB. The eNB should select the following encryption algorithm: the algorithm must have the highest priority in the eNB's configured list and must also be present in the UE's EPS security capabilities. The eNB should select the following integrity algorithm: the algorithm must have the highest priority in the eNB's configured list and must also be present in the UE's EPS security capabilities.

[0287]

[0288] The selected algorithm This should be instructed to the UE in the AS SMC. Encryption algorithms are used for encryption of user plane and RRC services. Integrity algorithms are used for integrity protection of RRC services, and, where applicable, for integrity protection of user plane services between the RN and DeNB.

[0289]

[0290] 5G

[0291] Each gNB should be configured via network management using a list of permitted algorithms. There should be a list of integrity algorithms and a list of encryption algorithms. These lists should be ordered according to priority determined by the operator. When an AS security context is established in the gNB, the AMF should send the UE EPS security capabilities to the eNB. The eNB should select the following encryption algorithm: this algorithm has the highest priority in the list configured by the eNB and is also present in the UE 5GS security capabilities. The gNB should select the following integrity algorithm: this algorithm has the highest priority in the list configured by the eNB and is also present in the UE 5GS security capabilities.

[0292] This should be instructed to the UE in the AS SMC. Encryption algorithms are used for encryption of user plane and RRC services. Integrity algorithms are used for integrity protection of RRC services, and, where applicable, for integrity protection of user plane services between the RN and DgNB.

[0293]

[0294] Switch

[0295] The new improvements described in the steps below are achieved by using... Textual representation.

[0296] X2 Switch

[0297]

[0298] When handing over from the source eNB to the target eNB via X2, the source eNB should include the UE's EPS security capabilities in the handover request message. The encryption and integrity algorithms used in the source cell. The target eNB should select the algorithm with the highest priority from the UE EPS security capabilities based on a priority-ordered list of locally configured algorithms (this applies to both integrity and encryption algorithms). If the target eNB selects a different algorithm than the source eNB, the selected algorithm, The UE is instructed on the integrity algorithm and encryption algorithm. If the UE does not receive any selection for the integrity algorithm and encryption algorithm, the UE continues to use the algorithm as before the handover. (See TS 36.331

[21] ). In the path-switch message, the target eNB should send the UE EPS security capabilities received from the source eNB to the MME. The MME should verify the security capabilities of the UE EPS received from the eNB. Whether it is compatible with the UEEPS security capabilities already stored in the MME They are the same. If a mismatch exists, the MME can log the event and take additional actions (e.g., issue an alarm).

[0299] The encryption and integrity algorithms used in the source cell are transferred to the target eNB in ​​the handover request message so that the target eNB can decrypt and verify the integrity of the RRC Reestablishment Complete message on SRB1 during a possible RRC Connection Re-establishment process. This information is also used by the target eNB to determine whether a handover command is needed. This includes new options for security algorithms.

[0300] Xn switch

[0301] 5G

[0302] When handing over from the source gNB to the target gNB via Xn, the source gNB should include the UE's 5GS security capabilities in the handover request message. The target gNB should select the highest-priority algorithm from the UE 5GS security capabilities based on a locally configured list of algorithms prioritized by priority (this applies to both integrity and encryption algorithms). If the target gNB selects a different algorithm than the source gNB, the selected algorithm, The message (handover command) is given to the UE. If the UE does not receive any selection of integrity algorithm and encryption algorithm, the UE continues to use the same algorithm and UP as before the handover. (See TS 36.331

[21] ). In the path switching message, the target gNB should send the UE 5GS security capabilities and UP integrity received from the source gNB to the AMF. as well as AMF should verify the UE's 5GS security capabilities received from the gNB. Whether it is compatible with the UE 5GS security capabilities already stored in the AMF, They are the same. If a mismatch exists, the AMF can log the event and take additional actions (e.g., issue an alarm).

[0303] The encryption and integrity algorithms used in the source cell are transferred to the target gNB in ​​the handover request message so that the target gNB can decrypt and perform integrity verification of the RRC Connection Re-establishment Complete message on SRB1 during a possible RRC Connection Re-establishment process. This information is also used by the target gNB to determine whether a new selection of security algorithms needs to be included in the handover command (RRC Connection Reconfiguration message).

[0304]

[0305]

[0306]

[0307] S1 switching

[0308]

[0309] When switching from the source eNB to the target eNB via S1 (which may include changes to the MME and the resulting impact on UE security capabilities from the source MME to the target MME), (For the handover), the target MME should send UEEPS security capabilities to the target eNB in ​​the S1AP HANDOVER REQUEST message. The target eNB should select the algorithm with the highest priority from the UE EPS security capabilities based on a locally configured list of algorithms prioritized by priority (this applies to both integrity and encryption algorithms). If the target eNB selects a different algorithm compared to the source eNB, then the selected algorithm, and This should be indicated to the UE in the RRCConnectionReconfiguration message (i.e., the handover command). If the UE does not receive any selection of integrity and encryption algorithms, it continues to use the same algorithms as before the handover. (See TS 36.331

[21] ).

[0310] NG2 switching

[0311]

[0312] During handover from the source gNB to the target gNB via NG2 (which may include AMF changes and the resulting impact on UE security capabilities from the source AMF to the target AMF), (For the handover), the target AMF should send the UE 5GS security capabilities to the target gNB in ​​the NG2AP HANDOVER REQUEST message. The target gNB should select the algorithm with the highest priority from the UE 5GS security capabilities based on a locally configured list of algorithms prioritized by priority (this applies to both integrity and encryption algorithms). If the target gNB selects a different algorithm compared to the source gNB, then the selected algorithm, and This should be indicated to the UE in the RRCConnectionReconfiguration message (i.e., the handover command). If the UE does not receive any selection of integrity and encryption algorithms, it continues to use the same algorithms as before the handover. (See TS 36.331

[21] ).

[0313]

[0314]

[0315] Switching within eNB

[0316]

[0317] During intra-eNB handover, there is no need to change the AS security algorithm or... If the UE does not receive any selection of a new AS security algorithm in the RRCConnectionReconfiguration message during intra-eNB handover, the UE continues to use the same algorithm as before the handover. (See TS 36.331

[21] ).

[0318] gNB intra-gNB handover and eNB intra-eNB handover

[0319]

[0320] During intra-gNB handover, there is no need to change the AS security algorithm in the RRCConnectionReconfiguration message. If the UE does not receive any selection of a new AS security algorithm in the RRCConnectionReconfiguration message during intra-gNB handover, the UE continues to use the same algorithm as before the handover.

[0321] No changes to the AS security algorithm are required during intra-eNB handover. If the UE does not receive any selection of a new AS security algorithm in the RRCConnectionReconfiguration message during intra-eNB handover, the UE continues to use the same algorithm as before the handover.

[0322] Dual connection

[0323] It should be understood that the new improvements described in the steps below and indicated by italicized text apply to both 4G and 5G.

[0324] Adding and modifying Data Radio Bearers (DRBs) in Secondary eNBs (SeNBs)

[0325] When performing the SeNB addition process (i.e., the initial offloading of one or more radio bearers for the SeNB) or when SK is required eNB During the update process of the SeNB, the main eNB (MeNB) should export the SK as defined in Section E.2.4 of TS 33.401. eNB SK eNB New SK eNB During the SeNB addition process or the SeNB modification process that requires a key update, the MeNB should send the generated SK... eNB and SeNB.

[0326] TS 36.300 defines the SeNB addition and modification procedures.

[0327]

[0328] Then SeNB should, in accordance with the provisions of Section E.2.4 of the current specification, obtain the received SK eNB Export key K UPenc And K UPenc Used for all radio bearers that are added.

[0329] At any given time, the same K UPencIt was used to encrypt all radio bearers between the SeNB and the UE. Once from SK eNB Exported K UPenc SeNB and UE can delete SK eNB .

[0330]

[0331] During the SeNB addition process for adding one or more radio bearers to the UE, the MeNB should provide the UE with exported SK. eNB The value of the SCG counter used. The UE should derive the SK value as described in section E.2.4 of TS 33.401. eNB and K UPenc .

[0332] When performing the procedure to add subsequent radio bearers to the same SeNB, the MeNB should allocate radio bearers for each new radio bearer since the last SK. eNB The radio bearer identifier that was not used before the change.

[0333] If the MeNB is unable to allocate unused radio bearer identifiers to new radio bearers in the SeNB due to exhaustion of radio bearer identifier space, the MeNB should increment the SCG counter and calculate the new SK. eNB And then the SeNB modification process should be performed to update SK. eNB Even when it becomes possible to assign a new radio bearer identifier, the MeNB can choose to update the SK. eNB Instead of assigning new radio bearer identifiers.

[0334] If the SeNB receives a new SK from the MeNB during the SeNB modification process... eNB Then SeNB should use the new SK eNB Exported K UPenc It serves as the encryption key for all radio bearers.

[0335] If the UE receives a new SCG counter during the SeNB addition / modification process, the UE should use the new SK counter. eNB Exported K UPenc This serves as the encryption key for all radio bearers already established with SeNB.

[0336] When the last radio bearer on the SeNB is released, the SeNB release procedure is performed; the SeNB and UE should delete the K UPenc If SK was not deleted before...eNB Then SeNB and UE should also remove SK. eNB .

[0337] Encryption / decryption startup

[0338] The DRB unloading process, which utilizes encryption / decryption, follows the outline below and... Figure 24 The steps are shown in the diagram.

[0339] 1. The UE and MeNB establish an RRC connection.

[0340] 2. The MeNB decides to offload the DRB to the SeNB. The MeNB sends a request message for SCG addition to the SeNB via X2-C (Xn-C in 5G) to negotiate the available resources and configuration on the SeNB. MeNB calculates and transmits SK to SeNB as needed. eNB .if Then UE EPS security capabilities and the encryption algorithms used on the signaling radio bearer It should also be sent to SeNB.

[0341]

[0342] 3. The SeNB allocates the necessary resources and selects the following encryption algorithm: the algorithm has the highest priority in its configured list and is also present in the UE EPS security capabilities.

[0343]

[0344] 4. The SeNB sends a message to the MeNB for adding permission to the SCG, indicating the availability of the requested resources and the identifier for the selected algorithm (if it is different from the one selected by the MeNB in ​​step 2) to serve the requested DRB for the UE.

[0345]

[0346]

[0347] 5. The MeNB sends an RRC connection reconfiguration request to the UE, instructing it to configure a new DRB for the SeNB. The MeNB should include an SCG counter parameter to indicate to the UE that it should calculate the SK for the SeNB. eNB and K UPenc ,as well as The MeNB forwards UE configuration parameters to the UE (which may include the algorithm identifier received from the SeNB in ​​step 4). (See Section E.2.4.3 of TS 33.401 for further details).

[0348] Because the message is sent between the MeNB and the UE via the RRC connection, the MeNB's K is used. RRCint It is protected for integrity. Therefore, the SCC cannot be tampered with, and the UE can assume that the SCC is new.

[0349] 6. The UE accepts the RRC connection reconfiguration command and should calculate the SK for the SeNB. eNB The UE should also calculate K for the DRB allocated on the associated SeNB. UPenc The UE sends an RRC reconfiguration completion message to the MeNB. Once the SK... eNB and K UPenc Once exported, the UE initiates encryption / decryption.

[0350] 7. The MeNB sends a completion message for SCG addition to the SeNB via X2-C in 4G (Xn-C in 5G) to notify the SeNB of the configuration result. Upon receiving this message, the SeNB can activate encryption / decryption of UP data with the UE. If the SeNB does not activate encryption / decryption with the UE during this phase The SeNB should then activate encryption / decryption after receiving a random access request from the UE.

[0351] Negotiation of security algorithms

[0352] As in Figure 24 As shown above, when the SeNB establishes one or more DRBs for the UE, the MeNB should forward the UE EPS security capabilities / UE 5GS security capabilities associated with the UE, and the identifier of the AS encryption algorithm selected by the MeNB for the UE for the SRB, in the X2 (4G) (Xn (5G)) request message for the SCGSeNB to add / modify.

[0353] Upon receiving this message, the SeNB should identify the AS encryption algorithm that also exists in the received UE EPS security capabilities and has the highest priority in the locally configured AS encryption algorithm priority list. If the AS encryption algorithm thus identified is different from an algorithm indicated in the received X2 request message for SCG addition / modification, the SeNB should include an indicator for the locally identified AS encryption algorithm in the X2 response message for SCG addition / modification.

[0354]

[0355] The MeNB should forward this instruction to the UE during the RRC Connection Reconfiguration procedure, which establishes the SCG DRB in the UE. If the UE does not receive any AS encryption algorithm instruction during this RRC Connection Reconfiguration procedure, the UE should use the same AS encryption algorithm it uses for the SRB for the SCG DRB. Otherwise, the UE should use the encryption algorithm indicated for the SCG DRB.

[0356] The UE uses one encryption algorithm for encryption of the SRB established with the MeNB and any possible DRB, and uses the same or similar encryption algorithm for encryption of the DRB established with the SeNB. Encryption algorithm.

[0357]

[0358]

[0359] SK eNB renew

[0360] SK eNB Update trigger

[0361] The system supports SK eNB Updates. MeNB may, for any reason, use the SK as defined in section E.2.5.2 of TS 33.401. eNB Update process to update SK eNB When the uplink or downlink PDCP count is to be wrapped around for any of the DRBs, the SeNB should request the MeNB to update the SK via X2-C. eNB .

[0362] If MeNB has its currently valid K in the AS security context eNBIf a key update is performed, the MeNB should update any SKs associated with that AS security context. eNB This preserves the two-hop safety property for X2 switching.

[0363]

[0364] If MeNB receives a request for SK from SeNB eNB The update request or the decision to execute SK. eNB If updated (see TS 33.401, section E.2.5.1), then MeNB should calculate the new SK according to the definition in TS 33.401, section E.2.4. eNB And increment the SCG counter. The MeNB should then execute the SeNB modification procedure to send the new SK to the SeNB. eNB The MeNB should provide the UE with the information regarding the export of the SK during the integrity-protected RRC process. eNB The value of the SCG counter used. The UE should derive the SK value as described in Section E.2.4 of TS33.401. eNB and K UPenc .

[0365] When UE or SeNB starts using the new SK eNB At that time, they should be based on the new SK eNB Recalculate K UPenc .

[0366] RAN decides whether to use UP integrity.

[0367] It should be understood that the new improvements outlined below and indicated in italics apply to both 5G and 4G (EPC / LTE).

[0368]

[0369] Visibility and configurability in UE

[0370]

[0371]

[0372] As discussed above, the aspects and examples of this disclosure summarized above apply to 5G (next-generation systems), EPC / LTE, and other networks. The aspects and examples of this disclosure summarized above apply to all types of UEs, including smartphones, IoT devices, wearable devices, etc. A summary of the different aspects of functionality that can be provided by the methods and processes discussed above is illustrated below:

[0373] How are integrity protection policies handled in the network? For example, how does the home network affect the policy, and how does the AMF / MME or gNB / eNB decide whether to apply integrity protection?

[0374] The UE indicates to the core network AMF / MME whether it supports UP integrity or otherwise. The UE can also indicate to the core network AMF / MME its preference for using or not using UP integrity. The home network (SDM / HSS) can indicate to the serving network that UP integrity "should" or "disable" be enabled. Based on the indication received from the home network and the policy configured for the visited network (AMF / MME), the visited network makes a policy decision regarding whether UP integrity will be applied to the UE. Based on the policy decision, the core network indicates to the UE at the NAS layer whether UP integrity will be used. The core network (AMF / MME) notifies the base station or RAN whether UP data integrity protection will be used.

[0375] Any of the policies and preferences mentioned above can be made based on the UE (i.e., for all user plane data), based on the slice type (for the UE), or based on the slice identifier (for the UE). For example, the UE can indicate a preference to use UP integrity for all data, or based on the slice type or slice identifier. The home network can indicate a preference to use UP integrity for all data, or based on the slice type or slice identifier, and the AMF / MME can make policy decisions based on the UE (for all UP data) or based on the slice type or slice identifier.

[0376] How should the UE react if it does not receive its desired level of protection (including preferences stored in the HSS or negotiated)?

[0377] Initial or default preferences for using integrity protection on the UP can be stored in the SDM / HSS and in the UE. The AMF / MME in the serving network can obtain these preferences from the SDM / HSS. The AMF / MME can notify the UE of these preferences to the gNB / eNB. The gNB / eNB can then decide whether to use UP integrity protection based on the UE's preferences and possible other information.

[0378] If a UE wants to change the initial or default preferences mentioned above, it can send its current preferences to the network (e.g., gNB / eNB or AMF / MME). The network can then decide whether to use the UE's current preferences to replace the initial or default preferences.

[0379] In any of the scenarios mentioned above (i.e., the initial or default preference, or the current preference), if the UE does not obtain the expected UP integrity protection, the UE may take a response action. The response action may be: continuing not to use UP integrity protection, connecting to another gNB / eNB / cell, avoiding the use of a certain application, or notifying the operator / third party of a certain function / application in their network.

[0380] How to handle application integrity protection UP strategies in the base station during X2 and Xn handover:

[0381] During X2 or Xn handover between two base stations, the source base station may need to notify the target base station whether to enable integrity protection for UP data. This instruction or reference can be sent from the source node to the target node on the Xn or X2 interface.

[0382] If the indication received from the source base station is an indication to enable UP integrity protection, the target base station can respond to the source base station with that indication. If the target base station does not support UP data integrity protection and the indication from the source base station indicates that UP integrity should be used, the target base station can either refuse the handover by responding with an error code, or accept the handover but not send its indication to enable UP integrity protection (e.g., in the case of a conventional base station). The policy configured for the target node can determine the appropriate action. If the target base station accepts the request but does not send its indication to enable UP integrity protection (e.g., in the case of a conventional base station), the policy configured in the source base station can determine whether the source base station should continue the process or terminate the connection with the target base station.

[0383] How to handle application integrity protection (UP) strategies in the base station during dual connectivity:

[0384] In a dual-connectivity setup between two base stations, the primary base station can notify the secondary base station whether to enable UP data integrity protection. This indication or preference can be sent from the primary base station to the secondary base station on either the Xn or X2 interface. If the indication received from the primary base station is to enable UP integrity protection, the secondary base station can respond to the primary base station with that indication. If the secondary base station does not support UP data integrity protection, and the indication from the primary base station indicates that UP integrity should be used, the secondary base station can either reject the setup bearer request from the primary base station by responding with an error code, or accept the request but not send its indication to enable UP integrity protection (e.g., in the case of a conventional base station). The policy configured for the secondary base station can determine the appropriate action. If the secondary base station accepts the request but does not send its indication to enable UP integrity protection, the policy configured in the primary base station can determine whether the primary base station should continue the process or terminate the connection with the secondary base station.

[0385] How to determine the UE's preference for using or not using UP integrity protection within the UE, and how to inform the user whether UP integrity protection is enabled or disabled in the network:

[0386] UE users can dynamically configure and change their preferences for using UP integrity within the UE GUI (User Interface). This preference may be configurable based on slice type, specific slice, cell, region, etc. Upon completion of the registration process, the UE can indicate to the user whether UP integrity has been enabled or disabled by the network. This indication can be based on slice type, specific slice, cell, region, etc.

[0387] For IoT devices without a GUI (user interface), UE preferences can be pre-configured on the USIM or in the ME.

[0388] If integrity protection is disabled in a device (e.g., an IoT device), a notification can be sent to another device via the UE or over the network. For example, via SMS, instant messaging, or email.

[0389] Device configuration does not need to be performed by the device itself. Device configuration can be performed remotely (e.g., initiated by the operator or service provider using an OMA DM via, for example, SMS or email).

[0390] How does a UE discover a PLMN that supports UP integrity protection?

[0391] The UE may be able to detect insecure networks and apply user-configured policies on how to react (e.g., only connecting to networks that provide integrity protection to the UP). This is advantageous for the security of IoT devices used by subscriber-trusted operators, but requires stronger security than current network providers. In cases where the preferred PLMN does not use UP integrity protection, alternative PLMNs can be configured by the user or UE to be selected.

[0392] Another option is to set up a new list in the USIM or ME that includes PLMNs that support UP integrity protection. This list can be provided and configured to the UE by the home PLMN operator via over-the-air download. The home PLMN knows which operators it has roaming agreements with and which operators support UP integrity protection.

[0393] In another option, base stations can broadcast within their respective cells whether they support UP integrity protection as part of the system information.

[0394] If the UE is undergoing a handover to a gNB or eNB that does not support UP integrity, how should the UE proceed?

[0395] Users can configure in the UE GUI whether (e.g., during handover) to automatically accept UP services with non-integrity protection without prompting the user's policy. Alternatively, after handover to a new gNB or eNB, the user can be notified that the new gNB or eNB does not support integrity protection and prompted whether to continue the network connection. The UE can be configured to attempt to connect to different gNBs or eNBs within the same PLMN if integrity protection is not enabled on the gNB or eNB, hoping that other gNBs or eNBs will be updated to use the UP integrity algorithm and support UP integrity protection.

[0396] If integrity protection is disabled in a device (e.g., an IoT device), a notification can be sent to another device via the UE or over the network. For example, via SMS, instant messaging, email, etc.

[0397] How gNB / eNB decides whether to apply and use UP integrity:

[0398] The core network (AMF / MME) can notify the base station or RAN whether to use UP data integrity protection. This indication or reference can be sent on the NG2 interface in 5G and the S1 interface in 4G between the core network and the base station (RAN). The UE 5GS security capabilities can be sent along with this indication or reference on the NG2 interface. It is also possible that the gNB or eNB has a local policy (based on the UE 5GS security capabilities) to activate UP integrity for UEs that support UP integrity.

[0399] The aspects and examples of this disclosure thus enable the UE, the home network, and the accessed network to securely indicate and negotiate the use of UP integrity.

[0400] The core network can notify the base station whether or not to enable UP data integrity protection. Alternatively, the RAN can decide whether or not to use UP integrity without being informed by the core NW.

[0401] During Xn or X2 handover between two base stations, the source base station can notify the target base station whether to enable UP data integrity protection. The target base station can then ensure UP integrity for the UE being handed over.

[0402] In a dual-connectivity setup between two base stations, the primary base station can notify the secondary base station whether to enable UP data integrity protection. This instruction or reference can be sent from the primary base station to the secondary base station on either the Xn or X2 interface. The secondary base station can then implement UP integrity protection for bearers offloaded from the primary base station.

[0403] Advantageously, UE users can dynamically configure and change their preferences regarding whether to use UP integrity within the UE GUI (user interface). UE preferences for using UP integrity can be configured for all data, or based on slice type or slice identifier.

[0404] Once the registration process is complete, the UE can indicate to the user whether UP integrity has been enabled or disabled by the network. This indication can be for all data, or based on the slice type or slice identifier.

[0405] The UE may be able to detect networks with lower security and apply user-configured policies on how to react (e.g., only connecting to networks that provide integrity protection for UP). This is advantageous for the security of IoT devices used by subscriber-trusted operators, but requires stronger security than current network providers.

[0406] Users can configure in the phone GUI whether (for example, during handover) to automatically accept UP traffic protected by non-integrity without asking the user's policy.

[0407] If the preferred PLMN does not use UP integrity protection, the user can configure other PLMNs to be selected.

[0408] If the preferred PLMN does not use UP integrity protection, the home operator can configure other PLMNs to be selected. The home PLMN operator can provide and configure the list to the UE via over-the-air download.

[0409] It can also notify users that the new gNB or eNB does not support integrity protection after switching to a new gNB or eNB, and ask users whether they want to continue to connect to the network.

[0410] The UE can be configured to attempt to connect to different gNBs or eNBs within the same PLMN if integrity protection is not enabled in the gNB or eNB, in order to hope that other gNBs or eNBs will be updated using the UP integrity algorithm and support UP integrity protection.

[0411] The gNB or eNB can have a local policy (based on the UE 5GS security capabilities) on whether to enable UP integrity for UEs that support UP integrity.

[0412] The methods disclosed herein can be implemented in hardware or as software modules running on one or more processors. The methods can also be executed according to instructions of a computer program, and this disclosure also provides a computer-readable medium on which a program for performing any of the methods described herein is stored. The computer program embodying this disclosure can be stored on a computer-readable medium, or it can be in the form of, for example, a signal (e.g., a downloadable data signal provided from an Internet website), or it can have any other form.

[0413] It should be noted that the above examples are illustrative and not limiting of this disclosure, and those skilled in the art will be able to devise many alternative embodiments without departing from the scope of the appended claims. The word "comprising" does not exclude the presence of elements or steps other than those listed in the claims, and "a" or "an" does not exclude multiple, and a single processor or other unit can perform the functions of several units recited in the claims. Any reference numerals in the claims should not be construed as limiting their scope.

[0414] The following are some enumerated examples that further illustrate various aspects of the disclosed subject matter.

[0415] 1. A method for operating a user equipment (UE), the UE being configured to connect to a communication network, the method comprising:

[0416] When requesting registration with the communication network, the UE indicates to the communication network the integrity protection IPUP mode for the user plane that it supports;

[0417] The IPUP mode includes one of the following:

[0418] Integrity protection is applied to the user plane data exchanged with the UE;

[0419] Integrity protection is not used for user plane data exchanged with the UE; or

[0420] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0421] 2. The method described in Project 1 further includes:

[0422] Indicate to the communication network the UE preference regarding the IPUP mode that the communication network will use for the UE.

[0423] 3. The method according to Item 2, wherein the indicated UE preference is applied to at least one of the following:

[0424] All data exchanged with the communication network; or

[0425] Data exchanged with a specific slice or multiple slices of the communication network.

[0426] 4. The method described according to any of the foregoing items further includes:

[0427] Receive from the communication network an indication of the IPUP mode to be used by the UE by the communication network.

[0428] 5. The method according to item 4, wherein the instruction applies to at least one of the following:

[0429] All data exchanged with the communication network; or

[0430] Data exchanged with a specific slice or multiple slices of the communication network.

[0431] 6. The method described according to Project 4 or Project 5 further includes:

[0432] The user of the UE is notified that the communication network will use the IPUP mode for the UE.

[0433] 7. The method described according to any one of Projects 4 to 6 further includes:

[0434] If the IPUP mode indicated by the communication network does not match the UE's preference regarding which IPUP mode the communication network should use for the UE, then at least one of the following is performed:

[0435] Refuse to connect to the network;

[0436] Disconnect from the network;

[0437] The user of the UE is notified that the IPUP mode indicated by the communication network does not match the UE's preference regarding which IPUP mode the communication network should use for the UE.

[0438] 8. The method described in Project 7 further includes:

[0439] If the UE performs at least one of the following actions: refuse to connect to the network or disconnect from the network, then at least one of the following actions is performed:

[0440] Requesting registration with the communication network via different radio access nodes of the communication network; or

[0441] Request to register with different communication networks.

[0442] 9. The method described in Project 8 further includes:

[0443] A query list, comprising at least one of radio access nodes or communication networks that support integrity protection for user plane data; and

[0444] Select from the list at least one of the radio access nodes of the communication network for which registration is requested, or at least one of the different communication networks.

[0445] 10. The method according to item 9, wherein the list is configured in the memory of the UE.

[0446] 11. The method according to item 9, wherein the list is received via a radio link.

[0447] 12. The method described according to any of the foregoing items further includes:

[0448] During the handover of the UE from the source radio access node to the target radio access node, a message is received from the target radio access node of the communication network, the message including an indication that the target radio access node will use an IPUP mode for the UE that is different from the IPUP mode used by the source radio access node.

[0449] 13. The method described in Item 12 further includes:

[0450] If the indication from the target radio access node is that the IPUP mode to be used by the communication network via the target radio access node does not match the UE preference regarding which IPUP mode the communication network should use for the UE, then perform at least one of the following:

[0451] Disconnect from the network;

[0452] Accept the handover and notify the UE's user of the IPUP mode that the communication network will use via the target radio access node; or

[0453] Seeking to switch to a different radio access node in the communication network.

[0454] 14. The method described according to any of the foregoing items further includes,

[0455] During the process of adding a secondary radio access node, modifying a secondary radio access node requiring a key update, or offloading a data radio bearer, the system receives from the radio access node of the communication network an indication of the IPUP mode to be used by the communication network for the UE; and

[0456] If the indicated IPUP mode involves integrity protection for user plane data, then export and use the key for integrity protection of user plane data.

[0457] 15. The method according to item 14, wherein the indication of the IPUP mode used by the UE by the communication network is received using an RRC reconfiguration request.

[0458] 16. A method for operating a radio access node in a communication network, the method comprising:

[0459] The user equipment (UE) that requests to register with the communication network receives an indication of the integrity protection IPUP mode supported by the UE for the user plane;

[0460] The IPUP mode includes one of the following:

[0461] Integrity protection is applied to the user plane data exchanged with the UE;

[0462] Integrity protection is not used for user plane data exchanged with the UE; or

[0463] User plane data is protected for integrity but not for confidentiality.

[0464] Furthermore, the instruction is received from the UE via the communication network.

[0465] 17. The method described in Item 16 further includes:

[0466] The UE receives information about its UE preferences regarding the IPUP mode that the communication network will use for the UE.

[0467] 18. The method according to item 17, wherein the indicated UE preference is applied to at least one of the following:

[0468] All data exchanged with the communication network; or

[0469] Data exchanged with a specific slice or multiple slices of the communication network.

[0470] 19. The method according to any one of items 16 to 18 further includes:

[0471] Receive from the core node of the communication network an indication of the IPUP mode to be used by the communication network for the UE.

[0472] 20. The method described according to item 19 further includes:

[0473] If the radio access node supports the indicated IPUP mode, it sends the following instruction to the core node: the radio access node will enable the IPUP mode that the communication network will use for the UE.

[0474] 21. The method according to item 19 or item 20 further includes:

[0475] If the indicated IPUP mode received from the core node of the communication network is not supported by the radio access node, then at least one of the following is performed:

[0476] Reject the registration request received from the UE; or

[0477] The instruction sent to the core node is omitted: The radio access node will enable the IPUP mode that the communication network will use for the UE.

[0478] 22. The method according to any one of items 16 to 21 further includes:

[0479] Send to the UE an indication of the IPUP mode to be used by the communication network for the UE.

[0480] 23. The method according to item 22, wherein if the IPUP mode used by the communication network for the UE involves integrity protection of user plane data, the indication of the IPUP mode used by the communication network for the UE includes an identifier of the algorithm for integrity protection of UP data.

[0481] 24. The method according to item 22 or item 23 when subordinate to item 19, wherein the IPUP mode indicated by the radio access node to the UE is the IPUP mode received from the core node of the communication network.

[0482] 25. The method according to item 22 or item 23, wherein the IPUP mode indicated to the UE is selected by the radio access node according to the retention policy on the radio access node.

[0483] 26. A method for operating a radio access node in a communication network, the radio access node comprising a source radio access node, the method comprising:

[0484] During the handover of a user equipment (UE) from a source radio access node to a target radio access node, an indication is sent by the communication network of the integrity protection IPUP mode for the user plane to be used by the UE.

[0485] The IPUP mode includes one of the following:

[0486] Integrity protection is applied to the user plane data exchanged with the UE;

[0487] Integrity protection is not used for user plane data exchanged with the UE; or

[0488] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0489] 27. The method described in item 26 further includes:

[0490] Check if the following instruction is received from the target radio access node: The target radio access node will enable the IPUP mode that the communication network will use for the UE.

[0491] 28. The method described in item 27 further includes:

[0492] If no indication is received that the target radio access node will enable the IPUP mode to be used by the communication network for the UE, it is assumed that the target radio access node will not enable the IPUP mode to be used by the communication network for the UE.

[0493] 29. A method for operating a radio access node in a communication network, the radio access node including a target radio access node, the method comprising:

[0494] During the handover of user equipment (UE) from source radio access node to target radio access node, an indication is received from the communication network of the integrity protection IPUP mode for user plane to be used by the UE.

[0495] The IPUP mode includes one of the following:

[0496] Integrity protection is applied to the user plane data exchanged with the UE;

[0497] Integrity protection is not used for user plane data exchanged with the UE; or

[0498] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0499] 30. The method according to item 29, wherein the indication of the IPUP mode used by the UE by the communication network is received from at least one of the following:

[0500] The source radio access node; or

[0501] The core node of a communication network.

[0502] 31. The method described according to item 29 or item 30 further includes:

[0503] Decide whether to use the indicated IPUP mode; and

[0504] If it is decided not to use the indicated IPUP mode, the following instruction is sent to the UE: The target radio access node will use an IPUP mode for the UE that is different from the IPUP mode used by the source radio access node.

[0505] 32. The method according to any one of items 29 to 31, wherein the indication of the IPUP mode used by the UE by the communication network is received from the source radio access node, the method further comprising:

[0506] Sends an instruction for the IPUP mode received from the source radio access node to the core node of the communication network.

[0507] 33. The method described according to any one of items 29 to 32 further includes:

[0508] If the target radio access node supports the indicated IPUP mode, then send an instruction to at least one of the source radio access node or the core node of the communication network as follows: the target radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0509] 34. The method described according to any one of items 29 to 33 further includes:

[0510] If the target radio access node does not support the received indicated IPUP mode, then one of the following shall be performed:

[0511] Deny UE handover; or

[0512] Accept the UE handover and omit sending the following instruction: The target radio access node will enable the IPUP mode to be used by the communication network for the UE.

[0513] 35. A method for operating a radio access node in a communication network, the radio access node including a main radio access node, the method comprising:

[0514] Sends an indication to the secondary radio access node of the IPUP mode for user plane integrity protection to be used by the UE by the communication network;

[0515] The IPUP mode includes one of the following:

[0516] Integrity protection is applied to the user plane data exchanged with the UE;

[0517] Integrity protection is not used for user plane data exchanged with the UE; or

[0518] User plane data is protected for integrity but not for confidentiality.

[0519] Furthermore, this instruction is sent to the secondary radio access node during a process that includes at least one of the following:

[0520] Add auxiliary radio access nodes;

[0521] Modifications required for secondary radio access nodes that need key updates;

[0522] Data radio bearer DRB offload.

[0523] 36. The method according to item 35, wherein if the IPUP mode indicated to the secondary radio access node involves integrity protection for user plane data, the communication network shall include a list of supported algorithms for integrity protection of UP data in the indication of the IPUP mode used by the UE.

[0524] 37. The method described according to item 35 or item 36 further includes:

[0525] Check if the following instruction is received from the secondary radio access node: the secondary radio access node will enable the IPUP mode to be used by the UE by the communication network.

[0526] 38. The method described in item 37 further includes:

[0527] If no indication is received that the secondary radio access node will enable the IPUP mode to be used by the communication network for the UE, it is assumed that the secondary radio access node will not enable the IPUP mode to be used by the communication network for the UE.

[0528] 39. The method according to any one of items 35 to 38, further comprising: if an indication of the IPUP mode used by the UE is sent by the communication network to the secondary radio access node during the DRB offloading process:

[0529] Then an RRC reconfiguration request is sent to the UE, the request including an indication from the communication network of the IPUP mode to be used by the UE.

[0530] 40. The method according to item 39, wherein the RRC reconfiguration request includes the selected integrity algorithm identifier to be used for UP integrity protection.

[0531] 41. A method for operating a radio access node in a communication network, the radio access node including a secondary radio access node, the method comprising:

[0532] Receive from the main radio access node an indication of the IPUP mode for user plane integrity protection to be used by the UE by the communication network;

[0533] The IPUP mode includes one of the following:

[0534] Integrity protection is applied to the user plane data exchanged with the UE;

[0535] Integrity protection is not used for user plane data exchanged with the UE; or

[0536] User plane data is protected for integrity but not for confidentiality.

[0537] Furthermore, the instruction is received from the primary radio access node during a process involving at least one of the following:

[0538] Add auxiliary radio access nodes;

[0539] Modifications required for secondary radio access nodes that need key updates;

[0540] Data radio bearer DRB offload.

[0541] 42. The method according to item 41, wherein if the IPUP mode indicated by the primary radio access node involves integrity protection for user plane data, the indication of the IPUP mode used by the communication network for the UE includes an identifier of the integrity algorithm to be used for UP integrity protection.

[0542] 43. The method described according to item 41 or item 42 further includes:

[0543] If the secondary radio access node supports the indicated IPUP mode, it sends the following instruction to the primary radio access node: the secondary radio access node will enable the IPUP mode that the communication network will use for the UE.

[0544] 44. The method described according to any one of items 41 to 43 further includes:

[0545] If the secondary radio access node does not support the received indicated IPUP mode, then perform at least one of the following:

[0546] The requested procedure is rejected from the main radio access node; or

[0547] The process of accepting the request from the primary radio access node is omitted, and the following instruction is sent to the primary radio access node: the secondary radio access node will enable the IPUP mode to be used by the UE by the communication network.

[0548] 45. The method according to any one of items 41 to 44 further includes:

[0549] If the indication of the IPUP mode used by the UE by the communication network is received from the primary radio access node during the process of adding a secondary radio access node or modifying a secondary radio access node that requires a key update, and if the IPUP mode indicated by the primary radio access node involves integrity protection for user plane data, then the key for integrity protection of the user plane data exchanged with the UE is derived and used.

[0550] 46. ​​A method for operating a core node in a communication network, the method comprising:

[0551] Send to the radio access node of the communication network an indication of the integrity protection IPUP mode for the user plane to be used by the user equipment (UE) that requests to register with the communication network;

[0552] The IPUP mode includes one of the following:

[0553] Integrity protection is applied to the user plane data exchanged with the UE;

[0554] Integrity protection is not used for user plane data exchanged with the UE; or

[0555] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0556] 47. The method described in item 46 further includes:

[0557] Check whether the following instruction is received from the radio access node of the communication network: the radio access node of the communication network will enable the IPUP mode indicated to the radio access node of the communication network.

[0558] 48. The method described in item 47 further includes:

[0559] If no indication is received from the radio access node that it will enable the IPUP mode indicated to the radio access node, it is assumed that the radio access node will not enable the IPUP mode that the communication network will use for the UE.

[0560] 49. The method according to any one of items 46 to 48, wherein the core network node is a new core network node for the UE, the method further comprising:

[0561] Sending information requests related to the UE to the UE's legacy core network; and receiving from the legacy core network node an indication of the IPUP mode to be used by the communication network for the UE.

[0562] 50. The method described in item 49 further includes:

[0563] During the location update process, an indication is received from the subscription management node corresponding to the UE regarding the IPUP mode to be used by the communication network for the UE.

[0564] 51. The method described according to item 49 or item 50 further includes:

[0565] The communication network will determine the IPUP mode to be used by the UE.

[0566] 52. The method described in item 51 further includes:

[0567] If the IPUP mode determined by the core network node does not match the IPUP mode preference conveyed by the UE for the IPUP mode to be used by the communication network for the UE, then one of the following actions is taken:

[0568] Reject the request from the UE to register with the communication network; or

[0569] The system accepts a request from the UE to register with the communication network and notifies the UE of the IPUP determined by the core network node.

[0570] 53. The method described according to item 51 or 52, wherein the determined IPUP mode applies to at least one of the following:

[0571] All data exchanged between the UE and the communication network; or

[0572] Data exchanged between the UE and one or more slices of the communication network.

[0573] 54. The method described according to any one of items 51 to 53 further includes:

[0574] Indicate to the UE the IPUP mode that the communication network will use for the UE.

[0575] 55. A method for operating a core node in a communication network, the core network node including a legacy core network node for requesting registration of a user equipment (UE) with the communication network, the method comprising:

[0576] Receive information requests related to the UE from the new core network used by the UE; and

[0577] Send an indication to the new core network node of the IPUP mode for user plane integrity protection to be used by the communication network for the UE, wherein the IPUP mode includes one of the following:

[0578] Integrity protection is applied to the user plane data exchanged with the UE;

[0579] Integrity protection is not used for user plane data exchanged with the UE; or

[0580] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0581] 56. The method according to item 55, wherein the indicated IPUP mode applies to at least one of the following:

[0582] All data exchanged between the UE and the communication network; or

[0583] Data exchanged between the UE and one or more slices of the communication network.

[0584] 57. A method for operating a core node in a communication network, the method comprising:

[0585] Receive from the target radio access node an indication from the communication network of the user plane integrity protection IPUP mode to be used by the user equipment (UE) to which it will be handed over to the target radio access node;

[0586] Verify that the IPUP pattern indicated by the target radio access node is the same as the IPUP pattern for the UE stored by the core network node; and

[0587] If the indicated IPUP pattern does not match the stored IPUP pattern, then perform at least one of the following:

[0588] Record the mismatch as an event; or

[0589] Trigger an alarm;

[0590] The IPUP mode includes one of the following:

[0591] Integrity protection is applied to the user plane data exchanged with the UE;

[0592] Integrity protection is not used for user plane data exchanged with the UE; or

[0593] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0594] 58. A method for operating a core node in a communication network, the method comprising:

[0595] Send to the target radio access node an indication from the communication network of the user plane integrity protection IPUP mode to be used by the user equipment (UE) to which it will be handed over to the target radio access node;

[0596] The IPUP mode includes one of the following:

[0597] Integrity protection is applied to the user plane data exchanged with the UE;

[0598] Integrity protection is not used for user plane data exchanged with the UE; or

[0599] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0600] 59. The method described in item 56 further includes:

[0601] Check if the following instruction is received from the target radio access node: the target radio access node will enable the IPUP mode that the communication network will use for the UE.

[0602] 60. A computer program including instructions that, when executed on at least one processor, cause the at least one processor to perform the method according to any one of the preceding items.

[0603] 61. A carrier comprising a computer program according to item 60, wherein the carrier comprises one of an electrical signal, an optical signal, a radio signal, or a computer-readable storage medium.

[0604] 62. A computer program product comprising a non-transitory computer-readable medium on which the computer program according to item 60 is stored.

[0605] 63. An apparatus for operating a user equipment (UE) configured to connect to a communication network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0606] When requesting registration with the communication network, the UE indicates to the communication network the integrity protection IPUP mode for the user plane that it supports;

[0607] The IPUP mode includes one of the following:

[0608] Integrity protection is applied to the user plane data exchanged with the UE;

[0609] Integrity protection is not used for user plane data exchanged with the UE; or

[0610] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0611] 64. An apparatus for operating a radio access node of a communication network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0612] The user equipment (UE) that requests to register with the communication network receives an indication of the integrity protection IPUP mode supported by the UE for the user plane;

[0613] The IPUP mode includes one of the following:

[0614] Integrity protection is applied to the user plane data exchanged with the UE;

[0615] Integrity protection is not used for user plane data exchanged with the UE; or

[0616] User plane data is protected for integrity but not for confidentiality.

[0617] Furthermore, the instruction is received from the UE via the communication network.

[0618] 65. An apparatus for operating a radio access node of a communication network, the radio access node including a source radio access node, the apparatus including a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0619] During the handover of a user equipment (UE) from a source radio access node to a target radio access node, an indication is sent by the communication network of the integrity protection IPUP mode for the user plane to be used by the UE.

[0620] The IPUP mode includes one of the following:

[0621] Integrity protection is applied to the user plane data exchanged with the UE;

[0622] Integrity protection is not used for user plane data exchanged with the UE; or

[0623] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0624] 66. An apparatus for operating a radio access node of a communication network, the radio access node including a target radio access node, the apparatus including a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0625] During the handover of user equipment (UE) from source radio access node to target radio access node, an indication is received from the communication network of the integrity protection IPUP mode for user plane to be used by the UE.

[0626] The IPUP mode includes one of the following:

[0627] Integrity protection is applied to the user plane data exchanged with the UE;

[0628] Integrity protection is not used for user plane data exchanged with the UE; or

[0629] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0630] 67. An apparatus for operating a radio access node of a communication network, the radio access node including a main radio access node, the apparatus including a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0631] Sends an indication to the secondary radio access node of the IPUP mode for user plane integrity protection to be used by the UE by the communication network;

[0632] The IPUP mode includes one of the following:

[0633] Integrity protection is applied to the user plane data exchanged with the UE;

[0634] Integrity protection is not used for user plane data exchanged with the UE; or

[0635] User plane data is protected for integrity but not for confidentiality.

[0636] Furthermore, this instruction is sent to the secondary radio access node during a process that includes at least one of the following:

[0637] Add auxiliary radio access nodes;

[0638] Modifications required for secondary radio access nodes that need key updates;

[0639] Data radio bearer DRB offload.

[0640] 68. An apparatus for operating a radio access node in a communication network, the radio access node including a secondary radio access node, the apparatus including a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0641] Receive from the main radio access node an indication of the IPUP mode for user plane integrity protection to be used by the UE by the communication network;

[0642] The IPUP mode includes one of the following:

[0643] Integrity protection is applied to the user plane data exchanged with the UE;

[0644] Integrity protection is not used for user plane data exchanged with the UE; or

[0645] User plane data is protected for integrity but not for confidentiality.

[0646] Furthermore, the instruction is received from the primary radio access node during a process involving at least one of the following:

[0647] Add auxiliary radio access nodes;

[0648] Modifications required for secondary radio access nodes that need key updates;

[0649] Data radio bearer DRB offload.

[0650] 69. An apparatus for operating a core node in a communication network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0651] Send to the radio access node of the communication network an indication of the integrity protection IPUP mode for the user plane to be used by the user equipment (UE) that requests to register with the communication network;

[0652] The IPUP mode includes one of the following:

[0653] Integrity protection is applied to the user plane data exchanged with the UE;

[0654] Integrity protection is not used for user plane data exchanged with the UE; or

[0655] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0656] 70. An apparatus for operating a core node in a communication network, the core network node including a legacy core network node for requesting registration of a user equipment (UE) with the communication network, the apparatus including a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0657] Receive information requests related to the UE from the new core network used by the UE; and

[0658] Send an indication to the new core network node of the IPUP mode for user plane integrity protection to be used by the communication network for the UE, wherein the IPUP mode includes one of the following:

[0659] Integrity protection is applied to the user plane data exchanged with the UE;

[0660] Integrity protection is not used for user plane data exchanged with the UE; or

[0661] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0662] 71. An apparatus for operating a core node in a communication network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0663] Receive from the target radio access node an indication from the communication network of the user plane integrity protection IPUP mode to be used by the user equipment (UE) to which it will be switched;

[0664] Verify that the IPUP pattern indicated by the target radio access node is the same as the IPUP pattern for the UE stored by the core network node; and

[0665] If the indicated IPUP pattern does not match the stored IPUP pattern, then perform at least one of the following:

[0666] Record the mismatch as an event; or

[0667] Trigger an alarm;

[0668] The IPUP mode includes one of the following:

[0669] Integrity protection is applied to the user plane data exchanged with the UE;

[0670] Integrity protection is not used for user plane data exchanged with the UE; or

[0671] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0672] 72. An apparatus for operating a core node in a communication network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor to make the apparatus operable to:

[0673] Send to the target radio access node an indication of the user plane integrity protection IPUP mode used by the communication network for the user equipment (UE) to be switched to the target radio access node;

[0674] The IPUP mode includes one of the following:

[0675] Integrity protection is applied to the user plane data exchanged with the UE;

[0676] Integrity protection is not used for user plane data exchanged with the UE; or

[0677] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0678] 73. An apparatus for operating a user equipment (UE), wherein the UE is configured to connect to a communication network, the apparatus being configured to:

[0679] When requesting registration with the communication network, the UE indicates to the communication network the integrity protection IPUP mode for the user plane that it supports;

[0680] The IPUP mode includes one of the following:

[0681] Integrity protection is applied to the user plane data exchanged with the UE;

[0682] Integrity protection is not used for user plane data exchanged with the UE; or

[0683] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0684] 74. An apparatus for operating a radio access node of a communication network, the apparatus being configured to:

[0685] The user equipment (UE) that requests to register with the communication network receives an indication of the integrity protection IPUP mode supported by the UE for the user plane;

[0686] The IPUP mode includes one of the following:

[0687] Integrity protection is applied to the user plane data exchanged with the UE;

[0688] Integrity protection is not used for user plane data exchanged with the UE; or

[0689] User plane data is protected for integrity but not for confidentiality.

[0690] Furthermore, the instruction is received from the UE via the communication network.

[0691] 75. An apparatus for operating a radio access node of a communication network, the radio access node including a source radio access node, the apparatus being configured to:

[0692] During the handover of a user equipment (UE) from a source radio access node to a target radio access node, an indication is sent by the communication network of the integrity protection IPUP mode for the user plane to be used by the UE.

[0693] The IPUP mode includes one of the following:

[0694] Integrity protection is applied to the user plane data exchanged with the UE;

[0695] Integrity protection is not used for user plane data exchanged with the UE; or

[0696] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0697] 76. An apparatus for operating a radio access node of a communication network, the radio access node including a target radio access node, the apparatus being configured to:

[0698] During the handover of user equipment (UE) from source radio access node to target radio access node, an indication is received from the communication network of the integrity protection IPUP mode for user plane to be used by the UE.

[0699] The IPUP mode includes one of the following:

[0700] Integrity protection is applied to the user plane data exchanged with the UE;

[0701] Integrity protection is not used for user plane data exchanged with the UE; or

[0702] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0703] 77. An apparatus for operating a radio access node of a communication network, the radio access node including a main radio access node, the apparatus being configured to:

[0704] Sends an indication to the secondary radio access node of the IPUP mode for user plane integrity protection to be used by the UE by the communication network;

[0705] The IPUP mode includes one of the following:

[0706] Integrity protection is applied to the user plane data exchanged with the UE;

[0707] Integrity protection is not used for user plane data exchanged with the UE; or

[0708] User plane data is protected for integrity but not for confidentiality.

[0709] Furthermore, this instruction is sent to the secondary radio access node during a process that includes at least one of the following:

[0710] Add auxiliary radio access nodes;

[0711] Modifications required for secondary radio access nodes that need key updates;

[0712] Data radio bearer DRB offload.

[0713] 78. An apparatus for operating a radio access node in a communication network, the radio access node including a secondary radio access node, the apparatus being configured to:

[0714] Receive from the main radio access node an indication of the IPUP mode for user plane integrity protection to be used by the UE by the communication network;

[0715] The IPUP mode includes one of the following:

[0716] Integrity protection is applied to the user plane data exchanged with the UE;

[0717] Integrity protection is not used for user plane data exchanged with the UE; or

[0718] User plane data is protected for integrity but not for confidentiality.

[0719] Furthermore, the instruction is received from the primary radio access node during a process involving at least one of the following:

[0720] Add auxiliary radio access nodes;

[0721] Modifications required for secondary radio access nodes that need key updates;

[0722] Data radio bearer DRB offload.

[0723] 79. An apparatus for operating a core node in a communication network, the apparatus being configured to:

[0724] Send to the radio access node of the communication network an indication of the integrity protection IPUP mode for the user plane to be used by the user equipment (UE) that requests to register with the communication network;

[0725] The IPUP mode includes one of the following:

[0726] Integrity protection is applied to the user plane data exchanged with the UE;

[0727] Integrity protection is not used for user plane data exchanged with the UE; or

[0728] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0729] 80. An apparatus for operating a core node in a communication network, the core network node including a legacy core network node for requesting registration of a user equipment (UE) with the communication network, the apparatus being configured to:

[0730] Receive information requests related to the UE from the new core network used by the UE; and

[0731] Send an indication to the new core network node of the IPUP mode for user plane integrity protection to be used by the communication network for the UE, wherein the IPUP mode includes one of the following:

[0732] Integrity protection is applied to the user plane data exchanged with the UE;

[0733] Integrity protection is not used for user plane data exchanged with the UE; or

[0734] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0735] 81. An apparatus for operating a core node in a communication network, the apparatus being configured to:

[0736] Receive from the target radio access node an indication from the communication network of the user plane integrity protection IPUP mode to be used by the user equipment (UE) to which it will be switched;

[0737] Verify that the IPUP pattern indicated by the target radio access node is the same as the IPUP pattern for the UE stored by the core network node; and

[0738] If the indicated IPUP pattern does not match the stored IPUP pattern, then perform at least one of the following:

[0739] Record the mismatch as an event; or

[0740] Trigger an alarm;

[0741] The IPUP mode includes one of the following:

[0742] Integrity protection is applied to the user plane data exchanged with the UE;

[0743] Integrity protection is not used for user plane data exchanged with the UE; or

[0744] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0745] 82. An apparatus for operating a core node in a communication network, the apparatus being configured to:

[0746] Send to the target radio access node an indication of the user plane integrity protection IPUP mode used by the communication network for the user equipment (UE) to be switched to the target radio access node;

[0747] The IPUP mode includes one of the following:

[0748] Integrity protection is applied to the user plane data exchanged with the UE;

[0749] Integrity protection is not used for user plane data exchanged with the UE; or

[0750] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0751] 83. An apparatus for operating a user equipment (UE), wherein the UE is configured to connect to a communication network, the apparatus comprising:

[0752] The sending module is used to indicate to the communication network the integrity protection IPUP mode supported by the UE for the user plane when requesting registration with the communication network;

[0753] The IPUP mode includes one of the following:

[0754] Integrity protection is applied to the user plane data exchanged with the UE;

[0755] Integrity protection is not used for user plane data exchanged with the UE; or

[0756] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0757] 84. An apparatus for operating a radio access node in a communication network, the apparatus comprising:

[0758] The receiving module is used to receive from a user equipment (UE) requesting to register with the communication network an indication of the integrity protection IPUP mode for the user plane supported by the UE.

[0759] The IPUP mode includes one of the following:

[0760] Integrity protection is applied to the user plane data exchanged with the UE;

[0761] Integrity protection is not used for user plane data exchanged with the UE; or

[0762] User plane data is protected for integrity but not for confidentiality.

[0763] Furthermore, the instruction is received from the UE via the communication network.

[0764] 85. An apparatus for operating a radio access node in a communication network, the radio access node including a source radio access node, the apparatus comprising:

[0765] The transmitting module is used to transmit an indication by the communication network of the integrity protection IPUP mode for the user plane to be used by the UE during the process of handing over the user equipment UE from the source radio access node to the target radio access node.

[0766] The IPUP mode includes one of the following:

[0767] Integrity protection is applied to the user plane data exchanged with the UE;

[0768] Integrity protection is not used for user plane data exchanged with the UE; or

[0769] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0770] 86. An apparatus for operating a radio access node in a communication network, the radio access node including a target radio access node, the apparatus comprising:

[0771] The receiving module is used to receive an indication from the communication network of the integrity protection IPUP mode for the user plane to be used by the UE during the process of handing over the user equipment UE from the source radio access node to the target radio access node.

[0772] The IPUP mode includes one of the following:

[0773] Integrity protection is applied to the user plane data exchanged with the UE;

[0774] Integrity protection is not used for user plane data exchanged with the UE; or

[0775] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0776] 87. An apparatus for operating a radio access node in a communication network, the radio access node including a main radio access node, the apparatus comprising:

[0777] The transmitting module is used to send an indication to the secondary radio access node of the integrity protection IPUP mode for the user plane to be used by the UE by the communication network;

[0778] The IPUP mode includes one of the following:

[0779] Integrity protection is applied to the user plane data exchanged with the UE;

[0780] Integrity protection is not used for user plane data exchanged with the UE; or

[0781] User plane data is protected for integrity but not for confidentiality.

[0782] Furthermore, this instruction is sent to the secondary radio access node during a process that includes at least one of the following:

[0783] Add auxiliary radio access nodes;

[0784] Modifications required for secondary radio access nodes that need key updates;

[0785] Data radio bearer DRB offload.

[0786] 88. An apparatus for operating a radio access node in a communication network, the radio access node including a secondary radio access node, the apparatus comprising:

[0787] The receiving module is used to receive from the main radio access node an indication of the integrity protection IPUP mode for the user plane to be used by the UE by the communication network;

[0788] The IPUP mode includes one of the following:

[0789] Integrity protection is applied to the user plane data exchanged with the UE;

[0790] Integrity protection is not used for user plane data exchanged with the UE; or

[0791] User plane data is protected for integrity but not for confidentiality.

[0792] Furthermore, the instruction is received from the primary radio access node during a process involving at least one of the following:

[0793] Add auxiliary radio access nodes;

[0794] Modifications required for secondary radio access nodes that need key updates;

[0795] Data radio bearer DRB offload.

[0796] 89. An apparatus for operating a core node in a communication network, the apparatus comprising:

[0797] The transmitting module is used to send an indication from the communication network to the radio access node of the communication network of the integrity protection IPUP mode for the user plane used by the user equipment (UE) requesting to register with the communication network.

[0798] The IPUP mode includes one of the following:

[0799] Integrity protection is applied to the user plane data exchanged with the UE;

[0800] Integrity protection is not used for user plane data exchanged with the UE; or

[0801] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0802] 90. An apparatus for operating a core node in a communication network, the core network node including a legacy core network node for requesting registration of a user equipment (UE) with the communication network, the apparatus comprising:

[0803] The receiving module is used to receive UE-related information requests from the new core network for the UE; and

[0804] The transmitting module is used to send an indication to the new core network node of the IPUP mode for user plane integrity protection that the communication network will use for the UE, wherein the IPUP mode includes one of the following:

[0805] Integrity protection is applied to the user plane data exchanged with the UE;

[0806] Integrity protection is not used for user plane data exchanged with the UE; or

[0807] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0808] 91. An apparatus for operating a core node in a communication network, the apparatus comprising:

[0809] The receiving module is configured to receive from the target radio access node an indication from the communication network of the user plane integrity protection IPUP mode for use by the user equipment (UE) to which it will be handed over to the target radio access node; and

[0810] The processing module is used to verify whether the IPUP mode indicated by the target radio access node is the same as the IPUP mode for the UE stored by the core network node; and

[0811] If the indicated IPUP pattern does not match the stored IPUP pattern, then perform at least one of the following:

[0812] Record the mismatch as an event; or

[0813] Trigger an alarm;

[0814] The IPUP mode includes one of the following:

[0815] Integrity protection is applied to the user plane data exchanged with the UE;

[0816] Integrity protection is not used for user plane data exchanged with the UE; or

[0817] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

[0818] 92. An apparatus for operating a core node in a communication network, the apparatus comprising:

[0819] The transmitting module is used to send to the target radio access node an indication of the integrity protection IPUP mode for the user plane used by the communication network for the user equipment (UE) to be switched to the target radio access node;

[0820] The IPUP mode includes one of the following:

[0821] Integrity protection is applied to the user plane data exchanged with the UE;

[0822] Integrity protection is not used for user plane data exchanged with the UE; or

[0823] Integrity protection is applied to user plane data, but confidentiality protection is not applied.

Claims

1. A method of user equipment, UE, operation wherein, The UE is configured to connect to a communication network, the method comprising: when requesting to register with the communication network, indicating to the communication network an IPUP mode supported by the UE for a user plane and a preference of the UE regarding which IPUP mode to use by the communication network for the UE, wherein the indicated UE preference applies to data exchanged with one specific slice or multiple slices of the communication network; wherein the IPUP mode comprises one of: using integrity protection for user plane data exchanged with the UE; not using integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and not using confidentiality protection for user plane data, receiving from the communication network an indication of an IPUP mode to be used by the communication network for the UE decided by a core node of the communication network.

2. The method of claim 1, wherein, The indicated UE preference also applies to all data exchanged with the communication network.

3. The method of claim 1, wherein, The indication applies to at least one of: all data exchanged with the communication network; or data exchanged with one specific slice or multiple slices of the communication network.

4. The method of any one of claims 1-3, wherein, Indicating to a communication network an IPUP mode using integrity protection for user plane data exchanged with the UE, or using integrity protection for user plane data and not using confidentiality protection for user plane data, comprises: indicating to the communication network a maximum data rate of user plane data for which integrity protection can be applied.

5. The method according to any one of claims 1-3, further comprising: informing a user of the UE about the IPUP mode to be used by the communication network for the UE.

6. The method according to any one of claims 1-3, further comprising: if the IPUP mode indicated by the communication network does not match the UE preference regarding which IPUP mode should be used by the communication network for the UE, performing at least one of: refusing to connect to the network; disconnecting from the network; informing a user of the UE that the IPUP mode indicated by the communication network does not match the UE preference regarding which IPUP mode should be used by the communication network for the UE.

7. The method according to claim 6, further comprising: if the UE performs at least one of refusing to connect to the network or disconnecting from the network, performing at least one of: requesting to register with the communication network via a different radio access node of the communication network; or requesting to register with a different communication network.

8. The method according to claim 7, further comprising: querying a list comprising at least one of a radio access node or a communication network supporting integrity protection for user plane data; and selecting at least one of a radio access node of the communication network or a different communication network for requesting to register from the list.

9. The method of claim 8, wherein, The list is configured in a memory of the UE.

10. The method of claim 8, wherein, The list is received over a radio link.

11. The method according to any one of claims 1-3, further comprising: receiving a message from the target radio access node of the communication network during a handover procedure of the UE from a source radio access node to the target radio access node, the message comprising an indication that the target radio access node will use a different IPUP mode for the UE than the IPUP mode used by the source radio access node.

12. The method of claim 11, further comprising: if the indication from the target radio access node is that the IPUP mode to be used by the communication network via the target radio access node does not match a UE preference of the UE as to which IPUP mode the communication network should use for the UE, performing at least one of: disconnecting from the network; accepting the handover and informing a user of the UE of the IPUP mode to be used by the communication network via the target radio access node; or seeking a handover to a different radio access node of the communication network.

13. The method of any of claims 1-3, further comprising: receiving an indication of an IPUP mode to be used by the communication network for the UE from a radio access node of the communication network during a procedure for secondary radio access node addition, secondary radio access node modification that requires a key update, or data radio bearer offloading; and, if the indicated IPUP mode involves use of integrity protection for user plane data, deriving and using a key for integrity protection of user plane data.

14. The method of claim 11, wherein, The indication of the IPUP mode to be used by the communication network for the UE is received with a RRC reconfiguration request.

15. A method of operation of a radio access node of a communication network, the method comprising: receiving, from a user equipment, UE requesting registration with the communication network, an indication of an integrity protection, IPUP, mode for a user plane supported by the UE and a preference of the UE as to which IPUP mode the communication network should use for the UE, wherein the indicated preference applies to data exchanged with one particular slice or multiple slices of the communication network; wherein the IPUP mode comprises one of: use of integrity protection for user plane data exchanged with the UE; no use of integrity protection for user plane data exchanged with the UE; or use of integrity protection for user plane data and no use of confidentiality protection for user plane data; and wherein the indication is received from the UE via the communication network, receiving, from a core node of the communication network, an indication of an IPUP mode to be used by the communication network for the UE.

16. The method of claim 15, wherein, The indicated UE preference also applies to all data exchanged with the communication network.

17. The method of any one of claims 15-16, wherein, Receiving the indicated IPUP mode of the UE for use of integrity protection for user plane data exchanged with the UE, or use of integrity protection for user plane data and no use of confidentiality protection for user plane data from the UE comprises: receiving, from the UE, a maximum data rate of user plane data for which integrity protection can be applied.

18. The method of claim 15, further comprising: if the indicated IPUP mode is supported by the radio access node, sending an indication to the core node that the radio access node will enable the IPUP mode to be used by the communication network for the UE.

19. The method of claim 15 or 18, further comprising: if the indicated IPUP mode received from a core node of the communication network is not supported by the radio access node, performing at least one of: rejecting a request received from the UE for registration; or omitting to send an indication to the core node that the radio access node will enable the IPUP mode to be used by the communication network for the UE.

20. The method of any one of claims 15 to 16, further comprising: sending an indication to the UE of an IPUP mode to be used by the communication network for the UE.

21. The method of claim 20, wherein, if the IPUP mode to be used by the communication network for the UE involves using integrity protection for user plane data, the indication of the IPUP mode to be used by the communication network for the UE comprises an identifier of an algorithm for integrity protection of UP data.

22. The method of claim 20, wherein, the IPUP mode indicated to the UE by the radio access node is the IPUP mode received from a core node of the communication network.

23. The method of claim 20, wherein, the IPUP mode indicated to the UE is selected by the radio access node according to a policy hosted on the radio access node.

24. A method of core network node operation in a communication network, the method comprising: sending an indication to a radio access node of the communication network of an integrity protection for user plane, IPUP, mode to be used by the communication network for a user equipment, UE, requesting registration with the communication network; wherein the IPUP mode comprises one of: using integrity protection for user plane data exchanged with the UE; not using integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and not using confidentiality protection for user plane data; the method further comprising: deciding on an IPUP mode to be used by the communication network for the UE, wherein the decided IPUP mode applies to data exchanged between the UE and one particular slice or multiple slices of the communication network.

25. The method of claim 24, further comprising: checking whether an indication is received from the radio access node of the communication network that the radio access node of the communication network will enable the IPUP mode indicated to the radio access node of the communication network.

26. The method of claim 25, further comprising: if no indication is received that the radio access node will enable the IPUP mode indicated to the radio access node, assuming that the radio access node will not enable the IPUP mode to be used by the communication network for the UE.

27. The method of any one of claims 24-26, wherein, the core network node is a new core network node for the UE, the method further comprising: sending, to an old core network node of the UE, a request for information related to the UE; and receiving, from the old core network node, an indication of an IPUP mode to be used by the communication network for the UE.

28. The method of claim 27, further comprising: receiving, from a subscription management node corresponding to the UE, an indication of an IPUP mode to be used by the communication network for the UE during an update location procedure.

29. The method of claim 24, further comprising: if the IPUP mode decided by the core network node does not match a preference communicated by the UE for an IPUP mode to be used by the communication network for the UE, then performing one of: rejecting a request from the UE to register with the communication network; or accepting the request from the UE to register with the communication network and notifying the UE of the IPUP decided by the core network node.

30. The method of claim 24 or 29, wherein, The decided IPUP mode also applies to all data exchanged between the UE and the communication network.

31. The method of any of claims 24 to 26, further comprising: indicating to the UE the decided IPUP mode to be used by the communication network for the UE.

32. A method of operation of a core network node in a communication network, the core network node comprising an old core network node for a user equipment, UE, requesting to register with the communication network, the method comprising: receiving, from a new core network node for the UE, a request for information related to the UE; and sending, to the new core network node, an indication of an integrity protection for user plane, IPUP, mode to be used by the communication network for the UE, wherein the indicated IPUP mode applies to data exchanged between the UE and one specific slice or multiple slices of the communication network, wherein the IPUP mode comprises one of: using integrity protection for user plane data exchanged with the UE; not using integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and not using confidentiality protection for user plane data; the method further comprising deciding the IPUP mode to be used by the communication network for the UE.

33. The method of claim 32, wherein, The indicated IPUP mode also applies to all data exchanged between the UE and the communication network.

34. A computer-readable storage medium storing a computer program comprising instructions which, when executed on at least one processor, cause the at least one processor to carry out the method according to any of the preceding claims.

35. An apparatus for operating a user equipment, UE, configured to connect to a communication network, the apparatus configured to: when requesting to register with the communication network, indicating to the communication network an integrity protection for user plane, IPUP, mode supported by the UE and a preference of the UE with respect to the communication network on an IPUP mode to be used by the UE, wherein The indicated UE preference applies to data exchanged with one specific slice or multiple slices of the communication network; wherein the IPUP mode comprises one of: using integrity protection for user plane data exchanged with the UE; not using integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and not using confidentiality protection for user plane data; using integrity protection for user plane data and no confidentiality protection for user plane data, receiving, from the communication network, an indication of an IPUP mode to be used by the communication network for the UE, the indication being decided by a core node of the communication network.

36. An apparatus for operating a radio access node of a communication network, the apparatus being configured to: receiving, from a user equipment, UE, requesting to register with the communication network, an indication of an integrity protection for user plane, IPUP, mode supported by the UE and a preference of the UE with respect to an IPUP mode used by the communication network for the UE, wherein, the indicated UE preference applies to data exchanged with one specific slice or multiple slices of the communication network; wherein the IPUP mode comprises one of: using integrity protection for user plane data exchanged with the UE; using no integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and no confidentiality protection for user plane data; and wherein the indication is received from the UE via the communication network, receiving, from a core node of the communication network, an indication of an IPUP mode to be used by the communication network for the UE.

37. An apparatus for operating a core node in a communication network, the apparatus being configured to: sending, to a radio access node of the communication network, an indication of an integrity protection for user plane, IPUP, mode to be used by the communication network for a user equipment, UE, requesting registration with the communication network; wherein the IPUP mode comprising one of: using integrity protection for user plane data exchanged with the UE; using no integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and no confidentiality protection for user plane data; the apparatus being further configured to decide an IPUP mode to be used by the communication network for the UE, wherein the decided IPUP mode applies to data exchanged between the UE and one specific slice or multiple slices of the communication network.

38. An apparatus for operating a core network node in a communication network, the core network node comprising an old core network node for a user equipment, UE, requesting registration with the communication network, the apparatus being configured to: receiving, from a new core network node for the UE, a request for information related to the UE; and sending, to the new core network node, an indication of an integrity protection for user plane, IPUP, mode to be used by the communication network for the UE, wherein, the indicated IPUP mode applies to data exchanged between the UE and one specific slice or multiple slices of the communication network, wherein the IPUP mode comprises one of: using integrity protection for user plane data exchanged with the UE; using no integrity protection for user plane data exchanged with the UE; or using integrity protection for user plane data and no confidentiality protection for user plane data; the apparatus being further configured to decide an IPUP mode to be used by the communication network for the UE.

Images