Data processing method and device

Abstract

The present invention provides a data processing method and a device. The method in embodiments of the present invention comprises: performing partial integrity protection on data of a packet data convergence protocol service data unit (PDCP SDU) in a particular bearer, and generating a packet data convergence protocol protocol data unit (PDCP PDU); and sending the PDCP PDU according to a sending mode corresponding to the PDCP PDU, wherein a PDCP PDU having undergone integrity protection, a PDCP PDU in which partial data has undergone integrity protection, and a PDCP PDU not undergoing integrity protection correspond to different sending modes.

Description

Data processing method and device

[0001] This disclosure claims priority to the Chinese patent application filed with the China Patent Office on February 20, 2024, with application number 202410189372.7 and application name “Data Processing Method and Device,” the entire contents of which are incorporated herein by reference. Technical Field

[0002] The present disclosure relates to the field of communication technology, and in particular to a data processing method and device. Background Art

[0003] To ensure the security of user-plane data transmission, the Packet Data Convergence Protocol (PDCP) of the Fifth Generation Mobile Network (5G) has an integrity protection function. Integrity protection is an important security technology in wireless communication networks, but integrity protection requires data processing time and resource overhead. It is difficult for related technologies to simultaneously take into account data transmission security and low resource overhead. Summary of the Invention

[0004] The present disclosure aims to provide a data processing method and apparatus to solve the problem in related technologies that it is difficult to simultaneously take into account data transmission security and low resource overhead.

[0005] To achieve the above objectives, the present disclosure provides a data processing method, which is executed by a sending end, and the method includes:

[0006] Perform partial integrity protection on the packet data convergence protocol service data unit (PDCP) SDU data in a specific bearer to generate a packet data convergence protocol protocol data unit (PDCP PDU);

[0007] The PDCP PDU is sent according to a sending mode corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending modes.

[0008] In some embodiments, performing partial integrity protection on Packet Data Convergence Protocol Service Data Unit (PDCP) SDU data in a specific bearer to generate a Packet Data Convergence Protocol Protocol Data Unit (PDCP PDU) includes one or more of the following:

[0009] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer;

[0010] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer, and not performing integrity protection on each SDU in the second part of the PDCP SDUs of the specific bearer;

[0011] performing integrity protection on a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer;

[0012] Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

[0013] In some embodiments, the specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

[0014] In some embodiments, sending the PDCP PDU according to a sending format corresponding to the PDCP PDU includes one or more of the following:

[0015] Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission;

[0016] Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission;

[0017] The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

[0018] In some embodiments, the method of the present disclosure further comprises:

[0019] When the transmitting end is a terminal, obtaining a mapping relationship configured on the network side, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU that performs integrity protection to a first RLC entity; mapping a PDCP PDU that does not perform integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity.

[0020] Alternatively, when the sending end is a network-side device, configuration information of the mapping relationship is sent to the terminal.

[0021] In some embodiments, sending the PDCP PDU according to the sending mode corresponding to the PDCP PDU includes one or more of the following:

[0022] Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end;

[0023] Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end;

[0024] adding the third indication information to the PDCP PDU to which the partial data carrying the third indication information is integrity protected and sending the result to the receiving end;

[0025] The first indication information is used to indicate that all data in the PDCP PDU is integrity protected;

[0026] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0027] The third indication information is used to indicate at least one of the following:

[0028] Integrity protection is performed on part of the data in the PDCP PDU;

[0029] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0030] In some embodiments, the location information includes at least one of the following:

[0031] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0032] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0033] In some embodiments, the method of the present disclosure further comprises:

[0034] When the transmitting end is a terminal, receiving activation signaling for performing partial integrity protection on a specific bearer sent by a network side; determining, according to the activation signaling, that a sending mode corresponding to the PDCP PDU is effective;

[0035] Alternatively, when the sending end is a network-side device, the activation signaling for performing partial integrity protection on a specific bearer is sent to the terminal.

[0036] The present disclosure also provides a data processing method, which is executed by a receiving end, and the method includes:

[0037] Acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection, a PDCP PDU with partial data integrity protection, and a PDCP PDU without integrity protection;

[0038] The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

[0039] In some embodiments, obtaining, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection performed, a PDCP PDU with partial data integrity protection performed, and a PDCP PDU without integrity protection performed, includes one or more of the following:

[0040] Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected;

[0041] Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected;

[0042] According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

[0043] In some embodiments, the method of the present disclosure further comprises:

[0044] In a case where the receiving end is a network-side device, configuration information of a mapping relationship is sent to the terminal, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU with integrity protection to a first RLC entity; mapping a PDCP PDU without integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity.

[0045] Alternatively, when the receiving end is a terminal, the mapping relationship configured by the receiving network side is received.

[0046] In some embodiments, obtaining, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection performed, a PDCP PDU with partial data integrity protection performed, and a PDCP PDU without integrity protection performed, includes one or more of the following:

[0047] Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU;

[0048] Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected;

[0049] According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected

[0050] The first indication information is used to indicate that the data in the PDCP PDU is integrity protected;

[0051] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0052] The third indication information is used to indicate at least one of the following:

[0053] Integrity protection is performed on part of the data in the PDCP PDU;

[0054] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0055] In some embodiments, the location information includes at least one of the following:

[0056] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0057] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0058] In some embodiments, the method of the present disclosure further comprises:

[0059] When the receiving end is a network-side device, sending activation signaling for performing partial integrity protection on a specific bearer to the terminal, where the activation signaling is used to determine that a sending mode corresponding to the PDCP PDU is effective;

[0060] Alternatively, when the receiving end is a terminal, the activation signaling sent by the network side is received, and the sending mode corresponding to the PDCP PDU is determined to be effective according to the activation signaling.

[0061] The present disclosure also provides a data processing device, including a memory, a transceiver, and a processor;

[0062] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0063] Perform partial integrity protection on the packet data convergence protocol service data unit (PDCP) SDU data in a specific bearer to generate a packet data convergence protocol protocol data unit (PDCP PDU);

[0064] The PDCP PDU is sent according to a sending mode corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending modes.

[0065] In some embodiments, the processor further implements one or more of the following:

[0066] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer;

[0067] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer, and not performing integrity protection on each SDU in the second part of the PDCP SDUs of the specific bearer;

[0068] performing integrity protection on a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer;

[0069] Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

[0070] In some embodiments, the specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

[0071] In some embodiments, the processor further implements one or more of the following:

[0072] Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission;

[0073] Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission;

[0074] The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

[0075] In some embodiments, the processor further implements the following steps:

[0076] When the transmitting end is a terminal, obtaining a mapping relationship configured on the network side, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU that performs integrity protection to a first RLC entity; mapping a PDCP PDU that does not perform integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity.

[0077] Alternatively, when the sending end is a network-side device, configuration information of the mapping relationship is sent to the terminal.

[0078] In some embodiments, the processor further implements one or more of the following:

[0079] Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end;

[0080] Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end;

[0081] adding the third indication information to the PDCP PDU to which the partial data carrying the third indication information is integrity protected and sending the result to the receiving end;

[0082] The first indication information is used to indicate that all data in the PDCP PDU is integrity protected;

[0083] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0084] The third indication information is used to indicate at least one of the following:

[0085] Integrity protection is performed on part of the data in the PDCP PDU;

[0086] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0087] In some embodiments, the location information includes at least one of the following:

[0088] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0089] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0090] In some embodiments, the processor further implements the following steps:

[0091] When the transmitting end is a terminal, receiving activation signaling for performing partial integrity protection on a specific bearer sent by a network side; determining, according to the activation signaling, that a sending mode corresponding to the PDCP PDU is effective;

[0092] Alternatively, when the sending end is a network-side device, the activation signaling for performing partial integrity protection on a specific bearer is sent to the terminal.

[0093] The present disclosure also provides a data processing device, including a memory, a transceiver, and a processor;

[0094] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0095] Acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection, a PDCP PDU with partial data integrity protection, and a PDCP PDU without integrity protection;

[0096] The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

[0097] In some embodiments, the processor further implements one or more of the following:

[0098] Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected;

[0099] Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected;

[0100] According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

[0101] In some embodiments, the processor further implements the following steps:

[0102] In a case where the receiving end is a network-side device, configuration information of a mapping relationship is sent to the terminal, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU with integrity protection to a first RLC entity; mapping a PDCP PDU without integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity.

[0103] Alternatively, when the receiving end is a terminal, the mapping relationship configured by the receiving network side is received.

[0104] In some embodiments, the processor further implements one or more of the following:

[0105] Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU;

[0106] Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected;

[0107] According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected

[0108] The first indication information is used to indicate that the data in the PDCP PDU is integrity protected;

[0109] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0110] The third indication information is used to indicate at least one of the following:

[0111] Integrity protection is performed on part of the data in the PDCP PDU;

[0112] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0113] In some embodiments, the location information includes at least one of the following:

[0114] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0115] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0116] In some embodiments, the processor further implements the following steps:

[0117] When the receiving end is a network-side device, sending activation signaling for performing partial integrity protection on a specific bearer to the terminal, where the activation signaling is used to determine that a sending mode corresponding to the PDCP PDU is effective;

[0118] Alternatively, when the receiving end is a terminal, the activation signaling sent by the network side is received, and the sending mode corresponding to the PDCP PDU is determined to be effective according to the activation signaling.

[0119] The present disclosure also provides a data processing device, comprising:

[0120] a generating unit, configured to perform partial integrity protection on packet data convergence protocol service data unit (PDCP SDU) data in a specific bearer and generate a packet data convergence protocol protocol data unit (PDCP PDU);

[0121] The first sending unit is configured to send the PDCP PDU according to a sending mode corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending modes.

[0122] The present disclosure also provides a data processing device, comprising:

[0123] a first acquiring unit, configured to acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection performed, a PDCP PDU with partial data integrity protection performed, and a PDCP PDU without integrity protection performed;

[0124] The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

[0125] The present disclosure further provides a processor-readable storage medium, wherein the processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the steps of the data processing method described above.

[0126] The present disclosure also provides a computer program product, comprising computer instructions, which implement the steps of the data processing method described above when executed by a processor.

[0127] The above technical solution disclosed in the present invention has at least the following beneficial effects:

[0128] In an embodiment of the present disclosure, partial integrity protection is performed on the packet data convergence protocol service data unit (PDCP SDU) data in a specific bearer to generate a packet data convergence protocol protocol data unit (PDCP PDU); the PDCP PDU is sent according to the corresponding transmission form of the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission forms. The above scheme can perform integrity protection on partial data of a specific bearer, thereby ensuring data transmission security while taking into account the reduction of data processing delay and the reduction of air interface resource overhead. BRIEF DESCRIPTION OF THE DRAWINGS

[0129] FIG1 is a structural diagram of a network system to which the embodiments of the present disclosure may be applied;

[0130] FIG2 is a schematic diagram showing the structure of an existing PDCP PDU;

[0131] FIG3 shows a schematic diagram of the generation of MAC-I and XMAC-I;

[0132] FIG4 shows one of the flowcharts of the data processing method according to an embodiment of the present disclosure;

[0133] FIG5 shows one structural diagram of a PDCP PDU according to an embodiment of the present disclosure;

[0134] FIG6 shows a second structural diagram of a PDCP PDU according to an embodiment of the present disclosure;

[0135] FIG7 shows a third structural diagram of a PDCP PDU according to an embodiment of the present disclosure;

[0136] FIG8 is a schematic diagram showing the mapping between PDCP PDU and RLC entity in an embodiment of the present disclosure;

[0137] FIG9 shows a second flow chart of the data processing method according to an embodiment of the present disclosure;

[0138] FIG10 shows one structural block diagram of a data processing device according to an embodiment of the present disclosure;

[0139] FIG11 shows a second structural block diagram of the data processing device according to an embodiment of the present disclosure;

[0140] FIG12 shows one of the module schematic diagrams of the data processing device according to an embodiment of the present disclosure;

[0141] FIG13 shows a second module schematic diagram of the data processing device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0142] The following will clearly and completely describe the technical solutions in the embodiments of the present disclosure in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present disclosure, not all of them. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present disclosure without making any creative efforts shall fall within the scope of protection of the present disclosure.

[0143] The terms "first," "second," and the like in the specification and claims of the present disclosure are used to distinguish similar objects and are not necessarily used to describe a particular order or sequential sequence. It should be understood that the terms used in this manner are interchangeable where appropriate so that the embodiments of the present disclosure described herein may be implemented in a sequence other than those illustrated or described herein. In addition, the terms "including" and "having," and any variations thereof, are intended to cover non-exclusive inclusions, e.g., a process, method, system, product, or apparatus comprising a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or that are inherent to such processes, methods, products, or apparatus.

[0144] In the embodiments of the present disclosure, the term "and / or" describes the relationship between associated objects, indicating that three possible relationships exist. For example, A and / or B can represent three situations: A exists alone, A and B exist simultaneously, and B exists alone. The character " / " generally indicates that the associated objects are in an "or" relationship. In the embodiments of the present disclosure, the term "plurality" refers to two or more, and other quantifiers are similar.

[0145] In the embodiments of the present disclosure, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present disclosure should not be construed as being preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner.

[0146] Figure 1 shows a block diagram of a wireless communication system to which the embodiments of the present disclosure can be applied. The wireless communication system includes a terminal device 11 and a network-side device (or network device) 12. The terminal device 11 may also be referred to as a terminal or a user equipment (UE). It should be noted that the specific type of the terminal 11 is not limited in the embodiments of the present disclosure. The network-side device 12 may be a base station or a core network. It should be noted that in the embodiments of the present disclosure, only a base station in the NR system is used as an example, but the specific type of the base station is not limited.

[0147] In order to enable those skilled in the art to better understand the embodiments of the present disclosure, the following description is first given.

[0148] Integrity protection is an important data transmission security mechanism. The sender performs an integrity protection algorithm on unencrypted data based on the secret key and input parameters, generates a Message Authentication Code for Integrity (MAC-I), and includes the MAC-I in the Packet Data Convergence Protocol (PDCP) Protocol Data Unit (PDU). Refer to the PDCP PDU example in Figure 2. The PDCP PDU shown in Figure 2 includes N bytes, from Oct1 to OctN. The first byte includes the Packet Data Convergence Protocol Sequence Number (PDCP SN). The sender's security processing order for data is integrity protection first, then encryption. After receiving the PDCP PDU, the receiver first decrypts the data portion and calculates the expected Message Authentication Code for Integrity (XMAC-I) based on the decrypted data. If the MAC-I and XMAC-I are consistent, the integrity protection verification is successful. If they are inconsistent, the data packet is discarded.

[0149] 5G integrity protection uses the 5G Integrity Algorithm for 5G (NIA) algorithm. The generation of MAC-I and XMAC-I are shown in Figure 3. The input parameters include: 1) Secret key (KEY), which is K for Signaling Radio Bearer (SRB) and Data Radio Bearer (DRB) respectively. RRCint and K UPint 2) BEARER, the bearer number, specifically the bearer number configured by the Radio Resource Control (RRC) minus 1; 3) COUNT, the combination of the Hyperframe Number (HFN) and the PDCP Sequence Number (SN); 4) DIRECTION, typically set to 0 for uplink and 1 for downlink. The MESSAGE in Figure 3 represents the input data.

[0150] In 4G, only SRB data is integrity protected. In 5G, both SRB and DRB are integrity protected. Integrity protection is configured for the bearer. If integrity protection is configured for a DRB, all data in that DRB must also be integrity protected.

[0151] The MAC-I is fixed at 32 bits, or 4 bytes. For small data packets, such as industrial control and voice calls, this overhead cannot be ignored.

[0152] The data processing method provided by the embodiment of the present disclosure is described in detail below through some embodiments and their application scenarios in conjunction with the accompanying drawings.

[0153] As shown in FIG4 , an embodiment of the present disclosure provides a data processing method, which is executed by a sending end. The method includes:

[0154] Step 401: Partial integrity protection is performed on Packet Data Convergence Protocol Service Data Unit (PDCP) SDU data in a specific bearer to generate a Packet Data Convergence Protocol Protocol Data Unit (PDCP PDU).

[0155] In some embodiments, the specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

[0156] The transmitting end in the embodiment of the present disclosure may be a base station or a terminal.

[0157] Whether partial integrity protection is performed on each data of the specific bearer at the transmitting end is notified by a higher layer, for example, by a core network user plane functional entity or an application layer.

[0158] Partial integrity protection of PDCP SDU data in a specific bearer includes two situations: integrity protection of part of the PDCP SDU in a specific bearer, that is, for all data packets of a bearer (the input at the PDCP layer is the PDCP SDU), the PDCP PDUs generated by some PDCP SDUs are integrity protected, and the input of the integrity protection algorithm is all the data bits of the PDCP SDU, and the PDCP PDUs generated by some PDCP SDUs do not execute the integrity protection algorithm and are not integrity protected; or, integrity protection is performed on part of the data in at least part of the PDCP SDUs in the specific bearer, that is, the PDCP PDUs generated by the PDCP SDUs execute the integrity protection algorithm, but the input of the integrity protection algorithm is part of the data bits in the PDCP SDU.

[0159] Step 402: Send the PDCP PDU according to the sending mode corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending modes.

[0160] In some embodiments, the above-mentioned sending form includes the sending format of PDCP PDU and the sending method of PDCP PDU.

[0161] In some embodiments, the integrity-protected PDCP PDU refers to a PDU obtained by integrity-protecting all data of a PDCP SDU.

[0162] In the present disclosure, PDCP PDUs using different integrity protection processing modes are transmitted using different transmission modes. Based on the transmission mode, the receiving end can identify whether the received PDCP PDU is integrity protected and only perform integrity protection verification on the integrity-protected data. The transmitting end sends the PDCP PDU to the receiving end according to the transmission mode corresponding to the PDCP PDU. The receiving end identifies whether the received PDCP PDU is integrity protected based on the corresponding transmission mode and performs integrity protection verification on the integrity-protected data.

[0163] The above-mentioned receiving end may be a terminal or a base station.

[0164] As an implementation method, the above-mentioned transmitting end is a base station and the receiving end is a terminal; or, the above-mentioned transmitting end is a terminal and the receiving end is a base station; or, the above-mentioned transmitting end and receiving end are both terminals (both communicate through a direct link or a PC5 link).

[0165] In some embodiments, when data under a Packet Data Unit Session (PDU session) is mapped to different DRBs, the different DRBs may be configured with different integrity protection policies.

[0166] In the above scheme, partial integrity protection is performed on the Packet Data Convergence Protocol Service Data Unit (PDCP) SDU data in a specific bearer to generate a Packet Data Convergence Protocol Protocol Data Unit (PDCP PDU); the PDCP PDU is sent according to the corresponding transmission form of the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission forms. The above scheme can perform integrity protection on partial data of a specific bearer, thereby ensuring data transmission security while taking into account the reduction of data processing delay and air interface resource overhead.

[0167] In some embodiments, performing partial integrity protection on Packet Data Convergence Protocol Service Data Unit (PDCP) SDU data in a specific bearer includes one or more of the following:

[0168] Item A1: Integrity protection is performed on each SDU in the first part of the PDCP SDU of the specific bearer.

[0169] Here, each SDU in the first part of the PDCP SDU of the specific bearer is integrity protected to generate an integrity-protected PDCP PDU corresponding to each SDU in the first part of the PDCP SDU. That is, each SDU in the first part of the PDCP SDU generates an integrity-protected PDCP PDU.

[0170] Item A2: Integrity protection is performed on each SDU in the first part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the second part of the PDCP SDU of the specific bearer.

[0171] Here, a PDCP PDU with integrity protection corresponding to each SDU in the first part of the PDCP SDU and a PDCP PDU without integrity protection corresponding to each SDU in the second part of the PDCP SDU are generated. A PDCP PDU without integrity protection is generated for each SDU in the second part of the PDCP SDU.

[0172] Item A3: Integrity protect a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer, and generate a PDCP PDU with partially data integrity protected corresponding to each SDU in the third portion of the PDCP SDUs.

[0173] Here, partial data of each SDU in at least part of the PDCP SDU of the specific bearer is integrity protected to generate a PDCP PDU in which partial data corresponding to each SDU in at least part of the PDCP SDU is integrity protected, wherein each SDU in at least part of the PDCP SDU generates a PDCP PDU in which partial data is integrity protected.

[0174] Item A4: Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and integrity protection is not performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

[0175] Here, a PDCP PDU with integrity protection performed on part of the data corresponding to each SDU in the third part of the PDCP SDU and a PDCP PDU without integrity protection performed on each SDU in the fourth part of the PDCP SDU are generated.

[0176] The above solution can be used to perform integrity protection on part of the PDCP SDU of a specific bearer, or on part of the data of part of the PDCP SDU of a specific bearer, thereby ensuring data transmission security while reducing data processing delay and air interface resource overhead.

[0177] In some embodiments, as an implementation manner, sending the PDCP PDU according to the sending format corresponding to the PDCP PDU includes one or more of the following:

[0178] Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission;

[0179] Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission;

[0180] The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

[0181] In this implementation, different Radio Link Control (RLC) entities correspond to different logical channels. PDCP PDUs with integrity protection, without integrity protection, or with partial data integrity protection are mapped to different logical channels for transmission, allowing the receiving end to identify whether the PDCP PDU is integrity protected based on the corresponding logical channel. That is, in this implementation, by mapping PDCP PDUs with integrity protection, without integrity protection, or with partial data integrity protection to different RLC entities for transmission, the purpose of transmitting PDCP PDUs using different integrity protection processing methods using different transmission methods is achieved.

[0182] In some embodiments, the method of the present disclosure further includes:

[0183] When the transmitting end is a terminal, obtaining a mapping relationship configured on the network side, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU that performs integrity protection to a first RLC entity; mapping a PDCP PDU that does not perform integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity.

[0184] Alternatively, when the sending end is a network-side device, configuration information of the mapping relationship is sent to the terminal.

[0185] Based on the above mapping relationship, the sending end can map the PDCP PDU with integrity protection, without integrity protection, or with partial data integrity protection to different RLC entities (corresponding to different logical channels) for transmission, so that the receiving end can identify whether the PDCP PDU is integrity protected based on the corresponding logical channel.

[0186] In some embodiments, as another implementation, sending the PDCP PDU according to the sending mode corresponding to the PDCP PDU includes one or more of the following:

[0187] Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end;

[0188] Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end;

[0189] adding the third indication information to the PDCP PDU to which the partial data carrying the third indication information is integrity protected and sending the result to the receiving end;

[0190] The first indication information is used to indicate that all data in the PDCP PDU is integrity protected; for example, the first indication information is 1 bit and the value of the 1 bit is 1;

[0191] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU; for example, the second indication information is 1 bit and the value of the 1 bit is 0;

[0192] The third indication information is used to indicate at least one of the following:

[0193] Item B1: Integrity protection is performed on part of the data in the PDCP PDU;

[0194] Item B2: The length, proportion and / or position information of the partial data in the PDCP PDU that has been integrity protected, where the proportion is the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information is the position information of the partial data in the data of the PDCP SDU.

[0195] For example, the third indication information includes 2 bits, and when the value of the 2 bits is 00, it is used to indicate that integrity protection is performed on part of the data in the PDCP PDU. In this case, the length of the part of the data is a fixed length, or the proportion in the PDCP SDU is a fixed proportion, and the fixed length or fixed proportion is agreed upon by the protocol or configured by RRC signaling; when the value of the 2 bits is 01, it is used to indicate the length, proportion and / or position information of the part of the data in the PDCP PDU that integrity protection is performed; when the value of the 2 bits is 10, it is used to indicate that integrity protection is performed on part of the data in the PDCP PDU and the length, proportion and / or position information of the part of the data in the PDCP PDU that integrity protection is performed.

[0196] For another example, the third indication information includes N bits, N≥2, and different bit values ​​may mean one or more of the following: 1) indicating the length of the data on which integrity protection is performed; 2) the proportion of the data on which integrity protection is performed; 3) the location of the data on which integrity protection is performed.

[0197] In some embodiments, the location information includes at least one of the following:

[0198] The first K1 bits or bytes of the PDCP SDU data, where K1 is an integer; that is, the initial portion of the PDCP SDU data may be integrity protected;

[0199] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer, that is, the integrity protection can be performed on the end part of the data of the PDCP SDU.

[0200] Of course, the partial data for which integrity protection is performed may be located at any position in the PDCP SDU, such as the M bits located in the middle of the data of the PDCP SDU.

[0201] In some embodiments, the transmitting end adds the above-mentioned first indication information, second indication information or third indication information into the PDCP header.

[0202] In this implementation, PDCP PDUs using different integrity protection processing methods are sent using different transmission formats (with different indication information added), so that the receiving end determines whether the PDCP PDU is integrity protected based on the transmission format of the received PDCP PDU.

[0203] In some embodiments, the method of the present disclosure further includes:

[0204] When the transmitting end is a terminal, receiving activation signaling for performing partial integrity protection on a specific bearer sent by a network side; determining, according to the activation signaling, that a sending mode corresponding to the PDCP PDU is effective;

[0205] Alternatively, when the sending end is a network-side device, the activation signaling for performing partial integrity protection on a specific bearer is sent to the terminal.

[0206] For example, when the sending end is a terminal, the mapping relationship between the PDCP PDU and the RLC entity configured on the network side is determined to be effective according to the activation signaling, or the indication information that needs to be included in the PDCP PDU is determined according to the activation signaling, and the indication information is the above-mentioned first indication information, second indication information or third indication information.

[0207] In the embodiment of the present disclosure, the above-mentioned activation signaling can be RRC signaling, which can take effect immediately after configuration, or can be activated through layer 2 signaling, such as through the media access control control unit (MAC Control Element, MAC CE), or can be activated through physical layer signaling, such as through the physical downlink control channel (Physical downlink control channel, PDCCH).

[0208] Here, based on the above-mentioned activation signaling, the transmitting end and the receiving end can transmit the PDCP PDU based on the corresponding transmission form of the PDCP PDU, for example, using different transmission methods (i.e., mapping to different RLC entity transmission methods) to send PDCP PDUs with integrity protection, PDCP PDUs with partial data integrity protection, and PDCP PDUs without integrity protection, or using different transmission formats (such as adding different indication information in the PDCP header) to send PDCP PDUs with integrity protection, PDCP PDUs with partial data integrity protection, and PDCP PDUs without integrity protection.

[0209] The data processing method disclosed herein is described below with reference to embodiments.

[0210] Example 1: The base station indicates whether the current PDCP PDU is integrity protected (downlink transmission) through the PDCP PDU header:

[0211] Base station side:

[0212] Step 1: The base station notifies the terminal through RRC signaling that a specific SRB or DRB can perform partial data integrity protection;

[0213] Step 2: When sending downlink data, the base station determines whether the data packet needs to be integrity protected based on the high-level information. When organizing the PDCP PDU, the indication field (INT indic ) is added to indicate whether the PDCP PDU performs integrity protection. The indicator bit may specifically include the first indication information, the second indication information or the third indication information. Figure 5 is an example of the PDCP PDU format for SRB, and Figure 6 is an example of the PDCP PDU format for DRB. The dotted box indicates that this part is based on INT indic The domain indication may not be present.

[0214] Terminal side:

[0215] Step 1: Receive the RRC signaling configured by the base station side, and determine, based on the RRC signaling, that a specific bearer performs partial data integrity protection.

[0216] Step 2: Receive downlink data sent by the base station side, according to the INT in the PDCP header indic The terminal determines whether the PDCP PDU is integrity protected. If the PDCP PDU is integrity protected, the terminal performs integrity verification on the PDCP PDU. If the integrity verification fails, the terminal discards the PDCP PDU.

[0217] Example 2: The terminal indicates whether the current PDCP PDU is integrity protected (uplink transmission) through the PDCP PDU header:

[0218] Base station side:

[0219] Step 1: The base station notifies the terminal through RRC signaling that a specific SRB or DRB can perform partial data integrity protection.

[0220] Step 2: Receive the uplink data sent by the terminal, according to the INT in the PDCP header indic The base station determines whether the PDCP PDU is integrity protected. If the PDCP PDU is integrity protected, the base station performs integrity verification on the PDCP PDU. If the integrity verification fails, the base station discards the PDCP PDU.

[0221] Terminal side:

[0222] Step 1: Receive RRC signaling configured by the base station side, and determine, based on the RRC signaling, that a specific bearer can perform partial data integrity protection.

[0223] Step 2: When sending uplink data, the terminal determines whether the data packet needs to be protected with integrity based on high-level information (such as the application layer) (e.g., it can determine whether integrity protection is needed based on the importance of the data). When organizing the PDCP PDU, the indication field (INT indic ) is added to indicate whether the PDCP PDU has been integrity protected. For the specific PDCP PDU format, see Example 1.

[0224] Embodiment 3: In a direct link, the sending terminal indicates whether the current PDCP PDU is integrity protected through the PDCP PDU header;

[0225] Sending terminal:

[0226] Step 1: Receive an RRC message sent by a base station or a control terminal, and determine that a specific bearer can perform partial data integrity protection according to the RRC message, or, through the upper layer PC5-S, learn that some bearers can perform integrity protection.

[0227] Step 2: When sending data, determine whether the data packet needs to be protected by integrity, such as determining the importance of the data packet based on the application layer information, and then determine whether to perform integrity protection accordingly. When organizing the PDCP PDU, the indication field (INT indic) to indicate whether integrity protection is performed on the PDCP PDU. The indication bit may specifically include the first indication information, the second indication information or the third indication information).

[0228] Figure 7 is an example of the format of PDCP PDU. The dotted box indicates that this part is based on INT indic The domain indication may not exist. indic The other fields outside the domain are the fields in the PDCP PDU format in the related art, and this disclosure will not go into details. In addition, other PDCP PDU formats different from those in FIG. 7 can be used as long as the INT indic The idea of ​​this disclosure is applicable to all fields.

[0229] Receiving terminal:

[0230] Step 1: Receive RRC signaling configuration information from the base station side or the opposite UE, and determine that a specific bearer can perform partial data integrity protection based on the RRC signaling configuration information, or, through the upper layer PC5-S, learn that some bearers can perform integrity protection.

[0231] Step 2: Receive the data from the sending terminal, according to the INT in the PDCP header indic The PDCP PDU is integrity protected. If integrity protection is performed on the PDCP PDU, the PDCP PDU is integrity verified. If the integrity verification fails, the PDCP PDU is discarded.

[0232] Embodiment 4: Data using different integrity protection processing modes is mapped to different RLC entities (downlink transmission);

[0233] Base station side:

[0234] Step 1: The base station notifies the terminal through RRC signaling that a specific SRB or DRB can perform partial data integrity protection, and indicates that the data with and without integrity protection are mapped to RLC1 and RLC2 respectively. RLC1 and RLC2 correspond to logical channel 1 (Logical Channel, LCH1) and LCH2 respectively.

[0235] Step 2: When sending downlink data, the base station determines whether the data packet requires integrity protection based on higher-layer information. As shown in Figure 8, data requiring integrity protection is mapped to RLC1 and transmitted via logical channel LCH1; data not requiring integrity protection is mapped to RLC2 and transmitted via logical channel LCH2.

[0236] Terminal side:

[0237] Step 1: Receive the RRC signaling configured on the base station side, and determine based on the RRC signaling that a specific SRB or DRB can perform partial data integrity protection, and map the data with and without integrity protection to RLC1 and RLC2 respectively. RLC1 and RLC2 correspond to logical channels LCH1 and LCH2 respectively.

[0238] Step 2: As shown in Figure 8, downlink data transmission is received via logical channels LCH1 and LCH2. The PDCP layer performs integrity protection verification on the data delivered by RLC1 to the PDCP layer. If the integrity protection fails, the data packet is discarded. If the integrity protection fails, the data packet is processed by the PDCP layer (such as sorting, duplicate detection, and delivery to higher layers) along with the data delivered by RLC2.

[0239] Embodiment 5: Mapping data using different integrity protection processing modes to different RLC entities (uplink transmission);

[0240] Base station side:

[0241] Step 1: The base station notifies the terminal through RRC signaling that a specific SRB or DRB can perform partial data integrity protection, and indicates that the data to be integrity protected and the data not to be integrity protected are mapped to RLC1 and RLC2 respectively. RLC1 and RLC2 correspond to logical channels LCH1 and LCH2 respectively.

[0242] Step 2: Receive uplink data transmission via logical channels LCH1 and LCH2. The PDCP layer performs integrity protection verification on the data delivered by RLC1 to the PDCP layer. If the integrity protection fails, the data packet is discarded. If the integrity protection fails, the data packet is processed by the PDCP layer (such as sorting, duplicate detection, and delivery to higher layers) along with the data delivered by RLC2.

[0243] Terminal side:

[0244] Step 1: Receive the RRC signaling configuration on the base station side, determine that a specific SRB or DRB can perform partial data integrity protection, and map the data with and without integrity protection to RLC1 and RLC2 respectively. RLC1 and RLC2 correspond to logical channels LCH1 and LCH2 respectively.

[0245] Step 2: When sending uplink data, the system determines whether integrity protection is required based on higher-layer information (such as the importance of the data packet). Data requiring integrity protection is mapped to RLC1 and transmitted via logical channel LCH1; data not requiring integrity protection is mapped to RLC2 and transmitted via logical channel LCH2.

[0246] Embodiment 6: Data using different integrity protection processing modes is mapped to different RLC entities (through link transmission);

[0247] Sending terminal:

[0248] Step 1: Receive an RRC message sent by a base station or a control terminal, and determine that a specific bearer can perform partial data integrity protection according to the RRC message, or, through the upper layer PC5-S, learn that some bearers can perform integrity protection.

[0249] Step 2: When sending data, determine whether the data packet needs to be integrity protected. Data that needs integrity protection is mapped to RLC1 and transmitted through logical channel LCH1; data that does not need integrity protection is mapped to RLC2 and transmitted through logical channel LCH2.

[0250] Receiving terminal:

[0251] Step 1: Receive RRC signaling configuration information from the base station side or the opposite UE, and determine that a specific bearer can perform partial data integrity protection based on the RRC signaling configuration information, or, through the upper layer PC5-S, learn that some bearers can perform integrity protection.

[0252] Step 2: Receive downlink data transmission via logical channels LCH1 and LCH2. The PDCP layer performs integrity protection verification on the data delivered by RLC1 to the PDCP layer. If the integrity protection fails, the data packet is discarded. If the integrity protection fails, the data packet is processed by the PDCP layer (such as sorting, duplicate detection, and delivery to higher layers) along with the data delivered by RLC2.

[0253] The solution of the disclosed embodiments can perform integrity protection on a portion of data carried by a specific bearer. PDCP PDUs using different integrity protection methods are sent using different transmission modes. Based on the transmission mode, the receiving end can identify whether a received PDCP PDU is integrity protected and only perform integrity protection verification on integrity-protected data. This ensures data transmission security while simultaneously reducing data processing latency and air interface resource overhead.

[0254] As shown in FIG9 , the embodiment of the present disclosure further provides a data processing method, which is executed by a receiving end. The method includes:

[0255] Step 901: Acquire one or more of an integrity-protected PDCP PDU, a partially integrity-protected PDCP PDU, and a non-integrity-protected PDCP PDU according to a transmission format corresponding to a Packet Data Convergence Protocol Protocol Data Unit (PDCP PDU);

[0256] The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

[0257] The PDCP PDU is generated by performing partial integrity protection on the Packet Data Convergence Protocol Service Data Unit (PDCP SDU) data in a specific bearer at the transmitting end.

[0258] The transmitting end in the embodiment of the present disclosure may be a base station or a terminal. The receiving end may be a terminal or a base station.

[0259] As an implementation method, the above-mentioned transmitting end is a base station and the receiving end is a terminal; or, the above-mentioned transmitting end is a terminal and the receiving end is a base station; or, the above-mentioned transmitting end and receiving end are both terminals (both communicate through a direct link or a PC5 link).

[0260] In some embodiments, the above-mentioned sending form includes the sending format of PDCP PDU and the sending method of PDCP PDU.

[0261] In the embodiment of the present disclosure, since PDCP PDUs using different integrity protection processing methods are sent using different sending forms, the receiving end can identify whether the received PDCP PDU has been integrity protected based on the sending form, and only perform integrity protection verification on the integrity-protected data. In this way, while ensuring the security of data transmission, it is possible to take into account the reduction of data processing delay and the reduction of air interface resource overhead.

[0262] In some embodiments, obtaining, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection performed, a PDCP PDU with partial data integrity protection performed, and a PDCP PDU without integrity protection performed, includes one or more of the following:

[0263] Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected;

[0264] Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected;

[0265] According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

[0266] In an embodiment of the present disclosure, the transmitting end maps the PDCP PDU with integrity protection to the first radio link control layer protocol RLC entity for transmission, maps the PDCP PDU without integrity protection to the second RLC entity for transmission, and maps the PDCP PDU with partial data integrity protected to the third RLC entity for transmission. Accordingly, the receiving end can obtain the PDCP PDU with different integrity protection processing methods based on the mapping relationship between the PDCP PDU with different integrity protection processing methods and the RLC entity.

[0267] In some embodiments, the method of the present disclosure further includes:

[0268] In a case where the receiving end is a network-side device, configuration information of a mapping relationship is sent to the terminal, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU with integrity protection to a first RLC entity; mapping a PDCP PDU without integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity.

[0269] Alternatively, when the receiving end is a terminal, the mapping relationship configured by the receiving network side is received.

[0270] Based on the above mapping relationship, the sending end can map the PDCP PDU with integrity protection, without integrity protection, or with partial data integrity protection to different RLC entities (corresponding to different logical channels) for transmission, so that the receiving end can identify whether the PDCP PDU is integrity protected based on the corresponding logical channel.

[0271] In some embodiments, obtaining, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection performed, a PDCP PDU with partial data integrity protection performed, and a PDCP PDU without integrity protection performed, includes one or more of the following:

[0272] Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU;

[0273] Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected;

[0274] According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected

[0275] The first indication information is used to indicate that the data in the PDCP PDU is integrity protected;

[0276] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0277] The third indication information is used to indicate at least one of the following:

[0278] Integrity protection is performed on part of the data in the PDCP PDU;

[0279] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0280] In some embodiments, the location information includes at least one of the following:

[0281] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0282] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0283] In an embodiment of the present disclosure, the transmitting end uses different transmission formats (adding different indication information) to send PDCP PDUs using different integrity protection processing methods, so that the receiving end determines whether the PDCP PDU is integrity protected based on the transmission format of the received PDCP PDU.

[0284] In some embodiments, the method of the present disclosure further includes:

[0285] When the receiving end is a network-side device, sending activation signaling for performing partial integrity protection on a specific bearer to the terminal, where the activation signaling is used to determine that a sending mode corresponding to the PDCP PDU is effective;

[0286] Alternatively, when the receiving end is a terminal, the activation signaling sent by the network side is received, and the sending mode corresponding to the PDCP PDU is determined to be effective according to the activation signaling.

[0287] For example, when the sending end is a terminal, the mapping relationship between the PDCP PDU and the RLC entity configured on the network side is determined to be effective according to the activation signaling, or the indication information that needs to be included in the PDCP PDU is determined according to the activation signaling, and the indication information is the above-mentioned first indication information, second indication information or third indication information.

[0288] In the embodiment of the present disclosure, the above-mentioned activation signaling can be RRC signaling, which can take effect immediately after configuration, or can be activated through layer 2 signaling, such as through the media access control control unit (MAC Control Element, MAC CE), or can be activated through physical layer signaling, such as through the physical downlink control channel (Physical downlink control channel, PDCCH).

[0289] Here, based on the above-mentioned activation signaling, the transmitting end and the receiving end can transmit the PDCP PDU based on the corresponding transmission form of the PDCP PDU, for example, using different transmission methods (i.e., mapping to different RLC entity transmission methods) to send PDCP PDUs with integrity protection, PDCP PDUs with partial data integrity protection, and PDCP PDUs without integrity protection, or using different transmission formats (such as adding different indication information in the PDCP header) to send PDCP PDUs with integrity protection, PDCP PDUs with partial data integrity protection, and PDCP PDUs without integrity protection.

[0290] It should be noted that the interaction process between the sending end and the receiving end has been described in detail in the embodiment of the sending end and will not be repeated here.

[0291] As shown in FIG10 , an embodiment of the present disclosure provides a data processing device, which is applied to a terminal and includes a memory 1020 , a transceiver 1000 , and a processor 1010 ;

[0292] The memory 1020 is used to store computer programs; the transceiver 1000 is used to send and receive data under the control of the processor 1010;

[0293] When the terminal is a transmitting end, the processor 1010 is configured to read the computer program in the memory 1020 and perform the following operations:

[0294] Partial integrity protection is performed on the packet data convergence protocol service data unit PDCP SDU data in a specific bearer to generate a packet data convergence protocol protocol data unit PDCP PDU; the PDCP PDU is sent according to the sending form corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending forms.

[0295] In some embodiments, the processor further implements one or more of the following:

[0296] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer;

[0297] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer, and not performing integrity protection on each SDU in the second part of the PDCP SDUs of the specific bearer;

[0298] performing integrity protection on a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer;

[0299] Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

[0300] In some embodiments, the specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

[0301] In some embodiments, the processor further implements one or more of the following:

[0302] Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission;

[0303] Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission;

[0304] The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

[0305] In some embodiments, the processor further implements the following steps:

[0306] Obtain a mapping relationship configured on the network side, where the mapping relationship is used to indicate one or more of the following: mapping the PDCP PDU with integrity protection to the first RLC entity; mapping the PDCP PDU without integrity protection to the second RLC entity; mapping the PDCP PDU with partial data integrity protected to the third RLC entity.

[0307] In some embodiments, the processor further implements one or more of the following:

[0308] Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end;

[0309] Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end;

[0310] adding the third indication information to the PDCP PDU to which the partial data carrying the third indication information is integrity protected and sending the result to the receiving end;

[0311] The first indication information is used to indicate that all data in the PDCP PDU is integrity protected;

[0312] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0313] The third indication information is used to indicate at least one of the following:

[0314] Integrity protection is performed on part of the data in the PDCP PDU;

[0315] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0316] In some embodiments, the location information includes at least one of the following:

[0317] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0318] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0319] In some embodiments, the processor further implements the following steps:

[0320] Receive activation signaling for partial integrity protection of a specific bearer sent by a network side; and determine, based on the activation signaling, whether a sending mode corresponding to the PDCP PDU is effective.

[0321] When the terminal is a receiving end, the processor 1010 is configured to read the computer program in the memory 1020 and perform the following operations:

[0322] Acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection, a PDCP PDU with partial data integrity protection, and a PDCP PDU without integrity protection;

[0323] The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

[0324] In some embodiments, the processor further implements one or more of the following:

[0325] Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected;

[0326] Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected;

[0327] According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

[0328] In some embodiments, the processor further implements the following steps:

[0329] Receive the mapping relationship configured by the network side.

[0330] In some embodiments, the processor further implements one or more of the following:

[0331] Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU;

[0332] Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected;

[0333] According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected

[0334] The first indication information is used to indicate that the data in the PDCP PDU is integrity protected;

[0335] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0336] The third indication information is used to indicate at least one of the following:

[0337] Integrity protection is performed on part of the data in the PDCP PDU;

[0338] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0339] In some embodiments, the location information includes at least one of the following:

[0340] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0341] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0342] In some embodiments, the processor further implements the following steps:

[0343] Receive the activation signaling sent by the network side, and determine, according to the activation signaling, that the sending mode corresponding to the PDCP PDU is effective.

[0344] In FIG10 , the bus architecture may include any number of interconnected buses and bridges, specifically linking together various circuits of one or more processors represented by processor 1010 and memory represented by memory 1020. The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 1000 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices over a transmission medium, such as a wireless channel, a wired channel, an optical cable, and the like. For different user devices, the user interface 1030 may also be an interface capable of connecting to required external or internal devices, including but not limited to a keypad, a display, a speaker, a microphone, a joystick, and the like.

[0345] The processor 1010 is responsible for managing the bus architecture and general processing, and the memory 1020 can store data used by the processor 1010 when performing operations.

[0346] Optionally, the processor 1010 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD), and the processor may also adopt a multi-core architecture.

[0347] The processor calls the computer program stored in the memory to execute any of the methods provided by the embodiments of the present disclosure according to the obtained executable instructions. The processor and the memory can also be arranged physically separately.

[0348] It should be noted here that the above-mentioned device provided in the embodiment of the present disclosure can implement all the method steps implemented in the data processing method embodiment when the sending end or the receiving end is a terminal, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as those of the method embodiment will not be described in detail here.

[0349] As shown in FIG11 , an embodiment of the present disclosure further provides a data processing device, which is applied to a network-side device. The device includes a memory 1120 , a transceiver 1100 , and a processor 1110 ;

[0350] The memory 1120 is used to store computer programs; the transceiver 1100 is used to send and receive data under the control of the processor;

[0351] When the network-side device is a transmitting end, the processor 1010 is configured to read the computer program in the memory 1020 and perform the following operations:

[0352] Partial integrity protection is performed on the packet data convergence protocol service data unit PDCP SDU data in a specific bearer to generate a packet data convergence protocol protocol data unit PDCP PDU; the PDCP PDU is sent according to the sending form corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending forms.

[0353] In some embodiments, the processor further implements one or more of the following:

[0354] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer;

[0355] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer, and not performing integrity protection on each SDU in the second part of the PDCP SDUs of the specific bearer;

[0356] performing integrity protection on a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer;

[0357] Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

[0358] In some embodiments, the specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

[0359] In some embodiments, the processor further implements one or more of the following:

[0360] Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission;

[0361] Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission;

[0362] The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

[0363] In some embodiments, the processor further implements the following steps:

[0364] Send configuration information of the mapping relationship to the terminal.

[0365] In some embodiments, the processor further implements one or more of the following:

[0366] Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end;

[0367] Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end;

[0368] adding the third indication information to the PDCP PDU to which the partial data carrying the third indication information is integrity protected and sending the result to the receiving end;

[0369] The first indication information is used to indicate that all data in the PDCP PDU is integrity protected;

[0370] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0371] The third indication information is used to indicate at least one of the following:

[0372] Integrity protection is performed on part of the data in the PDCP PDU;

[0373] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0374] In some embodiments, the location information includes at least one of the following:

[0375] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0376] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0377] In some embodiments, the processor further implements the following steps:

[0378] The activation signaling for performing partial integrity protection on the specific bearer is sent to the terminal.

[0379] When the network-side device is a receiving end, the processor 1010 is configured to read the computer program in the memory 1020 and perform the following operations:

[0380] Acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection, a PDCP PDU with partial data integrity protection, and a PDCP PDU without integrity protection;

[0381] The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

[0382] In some embodiments, the processor further implements one or more of the following:

[0383] Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected;

[0384] Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected;

[0385] According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

[0386] In some embodiments, the processor further implements the following steps:

[0387] Configuration information of a mapping relationship is sent to the terminal, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU with integrity protection to a first RLC entity; mapping a PDCP PDU without integrity protection to a second RLC entity; mapping a PDCP PDU with partial data integrity protected to a third RLC entity.

[0388] In some embodiments, the processor further implements one or more of the following:

[0389] Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU;

[0390] Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected;

[0391] According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected

[0392] The first indication information is used to indicate that the data in the PDCP PDU is integrity protected;

[0393] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0394] The third indication information is used to indicate at least one of the following:

[0395] Integrity protection is performed on part of the data in the PDCP PDU;

[0396] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0397] In some embodiments, the location information includes at least one of the following:

[0398] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0399] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0400] In some embodiments, the processor further implements the following steps:

[0401] An activation signaling for performing partial integrity protection on a specific bearer is sent to the terminal, where the activation signaling is used to determine that a sending mode corresponding to the PDCP PDU is effective.

[0402] In FIG11 , the bus architecture may include any number of interconnected buses and bridges, specifically various circuits linked together by one or more processors represented by processor 1110 and memory represented by memory 1120. The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 1100 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices over a transmission medium, such as a wireless channel, a wired channel, an optical cable, and the like. The processor 1110 is responsible for managing the bus architecture and general processing, and the memory 1120 may store data used by the processor 1110 when performing operations.

[0403] The processor 1110 may be a CPU, an ASIC, an FPGA, or a CPLD, and the processor may also adopt a multi-core architecture.

[0404] It should be noted here that the above-mentioned device provided by the embodiment of the present disclosure can implement all the method steps implemented by the above-mentioned data processing method embodiment when the sending end or the receiving end is a network side device, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0405] As shown in FIG12 , an embodiment of the present disclosure further provides a data processing device, including:

[0406] The generating unit 1201 is configured to perform partial integrity protection on the packet data convergence protocol service data unit PDCP SDU data in a specific bearer to generate a packet data convergence protocol protocol data unit PDCP PDU;

[0407] The first sending unit 1202 is configured to send the PDCP PDU according to a sending mode corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending modes.

[0408] In some embodiments, the generating unit is configured to perform one or more of the following:

[0409] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer;

[0410] Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer, and not performing integrity protection on each SDU in the second part of the PDCP SDUs of the specific bearer;

[0411] performing integrity protection on a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer;

[0412] Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

[0413] In some embodiments, the specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

[0414] In some embodiments, the first sending unit is configured to perform one or more of the following:

[0415] Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission;

[0416] Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission;

[0417] The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

[0418] In some embodiments, the apparatus of the present disclosure further includes:

[0419] a second acquiring unit, configured to, when the transmitting end is a terminal, acquire a mapping relationship configured on the network side, the mapping relationship being used to indicate one or more of the following: mapping the PDCP PDU with integrity protection to the first RLC entity; mapping the PDCP PDU without integrity protection to the second RLC entity; and mapping the PDCP PDU with partial data integrity protected to the third RLC entity;

[0420] Alternatively, the second sending unit is configured to send configuration information of the mapping relationship to the terminal when the sending end is a network side device.

[0421] In some embodiments, the first sending unit is configured to perform one or more of the following:

[0422] Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end;

[0423] Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end;

[0424] adding the third indication information to the PDCP PDU to which the partial data carrying the third indication information is integrity protected and sending the result to the receiving end;

[0425] The first indication information is used to indicate that all data in the PDCP PDU is integrity protected;

[0426] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0427] The third indication information is used to indicate at least one of the following:

[0428] Integrity protection is performed on part of the data in the PDCP PDU;

[0429] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0430] In some embodiments, the location information includes at least one of the following:

[0431] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0432] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0433] In some embodiments, the apparatus of the present disclosure further includes:

[0434] A third acquiring unit is configured to, when the transmitting end is a terminal, receive activation signaling for performing partial integrity protection on a specific bearer sent by a network side; and determine, based on the activation signaling, that a sending mode corresponding to the PDCP PDU is effective;

[0435] Alternatively, the third sending unit is configured to send the activation signaling for performing partial integrity protection on a specific bearer to the terminal when the sending end is a network side device.

[0436] It should be noted here that the above-mentioned device provided in the embodiment of the present disclosure can implement all the method steps implemented in the above-mentioned data processing method embodiment applied to the sending end, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0437] As shown in FIG13 , an embodiment of the present disclosure further provides a data processing device, including:

[0438] The first acquiring unit 1301 is configured to acquire, according to a transmission mode corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection performed, a PDCP PDU with partial data integrity protection performed, and a PDCP PDU without integrity protection performed;

[0439] The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

[0440] In some embodiments, the first acquiring unit is configured to perform one or more of the following:

[0441] Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected;

[0442] Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected;

[0443] According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

[0444] In some embodiments, the apparatus of the present disclosure further includes:

[0445] a fourth sending unit, configured to, when the receiving end is a network-side device, send configuration information of a mapping relationship to the terminal, where the mapping relationship is used to indicate one or more of the following: mapping the PDCP PDU with integrity protection to the first RLC entity; mapping the PDCP PDU without integrity protection to the second RLC entity; and mapping the PDCP PDU with partial data integrity protected to the third RLC entity;

[0446] Alternatively, the fourth acquiring unit is configured to receive the mapping relationship configured by the network side when the receiving end is a terminal.

[0447] In some embodiments, the first acquiring unit is configured to perform one or more of the following:

[0448] Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU;

[0449] Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected;

[0450] According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected

[0451] The first indication information is used to indicate that the data in the PDCP PDU is integrity protected;

[0452] The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU;

[0453] The third indication information is used to indicate at least one of the following:

[0454] Integrity protection is performed on part of the data in the PDCP PDU;

[0455] The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

[0456] In some embodiments, the location information includes at least one of the following:

[0457] The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer;

[0458] The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

[0459] In some embodiments, the apparatus of the present disclosure further includes:

[0460] a fifth sending unit, configured to, when the receiving end is a network-side device, send, to the terminal, activation signaling for performing partial integrity protection on a specific bearer, wherein the activation signaling is used to determine that a sending mode corresponding to the PDCP PDU is effective;

[0461] Alternatively, the fifth acquisition unit is configured to, when the receiving end is a terminal, receive the activation signaling sent by the network side, and determine, based on the activation signaling, that the sending format corresponding to the PDCP PDU is effective.

[0462] It should be noted here that the above-mentioned device provided by the embodiment of the present disclosure can implement all the method steps implemented by the above-mentioned data processing method embodiment applied to the receiving end, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0463] It should be noted that the division of units in the embodiments of the present disclosure is schematic and is merely a logical functional division. In actual implementation, other division methods may be used. Furthermore, the functional units in the various embodiments of the present disclosure may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0464] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of the present disclosure is essentially or the part that contributes to the relevant technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute all or part of the steps of the method described in each embodiment of the present disclosure. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0465] In some embodiments of the present disclosure, a processor-readable storage medium is also provided, which stores program instructions. The program instructions are used to enable the processor to execute all the steps implemented by the above-mentioned method embodiment executed by the sending end or all the steps implemented by the method embodiment executed by the receiving end, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0466] The embodiments of the present disclosure also provide a computer program product, including computer instructions. When the computer instructions are executed by a processor, the various processes of the method embodiments executed by the above-mentioned sending end or receiving end are implemented, and the same technical effects can be achieved. To avoid repetition, they will not be described here.

[0467] The terminal device involved in the embodiments of the present disclosure may be a device that provides voice and / or data connectivity to a user, a handheld device with wireless connection function, or other processing device connected to a wireless modem. In different systems, the name of the terminal device may also be different. For example, in a 5G system, the terminal device may be called User Equipment (UE). A wireless terminal device can communicate with one or more core networks (CN) via a radio access network (RAN). The wireless terminal device may be a mobile terminal device, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal device. For example, it may be a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device that exchanges voice and / or data with a radio access network. For example, Personal Communication Service (PCS) phones, cordless phones, Session Initiated Protocol (SIP) phones, Wireless Local Loop (WLL) stations, Personal Digital Assistants (PDAs), and other devices. The wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, a remote terminal device, an access terminal device, a user terminal device, a user agent, or a user device, but is not limited in the embodiments of the present disclosure.

[0468] The network device (or network-side device) involved in the embodiments of the present disclosure may be a base station, which may include multiple cells providing services to terminals. Depending on the specific application scenario, the base station may also be called an access point, or may be a device in an access network that communicates with a wireless terminal device through one or more sectors on an air interface, or may be called another name. The network device may be used to interchange received air frames with Internet Protocol (IP) packets, acting as a router between the wireless terminal device and the rest of the access network, where the rest of the access network may include an IP communication network. The network device may also coordinate attribute management of the air interface. For example, the network device involved in the embodiments of the present disclosure may be a base transceiver station (BTS) in the Global System for Mobile communications (GSM) or code division multiple access (CDMA), a network device (NodeB) in wide-band code division multiple access (WCDMA), an evolutionary Node B (eNB or e-NodeB) in the Long Term Evolution (LTE) system, a 5G base station (gNB) in the 5G network architecture (next generation system), a home evolved Node B (HeNB), a relay node, a femto, a pico, etc., and is not limited in the embodiments of the present disclosure. In some network structures, the network device may include a centralized unit (CU) node and a distributed unit (DU) node, and the centralized unit and the distributed unit may also be geographically separated.

[0469] Network devices and terminal devices can each use one or more antennas for Multiple Input Multiple Output (MIMO) transmission. MIMO transmission can be single-user MIMO (SU-MIMO) or multi-user MIMO (MU-MIMO). Depending on the form and number of antenna combinations, MIMO transmission can be two-dimensional MIMO (2D-MIMO), three-dimensional MIMO (3D-MIMO), full-dimensional MIMO (FD-MIMO), or massive MIMO. It can also use diversity transmission, precoded transmission, or beamforming transmission.

[0470] Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage and optical storage, etc.) containing computer-usable program code.

[0471] The present disclosure is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present disclosure. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer-executable instructions. These computer-executable instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0472] These processor-executable instructions may also be stored in a processor-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the processor-readable memory produce a product including an instruction device that implements the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0473] These processor-executable instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0474] In addition, it should be noted that, in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it will be understood that all or any steps or components of the method and apparatus of the present invention can be implemented in any computing device (including processors, storage media, etc.) or a network of computing devices in hardware, firmware, software or a combination thereof, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0475] It should be noted that it should be understood that the division of the above modules is merely a division of logical functions. In actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. Moreover, these modules can all be implemented in the form of software called by a processing element; or they can all be implemented in the form of hardware; or some modules can be implemented in the form of software called by a processing element, and some modules can be implemented in the form of hardware. For example, a module can be a separately established processing element, or it can be integrated into a chip of the above-mentioned device. In addition, it can also be stored in the memory of the above-mentioned device in the form of program code, and called by a processing element of the above-mentioned device to perform the functions of the above-mentioned module. The implementation of other modules is similar. In addition, these modules can all or partly be integrated together, or they can be implemented independently. The processing element described here can be an integrated circuit with signal processing capabilities. During implementation, each step of the above method or each module above can be completed by an integrated logic circuit of hardware in the processor element or instructions in the form of software.

[0476] For example, each module, unit, sub-unit or sub-module can be one or more integrated circuits configured to implement the above method, such as one or more application-specific integrated circuits (ASICs), one or more digital signal processors (DSPs), or one or more field programmable gate arrays (FPGAs). For another example, when a module is implemented by scheduling program code through a processing element, the processing element can be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call program code. For another example, these modules can be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0477] Obviously, those skilled in the art may make various changes and modifications to the present disclosure without departing from the spirit and scope of the present disclosure. Thus, if these modifications and variations of the present disclosure fall within the scope of the claims of the present disclosure and their equivalents, the present disclosure is intended to include these modifications and variations.

Claims

1. A data processing method, executed by a transmitting end, comprising: Perform partial integrity protection on the packet data convergence protocol service data unit (PDCP) SDU data in a specific bearer to generate a packet data convergence protocol protocol data unit (PDCP PDU); Send the PDCP PDU according to a sending format corresponding to the PDCP PDU; The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

2. The method according to claim 1, wherein Partial integrity protection of the Packet Data Convergence Protocol Service Data Unit (PDCP) SDU data in a specific bearer, including one or more of the following: Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer; Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer, and not performing integrity protection on each SDU in the second part of the PDCP SDUs of the specific bearer; performing integrity protection on a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer; Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

3. The method according to claim 1, wherein The specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

4. The method according to claim 1, wherein The sending of the PDCP PDU according to a sending format corresponding to the PDCP PDU includes one or more of the following: Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission; Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission; The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

5. The method according to claim 4, further comprising: When the transmitting end is a terminal, obtaining a mapping relationship configured on the network side, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU that performs integrity protection to a first RLC entity; mapping a PDCP PDU that does not perform integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity. Alternatively, when the sending end is a network-side device, configuration information of the mapping relationship is sent to the terminal.

6. The method according to claim 1, wherein The sending of the PDCP PDU according to the sending mode corresponding to the PDCP PDU includes one or more of the following: Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end; Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end; Sending the PDCP PDU with integrity protection on the partial data carrying the third indication information to the receiving end; The first indication information is used to indicate that all data in the PDCP PDU is integrity protected; The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU; The third indication information is used to indicate at least one of the following: Integrity protection is performed on part of the data in the PDCP PDU; The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

7. The method according to claim 6, wherein: The location information includes at least one of the following: The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer; The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

8. The method according to claim 1, further comprising: When the sending end is a terminal, receiving activation signaling for performing partial integrity protection on a specific bearer sent by a network side; Determining, according to the activation signaling, that a sending mode corresponding to the PDCP PDU is effective; Alternatively, when the sending end is a network-side device, the activation signaling for performing partial integrity protection on a specific bearer is sent to the terminal.

9. A data processing method, performed by a receiving end, comprising: Acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection, a PDCP PDU with partial data integrity protection, and a PDCP PDU without integrity protection; The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

10. The method according to claim 9, wherein: Obtaining, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of an integrity-protected PDCP PDU, a PDCP PDU with partial data integrity-protected, and a PDCP PDU not integrity-protected, including one or more of the following: Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected; Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected; According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

11. The method according to claim 9, wherein Obtaining, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of an integrity-protected PDCP PDU, a PDCP PDU with partial data integrity-protected, and a PDCP PDU not integrity-protected, including one or more of the following: Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU; Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected; According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected The first indication information is used to indicate that the data in the PDCP PDU is integrity protected; The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU; The third indication information is used to indicate at least one of the following: Integrity protection is performed on part of the data in the PDCP PDU; The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

12. The method according to claim 11, wherein The location information includes at least one of the following: The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer; The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

13. The method according to claim 9, further comprising: When the receiving end is a network-side device, sending activation signaling for performing partial integrity protection on a specific bearer to the terminal, where the activation signaling is used to determine that a sending mode corresponding to the PDCP PDU is effective; Alternatively, when the receiving end is a terminal, the activation signaling sent by the network side is received, and the sending mode corresponding to the PDCP PDU is determined to be effective according to the activation signaling.

14. A data processing device comprising a memory, a transceiver, and a processor; Memory for storing computer programs; a transceiver, configured to transmit and receive data under the control of the processor; A processor is configured to read the computer program in the memory and perform the following operations: Perform partial integrity protection on the packet data convergence protocol service data unit (PDCP) SDU data in a specific bearer to generate a packet data convergence protocol protocol data unit (PDCP PDU); The PDCP PDU is sent according to a sending mode corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending modes.

15. The device according to claim 14, wherein The processor also implements one or more of the following: Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer; Performing integrity protection on each SDU in the first part of the PDCP SDUs of the specific bearer, and not performing integrity protection on each SDU in the second part of the PDCP SDUs of the specific bearer; performing integrity protection on a portion of data of each SDU in at least a portion of the PDCP SDUs of the specific bearer; Integrity protection is performed on part of the data of each SDU in the third part of the PDCP SDU of the specific bearer, and no integrity protection is performed on each SDU in the fourth part of the PDCP SDU of the specific bearer.

16. The device according to claim 14, wherein The specific bearer is a bearer configured by the network side that can perform partial integrity protection, and the specific bearer includes a signaling bearer SRB or a data bearer DRB.

17. The device according to claim 14, wherein The processor also implements one or more of the following: Mapping the integrity-protected PDCP PDU to a first radio link control layer protocol RLC entity for transmission; Mapping the PDCP PDU that is not integrity protected to the second RLC entity for transmission; The PDCP PDU with partial data integrity protected is mapped to the third RLC entity for transmission.

18. The device according to claim 17, wherein The processor further implements the following steps: When the transmitting end is a terminal, obtaining a mapping relationship configured on the network side, where the mapping relationship is used to indicate one or more of the following: mapping a PDCP PDU with integrity protection to a first RLC entity; mapping a PDCP PDU without integrity protection to a second RLC entity; and mapping a PDCP PDU with partial data integrity protected to a third RLC entity. Alternatively, when the sending end is a network-side device, configuration information of the mapping relationship is sent to the terminal.

19. The device according to claim 14, wherein The processor also implements one or more of the following: Sending the integrity-protected PDCP PDU carrying the first indication information to the receiving end; Sending the PDCP PDU that is not integrity protected and carries the second indication information to the receiving end; adding the third indication information to the PDCP PDU to which the partial data carrying the third indication information is integrity protected and sending the result to the receiving end; The first indication information is used to indicate that all data in the PDCP PDU is integrity protected; The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU; The third indication information is used to indicate at least one of the following: Integrity protection is performed on part of the data in the PDCP PDU; The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

20. The device according to claim 19, wherein The location information includes at least one of the following: The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer; The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

21. The apparatus according to claim 14, wherein The processor further implements the following steps: When the transmitting end is a terminal, receiving activation signaling for performing partial integrity protection on a specific bearer sent by a network side; determining, according to the activation signaling, that a sending mode corresponding to the PDCP PDU is effective; Alternatively, when the sending end is a network-side device, the activation signaling for performing partial integrity protection on a specific bearer is sent to the terminal.

22. A data processing device comprising a memory, a transceiver, and a processor; memory for storing computer programs; a transceiver, configured to transmit and receive data under the control of the processor; and a processor, configured to read the computer program in the memory and perform the following operations: Acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection, a PDCP PDU with partial data integrity protection, and a PDCP PDU without integrity protection; The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

23. The device according to claim 22, wherein Obtaining, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of an integrity-protected PDCP PDU, a PDCP PDU with partial data integrity-protected, and a PDCP PDU not integrity-protected, including one or more of the following: Acquire, according to data sent by the first RLC entity, a PDCP PDU that is integrity protected; Acquire, according to data sent by the second RLC entity, a PDCP PDU that is not integrity protected; According to the data sent by the third RLC entity, a PDCP PDU in which integrity protection is performed on part of the data is obtained.

24. The apparatus according to claim 22, wherein The processor also implements one or more of the following: Acquire, according to the first indication information in the PDCP PDU, the integrity-protected PDCP PDU; Acquire, according to the second indication information in the PDCP PDU, a PDCP PDU that is not integrity protected; According to the third indication information in the PDCP PDU, obtain the PDCP PDU with partial data integrity protected The first indication information is used to indicate that the data in the PDCP PDU is integrity protected; The second indication information is used to indicate that integrity protection is not performed on the PDCP PDU; The third indication information is used to indicate at least one of the following: Integrity protection is performed on part of the data in the PDCP PDU; The length, proportion and / or position information of the partial data on which integrity protection is performed in the PDCP PDU, the proportion being the ratio of the data length of the partial data to the data length of the PDCP SDU, and the position information being the position information of the partial data in the data of the PDCP SDU.

25. The apparatus according to claim 24, wherein The location information includes at least one of the following: The first K1 bits or bytes of the data of the PDCP SDU, where K1 is an integer; The last K2 bits or bytes of the data of the PDCP SDU, where K2 is an integer.

26. A data processing device, characterized in that: include: a generating unit, configured to perform partial integrity protection on packet data convergence protocol service data unit (PDCP SDU) data in a specific bearer and generate a packet data convergence protocol protocol data unit (PDCP PDU); The first sending unit is configured to send the PDCP PDU according to a sending mode corresponding to the PDCP PDU, wherein the PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different sending modes.

27. A data processing device, characterized in that: include: a first acquiring unit, configured to acquire, according to a transmission form corresponding to a packet data convergence protocol protocol data unit (PDCP PDU), one or more of a PDCP PDU with integrity protection performed, a PDCP PDU with partial data integrity protection performed, and a PDCP PDU without integrity protection performed; The PDCP PDU with integrity protection, the PDCP PDU with partial data integrity protection, and the PDCP PDU without integrity protection correspond to different transmission modes.

28. A processor-readable storage medium, characterized in that: The processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the steps of the data processing method according to any one of claims 1 to 8, or to execute the steps of the data processing method according to any one of claims 9 to 13.

Images