5G User Plane Data Integrity Protection via Selective Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In 5G networks, high data rate user plane data integrity protection causes processing overload and potential service disruption due to high power consumption and transmission delay, with existing methods unable to handle data rates beyond defined limitations.

Innovation Solution

A method for configuring integrity protection settings and parameters in mobile communication devices and core network entities, which involves calculating and sending Message Authentication Codes (MAC-I) for user plane data, and deciding whether to perform integrity checks based on data rate, processing load, or importance, to optimize processing load and avoid service disruptions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If integrity protection is applied to user plane data at high data rates, then data security is improved, but processing load and power consumption increase causing service disruption

Engineering Contradiction:
Improvedata securityVSAvoidprocessing load
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent divides user plane data into multiple segments and applies integrity protection selectively to only certain segments (e.g., control plane data, important user data) rather than all data. This segmentation allows the system to maintain security for critical information while reducing the overall processing load and power consumption associated with integrity checks.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements partial integrity protection where MAC-I is calculated only for a subset of user plane data based on configured parameters and data importance. This partial action approach maintains adequate security levels while avoiding the excessive processing burden of applying integrity protection to all data at high data rates.

Inventive Principle:
Principle #16Partial or excessive action

2Reliability

If integrity protection is applied to user plane data, then data integrity is improved, but transmission delay increases

Engineering Contradiction:
Improvedata integrityVSAvoidtransmission delay
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

By segmenting data and applying integrity protection only to critical segments, the patent reduces the total time required for MAC-I calculation and verification, thereby lowering transmission delay while maintaining data integrity for essential information.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The selective application of integrity protection to only necessary data portions reduces the computational overhead and processing time, directly decreasing transmission delay while preserving data integrity where most needed.

Inventive Principle:
Principle #16Partial or excessive action

3Productivity

If maximum data rate limitation is defined for integrity protection, then processing overload is avoided, but services requiring high data rates cannot be supported

Engineering Contradiction:
Improveprocessing capacityVSAvoidservice support range
Core Design Contradiction:
ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent introduces dynamic adaptation mechanisms where the system can adjust integrity protection parameters (such as the proportion of data requiring MAC-I calculation) based on current data rates, service requirements, and network conditions. This allows the system to support high data rate services while maintaining processing capacity through flexible parameter configuration.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent enables parameter changes in integrity protection configuration, allowing the network to adjust protection levels, MAC-I calculation frequency, and data segment selection based on service type and data rate requirements. This parameter flexibility allows high data rate services to be supported without overwhelming processing capacity.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11722897B2Integrity protection for user plane data in 5G network
Publication Date: 2023.08.08 NEC CORP
  • US11722897B2 patent drawing
  • US11722897B2 patent drawing
  • US11722897B2 patent drawing

AI summary

A method for integrity protection scheme by a mobile communication device or a core network entity according to a first exemplary aspect of the present disclosure includes configuring settings and parameters for integrity protection for user data with another party; receiving user plane data from the other party, calculating Message Authentication Code for Integrity (MAC-I) for a part of the data and checking integrity of the part of the data.