CU-DU Split UP Security for MO-EDT via HASHDATA Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless communication systems face challenges in supporting UP security for MO-EDT in CU-DU split scenarios, particularly in verifying UE identity and restoring UE context without a W1/F1 connection between the DU and CU, as there is no HASHDATA available in the CU or gNB-CU(-CP).
Innovation Solution
A method where the CU or CU-CP receives a PDCP Data PDU from the DU, calculates HASHDATA, verifies the Short MAC-I, and transmits messages to setup or release UE contexts, allowing the DU to forward PDCP Data PDU to CU or CU-UP for further processing, thereby enabling UP security for MO-EDT in CU-DU split environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the CU or gNB-CU(-CP) restores UE context and re-establishes AS security to setup W1/F1 connection, then the connection can be established, but additional signaling is required and time is consumed
Solution Approach 1:
The DU calculates HASHDATA in advance from the PDCP Data PDU before the W1/F1 connection is established, so that when the connection is restored, the HASHDATA is already available for immediate verification of ShortResumeMAC-I, eliminating the need for additional signaling and time-consuming procedures
2Productivity
If the DU forwards PDCP Data PDU to CU without W1/F1 connection, then data transmission can proceed, but HASHDATA is not available in CU for verifying UE identity
Solution Approach 1:
The DU acts as an intermediary by calculating HASHDATA from the PDCP Data PDU and making it available to the CU through the existing interface, enabling verification of UE identity without requiring a pre-established W1/F1 connection
Data Source
AI summary
A method and apparatus supporting UP security for MO-EDT in CU-DU split in a wireless communication system. A central unit (CU) receives, from a distributed unit (DU), a first message including a PDCP Data PDU, wherein the PDCP Data PDU is configured by a wireless device. A CU calculates a HASHDATA from the PDCP Data PDU. A CU verifies a Short MAC-I of the wireless device based on the HASHDATA. A CU transmits, to the DU, a second message to setup a UE context for the wireless device in the DU based on the verification.