Network Node Operator Policy for User Plane Integrity Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current LTE systems lack support for user plane integrity protection, necessitating modifications in UE, MME, and eNB operations to maintain reliable service for legacy devices not supporting this feature, while introducing integrity protection in 5G systems.
Innovation Solution
Configuring operator policies to set user plane integrity protection as 'preferred' or 'not required' for legacy UEs, allowing network nodes to manage compatibility and ensure seamless service by communicating these settings across the network, ensuring compatibility with both upgraded and legacy systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user plane integrity protection is introduced in LTE systems, then security protection capability is improved, but compatibility with legacy UEs is worsened
Solution Approach 1:
The patent applies local quality by configuring different user plane integrity protection settings for different UEs based on their capabilities. The network node sets the UP IP parameter to 'required' for UEs supporting integrity protection and 'not required' or 'preferred' for legacy UEs, allowing localized optimization without affecting the entire system uniformly.
Solution Approach 2:
The patent implements dynamics by making the UP IP configuration flexible and adaptive rather than static. The network node dynamically adjusts the integrity protection requirement based on UE capability indicators received during connection establishment, enabling the system to adapt to different device types and evolution stages.
2Adaptability or versatility
If operator policies are configured to accept legacy UEs, then network coverage and user base are improved, but security protection coverage is worsened
Solution Approach 1:
The patent uses the UP IP parameter as an intermediary mechanism between legacy UEs and the security protection system. This parameter acts as a bridge that allows legacy UEs to connect to the network while clearly indicating their lack of integrity protection capability, enabling the network to provide alternative security measures or informed risk management.
Solution Approach 2:
The patent applies parameter changes by modifying the UP IP configuration parameter based on UE capability. By changing this parameter from 'required' to 'preferred' or 'not required' for legacy UEs, the system maintains backward compatibility while preserving the option to enforce integrity protection for capable UEs, thus balancing coverage and security.
3Reliability
If UP IP is set to 'required' for all UEs, then security enforcement is improved, but device compatibility and network accessibility are worsened
Solution Approach 1:
The patent applies partial action by enforcing user plane integrity protection only for UEs that support it, rather than universally for all UEs. This selective enforcement allows the system to achieve security benefits for capable devices without preventing legacy devices from accessing the network, thus avoiding excessive action that would exclude incompatible devices.
Data Source
AI summary
A network node in a wireless communication system configures an operator policy to indicate whether to accept legacy user equipments, UEs, that do not support user plane integrity protection, UP IP, and it sets UP IP to be either “preferred” or “not required” of a UP security policy based on the operator policy indicating acceptance of legacy UEs and in response to a communication related to a legacy UE.