Partial Integrity Protection for Cellular Network PDUs

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current security mechanisms in cellular networks, such as full integrity protection, often compromise data transmission speed, making it challenging to prevent attacks like man-in-the-middle attacks while maintaining high throughput.

Innovation Solution

Implementing partial integrity protection, where integrity protection is applied only to specific predetermined packet data units (PDUs) within a communication session, rather than all PDUs, to balance security and speed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If full integrity protection is applied to all PDUs, then network security is improved, but data transmission speed deteriorates

Engineering Contradiction:
Improvenetwork securityVSAvoiddata transmission speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the data transmission stream into different types of PDUs (control plane PDUs and user plane PDUs) and applies integrity protection selectively to control plane PDUs only. This segmentation allows the system to maintain security for critical control information while avoiding the overhead of protecting all data packets, thereby resolving the contradiction between security and transmission speed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements local quality by applying different integrity protection qualities to different parts of the data stream. Control plane PDUs receive full integrity protection to ensure security, while user plane PDUs are transmitted without integrity protection to maximize speed. This differentiated approach resolves the contradiction by optimizing security where needed and speed where possible.

Inventive Principle:
Principle #3Local quality

2Manufacturing precision

If integrity protection mechanisms are implemented, then data accuracy is improved, but processing time increases

Engineering Contradiction:
Improvedata accuracyVSAvoidprocessing time
Core Design Contradiction:
Manufacturing precisionVSLoss of time

Solution Approach 1:

The patent applies partial action by implementing integrity protection only for control plane PDUs rather than all PDUs. This partial application of integrity protection ensures data accuracy for critical control information while minimizing the processing time overhead by excluding user plane data from protection mechanisms.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The patent segments PDUs into control plane and user plane categories, applying integrity protection only to the control plane segment. This segmentation reduces the overall processing time while maintaining data accuracy for the critical control portion of the transmission.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11751055B2User plane integrity protection in cellular networks
Publication Date: 2023.09.05 T MOBILE US INC
  • US11751055B2 patent drawing
  • US11751055B2 patent drawing
  • US11751055B2 patent drawing

AI summary

Integrity protection is used to assist in ensuring the secure transmission of wireless data within a cellular network. Instead of performing integrity protection on each packet data unit (PDU) transmitted/received within a PDU session, integrity protection is performed on a portion of PDUs transmitted within a cellular network. For instance, partial integrity protection may be performed on at least one predetermined PDU (e.g., the first, second, fourth, . . . ) that is transmitted via a Physical Downlink Shared Channel (PDSCH)/Physical Uplink Shared Channel (PUSCH) during a communication session. By performing partial integrity protection, user data may be transmitted more quickly throughout the cellular network, compared to performing full integrity protection, while still providing integrity protection.