PDCP User Plane Integrity Activation for Rel-15 ng-eNB
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is no support for user plane integrity protection in the Packet Data Convergence Protocol (PDCP) in Rel-15 ng-eNB for Options 4, 5, and 7, limiting the ability of Rel-15 UEs to use user plane integrity protection with Rel-16 ng-eNBs, and there is a need to enable detection of altered or modified user data traffic.
Innovation Solution
Implement methods for enabling user plane integrity protection (UP IP) in PDCP between a UE and a ng-eNB in Options 4, 5, and 7 by sending and receiving indications of UP IP mode support during procedures like PDU Session Establishment, Service Request, Registration Request, and mobility registration updates, using long term evolution radio access nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user plane integrity protection is implemented in PDCP for Rel-15 ng-eNB Options 4, 5, and 7, then detection of altered user data traffic is enabled, but device complexity increases due to protocol modifications
Solution Approach 1:
The patent applies preliminary action by pre-configuring the UE with user plane integrity protection capabilities and indicators during device initialization. The UE includes UP IP mode indication in session establishment requests before actual data transmission begins, allowing the network to prepare integrity protection parameters in advance without complicating the real-time data path.
Solution Approach 2:
The patent uses an intermediary approach by introducing a dedicated indication parameter (UP IP mode indicator) that mediates between the UE and network. This indicator acts as a signaling mechanism to convey integrity protection capabilities without modifying the core PDCP data structure, thus enabling reliability while controlling complexity through separate control signaling.
2Adaptability or versatility
If user plane integrity protection mode indication is added to session establishment requests, then integrity protection capability is communicated to the network, but message size and processing overhead increase
Solution Approach 1:
The patent applies local quality by adding the UP IP mode indication as a specific field within the existing session establishment request structure. This targeted approach modifies only the necessary portion of the message to convey integrity protection capabilities, rather than redesigning the entire signaling protocol, thus achieving adaptability with minimal processing overhead.
Solution Approach 2:
The patent uses parameter changes by introducing a new indication parameter (UP IP mode indicator) that can take specific values to represent different integrity protection capabilities. This parameter-based approach allows the UE to communicate its capabilities efficiently using standardized signaling mechanisms, avoiding complex message formats while maintaining versatility.
3Reliability
If integrity protection is activated for data radio bearers, then user data traffic integrity is protected, but data processing time increases due to additional verification steps
Solution Approach 1:
The patent applies preliminary action by pre-establishing integrity protection keys and verification parameters during session setup before actual data transmission. The UE and network node prepare all necessary integrity protection resources in advance, so that during data transmission, only lightweight verification operations are needed rather than full cryptographic processing, thus maintaining productivity.
Solution Approach 2:
The patent uses the skipping principle by enabling the receiving side to quickly verify data integrity through pre-configured mechanisms. The integrity protection is designed to allow rapid verification without requiring complex real-time cryptographic operations, effectively skipping time-consuming processing steps while maintaining security.
Data Source
AI summary
A method performed by a user equipment, UE, for enabling user plane integrity protection of data in a packet data convergence protocol, PDCP, in a radio access network is provided. The method includes sending a session establishment request towards a session management node that includes an indication of a user plane integrity protection mode supported by the UE. The method further includes receiving an activation message from a receiving radio access node that includes an indication to the UE to activate the user plane integrity protection mode for a data radio bearer established with the receiving radio access node. Methods performed by a session management node, a target access and mobility node, and a radio access node are also provided.