PDU Session Security Mapping for Application-Specific Latency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems fail to consider the specific user plane security policies of different applications when establishing PDU sessions, leading to unnecessary security measures or latency issues due to mismatched security requirements.
Innovation Solution
Implement a method where a terminal apparatus receives user plane security indication information to associate or establish PDU sessions based on the specific security requirements of applications, ensuring that the selected PDU session conforms to the application's security attributes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the network device performs encryption and integrity protection on all data packets in a PDU session, then security is improved, but latency increases and unnecessary security processing occurs
Solution Approach 1:
The patent applies local quality by differentiating security processing at the application level. Instead of uniformly applying encryption and integrity protection to all data packets in a PDU session, the network device performs security processing only on data packets from applications that require it. The terminal apparatus reports application-specific security requirements to the network device, which then selectively applies security measures based on the source application and traffic characteristics, thereby avoiding unnecessary security processing for applications that already provide their own security or have low security requirements.
2Reliability
If the terminal apparatus establishes separate PDU sessions for different security requirements, then security policy compliance is improved, but device complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the PDU session into application-specific data radio bearers (DRBs). Instead of creating separate PDU sessions for each application with different security requirements, the terminal apparatus maintains a single PDU session but establishes multiple DRBs within it, each dedicated to specific applications with particular security needs. This segmentation allows different security policies to be applied to different DRBs while keeping the overall session structure simple and manageable.
Solution Approach 2:
The patent applies universality by making the PDU session multi-functional to serve multiple applications with different security requirements. A single PDU session can accommodate various applications by creating specific data radio bearers for each application group. The session management mechanism universally handles security policy compliance across all applications within the session through a unified reporting and configuration approach, reducing the need for multiple separate sessions.
Data Source
AI summary
A method includes receiving, by a policy control function entity, user plane security attribute requirement information that is of an application and that is from an application function. The user plane security attribute requirement information indicates a user plane security attribute requirement of the application. The method also include sending, by the policy control function entity, user plane security parameter information of a service data flow (SDF) to a session management function entity. The user plane security parameter information of the SDF is determined based on the user plane security attribute requirement of the application.