Protocol-Layer Message Security Beyond PDCP for Data and Signaling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems perform security processing only at the PDCP layer, leading to inadequate security for data and signaling, which can be improved by extending security processing to lower protocol layers.
Innovation Solution
Implementing security processing at the PDCP layer and/or protocol layers below it, including encryption and integrity protection for data and signaling, and using sub-PDUs or sub-headers to indicate processed content for efficient verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security processing is performed only at the PDCP layer, then the device complexity is reduced, but the security reliability is insufficient
Solution Approach 1:
The patent divides the security processing function into multiple segments: PDCP layer security processing and lower layer (MAC/RLC) security processing. Each layer independently performs security operations on specific data types, with the lower layer handling data requiring enhanced security while the PDCP layer handles other data, thereby improving overall security reliability without uniformly increasing complexity across all layers.
Solution Approach 2:
The patent applies security processing with different qualities at different protocol layers. The lower layer performs security processing on specific data types (e.g., data from certain logical channels) while the PDCP layer performs security processing on other data types. This localized application of security processing improves reliability for critical data without unnecessarily increasing complexity for all data transmissions.
2Reliability
If security processing is extended to lower protocol layers, then the security reliability is improved, but the processing complexity increases
Solution Approach 1:
The patent segments the data flow into different processing paths based on security requirements. Data requiring enhanced security is routed through the lower layer security processing path, while other data follows the conventional PDCP layer path. This segmentation allows selective application of complex security processing only where needed, improving reliability without uniformly increasing processing complexity.
Solution Approach 2:
The patent implements partial security processing at the lower layer, applying security operations only to specific data types or data from specific logical channels rather than all data. This partial action approach provides enhanced security reliability for critical data while avoiding the full processing complexity overhead for all transmissions.
3Reliability
If security processing is performed at multiple layers, then the security reliability is enhanced, but the power consumption increases
Solution Approach 1:
The patent applies security processing at multiple layers only partially - specifically for data types or data from logical channels that require enhanced security protection. For other data, conventional single-layer security processing is maintained. This selective multi-layer processing enhances security reliability for critical data while minimizing the additional power consumption that would result from applying multi-layer processing to all data.
4Measurement precision
If sub-PDUs or sub-headers are used to indicate processed content, then the measurement precision is improved, but the device complexity increases
Solution Approach 1:
The patent segments the data structure into sub-PDUs or sub-headers that individually indicate which content has undergone security processing. Each sub-PDU/sub-header contains precise identification information for its associated data portion, enabling the receiving end to accurately determine which data requires security verification. This segmentation improves content identification precision while keeping the structural complexity manageable through standardized formats.
Data Source
AI summary
A message transmission method and apparatus and a device are provided. The message transmission method includes: a sending terminal performs security processing on target content at a target layer, the target layer including a PDCP layer and/or a protocol layer below the PDCP layer; in a case that the target layer includes the PDCP layer, the target content includes at least one of data or signaling generated by the PDCP layer; and in a case that the target layer includes the protocol layer below the PDCP layer, the target content includes at least one of: upper layer data or high layer data received by the target layer, upper layer signaling or high layer signaling received by the target layer, or signaling generated by the target layer. The sending terminal sends a target message, the target message including content from the security processing.