Redundant Session Security Configuration for uRLLC Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies lack a clear method for configuring redundant data channels in ultra-reliable low-latency communication (uRLLC) to ensure consistent security keys and policies across two data channels for reliable transmission.
Innovation Solution
A session configuration method where an access network device receives redundant transmission security information from a session management network element and sends it to a terminal device, ensuring synchronized security keys and policies for both sessions, allowing for secure redundant transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If redundant transmission is implemented for uRLLC, then reliability is improved, but security configuration complexity increases due to lack of clear methods for configuring security keys and policies across multiple sessions
Solution Approach 1:
The patent segments the security configuration into distinct components: security policies are configured separately from security keys, and each PDU session is configured independently with its own security parameters. This segmentation allows the system to manage complex security requirements for multiple redundant sessions by breaking down the configuration into manageable, modular units that can be independently controlled and verified.
Solution Approach 2:
The patent implements preliminary action by establishing security configurations during PDU session establishment before actual data transmission begins. The SMF determines security policies and keys in advance, and the access network device configures security parameters before setting up the redundant data channels. This preliminary configuration ensures that security is already in place when redundant transmission starts, avoiding the need for complex runtime security management.
2Reliability
If security policies are enforced differently for multiple PDU sessions, then security is improved, but configuration and management difficulty increases
Solution Approach 1:
The patent introduces the SMF (Session Management Function) as an intermediary that centrally manages security policies for multiple PDU sessions. The SMF receives security policy information, determines appropriate security configurations, and distributes them to the access network device and UE. This intermediary approach allows different security policies to be enforced for different sessions while maintaining centralized control, reducing configuration difficulty, and ensuring policy consistency across the network.
Solution Approach 2:
The patent enables parameter changes by allowing the SMF to dynamically adjust security policy parameters (such as encryption algorithms, key lengths, and protection types) for different PDU sessions based on service requirements. The system can modify security parameters without changing the overall configuration structure, enabling flexible security enforcement for redundant transmission while maintaining ease of management through parameter-level control rather than structural changes.
Data Source
Figure 1~2
Figure 3A~3B
Figure 4~5
AI summary
A session configuration method and an apparatus are disclosed. In this application, a terminal device sends, to a session management network element, a session establishment request used to request to establish a first session. After receiving the session establishment request, the session management network element sends redundant transmission security information to an access network device. After receiving the redundant transmission security information, the access network device sends the redundant transmission security information to the terminal device. The redundant transmission security information is used to indicate security keys and security policies of the first session and a second session that need to be established by the terminal device. The second session is a redundant session of the first session. The access network device may send the redundant transmission security information to the terminal device, to ensure that the access network device and the terminal device have same security keys and same security policies for the two sessions (the first session and the second session) used for redundant transmission, and further ensure that security configuration is performed for the two sessions used for redundant transmission.