Uplink Data Integrity Protection in Early Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication systems face challenges in ensuring integrity protection and verification of uplink small data transmissions, particularly in IoT devices, where existing methods lack effective mechanisms for integrity protection and verification, especially during handovers in LTE and 5G NR networks.
Innovation Solution
The proposed solution involves generating a hash marker based on PDCP control PDUs or SDUs, transmitting it within a MAC-I field of RRC messages, and verifying integrity protection by calculating and comparing MAC-Integrity codes using access stratum keys, ensuring integrity protection and verification across handovers in the RAN.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing integrity protection methods are used in wireless communication systems, then basic data transmission is supported, but integrity protection and verification of uplink small data transmissions is insufficient, especially during handovers
Solution Approach 1:
The integrity protection mechanism is segmented into distinct components: hash marker generation at the PDCP layer, MAC-I field inclusion in RRC messages, and verification at the RAN side. This segmentation allows each component to be optimized independently while maintaining overall system reliability.
Solution Approach 2:
The hash marker is generated in advance at the PDCP layer before data transmission, and the MAC-I integrity code is prepared and included in the RRC message beforehand. This preliminary action ensures that integrity protection is already in place before the actual data transmission occurs, enabling verification during handover without adding transmission delay.
2Reliability
If hash marker generation and MAC-I verification are implemented, then data integrity during handover is improved, but the processing overhead and computational requirements increase
Solution Approach 1:
The critical integrity verification function is extracted and placed specifically in the MAC-I field of RRC messages during handover. By taking out only the essential verification elements (hash marker and MAC-I) rather than implementing comprehensive integrity checks on all data, the solution maintains reliability while minimizing computational energy consumption.
Solution Approach 2:
The integrity protection mechanism uses parameter changes in the hash marker generation process, where the hash is calculated based on specific PDCP parameters and counter values. This approach allows efficient computation by changing only the necessary parameters rather than reprocessing entire data sets, reducing energy consumption while maintaining verification reliability.
3Reliability
If integrity protection mechanisms are added to EDT configuration, then security of uplink small data transmission is enhanced, but the message size and signaling overhead increase
Solution Approach 1:
The hash marker and MAC-I integrity fields are nested within the existing RRC message structure rather than being transmitted as separate messages. The integrity protection elements are embedded in the MAC-I field of the RRCConnectionResumeRequest message, reducing overall signaling overhead while maintaining security.
Solution Approach 2:
The MAC-I field serves multiple functions: it provides integrity verification for the RRC message, carries the hash marker for data verification, and supports handover procedures. This multi-functionality reduces the need for separate integrity protection messages, thereby minimizing message size increases while enhancing security.
Data Source
AI summary
This disclosure describes methods, systems, and devices for uplink data integrity protection in a communication system including a radio access network (RAN) serving a user equipment (UE) operating in an Early Data Transmission (EDT) configuration. In one example, a method involves generating a hash marker based on a packet data convergence protocol (PDCP) control protocol data unit (PDU) or service data unit (SDU). The method also involves transmitting a message including the hash marker to the RAN.