User Plane Integrity Protection in EN-DC

The patent segments the security protection mechanism by introducing separate integrity protection functionality alongside existing encryption. The integrity protection is implemented as a distinct layer that operates independently on user plane data, applying integrity verification separately from the encryption process. This segmentation allows integrity protection to be added without disrupting existing encryption mechanisms.

The patent implements preliminary action by performing integrity protection calculations (such as generating integrity verification data) before data transmission occurs. The integrity protection is prepared in advance during the security configuration phase, with integrity algorithms and keys being established before actual user plane data flows through the network, ensuring protection is already in place when communications begin.

The patent applies universality by designing capability signaling that serves multiple functions: it indicates not only integrity protection support but also coordinates the activation and configuration of integrity protection mechanisms. The same signaling infrastructure used for existing security capabilities is leveraged to convey integrity protection information, allowing one signaling system to handle multiple security-related functions rather than requiring separate dedicated signaling for each security feature.

The patent implements self-service by enabling the wireless communication device to autonomously indicate its integrity protection capabilities through signaling, allowing the network to automatically configure appropriate security parameters. The device itself provides the capability information without requiring manual configuration or external intervention, and the network uses this self-provided information to automatically establish the security context.