WTRU Relay Security Policy Alignment for End-to-End User Plane Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in ensuring secure communication policies across user planes and V2X security in advanced wireless communication systems, particularly in scenarios involving network relays, where security policy misalignment can occur.
Innovation Solution
Implementing a method for end-to-end security policy enforcement using a Uu security policy queried from a network, which ensures consistent security policies across user planes and network relays, particularly in L3 WTRU2NW relay scenarios.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If separate security policies are used for user plane and V2X security in relay scenarios, then flexibility in security configuration is improved, but security policy misalignment occurs leading to security vulnerabilities
Solution Approach 1:
The patent combines separate user plane security policies and V2X security policies into a unified end-to-end security policy framework. The security policy enforcement point integrates both security requirements, ensuring that security decisions are made based on the combined policy rather than separate policies that may misalign. This merging eliminates security vulnerabilities caused by policy misalignment while maintaining the flexibility of having distinct security requirements for different traffic types.
2Adaptability or versatility
If security policies are enforced independently for different traffic types, then policy customization is improved, but security policy misalignment and vulnerabilities arise
Solution Approach 1:
The patent introduces a security policy enforcement point that acts as an intermediary between the security policy management function and the relay node. This intermediary receives security policy information from the security management function and ensures proper enforcement at the relay node, preventing security vulnerabilities that arise from independent policy enforcement. The intermediary coordinates security decisions across different traffic types, ensuring consistent security posture while allowing customized security requirements to be met.
3Ease of operation
If relay nodes enforce local security policies without network coordination, then autonomous security management is improved, but end-to-end security consistency deteriorates
Solution Approach 1:
The patent implements a feedback mechanism where the relay node reports security policy enforcement status and traffic information to the security management function, which then provides updated security policy information back to the relay node. This closed-loop feedback system allows the relay node to operate autonomously while maintaining end-to-end security consistency through continuous coordination with the network. The feedback mechanism ensures that local security decisions align with overall network security requirements.
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
Methods, apparatus, and systems for a wireless transmit receive unit (WTRU) performing relay communications are provided. A method may include receiving a first message indicating: (1) a first security policy associated with a first data link, and (2) a maximum data rate for integrity protection (MDRIP) supported by the remote WTRU; transmitting, to a network, a second message indicating: (1) an MDRIP supported by the remote WTRU or by the relay WTRU, and (2) a request for PDU session establishment; receiving, from the network, a third message indicating a second security policy for a second data link; and establishing the first data link with the remote WTRU on the condition that an end-to-end (e2e) security policy is compatible with the second security policy, wherein the e2e security policy is determined according to the second security policy and a UP security policy of the relay WTRU.