WO2018196852A1 - 完整性检测方法、终端及网络侧设备 - Google Patents
完整性检测方法、终端及网络侧设备 Download PDFInfo
- Publication number
- WO2018196852A1 WO2018196852A1 PCT/CN2018/084820 CN2018084820W WO2018196852A1 WO 2018196852 A1 WO2018196852 A1 WO 2018196852A1 CN 2018084820 W CN2018084820 W CN 2018084820W WO 2018196852 A1 WO2018196852 A1 WO 2018196852A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- user plane
- integrity detection
- plane data
- terminal
- fails
- Prior art date
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/10—Integrity
- H04W12/106—Packet or message integrity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
- H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/10—Integrity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/10—Integrity
- H04W12/102—Route integrity, e.g. using trusted paths
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W68/00—User notification, e.g. alerting and paging, for incoming communication, change of service or the like
- H04W68/005—Transmission of information for alerting of incoming communication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/20—Manipulation of established connections
- H04W76/27—Transitions between radio resource control [RRC] states
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/30—Connection release
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
- H04W80/02—Data link layer protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/02—Terminal devices
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/02—Terminal devices
- H04W88/06—Terminal devices adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
Definitions
- the present disclosure relates to wireless communication technologies, and in particular, to an integrity detection method, a terminal, and a network side device.
- the security measures applied in existing communication systems mainly include authentication, encryption and integrity detection.
- Radio Resource Control In the Long Term Evolution (LTE) system, the transmission of Radio Resource Control (RRC) messages is encrypted, and integrity detection is performed on the RRC messages in order to prevent data from being tampered with.
- RRC Radio Resource Control
- the LTE system only encrypts and decrypts the user plane data, and cannot guarantee the security of the user plane data.
- the embodiments of the present disclosure provide an integrity detection method, a terminal, and a network side device to improve security of user plane data.
- an embodiment of the present disclosure provides an integrity detection method, including: receiving, by a terminal, user plane data sent by a network side device; the terminal detecting configuration information according to user plane integrity, and performing integrity on the user plane data Detection.
- the embodiment of the present disclosure provides an integrity detection method, including: the network side device sends user plane data integrity detection configuration information to the terminal, where the user plane data integrity detection configuration information is used to indicate the terminal The user plane data received by the network side device performs integrity detection; the network side device sends user plane data to the terminal.
- an embodiment of the present disclosure provides a terminal, including: a data receiving module, configured to receive user plane data sent by a network side device; and an integrity detecting module, configured to detect configuration information according to user plane integrity, User plane data for integrity detection.
- an embodiment of the present disclosure provides a network side device, including: a configuration information sending module, configured to send user plane data integrity detection configuration information to a terminal, where the user plane data integrity detection configuration information is used to indicate a terminal. Performing integrity detection on the user plane data received from the network side device; and a data sending module, configured to send user plane data to the terminal.
- an embodiment of the present disclosure provides a terminal, including: a processor, a memory, and a computer program stored on the memory and executable on the processor, where the computer program is executed by the processor. The steps of the integrity detection method as described in the first aspect are implemented.
- an embodiment of the present disclosure provides a network side device, including: a processor, a memory, and a computer program stored on the memory and executable on the processor, where the computer program is used by the processor.
- the steps in the integrity detection method as described in the second aspect are implemented at the time of execution.
- an embodiment of the present disclosure provides a computer readable storage medium, where the computer readable storage medium stores a computer program, and when the computer program is executed by a processor, implementing the method according to the first aspect or the second aspect The steps in the integrity detection method.
- the integrity detection method, the terminal, and the network side device provided by the embodiment of the present disclosure, after receiving the user plane data sent by the network side device, the terminal detects the configuration information according to the user plane integrity, and the user received from the network side device The face data is integrity tested to determine whether the user face data has been tampered with, thereby improving the security of the user face data.
- FIG. 1 is a schematic diagram of a system architecture of an integrity detection method provided by the present disclosure
- FIG. 2 is a schematic diagram of a system architecture of an integrity detection method provided by the present disclosure
- FIG. 3 is a schematic flowchart of an integrity detecting method according to an embodiment of the present disclosure
- FIG. 4 is a schematic flowchart diagram of an integrity detecting method according to an embodiment of the present disclosure
- FIG. 5 is a flowchart of an integrity detection method according to an embodiment of the present disclosure.
- FIG. 6 is a flowchart of an integrity detection method according to an embodiment of the present disclosure.
- FIG. 7 is a flowchart of an integrity detection method according to an embodiment of the present disclosure.
- FIG. 8 is a schematic structural diagram of a terminal according to an embodiment of the present disclosure.
- FIG. 9 is a schematic structural diagram of a terminal according to an embodiment of the present disclosure.
- FIG. 10 is a schematic structural diagram of a network side device according to an embodiment of the present disclosure.
- FIG. 11 is a schematic structural diagram of a network side device according to an embodiment of the present disclosure.
- FIG. 12 is a schematic structural diagram of a terminal according to another embodiment of the present disclosure.
- FIG. 13 is a schematic structural diagram of a network side device according to another embodiment of the present disclosure.
- FIG. 1 is a first schematic diagram of a system architecture of an integrity detection method provided by the present disclosure.
- the system architecture provided by this embodiment includes: a network side device and a terminal.
- the network side device may be a Global System of Mobile communication (GSM) or a Base Transceiver Station (BTS) in Code Division Multiple Access (CDMA), or may be a wideband code.
- GSM Global System of Mobile communication
- BTS Base Transceiver Station
- CDMA Code Division Multiple Access
- the base station (NodeB, NB) in the Wideband Code Division Multiple Access (WCDMA) may also be an evolved base station (Evolutional Node B, eNB or eNodeB) in LTE, or may be a new radio access technical (New radio access technical).
- the base station in the New RAT or NR), or the relay station or the access point, or the base station in the future 5G network, etc., is not limited herein.
- the terminal may be a wireless terminal or a wired terminal, which may be a device that provides voice and/or other service data connectivity to the user, a handheld device with wireless connectivity, or other processing device connected to the wireless modem.
- the wireless terminal can communicate with one or more core networks via a Radio Access Network (RAN), which can be a mobile terminal, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal.
- RAN Radio Access Network
- RAN Radio Access Network
- it may be a portable, pocket, handheld, computer built-in or in-vehicle mobile device that exchanges language and/or data with a wireless access network.
- the wireless terminal may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, and a remote terminal.
- the access terminal, the user terminal (User Terminal), the user agent (User Agent), and the user device (User Device or User Equipment) are not limited herein.
- FIG. 2 is a second schematic diagram of a system architecture of an integrity detection method provided by the present disclosure.
- the system architecture shown in FIG. 1 is a single-connection communication system.
- FIG. 2 is based on the embodiment shown in FIG. 1, and the system architecture is a multi-connection communication system.
- the multi-connection communication system can be, for example, a dual connectivity (DC) communication system.
- DC dual connectivity
- the dual connectivity communication system means that the terminal can access the first network side device and the second network side device.
- the first network side device may be one of the network side devices described in the embodiment of FIG. 1
- the second network side device may be one of the network side devices described in the embodiment of FIG. kind.
- the dual connectivity communication system includes a network side device in an LTE network and a network side device in an NR network.
- One of the systems is a master node (MN).
- MN master node
- the network side device in the LTE network in this embodiment is used as the master node
- the other system is used as the secondary node (SN).
- SN secondary node
- Network side devices in the NR network For example, in this embodiment, Network side devices in the NR network.
- the primary cell group may include one primary cell (PCell) and one or more secondary cells (SCell).
- the secondary cell group may include one primary secondary cell (PSCell) and one or more SCells.
- the primary control node corresponds to the primary cell and the secondary cell, and the secondary node corresponds to the primary secondary cell and the secondary cell.
- the possible system architecture is given in the foregoing embodiment.
- the specific system architecture is not limited in this embodiment, and the system architecture including the terminal and the network side device can be applied to the embodiment.
- the present disclosure provides a method for detecting integrity of user plane data to ensure security of user plane data. The method provided by the present disclosure will be described in detail below using detailed embodiments.
- FIG. 3 is a schematic flowchart diagram of an integrity detecting method according to an embodiment of the present disclosure.
- the execution body of this example is a terminal. As shown in FIG. 3, the method includes:
- the terminal receives user plane data sent by the network side device.
- a suitable cell is selected from the selected Public Land Mobile Network (PLMN) for camping.
- PLMN Public Land Mobile Network
- the terminal When the terminal is powered on, a suitable cell is selected from the selected Public Land Mobile Network (PLMN) for camping.
- PLMN Public Land Mobile Network
- the terminal When the terminal camps on a certain cell, it can receive system messages and cell broadcast messages.
- the terminal When the terminal needs to perform service communication, the terminal establishes a Radio Resource Control (RRC) connection with the network side device. After the RRC connection is established, the terminal can perform user plane data transmission with the network side device.
- RRC Radio Resource Control
- the process of establishing an RRC connection is implemented by using a Radio Bearer (RB).
- the RB includes a signaling radio bearer (SRB) and a data radio bearer (DRB), where the SRB is a channel for actually transmitting signaling messages of the system, and the DRB is a channel for actual transmission of user plane data.
- the SRB includes SRB0, SRB1, and SRB2, where SRB0 is used to carry an RRC message, SRB1 is used to carry an RRC message and a part of a Non-Access Stratum (NAS) message, and SRB2 is used to carry a partial NAS message.
- NAS Non-Access Stratum
- the RRC connection refers to the SRB1 established between the terminal and the network side device, because the SRB0 is not required to be established.
- the configuration and resources of SRB0 can be obtained by the terminal in the idle state.
- the process initiated by the service in the system is to establish SRB1 through the transmission signaling on SRB0.
- SRB1 After the establishment of SRB1, the terminal enters the RRC connection state; then, SRB2 is established through SRB1 transmission signaling to transmit NAS signaling; and the DRB is established by using SRB1 transmission signaling. Transfer user plane data. Therefore, after the terminal establishes the DRB with the network side device, the terminal receives the user plane data sent by the network side device through the established DRB.
- the terminal detects configuration information according to user plane integrity, and performs integrity detection on the user plane data.
- the terminal After the terminal receives the user plane data, the terminal detects the configuration information according to the user plane integrity, and performs purpose detection and targeted integrity detection on the user plane data.
- the user plane integrity detection configuration information may be pre-agreed by the terminal and the network side device, or may be configured by the network side device to the terminal.
- the user plane integrity detection configuration information may be used to instruct the terminal to perform integrity detection on all the user plane data or part of the user plane data received, and the user plane integrity detection configuration information may further include The integrity detection detects the indication information of the integrity detection algorithm, and the like. In order to distinguish the first indication information, the second indication information, and the third indication information in the following embodiments, the indication information may be referred to herein as fourth indication information.
- the integrity detection algorithm may be, for example, an advanced encryption standard (AES) algorithm, a SNOW 3G algorithm, and an ancestral algorithm (ZUC).
- AES advanced encryption standard
- SNOW 3G SNOW 3G
- ZUC ancestral algorithm
- the embodiment is not particularly limited herein.
- the integrity detection process of the user plane data may be: the terminal uses the parameters carried in the user plane data and the known parameters maintained by the terminal, and generates integrity verification information by using an integrity protection algorithm to complete the integrity. The verification information is compared with the known integrity verification information. If the two are consistent, the verification is passed, and then the data is not falsified. If the two are inconsistent, the verification fails, that is, the user surface data is found to be tampered, and the data is judged. Integrity detection failed and the data is not available. Those skilled in the art will appreciate that only one integrity detection process is schematically illustrated herein, and that other forms of integrity detection processes can be applied to embodiments of the present disclosure.
- the operation of the terminal to perform integrity detection on the user plane data is implemented in a Packet Data Convergence Protocol (PDCP) layer of the terminal.
- PDCP Packet Data Convergence Protocol
- the integrity detection method provided by the embodiment of the present disclosure, after receiving the user plane data sent by the network side device, the terminal detects the configuration information according to the user plane integrity, and performs integrity detection on the user plane data received from the network side device. And further determining whether the user plane data has been tampered with, thereby improving the security of the user plane data.
- FIG. 4 is a schematic flowchart diagram of an integrity detecting method according to an embodiment of the present disclosure.
- the execution entity of the present example is a network side device, and the network side device may be the network side device shown in FIG. 1 or any network side device in the multiple connection system in FIG. 2.
- the execution body of this embodiment is a network side device.
- the method includes:
- the network side device sends the user plane data integrity detection configuration information to the terminal, where the user plane data integrity detection configuration information is used to indicate that the terminal performs integrity detection on the user plane data received from the network side device.
- the network side device sends user plane data to the terminal.
- the user plane data integrity detection configuration information in the embodiment shown in FIG. 3 is corresponding to the network side device configuration to the terminal.
- the network side device may send the user plane data integrity detection configuration information to the terminal before transmitting the user plane data to the terminal.
- the user plane integrity detection configuration information may be added information, or may be added in an RRC message during an RRC establishment process, or may be in an RRC reconfiguration process. Carry in the reconfiguration message.
- the specific process for the network side device to send the user plane integrity detection configuration information to the terminal is not specifically limited. After the network side device establishes the DRB with the terminal, the network side device sends the user plane data to the terminal through the DRB, and the terminal performs integrity detection on the user plane data.
- the integrity detection method provided in this embodiment sends the user plane data integrity detection configuration information to the terminal through the network side device to instruct the terminal to perform integrity detection on the user plane data received from the network side device, where the network side device After the terminal sends the user plane data, the network side device performs integrity detection on the user plane data through the user plane integrity detection configuration information, and the terminal can determine whether the user plane data has been tampered with integrity detection, thereby improving the security of the user plane data. Sex.
- the user plane integrity detection configuration information includes: first indication information, where the first indication information is used to indicate a DRB corresponding to the integrity detection.
- the specific implementation process of the corresponding integrity detection method can be as shown in FIG. 5.
- FIG. 5 is a flowchart of an integrity detection method according to an embodiment of the present disclosure. As shown in FIG. 5, the method includes: S501: The terminal receives user plane data sent by the network side device; S502: The terminal performs integrity detection on the user plane data carried on the DRB indicated by the first indication information, and the first indication information Used to indicate the DRB corresponding to the integrity check.
- the protocol stipulates that each terminal can have up to 8 DRBs for transmitting different services.
- the terminal can perform integrity detection on all DRBs and integrity detection on some DRBs.
- the first indication information indicates the identifier of the DRB that needs to perform the integrity check, and the identifier of the DRB may be, for example, the value of the DRB, the serial number of the DRB, and the like, and the identifier of the DRB is not limited in this embodiment. .
- the identifier of the DRB used for integrity detection may be indicated according to the importance of the user plane data carried on the DRB.
- the terminal may perform integrity detection according to the user plane data carried on the DRB indicated by the first indication information. That is, the terminal can perform integrity detection on the user plane data carried on the DRB, improve the integrity detection efficiency of the terminal, reduce the capability requirement of the terminal, and reduce the energy consumption of the terminal.
- the terminal may determine whether the data integrity detection fails according to the first determining condition that the user plane data integrity detection fails.
- the first judgment condition that the user plane data integrity detection fails may be set in the user plane integrity detection configuration information, and is pre-agreed by the terminal and the network side device, or sent by the network side device to the terminal, or may be a terminal. Set it yourself.
- the configuration manner of the first determination condition that the integrity detection fails is not particularly limited.
- the first determining condition that the integrity detection fails includes: if the integrity detection of the at least one DRB in the DRB indicated by the first indication information fails, the user plane data integrity detection fails.
- the terminal determines that the integrity detection of the user plane data carried on the at least one DRB in the DRB indicated by the first indication information fails. It can be seen that the identifier of the multiple DRBs can be indicated in the first indication information, and the network side device and the terminal perform user plane data transmission through multiple DRBs, and the terminal can determine the integrity of one or more DRBs or all the indicated DRBs. When the detection fails, it is determined that the user plane data integrity detection fails.
- the terminal determines that the integrity detection of the user plane data carried on the DRB fails, and includes the following possible implementation manners.
- the integrity detection of the user plane data carried on the DRB fails.
- the DRB can carry multiple data packets.
- the terminal determines that the integrity detection of the DRB fails.
- the number of data packets that the integrity check fails may be pre-agreed or set by the terminal itself.
- the terminal performs integrity detection on the received data packet carried on the DRB, counts the data packet whose integrity detection fails, and counts the received data packet on the DRB, when integrity is performed. If the ratio of the number N of packets that fail to be detected exceeds the preset threshold in the number M of data packets carried on the received DRB, that is, the ratio of the N/M exceeds a preset threshold, the bearer on the DRB is determined. Integrity detection of user plane data failed.
- the terminal performs integrity detection on the received data packet on the DRB, and counts the data packet whose integrity detection fails. When the number exceeds a preset threshold, the terminal determines the user plane carried on the DRB. Data integrity check failed.
- the data packet whose integrity detection fails is counted within a preset duration, and the number of data packets failed to be detected by the integrity detection on the DRB exceeds a preset number, and the terminal determines the user plane carried on the DRB. Data integrity check failed.
- the consecutive data packets whose integrity detection fails are counted.
- the terminal determines that the integrity detection of the user plane data carried on the DRB fails.
- the user plane integrity detection configuration information includes: second indication information, where the second indication information is used to indicate that the terminal receives the All user plane data for integrity testing.
- the specific implementation process of the corresponding integrity detection method can be as shown in FIG. 6.
- FIG. 6 is a flowchart of an integrity detection method according to an embodiment of the present disclosure. As shown in FIG. 6, the method includes: S601: The terminal receives user plane data sent by the network side device; S602. The terminal performs integrity detection on all user plane data received by the terminal according to the second indication information, and the second indication information And configured to instruct the terminal to perform integrity detection on all received user plane data.
- the terminal may be instructed to face the terminal, that is, the terminal performs integrity detection on all user plane data, instead of which DRB the data packet in the specific area user plane data belongs to.
- the user plane integrity configuration information may further include a second determination condition that the user plane data integrity detection fails.
- the terminal may determine whether the data integrity detection fails according to the second determination condition that the user plane data integrity detection fails.
- the second determination condition that the user plane data integrity detection fails may be set in the user plane integrity detection configuration information, and is pre-agreed by the terminal and the network side device, or sent by the network side device to the terminal, or may be a terminal. Set it yourself.
- the configuration manner of the second determination condition that the integrity detection fails in this embodiment is not particularly limited.
- the second determining condition that the integrity detection fails includes:
- the user plane data integrity detection fails; or, if the integrity check packet in the user plane data fails, the proportion of the received packet exceeds the preset. Threshold value, user plane data integrity detection fails; or, if the number of data packets whose integrity detection fails in the user plane data exceeds the preset number, the user plane data integrity detection fails; or, if the user plane data in the preset time period If the number of packets that fail the integrity check exceeds the preset number, the user plane data integrity check fails; or, if the number of consecutive packets in the user plane data that the integrity check fails exceeds the preset number, the user plane data integrity The test failed.
- the terminal performs integrity detection on all the received user plane data, and the specific implementation process of the data packet count or the number of data packets involved may be referred to the embodiment shown in FIG. Let me repeat.
- the data packet includes: a Packet Data Convergence Protocol (PDCP) layer, a Radio Link Control (RLC) layer, and/or a Medium Access Control (MAC). Layer Protocol Data Unit (PDU) and/or Service Data Unit (SDU).
- PDCP Packet Data Convergence Protocol
- RLC Radio Link Control
- MAC Medium Access Control
- PDU Layer Protocol Data Unit
- SDU Service Data Unit
- the user plane data can be flexibly set according to the importance of the user plane data or the capability of the terminal.
- FIG. 7 is a flowchart of an integrity detection method according to an embodiment of the present disclosure.
- the method includes: S701: The terminal receives user plane data sent by the network side device; S702, the terminal detects configuration information according to the user plane integrity, and performs integrity detection on the user plane data; S703, the terminal determines the user Whether the integrity check of the face data fails, if yes, execute S704; if not, execute S705; S704, the terminal performs an integrity detection failure process flow; S705, the terminal acquires the user plane data.
- the integrity detection failure process may be pre-agreed by the terminal and the network side device, or may be set by the terminal itself, or may be configured for the terminal by the network side device.
- the terminal performing the integrity detection process may include two possible implementation manners.
- a possible implementation manner is: when the terminal determines that the user plane data fails for integrity detection, the terminal performs an integrity detection failure process. That is, when the integrity check fails, the terminal performs an integrity check failure process.
- Another possible implementation manner is: before the terminal performs integrity detection, the network side device further sends a failure processing activation message to the terminal, where the failure processing activation message is used to instruct the terminal to start integrity detection after the integrity detection fails. Failure processing flow.
- the terminal does not receive the failure processing activation message, after the terminal determines that the user plane data fails the integrity detection, the terminal does not perform the subsequent integrity detection failure processing flow; if the terminal receives the failure processing activation message, the terminal After the user plane data is determined to fail the integrity check, the terminal performs a subsequent integrity check failure processing process.
- the terminal if the integrity detection of the user plane data fails, the terminal performs at least one of the following steps: the PDCP layer of the terminal sends an integrity detection failure notification message to the RRC layer; the terminal discards User plane data; the terminal sends an integrity detection failure notification message to the network side device; the terminal releases the RRC connection with the network side device; the terminal triggers the radio link failure RLF mechanism, and the terminal releases the DRB configuration of the network side device.
- the integrity detection failure processing procedure described above includes at least one of the foregoing steps.
- the PDCP layer of the terminal performs integrity detection of the user plane data.
- the PDCP layer of the terminal sends an integrity detection failure notification message to the RRC layer, and discards the user. Face data.
- the terminal may also send an integrity detection failure notification message to the network side device.
- the integrity detection failure message involved in this embodiment may carry the identifier of the DRB whose integrity detection failed.
- the network side device may reconfigure the DRB for the terminal according to the identifier of the DRB that the integrity detection fails.
- the terminal may also release the RRC connection with the network side device, and send a notification message that the terminal releases the RRC connection to the network side device. In the subsequent processing, the terminal may also perform RRC connection reestablishment with the network side device.
- the terminal may also trigger a Radio Link Failure (RLF) mechanism. After the RLF mechanism is triggered, the terminal performs RRC reestablishment within a specified time. If the reestablishment fails within the specified time, the terminal may initiate an RRC setup request. .
- RLF Radio Link Failure
- the terminal can also release the DRB configuration of the network side device.
- the network side device configures an available DRB for the terminal when performing user plane data transmission. After the integrity detection fails, the terminal can release the DRB configuration of the terminal by the network side device.
- the integrity detection failure process can be flexibly selected according to different system architectures and different scenarios.
- the integrity detection method provided by the embodiments of the present disclosure is described in detail below for different scenarios.
- the user plane integrity detection configuration information further includes: third indication information, where the third indication information is used to indicate that the terminal receives the The user plane data sent by other network side devices performs integrity detection processing.
- the network side device in the LTE sends the user plane integrity detection configuration information to the terminal.
- the user plane integrity detection configuration information includes the foregoing first indication information or second indication information.
- the user plane integrity detection configuration information further includes third indication information. That is, the network side device in the LTE further instructs the terminal to perform integrity check processing on the user plane data sent by the network side device in the received new radio access network. The process of the integrity detection of the user plane data in the new radio access network by the terminal is the same as the integrity detection process of the user plane data in the LTE.
- the network side device (the network side device in the LTE network) sends a configured notification message to the other network side device (the network side device in the new radio access network), and the configured notification message is used to notify Other network side devices, the user plane integrity detection configuration information sent by the network side device to the terminal is applicable to other network side devices. At this time, other network side devices do not need to send the user plane integrity detection configuration information to the terminal.
- the terminal works in the dual connectivity DC system
- the network side device in this embodiment is the secondary node SN in the DC system
- the terminal proceeds to
- the master node MN in the DC system sends an integrity detection failure message.
- the terminal may send the integrity detection failure information to the network side device and/or other network side device.
- the integrity detection failure information includes the identifier of the network side device.
- the network side device in the new radio access network serves as the secondary node and the network side device in the LTE network serves as the master node
- the terminal performs the user plane data. If the integrity check fails, the terminal may not send the integrity detection failure information to the secondary node, but send the user plane data integrity detection failure information to the master node, and carry the identifier of the secondary node SN.
- the master node may The secondary node SN disconnects and re-establishes a connection with the new secondary node SN.
- CA carrier aggregation
- the CA is a combination of two or more component carriers (CCs) to form a carrier group to support a larger transmission bandwidth.
- the carrier corresponding to the primary cell (Pcell) is called the primary component carrier (PCC), which is also called the primary carrier;
- the carrier corresponding to the secondary cell (Scell) is called the secondary component carrier (Secondary).
- Component Carrier, SCC also known as secondary carrier.
- This embodiment schematically shows a scenario including a primary cell, a primary secondary cell, and a secondary cell. This embodiment is also applicable to other scenarios including a primary cell and/or a primary secondary cell, and a secondary cell.
- the terminal works in the primary cell in the dual-connection DC system or the carrier aggregation CA system, if the integrity check of the user plane data fails, the PDCP layer of the terminal sends an integrity detection failure notification message to the RRC layer, and the terminal discards the user plane data; The terminal releases the RRC connection with the network side device, or triggers the radio link failure RLF mechanism.
- the terminal works in the dual-connected DC system or the secondary cell in the carrier aggregation CA system, if the integrity check of the user plane data fails, the terminal releases the data radio bearer DRB configuration of the secondary cell or all the secondary cells, or stops the secondary cell or Use of DRBs for all secondary cells.
- the primary cell is responsible for RRC between the network side device and the terminal; the secondary cell is used to provide additional wireless resources, and there is no RRC communication with the terminal. Therefore, when the terminal is located in the foregoing secondary cell, when the integrity detection of the terminal fails, the terminal may not perform the above-mentioned release of the RRC connection with the network side device and the process of triggering the RLF mechanism.
- the network side device After the terminal performs the process of sending the integrity detection failure notification message to the network side device, after the terminal sends the integrity detection failure notification message to the network side device, the network side device sends the RRC reconfiguration information to the terminal, where the RRC reconfiguration message is sent.
- the new user plane data integrity detection configuration information is included in the RRC reconfiguration message, and other configuration information is also included in the RRC reconfiguration message.
- FIG. 8 is a schematic structural diagram of a terminal according to an embodiment of the present disclosure.
- the terminal 80 includes: a data receiving module 801 and an integrity detecting module 802.
- the data receiving module 801 is configured to receive user plane data sent by the network side device
- the integrity detecting module 802 is configured to perform integrity detection on the user plane data according to the user plane integrity detection configuration information.
- the user plane data is carried on the data radio bearer DRB; the user plane integrity detection configuration information includes: first indication information, where the first indication information is used to indicate integrity detection.
- the integrity detection module is specifically configured to perform integrity detection on user plane data carried on the DRB indicated by the first indication information.
- the integrity detection module 802 is specifically configured to: if the integrity detection of the user plane data carried on the at least one DRB in the DRB indicated by the first indication information fails, It is determined that the user plane data integrity detection fails.
- the integrity detection module 802 is specifically configured to: if the integrity detection of the at least one data packet carried on the DRB fails, determine user plane data carried on the DRB. The integrity check fails; or, if the packet of the integrity detection failure on the DRB fails to exceed the preset threshold in the received data packet, the user carried on the DRB is determined.
- the integrity check of the face data fails; or, if the number of data packets that the integrity check is failed on the DRB exceeds the preset number, it is determined that the integrity check of the user plane data carried on the DRB fails; or, if If the number of data packets failed to be detected by the integrity detection on the DRB exceeds a preset number, it is determined that the integrity detection of the user plane data carried on the DRB fails; or, if the integrity of the DRB is performed, The number of consecutive data packets that failed to be detected exceeds a preset number, and it is determined that the integrity detection of the user plane data carried on the DRB fails.
- the user plane integrity detection configuration information includes second indication information, where the second indication information is used to instruct the terminal to perform integrity detection on all received user plane data;
- the integrity detection module 802 is specifically configured to perform integrity detection on all user plane data received by the terminal according to the second indication information.
- the integrity detection module 802 is specifically configured to: if the integrity detection of at least one data packet in the user plane data fails, determining that the user plane data integrity detection fails; or If the proportion of the data packet in which the integrity detection fails in the user plane data in the received data packet exceeds a preset threshold, determining that the user plane data integrity detection fails; or, if the user plane data is in the data If the number of data packets that the integrity check fails exceeds the preset number, it is determined that the user plane data integrity detection fails; or, if the number of data packets whose integrity detection fails in the user plane data exceeds a preset within a preset time The quantity determines that the user plane data integrity detection fails; or, if the number of consecutive data packets in which the integrity detection fails in the user plane data exceeds a preset number, determining that the user plane data integrity detection fails.
- the data packet includes a packet data convergence protocol PDCP layer, a radio link control RLC layer, and/or a protocol data unit PDU and/or a service data unit SDU of the medium access control MAC layer.
- the user plane integrity detection configuration information further includes: a judgment condition that the user plane data integrity detection fails.
- the terminal provided in this embodiment can perform the method shown in the foregoing embodiment, and the implementation principle and the technical effect are similar.
- FIG. 9 is a schematic structural diagram of a terminal according to an embodiment of the present disclosure.
- the embodiment further includes: a process execution module 803, an activation message receiving module 804, a configuration information receiving module 805, and a failure information transmission.
- the module 806 is configured to perform, if the integrity detection of the user plane data fails, perform at least one of the following steps: sending the complete to the RRC layer of the radio resource control, in some optional embodiments. Sex detection failure notification message; discarding the user plane data; transmitting an integrity detection failure notification message to the network side device; releasing an RRC connection with the network side device; triggering a radio link failure RLF mechanism; releasing the network DRB configuration of the side device.
- the user plane data is carried on the data radio bearer DRB, and the integrity detection failure notification message includes an identifier of the DRB whose integrity detection fails.
- the activation message receiving module 804 is configured to receive the network side before performing integrity detection on the user plane data according to the user plane integrity detection configuration information by the integrity detection module.
- the failure sent by the device processes the activation message.
- the configuration information receiving module 805 is configured to: before the integrity detection module detects configuration information according to user plane integrity, perform integrity detection on the user plane data, and receive the network side.
- the user plane data integrity detection configuration information sent by the device is configured to: before the integrity detection module detects configuration information according to user plane integrity, perform integrity detection on the user plane data, and receive the network side.
- the user plane data integrity detection configuration information sent by the device is configured to: before the integrity detection module detects configuration information according to user plane integrity, perform integrity detection on the user plane data, and receive the network side.
- the user plane data integrity detection configuration information sent by the device.
- the terminal works in a primary cell in a dual connectivity DC system or a carrier aggregation CA system; the integrity detection module 802 is further configured to: if the integrity detection of the user plane data fails Sending an integrity detection failure notification message to the RRC layer, discarding the user plane data, releasing an RRC connection with the network side device, or triggering a radio link failure RLF mechanism.
- the terminal works in a dual cell in a dual connectivity DC system or a carrier aggregation CA system; the integrity detection module 802 is further configured to: if the integrity detection of the user plane data fails And releasing the data radio bearer DRB configuration of the secondary cell or all secondary cells, or stopping the use of the DRB of the secondary cell or all secondary cells.
- the terminal works in a dual connectivity DC system
- the network side device is a secondary node SN in the DC system
- a failure information sending module 806 is configured to use the user plane data. The integrity check fails, and the integrity detection failure information is sent to the master node MN in the DC system.
- the integrity detection failure information includes an identifier of the network side device.
- the terminal works in a dual connectivity DC system
- the user plane integrity detection configuration information further includes: third indication information; the third indication information is used to indicate the terminal Perform integrity detection on the received user plane data sent by other network side devices.
- the user plane integrity detection configuration information further includes: fourth indication information, where the fourth indication information is used to instruct the terminal to perform integrity detection on the user plane data. Corresponding integrity detection algorithm.
- the terminal provided in this embodiment can perform the method shown in the foregoing embodiment, and the implementation principle and the technical effect are similar.
- FIG. 10 is a schematic structural diagram of a network side device according to an embodiment of the present disclosure.
- the network side device 100 includes a configuration information sending module 1001 and a data sending module 1002.
- the configuration information sending module 1001 is configured to send user plane data integrity detection configuration information to the terminal, where the user plane data integrity detection configuration information is used to indicate that the terminal performs integrity on the user plane data received from the network side device.
- the data sending module 1002 is configured to send user plane data to the terminal.
- the user plane data is carried on the data radio bearer DRB.
- the user plane integrity detection configuration information includes: first indication information, where the first indication information is used to indicate the DRB corresponding to the integrity detection.
- the user plane integrity detection configuration information further includes: a first determining condition that the user plane data integrity detection fails; and a first judgment that the user plane data integrity detection fails
- the condition includes: if the integrity detection of the user plane data carried on the at least one DRB in the DRB indicated by the first indication information fails, the user plane data integrity detection fails.
- the integrity detection of the user plane data carried on the DRB fails, including: if the integrity detection of the at least one data packet carried on the DRB fails, the DRB is carried on the DRB.
- the integrity check of the user plane data fails; or if the proportion of the data packet that the integrity check failed on the DRB is received in the received data packet on the DRB exceeds a preset threshold, The integrity detection of the user plane data carried on the DRB fails; or if the number of data packets that the integrity detection fails to be carried on the DRB exceeds a preset number, the integrity detection of the user plane data carried on the DRB If the number of data packets that the integrity detection fails to be carried on the DRB exceeds the preset number within the preset time, the integrity detection of the user plane data carried on the DRB fails; or, if The number of consecutive data packets that fail to be detected by the integrity check on the DRB exceeds a preset number, and the integrity detection of the user plane data carried on the DRB fails.
- the user plane integrity detection configuration information includes: second indication information, where the second indication information is used to indicate that the terminal performs integrity detection on all received user plane data. .
- the user plane integrity detection configuration information further includes: a second determination condition that the user plane data integrity detection fails; and a second judgment that the user plane data integrity detection fails
- the condition includes: if the integrity detection of the at least one data packet in the user plane data fails, the user plane data integrity detection fails; or, if the integrity check packet fails in the user plane data, the data packet is received The content of the data packet exceeds a preset threshold, and the user plane data integrity detection fails; or, if the number of data packets in which the integrity detection fails in the user plane data exceeds a preset number, the user plane data The integrity check fails; or, if the number of data packets in which the integrity check fails in the user plane data exceeds a preset amount within a preset time, the user plane data integrity detection fails; or, if the user plane data The number of consecutive data packets failed in the integrity check exceeds a preset number, and the user plane data integrity check fails.
- the data packet includes a packet data convergence protocol PDCP layer, a radio link control RLC layer, and/or a protocol data unit PDU and/or a service data unit SDU of the medium access control MAC layer.
- the network side device provided in this embodiment can perform the method shown in the foregoing embodiment, and the implementation principle and the technical effect are similar.
- FIG. 11 is a schematic structural diagram of a network side device according to an embodiment of the present disclosure. As shown in FIG. 11 , the embodiment further includes an activation message sending module 1003 and a failure information receiving module 1004 on the basis of the embodiment of FIG. 10 .
- the activation message sending module 1003 is configured to send a failure processing activation message to the terminal.
- the network side device works in a dual connectivity DC system
- the network side device is a master control node MN in the DC system
- the failure information receiving module 1004 is configured to receive the terminal.
- the integrity detection failure information sent includes the identifier of the secondary node in the DC system corresponding to the integrity detection failure.
- the network side device works in a dual connectivity DC system
- the user plane integrity detection configuration information further includes: third indication information; the third indication information is used to indicate the location The terminal performs integrity detection on the received user plane data sent by other network side devices.
- the user plane integrity detection configuration information further includes: fourth indication information, where the fourth indication information is used to instruct the terminal to perform integrity detection on the user plane data. Corresponding integrity detection algorithm.
- the network side device provided in this embodiment can perform the method shown in the foregoing embodiment, and the implementation principle and the technical effect are similar.
- FIG. 12 is a schematic structural diagram of a terminal according to another embodiment of the present disclosure.
- the terminal 1200 shown in FIG. 12 includes at least one processor 1201, a memory 1202, at least one network interface 1204, and a user interface 1203.
- the various components in terminal 1200 are coupled together by a bus system 1205.
- the bus system 1205 is used to implement connection communication between these components.
- the bus system 1205 includes, in addition to the data bus, a power bus, a control bus, and a status signal bus. However, for clarity of description, various buses are labeled as bus system 1205 in FIG.
- the user interface 1203 may include a display, a keyboard, or a pointing device (eg, a mouse, a trackball, a touchpad, or a touch screen, etc.).
- a pointing device eg, a mouse, a trackball, a touchpad, or a touch screen, etc.
- the memory 1202 in the embodiments of the present disclosure may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory.
- the non-volatile memory may be a read-only memory (ROM), a programmable read only memory (PROM), an erasable programmable read only memory (Erasable PROM, EPROM), or an electric Erase programmable read only memory (EEPROM) or flash memory.
- the volatile memory can be a Random Access Memory (RAM) that acts as an external cache.
- RAM Random Access Memory
- many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (Synchronous DRAM).
- SDRAM Double Data Rate Synchronous Dynamic Random Access Memory
- DDRSDRAM Double Data Rate Synchronous Dynamic Random Access Memory
- ESDRAM Enhanced Synchronous Dynamic Random Access Memory
- SDRAM Synchronous Connection Dynamic Random Access Memory
- DRRAM direct memory bus random access memory
- the memory 1202 stores elements, executable modules or data structures, or a subset thereof, or their extended set: an operating system 12021 and an application 12022.
- the operating system 12021 includes various system programs, such as a framework layer, a core library layer, a driver layer, and the like, for implementing various basic services and processing hardware-based tasks.
- the application 12022 includes various applications, such as a media player (Media Player), a browser (Browser), etc., for implementing various application services.
- a program implementing the method of the embodiments of the present disclosure may be included in the application 12022.
- the processor The 1201 is configured to perform configuration detection on the user plane integrity to perform integrity detection on the user plane data.
- the method disclosed in the above embodiments of the present disclosure may be applied to the processor 1201 or implemented by the processor 1201.
- the processor 1201 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the foregoing method may be completed by an integrated logic circuit of hardware in the processor 1201 or an instruction in a form of software.
- the processor 1201 may be a general-purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a Field Programmable Gate Array (FPGA), or the like. Programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.
- DSP digital signal processor
- ASIC application specific integrated circuit
- FPGA Field Programmable Gate Array
- the general purpose processor may be a microprocessor or the processor or any conventional processor or the like.
- the steps of the method disclosed in connection with the embodiments of the present disclosure may be directly implemented by the hardware decoding processor, or may be performed by a combination of hardware and software modules in the decoding processor.
- the software module can be located in a conventional storage medium such as random access memory, flash memory, read only memory, programmable read only memory or electrically erasable programmable memory, registers, and the like.
- the storage medium is located in the memory 1202, and the processor 1201 reads the information in the memory 1202 and completes the steps of the above method in combination with its hardware.
- the embodiments described in the embodiments of the present disclosure may be implemented in hardware, software, firmware, middleware, microcode, or a combination thereof.
- the processing unit can be implemented in one or more Application Specific Integrated Circuits (ASICs), Digital Signal Processing (DSP), Digital Signal Processing Equipment (DSP Device, DSPD), programmable Programmable Logic Device (PLD), Field-Programmable Gate Array (FPGA), general purpose processor, controller, microcontroller, microprocessor, other for performing the functions described in this disclosure In an electronic unit or a combination thereof.
- ASICs Application Specific Integrated Circuits
- DSP Digital Signal Processing
- DSP Device Digital Signal Processing Equipment
- PLD programmable Programmable Logic Device
- FPGA Field-Programmable Gate Array
- the techniques described in the embodiments of the present disclosure may be implemented by modules (eg, procedures, functions, etc.) that perform the functions described in the embodiments of the present disclosure.
- the software code can be stored in memory and executed by the processor.
- the memory can be implemented in the processor or external to the processor.
- the processor 1201 may call the program or the instruction stored in the memory 1202 to perform the method performed by the terminal in the foregoing method embodiment, and the implementation principle and the technical effect are similar, and the details are not described herein again.
- FIG. 13 is a schematic structural diagram of a network side device according to another embodiment of the present disclosure.
- the network side device 1300 includes an antenna 1301, a radio frequency device 1302, and a baseband device 1303.
- the antenna 1301 is connected to the radio frequency device 1302.
- the radio frequency device 1302 receives information through the antenna 1301, and transmits the received information to the baseband device 1303 for processing.
- the baseband device 1303 processes the information to be transmitted and transmits it to the radio frequency device 1302.
- the radio frequency device 1302 processes the received information and transmits it through the antenna 1301.
- the above-described band processing device may be located in the baseband device 1303.
- the method performed by the network side device in the above embodiment may be implemented in the baseband device 1303, and the baseband device 1303 includes a processor 13031 and a memory 13032.
- the baseband device 1303 may include, for example, at least one baseband board.
- the baseband board is provided with a plurality of chips. As shown in FIG. 12, one of the chips is, for example, a processor 13031, and is connected to the memory 13032 to call a program in the memory 13032 to execute.
- the baseband device 1303 may further include a network interface 13033 for interacting with the radio frequency device 1302, such as a common public radio interface (CPRI).
- a network interface 13033 for interacting with the radio frequency device 1302, such as a common public radio interface (CPRI).
- CPRI common public radio interface
- the processor here may be a processor or a collective name of multiple processing elements.
- the processor may be a CPU, an ASIC, or one configured to implement the method performed by the network side device.
- a plurality of integrated circuits such as one or more microprocessor DSPs, or one or more field programmable gate array FPGAs, and the like.
- the storage element can be a memory or a collective name for a plurality of storage elements.
- Memory 13032 can be either volatile memory or nonvolatile memory, or can include both volatile and nonvolatile memory.
- the non-volatile memory may be a Read-Only Memory (ROM), a Programmable ROM (Programmable ROM), or an Erasable PROM (EPROM). , electrically erasable programmable read only memory (EEPROM) or flash memory.
- the volatile memory may be a Random Access Memory (RAM), which is used as an external cache.
- RAM Random Access Memory
- many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (Synchronous).
- DRAM double data rate synchronous dynamic random access memory
- DDRSDRAM double data rate synchronous dynamic random access memory
- ESDRAM enhanced synchronous dynamic random access memory
- SLDRAM Synchlink DRAM
- DRRAM Direct Memory Bus
- the processor 13031 calls the program in the memory 13032 to execute the method performed by the network side device in the foregoing embodiment, and the implementation principle and technical effects are similar, and details are not described herein again.
- the disclosed apparatus and method may be implemented in other manners.
- the device embodiments described above are merely illustrative.
- the division of the unit is only a logical function division.
- there may be another division manner for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed.
- the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.
- the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.
- each functional unit in various embodiments of the present disclosure may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
- the functions may be stored in a computer readable storage medium if implemented in the form of a software functional unit and sold or used as a standalone product. Based on such understanding, a portion of the technical solution of the present disclosure that contributes in essence or to the related art or a part of the technical solution may be embodied in the form of a software product stored in a storage medium, including several The instructions are for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present disclosure.
- the foregoing storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a ROM, a RAM, a magnetic disk, or an optical disk.
- the aforementioned program can be stored in a computer readable storage medium.
- the program when executed, performs the steps including the foregoing method embodiments; and the foregoing storage medium includes various media that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
本公开提供一种完整性检测方法、终端及网络侧设备,该方法包括:终端接收网络侧设备发送的用户面数据;所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
Description
相关申请的交叉引用
本申请主张在2017年4月28日在中国提交的中国专利申请号No.201710297656.8的优先权,其全部内容通过引用包含于此。
本公开涉及无线通信技术,尤其涉及一种完整性检测方法、终端及网络侧设备。
当前无线通信领域中,随着对通信安全性要求的提高,加强通信过程中的保密措施会越来越重要。现有通信***中应用的安全措施主要有鉴权、加密和完整性检测。
在长期演进(Long Term Evolution,LTE)***中,针对无线资源控制(Radio Resource Control,RRC)消息的发送会进行加密处理,同时为了防止数据被篡改还会对RRC消息进行完整性检测。
然而,LTE***在发送和接收用户面数据的过程中,仅对用户面数据进行加密和解密操作,无法保证用户面数据的安全性。
发明内容
本公开实施例提供一种完整性检测方法、终端及网络侧设备,以提高用户面数据的安全性。
第一方面,本公开实施例提供一种完整性检测方法,包括:终端接收网络侧设备发送的用户面数据;所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
第二方面,本公开实施例提供一种完整性检测方法,包括:网络侧设备向终端发送用户面数据完整性检测配置信息,所述用户面数据完整性检测配 置信息用于指示终端对从所述网络侧设备接收到的用户面数据进行完整性检测;所述网络侧设备向所述终端发送用户面数据。
第三方面,本公开实施例提供一种终端,包括:数据接收模块,用于接收网络侧设备发送的用户面数据;完整性检测模块,用于根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
第四方面,本公开实施例提供一种网络侧设备,包括:配置信息发送模块,用于向终端发送用户面数据完整性检测配置信息,所述用户面数据完整性检测配置信息用于指示终端对从所述网络侧设备接收到的用户面数据进行完整性检测;数据发送模块,用于向所述终端发送用户面数据。
第五方面,本公开实施例提供一种终端,包括:处理器、存储器及存储在所述存储器上并可在所述处理器上运行的计算机程序,所述计算机程序被所述处理器执行时实现如第一方面所述的完整性检测方法的步骤。
第六方面,本公开实施例提供一种网络侧设备,包括:处理器、存储器及存储在所述存储器上并可在所述处理器上运行的计算机程序,所述计算机程序被所述处理器执行时实现如第二方面所述的完整性检测方法中的步骤。
第七方面,本公开实施例提供一种计算机可读存储介质,所述计算机可读存储介质上存储有计算机程序,所述计算机程序被处理器执行时实现如第一方面或第二方面所述的完整性检测方法中的步骤。
本公开实施例提供的完整性检测方法、终端及网络侧设备,终端在接收到网络侧设备发送的用户面数据后,终端根据用户面完整性检测配置信息,对从网络侧设备接收到的用户面数据进行完整性检测,进而判断该用户面数据是否被篡改,提高了用户面数据的安全性。
为了更清楚地说明本公开或相关技术中的技术方案,下面将对实施例或相关技术描述中所需要使用的附图作一简单地介绍,显而易见地,下面描述中的附图是本公开的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动性的前提下,还可以根据这些附图获得其他的附图。
图1为本公开提供的完整性检测方法的***架构示意图;
图2为本公开提供的完整性检测方法的***架构示意图;
图3为本公开一实施例提供的完整性检测方法的流程示意图;
图4为本公开一实施例提供的完整性检测方法的流程示意图;
图5为本公开一实施例提供的完整性检测方法的流程图;
图6为本公开一实施例提供的完整性检测方法的流程图;
图7为本公开一实施例提供的完整性检测方法的流程图;
图8为本公开一实施例提供的终端的结构示意图;
图9为本公开一实施例提供的终端的结构示意图;
图10为本公开一实施例提供的网络侧设备的结构示意图;
图11为本公开一实施例提供的网络侧设备的结构示意图;
图12为本公开另一实施例提供的终端的结构示意图;
图13为本公开另一实施例提供的网络侧设备的结构示意图。
为使本公开的目的、技术方案和优点更加清楚,下面将结合本公开实施例中的附图,对本公开实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例是本公开一部分实施例,而不是全部的实施例。基于本公开中的实施例,本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例,都属于本公开保护的范围。
本公开的说明书和权利要求书中的术语“包括”和“具有”以及他们的任何变形,意图在于覆盖不排他的包含,例如,包含了一系列步骤或单元的过程、方法、***、产品或设备不必限于清楚地列出的那些步骤或单元,而是可包括没有清楚地列出的或对于这些过程、方法、产品或设备固有的其它步骤或单元。
图1为本公开提供的完整性检测方法的***架构示意图一。如图1所示,本实施例提供的***架构包括:网络侧设备和终端。
其中,网络侧设备可以是全球移动通讯(Global System of Mobile communication,GSM)或码分多址(Code Division Multiple Access,CDMA)中的基站(Base Transceiver Station,BTS),也可以是宽带码分多址(Wideband Code Division Multiple Access,WCDMA)中的基站(NodeB,NB),还可以是LTE中的演进型基站(Evolutional Node B,eNB或eNodeB),还可以是新无线接入(New radio access technical,New RAT或NR)中的基站,或者中继站或接入点,或者未来5G网络中的基站等,在此并不限定。
终端可以是无线终端也可以是有线终端,该无线终端可以是指向用户提供语音和/或其他业务数据连通性的设备,具有无线连接功能的手持式设备、或连接到无线调制解调器的其他处理设备。无线终端可以经无线接入网(Radio Access Network,RAN)与一个或多个核心网进行通信,无线终端可以是移动终端,如移动电话(或称为“蜂窝”电话)和具有移动终端的计算机,例如,可以是便携式、袖珍式、手持式、计算机内置的或者车载的移动装置,它们与无线接入网交换语言和/或数据。例如,个人通信业务(Personal Communication Service,PCS)电话、无绳电话、会话发起协议(Session Initiation Protocol,SIP)话机、无线本地环路(Wireless Local Loop,WLL)站、个人数字助理(Personal Digital Assistant,PDA)等设备。无线终端也可以称为***、订户单元(Subscriber Unit)、订户站(Subscriber Station),移动站(Mobile Station)、移动台(Mobile)、远程站(Remote Station)、远程终端(Remote Terminal)、接入终端(Access Terminal)、用户终端(User Terminal)、用户代理(User Agent)、用户设备(User Device or User Equipment),在此不作限定。
图2为本公开提供的完整性检测方法的***架构示意图二。图1所示的***架构为单连接通信***,图2在图1所示实施例的基础上,***架构为多连接通信***。该多连接通信***例如可以为双连接(Dual Connectivity,DC)通信***。
双连接通信***是指终端可以接入第一网络侧设备和第二网络侧设备。在本实施例中,第一网络侧设备可以为图1实施例中所述的网络侧设备中的一种,第二网络侧设备可以为图1实施例中所述的网络侧设备中的一种。在一种可能的实现方式中,如图2所示,该双连接通信***包括LTE网络中的网络侧设备和NR网络中的网络侧设备。其中一个***作为主控节点(Master Node,MN),例如本实施例中的LTE网络中的网络侧设备作为主控节点,另外一个***作为辅助节点(Secondary Node,SN),例如本实施例中的NR 网络中的网络侧设备。在双连接***中,包括两个小区组,主小区组(Master Cell Group,MCG)和辅小区组(Secondary Cell Group,SCG)。主小区组可以包括一个主小区(Primary Cell,PCell)和一个或多个辅小区(Secondary Cell,SCell)。辅小区组可以包括一个主辅小区(Primary Secondary Cell,PSCell)和一个或多个SCell。其中,主控节点对应主小区和辅小区,辅助节点对应主辅小区和辅小区。终端的具体实现方式可参加上述图1实施例所示的描述,本实施例此处不再赘述。
上述实施例中给出了可能的***架构,本实施例对于具体的***架构不做特别限制,只要包含终端与网络侧设备的***架构,都可以应用到本实施例中。
在未来5G(5th Generation)移动通信***中,为支持移动宽带增强(Enhance Mobile Broadband,eMBB)、超高可靠超低时延通信(Ultra-Reliable Low latency Communication,URLLC)业务等多种业务,此时仅考虑控制面数据的安全性还不能满足安全性需要,还需要考虑用户面数据的安全性。因此本公开提供一种用户面数据的完整性检测方法,以保证用户面数据的安全性。下面采用详细的实施例,对本公开提供的方法进行详细说明。
图3为本公开一实施例提供的完整性检测方法的流程示意图。本实例的执行主体为终端,如图3所示,该方法包括:
S301、终端接收网络侧设备发送的用户面数据。
当终端开机后会从选定的公用陆地移动通信网(Public Land Mobile Network,PLMN)中选择一个合适的小区进行驻留。当终端驻留在某个小区后,就可以接收***消息和小区广播消息。当终端需要进行业务通信时,终端与网络侧设备建立无线资源控制(Radio Resource Control,RRC)连接,在建立了RRC连接之后,终端可以与网络侧设备进行用户面数据的传输。
在本实施例中,给出一种可能的RRC连接建立的过程。其中,RRC连接建立的过程是通过无线承载(Radio Bearer,RB)来实现的。其中,RB包括信令无线承载(Signaling Radio Bear,SRB)和数据无线承载(Date Radio Bear,DRB),其中,SRB是***的信令消息实际传输的通道,DRB是用户面数据实际传输的通道。SRB包括SRB0、SRB1和SRB2,其中SRB0用于承载RRC 消息,SRB1用于承载RRC消息和部分非接入层(Non-Access Stratum,NAS)消息,SRB2用于承载部分NAS消息。
通俗的讲RRC连接指的是终端和网络侧设备之间建立的SRB1,因为SRB0是不需要建立的。终端在空闲状态就可以获得SRB0的配置和资源。***中业务发起的过程是通过SRB0上传输信令建立SRB1,SRB1建立之后终端就进入RRC连接状态;进而通过SRB1传输信令建立SRB2用来传输NAS信令;并利用SRB1传输信令建立DRB来传输用户面数据。由此可知,当终端与网络侧设备建立了DRB之后,终端接收网络侧设备通过已经建立的DRB发送的用户面数据。
S302、终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
在终端接收到用户面数据之后,终端根据用户面完整性检测配置信息,有目的和针对性的对用户面数据进行完整性检测。其中,该用户面完整性检测配置信息可以为终端与网络侧设备预先约定的,也可以为网络侧设备配置给终端的。该用户面完整性检测配置信息可以指示终端对接收到的所有用户面数据或部分用户面数据进行完整性检测,该用户面完整性检测配置信息中还可以包括用于指示终端对用户面数据进行完整性检测对应的完整性检测算法的指示信息等。为了与下述实施例中的第一指示信息、第二指示信息以及第三指示信息进行区分,此处可以将该指示信息称为第四指示信息。
该完整性检测算法例如可以为高级加密标准(advanced encryption standard,AES)算法、SNOW 3G算法和祖冲之算法(ZUC)等,对于具体的算法,本实施例此处不做特别限制。
本领域技术人员可以理解,与完整性检测有关的各种参数和信息,都可以被包括在用户面完整性检测配置信息中。
示意性地,终端对用户面数据进行完整性检测的过程可以为:终端利用用户面数据中携带的参数以及终端维护的已知参数,通过完整性保护算法生成完整性验证信息,将该完整性验证信息与已知的完整性验证信息进行比较,如果二者一致,则验证通过,则判断数据没有被篡改,如果二者不一致,则验证失败,即发现用户面数据被篡改了,则判断数据完整性检测失败,该数 据不可用。本领域技术人员可以理解,此处仅示意性的给出了一种完整性检测过程,对于其它形式的完整性检测过程,也都可以应用到本公开实施例中。
在一些可选的实施例中,终端对用户面数据进行完整性检测的操作在终端的分组数据汇聚协议(Packet Data Convergence Protocol,PDCP)层来实现。
本公开实施例提供的完整性检测方法,终端在接收到网络侧设备发送的用户面数据后,终端根据用户面完整性检测配置信息,对从网络侧设备接收到的用户面数据进行完整性检测,进而判断该用户面数据是否被篡改,提高了用户面数据的安全性。
图4为本公开一实施例提供的完整性检测方法的流程示意图。本实例的执行主体为网络侧设备,该网络侧设备可以为图1中所示的网络侧设备,也可以为图2中多连接***中的任一网络侧设备。与图3对应地,本实施例的执行主体为网络侧设备,如图4所示,该方法包括:
S401、网络侧设备向终端发送用户面数据完整性检测配置信息,所述用户面数据完整性检测配置信息用于指示终端对从所述网络侧设备接收到的用户面数据进行完整性检测;
S402、所述网络侧设备向所述终端发送用户面数据。
与图3所示实施例中的该用户面数据完整性检测配置信息为网络侧设备配置给终端的相对应。网络侧设备可以在向终端发送用户面数据之前,先向终端发送用户面数据完整性检测配置信息。在一些可选的实施例中,该用户面完整性检测配置信息可以为新增的信息,也可以为在RRC建立过程中,在RRC消息中增加扩展字段,也可以在RRC重配过程中,携带在重配置消息中。本实施例对网络侧设备向终端发送用户面完整性检测配置信息的具体过程不做特别限定。在网络侧设备与终端建立DRB之后,网络侧设备通过DRB向终端发送用户面数据,由终端对该用户面数据进行完整性检测。
本实施例提供的完整性检测方法,通过网络侧设备向终端发送用户面数据完整性检测配置信息,以指示终端对从网络侧设备接收到的用户面数据进行完整性检测,在网络侧设备向终端发送用户面数据之后,网络侧设备通过该用户面完整性检测配置信息对用户面数据进行完整性检测,终端通过完整性检测可以判断该用户面数据是否被篡改,提高了用户面数据的安全性。
下面采用具体的实施例,对本公开提供的完整性检测方法进行详细说明。
在一个具体的例子中,在上述图3和图4实施例的基础上,用户面完整性检测配置信息,包括:第一指示信息,该第一指示信息用于指示完整性检测对应的DRB。对应的完整性检测方法的具体实现过程可如图5所示。
图5为本公开一实施例提供的完整性检测方法的流程图。如图5所示,该方法包括:S501、终端接收网络侧设备发送的用户面数据;S502、终端对第一指示信息所指示的DRB上承载的用户面数据进行完整性检测,第一指示信息用于指示完整性检测对应的DRB。
具体地,DRB只有一种,协议规定每个终端可以最多有8个DRB用来传输不同的业务。终端可以对所有的DRB进行完整性检测,也可以对部分DRB进行完整性检测。具体地,该第一指示信息中指示了需要进行完整性检测的DRB的标识,该DRB的标识例如可以为DRB的取值,DRB的序号等等,本实施例对DRB的标识不做特别限制。具体地,可以根据DRB上所承载的用户面数据的重要性,来指示用于进行完整性检测的DRB的标识。
终端可以根据第一指示信息所指示的DRB上承载的用户面数据进行完整性检测。即终端可以有针对性的对DRB上承载的用户面数据进行完整性检测,提高了终端的完整性检测效率,同时降低了对终端的能力需求,也降低了终端的能量消耗。
在一些可选的实施例中,在本实施例的基础上,终端可以根据用户面数据完整性检测失败的第一判断条件,来判断数据完整性检测是否失败。该用户面数据完整性检测失败的第一判断条件可以被设置在用户面完整性检测配置信息中,由终端与网络侧设备预先约定,或者由网络侧设备发送给终端,或者,也可以为终端自行设置。本实施例对完整性检测失败的第一判断条件的配置方式,不做特别限制。
具体地,该完整性检测失败的第一判断条件包括:若第一指示信息所指示的DRB中存在至少一个DRB的完整性检测失败,则用户面数据完整性检测失败。
在具体实现过程中,终端若确定第一指示信息所指示的DRB中存在至少一个DRB上承载的用户面数据的完整性检测失败,则终端确定用户面数据完 整性检测失败。由上可知,第一指示信息中可以指示多个DRB的标识,网络侧设备与终端通过多个DRB进行用户面数据传输,终端可以在确定一个或多个DRB或所有被指示的DRB的完整性检测失败时,确定用户面数据完整性检测失败。
其中,终端确定DRB上承载的用户面数据的完整性检测失败,包括以下可能的实现方式。
在一种可能的实现方式中,若DRB上所承载的至少一个数据包的完整性检测失败,则DRB上承载的用户面数据的完整性检测失败。
具体地,DRB上可以承载多个数据包,当DRB上所承载的一个或多个数据包的完整性检测失败,则终端确定该DRB的完整性检测失败。该完整性检测失败的数据包的数量可以预先约定,也可以为终端自行设定。
在另一种可能的实现方式中,若DRB上所承载的完整性检测失败的数据包在接收到的DRB上所承载的数据包中的占比超过预设阈值,则确定DRB上承载的用户面数据的完整性检测失败。
具体地,终端依次对接收到的该DRB上承载的数据包进行完整性检测,对完整性检测失败的数据包进行计数,并对接收到的该DRB上承载的数据包进行计数,当完整性检测失败的数据包的数量N在接收到的DRB上所承载的数据包的数量M中的占比超过预设阈值时,即N/M的比值超过预设阈值时,则确定DRB上承载的用户面数据的完整性检测失败。
在又一种可能的实现方式中,若DRB上所承载的完整性检测失败的数据包的数量超过预设数量,则确定DRB上承载的用户面数据的完整性检测失败。
具体地,终端依次对接收到的该DRB上承载的数据包进行完整性检测,对完整性检测失败的数据包进行计数,当该数量超过预设阈值时,则终端确定DRB上承载的用户面数据的完整性检测失败。
在又一种可能的实现方式中,若预设时间内DRB上所承载的完整性检测失败的数据包的数量超过预设数量,则确定DRB上承载的用户面数据的完整性检测失败。
具体地,在预先设定的时长内,对完整性检测失败的数据包进行计数,在DRB上所承载的完整性检测失败的数据包的数量超过预设数量,终端确定 DRB上承载的用户面数据的完整性检测失败。
在又一种可能的实现方式中,若DRB上所承载的完整性检测失败的连续的数据包的数量超过预设数量,则确定DRB上承载的用户面数据的完整性检测失败。
具体地,对完整性检测失败的连续的数据包进行计数,在该计数的数量超过预设数量,终端确定DRB上承载的用户面数据的完整性检测失败。
在另一个具体的例子中,在上述图3和图4实施例的基础上,用户面完整性检测配置信息,包括:第二指示信息,该第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测。对应的完整性检测方法的具体实现过程可如图6所示。
图6为本公开一实施例提供的完整性检测方法的流程图。如图6所示,该方法包括:S601、终端接收网络侧设备发送的用户面数据;S602、终端根据第二指示信息,对终端接收到的所有用户面数据进行完整性检测,第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测。
具体地,可以从终端层面对终端进行指示,即该终端对所有的用户面数据均进行完整性检测,而不用具体区用户面数据中的数据包属于哪一个DRB。
在本实施例中,在用户面完整性配置信息中,还可以包括用户面数据完整性检测失败的第二判断条件。在一些可选的实施例中,在本实施例的基础上,终端可以根据用户面数据完整性检测失败的第二判断条件,来判断数据完整性检测是否失败。该用户面数据完整性检测失败的第二判断条件可以被设置在用户面完整性检测配置信息中,由终端与网络侧设备预先约定,或者由网络侧设备发送给终端,或者,也可以为终端自行设置。本实施例对完整性检测失败的第二判断条件的配置方式,不做特别限制。
具体地,该完整性检测失败的第二判断条件包括:
若用户面数据中至少一个数据包的完整性检测失败,用户面数据完整性检测失败;或者,若用户面数据中完整性检测失败的数据包在接收到的数据包中的占比超过预设阈值,用户面数据完整性检测失败;或者,若用户面数据中完整性检测失败的数据包的数量超过预设数量,用户面数据完整性检测失败;或者,若预设时间内用户面数据中完整性检测失败的数据包的数量超 过预设数量,用户面数据完整性检测失败;或者,若用户面数据中完整性检测失败的连续的数据包的数量超过预设数量,用户面数据完整性检测失败。
本实施例终端对接收到的所有用户面数据进行完整性检测,其中涉及的数据包的计数或者数据包的数量的具体实现过程,可参见图5所示的实施例,本实施例此处不再赘述。
在上述实施例中,该数据包包括:分组数据汇聚协议(Packet Data Convergence Protocol,PDCP)层、无线链路控制(Radio Link Control,RLC)层和/或介质访问控制(Medium Access Control,MAC)层的协议数据单元(Protocol Data Unit,PDU)和/或业务数据单元(Service Data Unit,SDU)。
由上可知,确定用户面数据完整性检测失败的实现方式有多种,在具体实现过程中,可以根据用户面数据的重要性,或者,终端的能力等来灵活设置。
在上述实施例的基础上,当完整性检测失败之后,本公开还明确了终端的后续操作,具体可如图7所示。图7为本公开一实施例提供的完整性检测方法的流程图。如图7所示,该方法包括:S701、终端接收网络侧设备发送的用户面数据;S702、终端根据用户面完整性检测配置信息,对用户面数据进行完整性检测;S703、终端确定对用户面数据进行完整性检测是否失败,若是,则执行S704,若否,则执行S705;S704、终端进行完整性检测失败处理流程;S705、终端获取该用户面数据。
S701至S703的具体实现过程可参见上述实施例,本实施例此处不再赘述。
该完整性检测失败流程可以为终端与网络侧设备预先约定的,也可以为终端自行设置的,也可以为网络侧设备配置给终端的。
在本实施例中,终端进行完整性检测流程可以包括两种可能的实现方式。
一种可能的实现方式为:在终端确定用户面数据进行完整性检测失败时,终端进行完整性检测失败流程。即在完整性检测失败时,终端就进行完整性检测失败流程。
另一种可能的实现方式为:在终端在进行完整性检测之前,网络侧设备还会向终端发送失败处理激活消息,该失败处理激活消息用于指示终端在完 整性检测失败之后启动完整性检测失败处理流程。
即如果终端没有收到该失败处理激活消息,在终端确定用户面数据进行完整性检测失败后,终端不会进行后续的完整性检测失败处理流程;如果终端收到了该失败处理激活消息,在终端确定用户面数据进行完整性检测失败后,终端会进行后续的完整性检测失败处理流程。
在一些可选的实施例中,若所述用户面数据的完整性检测失败,所述终端执行以下步骤中的至少一项:终端的PDCP层向RRC层发送完整性检测失败通知消息;终端丢弃用户面数据;终端向网络侧设备发送完整性检测失败通知消息;终端释放与网络侧设备的RRC连接;终端触发无线链路失败RLF机制,终端释放网络侧设备的DRB配置。
本领域技术人员可以理解,上述的完整性检测失败处理流程包括上述步骤中的至少一项。
在具体实现过程中,终端的PDCP层来执行用户面数据的完整性检测,当用户面数据的完整性检测失败时,终端的PDCP层向RRC层发送完整性检测失败通知消息,并丢弃该用户面数据。
终端还可以向网络侧设备发送完整性检测失败通知消息。在一些可选的实施例中,本实施例中所涉及的完整性检测失败消息中可以携带完整性检测失败的DRB的标识。网络侧设备在RRC的重配过程中,可以根据该完整性检测失败的DRB的标识,为终端重新配置DRB。
终端还可以释放与网络侧设备的RRC连接,并向网络侧设备发送终端释放RRC连接的通知消息。在后续的处理过程中,终端还可以与网络侧设备进行RRC连接的重建。
终端还可以触发无线链路失败(Radio Link Failure,RLF)机制,终端在触发RLF机制之后,会在指定时间内进行RRC的重建,若在指定时间内重建失败,则终端后继可以发起RRC建立请求。
终端还可以释放网络侧设备的DRB配置。本领域技术人员可以理解,在进行用户面数据传输时,网络侧设备会为终端配置可用的DRB,在完整性检测失败之后,终端可以释放网络侧设备对该终端的DRB配置。
在具体实现过程中,可以根据不同的***架构以及不同的场景,来灵活 选择完整性检测失败流程。
下面针对不同的场景,对本公开实施例所提供的完整性检测方法进行详细说明。
一种可能的应用场景可如图2所示,即在多连接的场景下,用户面完整性检测配置信息,还包括:第三指示信息;该第三指示信息,用于指示终端对接收到的其它网络侧设备发送的用户面数据进行完整性检测处理。
例如,LTE中的网络侧设备向终端发送了用户面完整性检测配置信息,在一些可选的实施例中,该用户面完整性检测配置信息中包括上述的第一指示信息或第二指示信息,在本实施例中,该用户面完整性检测配置信息中还包括了第三指示信息。即LTE中的网络侧设备还指示终端对接收到的新无线接入网中的网络侧设备发送的用户面数据进行完整性检查处理。终端对新无线接入网中的用户面数据进行完整性检测的过程与终端对LTE中的用户面数据的完整性检测过程相同。
在此过程中,该网络侧设备(LTE网络中的网络侧设备)会向其它网络侧设备(新无线接入网中的网络侧设备)发送已配置通知消息,该已配置通知消息用于告知其它网络侧设备,该网络侧设备向终端发送的用户面完整性检测配置信息适用于其它网络侧设备,此时,其它网络侧设备则不用向该终端发送用户面完整性检测配置信息。
另一种可能的应用场景继续参照图2,在终端工作在双连接DC***,本实施例中的网络侧设备为DC***中的辅助节点SN;若用户面数据的完整性检测失败,终端向DC***中的主控节点MN发送完整性检测失败信息。
具体地,当终端确定用户面数据完整性检测失败之后,终端可以向该网络侧设备和/或其它网络侧设备发送完整性检测失败信息。当终端向其它网络侧设备,即不是向该终端发送用户面数据的网络侧设备发送完整性检测失败信息时,该完整性检测失败信息中包括网络侧设备的标识。
例如,当新无线接入网中的网络侧设备作为辅助节点、LTE网络中的网络侧设备作为主控节点时,若该辅助节点SN向终端发送了用户面数据,终端对该用户面数据进行完整性检测失败,则终端可以不向辅助节点发送完整性检测失败信息,而是向主控节点发送用户面数据完整性检测失败信息,并 携带辅助节点SN的标识,此时主控节点可以与该辅助节点SN断开连接,重新与新的辅助节点SN建立连接。
另一种可能的场景可如图2所示的多连接***,也可以为载波聚合(Carrier Aggregation,CA)场景。其中,CA是将2个或更多的载波单元(Component Carrier,CC)聚合在一起形成载波组以支持更大的传输带宽。其中,主小区(Primary cell,Pcell)对应的载波称为主分量载波(Primary Component Carrier,PCC),也称作主载波;辅小区(Secondary Cell,Scell)对应的载波称为辅分量载波(Secondary Component Carrier,SCC),也称为辅载波。本实施例示意性的给出了包括主小区、主辅小区、辅小区的场景。对于其它的包括主小区和/或主辅小区,以及辅小区的场景,本实施例同样适用。
当终端工作在双连接DC***或载波聚合CA***中的主小区时,若用户面数据的完整性检测失败,终端的PDCP层向RRC层发送完整性检测失败通知消息,终端丢弃用户面数据;终端释放与网络侧设备的RRC连接,或者,触发无线链路失败RLF机制。
当终端工作在双连接DC***或载波聚合CA***中的辅小区,若用户面数据的完整性检测失败,终端释放辅小区或所有辅小区的数据无线承载DRB配置,或者,停止对辅小区或所有辅小区的DRB的使用。
本领域技术人员可以理解,主小区负责网络侧设备与终端之间的RRC;辅小区用于提供额外的无线资源,与终端之间不存在RRC通信。因此,在当终端位于上述的辅小区时,在终端的完整性检测失败时,终端可以不执行上述的释放与网络侧设备的RRC连接、以及触发RLF机制的过程。
在当终端执行向网络侧设备发送完整性检测失败通知消息的流程时,在终端向网络侧设备发送完整性检测失败通知消息之后,网络侧设备向终端发送RRC重配置信息,该RRC重配置消息中包括新的用户面数据完整性检测配置信息,该RRC重配置消息中还可以包括其它的配置信息,本实施例此处不做特别限制。
本领域技术人员可以理解,上述的场景仅为示意性的场景,在具体实现过程中,可以对上述的场景进行各种结合或衍生,得到其它的应用场景,本实施例在此不再一一列举。
图8为本公开一实施例提供的终端的结构示意图,如图8所示,该终端80包括:数据接收模块801和完整性检测模块802。其中,数据接收模块801,用于接收网络侧设备发送的用户面数据;完整性检测模块802,用于根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
在一些可选的实施例中,所述用户面数据承载在数据无线承载DRB上;所述用户面完整性检测配置信息包括:第一指示信息,所述第一指示信息用于指示完整性检测对应的DRB;所述完整性检测模块,具体用于对所述第一指示信息所指示的DRB上承载的用户面数据进行完整性检测。
在一些可选的实施例中,所述完整性检测模块802,具体用于:若对所述第一指示信息所指示的DRB中的至少一个DRB上承载的用户面数据的完整性检测失败,确定所述用户面数据完整性检测失败。
在一些可选的实施例中,所述完整性检测模块802,具体用于:若所述DRB上所承载的至少一个数据包的完整性检测失败,确定所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包在接收到的所述DRB上所承载的数据包中的占比超过预设阈值,确定DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,确定DRB上承载的用户面数据的完整性检测失败;或者,若预设时间内所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,确定DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的连续的数据包的数量超过预设数量,确定DRB上承载的用户面数据的完整性检测失败。
在一些可选的实施例中,所述用户面完整性检测配置信息包括第二指示信息,所述第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测;所述完整性检测模块802,具体用于根据所述第二指示信息,对所述终端接收到的所有用户面数据进行完整性检测。
在一些可选的实施例中,所述完整性检测模块802,具体用于:若所述用户面数据中至少一个数据包的完整性检测失败,确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包在接收到 的数据包中的占比超过预设阈值,确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包的数量超过预设数量,确定所述用户面数据完整性检测失败;或者,若预设时间内所述用户面数据中完整性检测失败的数据包的数量超过预设数量,确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的连续的数据包的数量超过预设数量,确定所述用户面数据完整性检测失败。
在一些可选的实施例中,所述数据包,包括分组数据汇聚协议PDCP层、无线链路控制RLC层和/或介质访问控制MAC层的协议数据单元PDU和/或业务数据单元SDU。
在一些可选的实施例中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的判断条件。
本实施例提供的终端,可执行上述实施例所示的方法,其实现原理和技术效果类似,本实施例此处不再赘述。
图9为本公开一实施例提供的终端的结构示意图,本实施例在图8实施例的基础上,还包括:流程执行模块803、激活消息接收模块804、配置信息接收模块805和失败信息发送模块806;在一些可选的实施例中,所述流程执行模块803,用于若所述用户面数据的完整性检测失败,执行以下步骤中的至少一项:向无线资源控制RRC层发送完整性检测失败通知消息;丢弃所述用户面数据;向所述网络侧设备发送完整性检测失败通知消息;释放与所述网络侧设备的RRC连接;触发无线链路失败RLF机制;释放所述网络侧设备的DRB配置。
在一些可选的实施例中,所述用户面数据承载在数据无线承载DRB上,所述完整性检测失败通知消息中包括完整性检测失败的DRB的标识。
在一些可选的实施例中,激活消息接收模块804,用于在所述完整性检测模块根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之前,接收所述网络侧设备发送的失败处理激活消息。
在一些可选的实施例中,配置信息接收模块805,用于在所述完整性检测模块根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之前,接收所述网络侧设备发送的所述用户面数据完整性检测配置信息。
在一些可选的实施例中,所述终端工作在双连接DC***或载波聚合CA***中的主小区;所述完整性检测模块802还用于:若所述用户面数据的完整性检测失败,向RRC层发送完整性检测失败通知消息,丢弃所述用户面数据;释放与所述网络侧设备的RRC连接,或者,触发无线链路失败RLF机制。
在一些可选的实施例中,所述终端工作在双连接DC***或载波聚合CA***中的辅小区;所述完整性检测模块802还用于:若所述用户面数据的完整性检测失败,释放所述辅小区或所有辅小区的数据无线承载DRB配置,或者,停止对所述辅小区或所有辅小区的DRB的使用。
在一些可选的实施例中,所述终端工作在双连接DC***,所述网络侧设备为所述DC***中的辅助节点SN;失败信息发送模块806,用于若所述用户面数据的完整性检测失败,向所述DC***中的主控节点MN发送完整性检测失败信息。
在一些可选的实施例中,所述完整性检测失败信息中包括所述网络侧设备的标识。
在一些可选的实施例中,所述终端工作在双连接DC***,所述用户面完整性检测配置信息,还包括:第三指示信息;所述第三指示信息,用于指示所述终端对接收到的其它网络侧设备发送的用户面数据进行完整性检测。
在一些可选的实施例中,所述用户面完整性检测配置信息,还包括:第四指示信息;所述第四指示信息,用于指示所述终端对所述用户面数据进行完整性检测对应的完整性检测算法。
本实施例提供的终端,可执行上述实施例所示的方法,其实现原理和技术效果类似,本实施例此处不再赘述。
图10为本公开一实施例提供的网络侧设备的结构示意图。如图10所示,该网络侧设备100包括:配置信息发送模块1001和数据发送模块1002。
配置信息发送模块1001,用于向终端发送用户面数据完整性检测配置信息,所述用户面数据完整性检测配置信息用于指示终端对从所述网络侧设备接收到的用户面数据进行完整性检测;数据发送模块1002,用于向所述终端发送用户面数据。
所述用户面数据承载在数据无线承载DRB上;所述用户面完整性检测配置信息,包括:第一指示信息,所述第一指示信息用于指示完整性检测对应的DRB。
在一些可选的实施例中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的第一判断条件;所述用户面数据完整性检测失败的第一判断条件,包括:若对所述第一指示信息所指示的DRB中的存在至少一个DRB上承载的用户面数据的完整性检测失败,则所述用户面数据完整性检测失败。
在一些可选的实施例中,所述DRB上承载的用户面数据的完整性检测失败,包括:若所述DRB上所承载的至少一个数据包的完整性检测失败,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包在接收到的所述DRB上所承载的数据包中的占比超过预设阈值,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败;或者,若预设时间内所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的连续的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败。
在一些可选的实施例中,所述用户面完整性检测配置信息,包括:第二指示信息,所述第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测。
在一些可选的实施例中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的第二判断条件;所述用户面数据完整性检测失败的第二判断条件,包括:若所述用户面数据中至少一个数据包的完整性检测失败,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包在接收到的数据包中的占比超过预设阈值,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述用户面数据完整性检测失败;或者,若预设时 间内所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的连续的数据包的数量超过预设数量,所述用户面数据完整性检测失败。
在一些可选的实施例中,所述数据包,包括分组数据汇聚协议PDCP层、无线链路控制RLC层和/或介质访问控制MAC层的协议数据单元PDU和/或业务数据单元SDU。
本实施例提供的网络侧设备,可执行上述实施例所示的方法,其实现原理和技术效果类似,本实施例此处不再赘述。
图11为本公开一实施例提供的网络侧设备的结构示意图。如图11所示,本实施例在图10实施例的基础上,还包括:激活消息发送模块1003和失败信息接收模块1004。其中,激活消息发送模块1003,用于向所述终端发送失败处理激活消息。
在一些可选的实施例中,所述网络侧设备工作在双连接DC***,所述网络侧设备为所述DC***中的主控节点MN;失败信息接收模块1004,用于接收所述终端发送的完整性检测失败信息,所述完整性检测失败信息中包括完整性检测失败对应的所述DC***中的辅助节点的标识。
在一些可选的实施例中,所述网络侧设备工作在双连接DC***,所述用户面完整性检测配置信息,还包括:第三指示信息;所述第三指示信息,用于指示所述终端对接收到的其它网络侧设备发送的用户面数据进行完整性检测。
在一些可选的实施例中,所述用户面完整性检测配置信息,还包括:第四指示信息;所述第四指示信息,用于指示所述终端对所述用户面数据进行完整性检测对应的完整性检测算法。
本实施例提供的网络侧设备,可执行上述实施例所示的方法,其实现原理和技术效果类似,本实施例此处不再赘述。
图12为本公开另一实施例提供的终端的结构示意图。如图12所示,图12所示的终端1200包括:至少一个处理器1201、存储器1202、至少一个网络接口1204和用户接口1203。终端1200中的各个组件通过总线***1205耦合在一起。可理解,总线***1205用于实现这些组件之间的连接通信。总 线***1205除包括数据总线之外,还包括电源总线、控制总线和状态信号总线。但是为了清楚说明起见,在图11中将各种总线都标为总线***1205。
其中,用户接口1203可以包括显示器、键盘或者点击设备(例如,鼠标,轨迹球(trackball)、触感板或者触摸屏等。
可以理解,本公开实施例中的存储器1202可以是易失性存储器或非易失性存储器,或可包括易失性和非易失性存储器两者。其中,非易失性存储器可以是只读存储器(Read-Only Memory,ROM)、可编程只读存储器(Programmable ROM,PROM)、可擦除可编程只读存储器(Erasable PROM,EPROM)、电可擦除可编程只读存储器(Electrically EPROM,EEPROM)或闪存。易失性存储器可以是随机存取存储器(Random Access Memory,RAM),其用作外部高速缓存。通过示例性但不是限制性说明,许多形式的RAM可用,例如静态随机存取存储器(Static RAM,SRAM)、动态随机存取存储器(Dynamic RAM,DRAM)、同步动态随机存取存储器(Synchronous DRAM,SDRAM)、双倍数据速率同步动态随机存取存储器(Double Data Rate SDRAM,DDRSDRAM)、增强型同步动态随机存取存储器(Enhanced SDRAM,ESDRAM)、同步连接动态随机存取存储器(Synchlink DRAM,SLDRAM)和直接内存总线随机存取存储器(Direct Rambus RAM,DRRAM)。本公开实施例描述的***和方法的存储器1202旨在包括但不限于这些和任意其它适合类型的存储器。
在一些实施方式中,存储器1202存储了如下的元素,可执行模块或者数据结构,或者他们的子集,或者他们的扩展集:操作***12021和应用程序12022。
其中,操作***12021,包含各种***程序,例如框架层、核心库层、驱动层等,用于实现各种基础业务以及处理基于硬件的任务。应用程序12022,包含各种应用程序,例如媒体播放器(Media Player)、浏览器(Browser)等,用于实现各种应用业务。实现本公开实施例方法的程序可以包含在应用程序12022中。
在本公开实施例中,通过调用存储器1202存储的程序或指令,具体的,可以是应用程序12022中存储的程序或指令,在网络接口1204接收到网络侧 设备发送的用户面数据后,处理器1201用于根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
上述本公开实施例揭示的方法可以应用于处理器1201中,或者由处理器1201实现。处理器1201可能是一种集成电路芯片,具有信号的处理能力。在实现过程中,上述方法的各步骤可以通过处理器1201中的硬件的集成逻辑电路或者软件形式的指令完成。上述的处理器1201可以是通用处理器、数字信号处理器(Digital Signal Processor,DSP)、专用集成电路(Application Specific Integrated Circuit,ASIC)、现成可编程门阵列(Field Programmable Gate Array,FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件。可以实现或者执行本公开实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等。结合本公开实施例所公开的方法的步骤可以直接体现为硬件译码处理器执行完成,或者用译码处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器,闪存、只读存储器,可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器1202,处理器1201读取存储器1202中的信息,结合其硬件完成上述方法的步骤。
可以理解的是,本公开实施例描述的这些实施例可以用硬件、软件、固件、中间件、微码或其组合来实现。对于硬件实现,处理单元可以实现在一个或多个专用集成电路(Application Specific Integrated Circuits,ASIC)、数字信号处理器(Digital Signal Processing,DSP)、数字信号处理设备(DSP Device,DSPD)、可编程逻辑设备(Programmable Logic Device,PLD)、现场可编程门阵列(Field-Programmable Gate Array,FPGA)、通用处理器、控制器、微控制器、微处理器、用于执行本公开所述功能的其它电子单元或其组合中。
对于软件实现,可通过执行本公开实施例所述功能的模块(例如过程、函数等)来实现本公开实施例所述的技术。软件代码可存储在存储器中并通过处理器执行。存储器可以在处理器中或在处理器外部实现。
具体地,处理器1201可以调用存储器1202存储的程序或指令,执行上述方法实施例中与终端执行的方法,其实现原理和技术效果类似,本实施例此处不再赘述。
图13为本公开另一实施例提供的网络侧设备的结构示意图。如图13所示,该网络侧设备1300包括:天线1301、射频装置1302、基带装置1303。天线1301与射频装置1302连接。在上行方向上,射频装置1302通过天线1301接收信息,将接收的信息发送给基带装置1303进行处理。在下行方向上,基带装置1303对要发送的信息进行处理,并发送给射频装置1302,射频装置1302对收到的信息进行处理后经过天线1301发送出去。
上述频带处理装置可以位于基带装置1303中,以上实施例中网络侧设备执行的方法可以在基带装置1303中实现,该基带装置1303包括处理器13031和存储器13032。
基带装置1303例如可以包括至少一个基带板,该基带板上设置有多个芯片,如图12所示,其中一个芯片例如为处理器13031,与存储器13032连接,以调用存储器13032中的程序,执行以上方法实施例中所示的网络侧设备操作。
该基带装置1303还可以包括网络接口13033,用于与射频装置1302交互信息,该接口例如为通用公共无线接口(common public radio interface,简称CPRI)。
这里的处理器可以是一个处理器,也可以是多个处理元件的统称,例如,该处理器可以是CPU,也可以是ASIC,或者是被配置成实施以上网络侧设备所执行方法的一个或多个集成电路,例如:一个或多个微处理器DSP,或,一个或者多个现场可编程门阵列FPGA等。存储元件可以是一个存储器,也可以是多个存储元件的统称。
存储器13032可以是易失性存储器或非易失性存储器,或可包括易失性和非易失性存储器两者。其中,非易失性存储器可以是只读存储器(Read-Only Memory,简称ROM)、可编程只读存储器(Programmable ROM,简称PROM)、可擦除可编程只读存储器(Erasable PROM,简称EPROM)、电可擦除可编程只读存储器(Electrically EPROM,简称EEPROM)或闪存。易失性存储器可以是随机存取存储器(Random Access Memory,简称RAM),其用作外部高速缓存。通过示例性但不是限制性说明,许多形式的RAM可用,例如静态随机存取存储器(Static RAM,简称SRAM)、动态随机存取存储器(Dynamic RAM, 简称DRAM)、同步动态随机存取存储器(Synchronous DRAM,简称SDRAM)、双倍数据速率同步动态随机存取存储器(Double Data Rate SDRAM,简称DDRSDRAM)、增强型同步动态随机存取存储器(Enhanced SDRAM,简称ESDRAM)、同步连接动态随机存取存储器(Synchlink DRAM,简称SLDRAM)和直接内存总线随机存取存储器(Direct Rambus RAM,简称DRRAM)。本公开描述的存储器13032旨在包括但不限于这些和任意其它适合类型的存储器。
具体地,处理器13031调用存储器13032中的程序执行上述实施例中的网络侧设备所执行的方法,其实现原理和技术效果类似,在此不再赘述。
本领域普通技术人员可以意识到,结合本公开实施例中所公开的实施例描述的各示例的单元及算法步骤,能够以电子硬件、或者计算机软件和电子硬件的结合来实现。这些功能究竟以硬件还是软件方式来执行,取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能,但是这种实现不应认为超出本公开的范围。
所属领域的技术人员可以清楚地了解到,为描述的方便和简洁,上述描述的***、装置和单元的具体工作过程,可以参考前述方法实施例中的对应过程,在此不再赘述。
在本公开所提供的实施例中,应该理解到,所揭露的装置和方法,可以通过其它的方式实现。例如,以上所描述的装置实施例仅仅是示意性的,例如,所述单元的划分,仅仅为一种逻辑功能划分,实际实现时可以有另外的划分方式,例如多个单元或组件可以结合或者可以集成到另一个***,或一些特征可以忽略,或不执行。另一点,所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口,装置或单元的间接耦合或通信连接,可以是电性,机械或其它的形式。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
另外,在本公开各个实施例中的各功能单元可以集成在一个处理单元中,也可以是各个单元单独物理存在,也可以两个或两个以上单元集成在一个单 元中。
所述功能如果以软件功能单元的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。基于这样的理解,本公开的技术方案本质上或者说对相关技术做出贡献的部分或者该技术方案的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本公开各个实施例所述方法的全部或部分步骤。而前述的存储介质包括:U盘、移动硬盘、ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。
以上所述,仅为本公开的具体实施方式,但本公开的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本公开揭露的技术范围内,可轻易想到变化或替换,都应涵盖在本公开的保护范围之内。因此,本公开的保护范围应以权利要求的保护范围为准。
本领域普通技术人员可以理解:实现上述各方法实施例的全部或部分步骤可以通过程序指令相关的硬件来完成。前述的程序可以存储于一计算机可读取存储介质中。该程序在执行时,执行包括上述各方法实施例的步骤;而前述的存储介质包括:ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。
最后应说明的是:以上各实施例仅用以说明本公开的技术方案,而非对其限制;尽管参照前述各实施例对本公开进行了详细的说明,本领域的普通技术人员应当理解:其依然可以对前述各实施例所记载的技术方案进行修改,或者对其中部分或者全部技术特征进行等同替换;而这些修改或者替换,并不使相应技术方案的本质脱离本公开各实施例技术方案的范围。
Claims (61)
- 一种完整性检测方法,包括:终端接收网络侧设备发送的用户面数据;所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
- 根据权利要求1所述的方法,其中,所述用户面数据承载在数据无线承载DRB上;所述用户面完整性检测配置信息包括:第一指示信息,所述第一指示信息用于指示完整性检测对应的DRB;所述终端根据所述用户面完整性检测配置信息,对所述用户面数据进行完整性检测,包括:所述终端对所述第一指示信息所指示的DRB上承载的用户面数据进行完整性检测。
- 根据权利要求2所述的方法,其中,所述终端对所述第一指示信息所指示的DRB上承载的用户面数据进行完整性检测,包括:若对所述第一指示信息所指示的DRB中的至少一个DRB上承载的用户面数据的完整性检测失败,所述终端确定所述用户面数据完整性检测失败。
- 根据权利要求3所述的方法,其中,所述终端确定DRB上承载的用户面数据的完整性检测失败,包括:若所述DRB上所承载的至少一个数据包的完整性检测失败,所述终端确定所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包在接收到的所述DRB上所承载的数据包中的占比超过预设阈值,所述终端确定DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述终端确定DRB上承载的用户面数据的完整性检测失败;或者,若预设时间内所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述终端确定DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的连续的数据包的数量超过预设数量,所述终端确定DRB上承载的用户面数据的完整性检测失败。
- 根据权利要求1所述的方法,其中,所述用户面完整性检测配置信息包括第二指示信息,所述第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测;所述终端根据所述用户面完整性检测配置信息,对所述用户面数据进行完整性检测,包括:所述终端根据所述第二指示信息,对所述终端接收到的所有用户面数据进行完整性检测。
- 根据权利要求5所述的方法,其中,所述终端根据所述用户面完整性检测配置信息,对所述终端接收到的所有用户面数据进行完整性检测,包括:若所述用户面数据中至少一个数据包的完整性检测失败,所述终端确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包在接收到的数据包中的占比超过预设阈值,所述终端确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述终端确定所述用户面数据完整性检测失败;或者,若预设时间内所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述终端确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的连续的数据包的数量超过预设数量,所述终端确定所述用户面数据完整性检测失败。
- 根据权利要求4或6所述的方法,其中,所述数据包,包括分组数据汇聚协议PDCP层、无线链路控制RLC层和/或介质访问控制MAC层的协议数据单元PDU和/或业务数据单元SDU。
- 根据权利要求3、4或6任一项所述的方法,其中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的判断条件。
- 根据权利要求1至8任一项所述的方法,其中,所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之后,还包括:若所述用户面数据的完整性检测失败,所述终端执行以下步骤中的至少一项:所述终端的PDCP层向无线资源控制RRC层发送完整性检测失败通知消息;所述终端丢弃所述用户面数据;所述终端向所述网络侧设备发送完整性检测失败通知消息;所述终端释放与所述网络侧设备的RRC连接;所述终端触发无线链路失败RLF机制;所述终端释放所述网络侧设备的DRB配置。
- 根据权利要求9所述的方法,其中,所述用户面数据承载在DRB上,所述完整性检测失败通知消息中包括完整性检测失败的DRB的标识。
- 根据权利要求9所述的方法,其中,所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之前,还包括:所述终端接收所述网络侧设备发送的失败处理激活消息。
- 根据权利要求1至11任一项所述的方法,其中,所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之前,还包括:所述终端接收所述网络侧设备发送的所述用户面数据完整性检测配置信息。
- 根据权利要求1所述的方法,其中,所述终端工作在双连接DC***或载波聚合CA***中的主小区;所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之后,还包括:若所述用户面数据的完整性检测失败,终端的PDCP层向RRC层发送完整性检测失败通知消息,所述终端丢弃所述用户面数据;所述终端释放与所述网络侧设备的RRC连接,或者,触发无线链路失败RLF机制。
- 根据权利要求1所述的方法,其中,所述终端工作在DC***或CA***中的辅小区;所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之后,还包括:若所述用户面数据的完整性检测失败,所述终端释放所述辅小区或所有辅小区的DRB配置,或者,停止对所述辅小区或所有辅小区的DRB的使用。
- 根据权利要求1所述的方法,其中,所述终端工作在DC***,所述网络侧设备为所述DC***中的辅助节点SN;所述终端根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之后,还包括:若所述用户面数据的完整性检测失败,所述终端向所述DC***中的主控节点MN发送完整性检测失败信息。
- 根据权利要求15所述的方法,其中,所述完整性检测失败信息中包括所述网络侧设备的标识。
- 根据权利要求1至12任一项所述的方法,其中,所述终端工作在DC***,所述用户面完整性检测配置信息,还包括:第三指示信息;所述第三指示信息,用于指示所述终端对接收到的其它网络侧设备发送的用户面数据进行完整性检测。
- 根据权利要求1至17任一项所述的方法,其中,所述用户面完整性检测配置信息,还包括:第四指示信息;所述第四指示信息,用于指示所述终端对所述用户面数据进行完整性检测对应的完整性检测算法。
- 一种完整性检测方法,包括:网络侧设备向终端发送用户面数据完整性检测配置信息,所述用户面数据完整性检测配置信息用于指示终端对从所述网络侧设备接收到的用户面数 据进行完整性检测;所述网络侧设备向所述终端发送用户面数据。
- 根据权利要求19所述的方法,其中,所述用户面数据承载在DRB上;所述用户面完整性检测配置信息,包括:第一指示信息,所述第一指示信息用于指示完整性检测对应的DRB。
- 根据权利要求20所述的方法,其中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的第一判断条件;所述用户面数据完整性检测失败的第一判断条件,包括:若对所述第一指示信息所指示的DRB中的存在至少一个DRB上承载的用户面数据的完整性检测失败,则所述用户面数据完整性检测失败。
- 根据权利要求21所述的方法,其中,所述DRB上承载的用户面数据的完整性检测失败,包括:若所述DRB上所承载的至少一个数据包的完整性检测失败,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包在接收到的所述DRB上所承载的数据包中的占比超过预设阈值,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败;或者,若预设时间内所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的连续的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败。
- 根据权利要求19所述的方法,其中,所述用户面完整性检测配置信 息,包括:第二指示信息,所述第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测。
- 根据权利要求23所述的方法,其中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的第二判断条件;所述用户面数据完整性检测失败的第二判断条件,包括:若所述用户面数据中至少一个数据包的完整性检测失败,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包在接收到的数据包中的占比超过预设阈值,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述用户面数据完整性检测失败;或者,若预设时间内所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的连续的数据包的数量超过预设数量,所述用户面数据完整性检测失败。
- 根据权利要求22或24所述的方法,其中,所述数据包,包括PDCP层、RLC层和/或MAC层的PDU和/或SDU。
- 根据权利要求19至25任一项所述的方法,其中,所述方法还包括:所述网络侧设备向所述终端发送失败处理激活消息。
- 根据权利要求19所述的方法,其中,所述网络侧设备工作在DC***,所述网络侧设备为所述DC***中的MN;所述方法还包括:所述网络侧设备接收所述终端发送的完整性检测失败信息,所述完整性检测失败信息中包括完整性检测失败对应的所述DC***中的辅助节点的标识。
- 根据权利要求19-26任一项所述的方法,其中,所述网络侧设备工作在DC***,所述用户面完整性检测配置信息,还包括:第三指示信息;所述第三指示信息,用于指示所述终端对接收到的其它网络侧设备发送的用户面数据进行完整性检测。
- 根据权利要求19至28任一项所述的方法,其中,所述用户面完整性检测配置信息,还包括:第四指示信息;所述第四指示信息,用于指示所述终端对所述用户面数据进行完整性检测对应的完整性检测算法。
- 一种终端,包括:数据接收模块,用于接收网络侧设备发送的用户面数据;完整性检测模块,用于根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测。
- 根据权利要求30所述的终端,其中,所述用户面数据承载在DRB上;所述用户面完整性检测配置信息包括:第一指示信息,所述第一指示信息用于指示完整性检测对应的DRB;所述完整性检测模块,具体用于对所述第一指示信息所指示的DRB上承载的用户面数据进行完整性检测。
- 根据权利要求31所述的终端,其中,所述完整性检测模块,具体用于:若对所述第一指示信息所指示的DRB中的至少一个DRB上承载的用户面数据的完整性检测失败,确定所述用户面数据完整性检测失败。
- 根据权利要求32所述的终端,其中,所述完整性检测模块,具体用于:若所述DRB上所承载的至少一个数据包的完整性检测失败,确定所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包在接收到的所述DRB上所承载的数据包中的占比超过预设阈值,确定DRB上承载的用户面数据的 完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,确定DRB上承载的用户面数据的完整性检测失败;或者,若预设时间内所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,确定DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的连续的数据包的数量超过预设数量,确定DRB上承载的用户面数据的完整性检测失败。
- 根据权利要求30所述的终端,其中,所述用户面完整性检测配置信息包括第二指示信息,所述第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测;所述完整性检测模块,具体用于根据所述第二指示信息,对所述终端接收到的所有用户面数据进行完整性检测。
- 根据权利要求34所述的终端,其中,所述完整性检测模块,具体用于:若所述用户面数据中至少一个数据包的完整性检测失败,确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包在接收到的数据包中的占比超过预设阈值,确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包的数量超过预设数量,确定所述用户面数据完整性检测失败;或者,若预设时间内所述用户面数据中完整性检测失败的数据包的数量超过预设数量,确定所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的连续的数据包的数量超过预设数量,确定所述用户面数据完整性检测失败。
- 根据权利要求33或35所述的终端,其中,所述数据包,包括PDCP层、RLC层和/或MAC层的PDU和/或SDU。
- 根据权利要求32、33或35任一项所述的终端,其中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的判断条件。
- 根据权利要求30至37任一项所述的终端,还包括:流程执行模块;所述流程执行模块,用于若所述用户面数据的完整性检测失败,执行以下步骤中的至少一项:向RRC层发送完整性检测失败通知消息;丢弃所述用户面数据;向所述网络侧设备发送完整性检测失败通知消息;释放与所述网络侧设备的RRC连接;触发无线链路失败RLF机制;释放所述网络侧设备的DRB配置。
- 根据权利要求38所述的终端,其中,所述用户面数据承载在DRB上,所述完整性检测失败通知消息中包括完整性检测失败的DRB的标识。
- 根据权利要求38所述的终端,还包括:激活消息接收模块,用于在所述完整性检测模块根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之前,接收所述网络侧设备发送的失败处理激活消息。
- 根据权利要求30至40任一项所述的终端,还包括:配置信息接收模块,用于在所述完整性检测模块根据用户面完整性检测配置信息,对所述用户面数据进行完整性检测之前,接收所述网络侧设备发送的所述用户面数据完整性检测配置信息。
- 根据权利要求30所述的终端,其中,所述终端工作在DC***或CA***中的主小区;所述完整性检测模块还用于:若所述用户面数据的完整性检测失败,向RRC层发送完整性检测失败通知消息,丢弃所述用户面数据;释放与所述网络侧设备的RRC连接,或者,触发RLF机制。
- 根据权利要求30所述的终端,其中,所述终端工作在DC***或CA***中的辅小区;所述完整性检测模块还用于:若所述用户面数据的完整性检测失败,释放所述辅小区或所有辅小区的DRB配置,或者,停止对所述辅小区或所有辅小区的DRB的使用。
- 根据权利要求30所述的终端,其中,所述终端工作在DC***,所述网络侧设备为所述DC***中的SN;所述终端还包括:失败信息发送模块,用于若所述用户面数据的完整性检测失败,向所述DC***中的MN发送完整性检测失败信息。
- 根据权利要求44所述的终端,其中,所述完整性检测失败信息中包括所述网络侧设备的标识。
- 根据权利要求30至41任一项所述的终端,其中,所述终端工作在DC***,所述用户面完整性检测配置信息,还包括:第三指示信息;所述第三指示信息,用于指示所述终端对接收到的其它网络侧设备发送的用户面数据进行完整性检测。
- 根据权利要求30至46任一项所述的终端,其中,所述用户面完整性检测配置信息,还包括:第四指示信息;所述第四指示信息,用于指示所述终端对所述用户面数据进行完整性检测对应的完整性检测算法。
- 一种网络侧设备,包括:配置信息发送模块,用于向终端发送用户面数据完整性检测配置信息,所述用户面数据完整性检测配置信息用于指示终端对从所述网络侧设备接收到的用户面数据进行完整性检测;数据发送模块,用于向所述终端发送用户面数据。
- 根据权利要求48所述的网络侧设备,其中,所述用户面数据承载在DRB上;所述用户面完整性检测配置信息,包括:第一指示信息,所述第一指示信息用于指示完整性检测对应的DRB。
- 根据权利要求49所述的网络侧设备,其中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的第一判断条件;所述用户面数据完整性检测失败的第一判断条件,包括:若对所述第一指示信息所指示的DRB中的存在至少一个DRB上承载的用户面数据的完整性检测失败,则所述用户面数据完整性检测失败。
- 根据权利要求50所述的网络侧设备,其中,所述DRB上承载的用户面数据的完整性检测失败,包括:若所述DRB上所承载的至少一个数据包的完整性检测失败,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包在接收到的所述DRB上所承载的数据包中的占比超过预设阈值,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败;或者,若预设时间内所述DRB上所承载的完整性检测失败的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败;或者,若所述DRB上所承载的完整性检测失败的连续的数据包的数量超过预设数量,所述DRB上承载的用户面数据的完整性检测失败。
- 根据权利要求48所述的网络侧设备,其中,所述用户面完整性检测配置信息,包括:第二指示信息,所述第二指示信息用于指示所述终端对接收到的所有用户面数据进行完整性检测。
- 根据权利要求52所述的网络侧设备,其中,所述用户面完整性检测配置信息,还包括:所述用户面数据完整性检测失败的第二判断条件;所述用户面数据完整性检测失败的第二判断条件,包括:若所述用户面数据中至少一个数据包的完整性检测失败,所述用户面数 据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包在接收到的数据包中的占比超过预设阈值,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述用户面数据完整性检测失败;或者,若预设时间内所述用户面数据中完整性检测失败的数据包的数量超过预设数量,所述用户面数据完整性检测失败;或者,若所述用户面数据中完整性检测失败的连续的数据包的数量超过预设数量,所述用户面数据完整性检测失败。
- 根据权利要求51或53所述的网络侧设备,其中,所述数据包,包括PDCP层、RLC层和/或MAC层的PDU和/或SDU。
- 根据权利要求48至54任一项所述的网络侧设备,还包括:激活消息发送模块,用于向所述终端发送失败处理激活消息。
- 根据权利要求48所述的网络侧设备,其中,所述网络侧设备工作在DC***,所述网络侧设备为所述DC***中的MN;所述网络侧设备还包括:失败信息接收模块,用于接收所述终端发送的完整性检测失败信息,所述完整性检测失败信息中包括完整性检测失败对应的所述DC***中的辅助节点的标识。
- 根据权利要求48-55任一项所述的网络侧设备,其中,所述网络侧设备工作在DC***,所述用户面完整性检测配置信息,还包括:第三指示信息;所述第三指示信息,用于指示所述终端对接收到的其它网络侧设备发送的用户面数据进行完整性检测。
- 根据权利要求48至57任一项所述的网络侧设备,其中,所述用户面完整性检测配置信息,还包括:第四指示信息;所述第四指示信息,用于指示所述终端对所述用户面数据进行完整性检测对应的完整性检测算法。
- 一种终端,包括:处理器、存储器及存储在所述存储器上并可在所述处理器上运行的计算机程序,所述计算机程序被所述处理器执行时实现如权利要求1至18中任一项所述的完整性检测方法的步骤。
- 一种网络侧设备,包括:处理器、存储器及存储在所述存储器上并可在所述处理器上运行的计算机程序,所述计算机程序被所述处理器执行时实现如权利要求19至29中任一项所述的完整性检测方法中的步骤。
- 一种计算机可读存储介质,所述计算机可读存储介质上存储有计算机程序,所述计算机程序被处理器执行时实现如权利要求1至29中任一项所述的完整性检测方法中的步骤。
Priority Applications (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
ES18791933T ES2911555T3 (es) | 2017-04-28 | 2018-04-27 | Método de verificación de integridad, terminal y dispositivo de red |
US16/608,276 US11910195B2 (en) | 2017-04-28 | 2018-04-27 | Method of integrity check, terminal, and network-side equipment |
EP18791933.7A EP3618480B1 (en) | 2017-04-28 | 2018-04-27 | Integrity detection method, terminal and network device |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201710297656.8 | 2017-04-28 | ||
CN201710297656.8A CN108810899A (zh) | 2017-04-28 | 2017-04-28 | 完整性检测方法、终端及网络侧设备 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2018196852A1 true WO2018196852A1 (zh) | 2018-11-01 |
Family
ID=63918853
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2018/084820 WO2018196852A1 (zh) | 2017-04-28 | 2018-04-27 | 完整性检测方法、终端及网络侧设备 |
Country Status (5)
Country | Link |
---|---|
US (1) | US11910195B2 (zh) |
EP (1) | EP3618480B1 (zh) |
CN (1) | CN108810899A (zh) |
ES (1) | ES2911555T3 (zh) |
WO (1) | WO2018196852A1 (zh) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2021180051A1 (zh) * | 2020-03-09 | 2021-09-16 | 维沃移动通信有限公司 | 信息上报方法、信息接收方法、终端及网络侧设备 |
Families Citing this family (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN111315039B (zh) * | 2018-12-24 | 2023-02-24 | 维沃移动通信有限公司 | 一种完整性保护失败的处理方法及终端 |
CN113691986B (zh) * | 2020-05-15 | 2023-09-12 | 维沃移动通信有限公司 | 完整性保护失败的处理方法、装置和用户设备 |
CN114513319B (zh) * | 2020-10-28 | 2023-11-07 | 展讯半导体(南京)有限公司 | 数据处理方法及装置 |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102142942A (zh) * | 2011-04-01 | 2011-08-03 | 中兴通讯股份有限公司 | 一种中继节点***中的数据处理方法及*** |
CN102149088A (zh) * | 2010-02-09 | 2011-08-10 | 工业和信息化部电信传输研究所 | 一种保护移动用户数据完整性的方法 |
CN102547687A (zh) * | 2010-12-23 | 2012-07-04 | 上海贝尔股份有限公司 | 无线通信网络中对数据包进行处理的方法及装置 |
CN103188681A (zh) * | 2009-09-28 | 2013-07-03 | 华为技术有限公司 | 数据传输方法、装置及*** |
Family Cites Families (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101111033B (zh) | 2007-08-31 | 2013-10-02 | 华为技术有限公司 | 串话检测方法、网络侧设备及终端 |
KR101831448B1 (ko) * | 2010-02-02 | 2018-02-26 | 엘지전자 주식회사 | 이동 통신 시스템에서 pdcp 기능을 선택적으로 적용하는 방법 |
CN102487507B (zh) | 2010-12-01 | 2016-01-20 | 中兴通讯股份有限公司 | 一种实现完整性保护的方法及*** |
ES2530961T3 (es) * | 2010-12-10 | 2015-03-09 | Ericsson Telefon Ab L M | Habilitación e inhabilitación de la protección de la integridad para portadores de radio de datos |
CN102158901B (zh) | 2011-02-16 | 2014-01-08 | 大唐移动通信设备有限公司 | 网络侧进行终端操作配置的方法及网络侧装置 |
CN102740414A (zh) | 2011-03-31 | 2012-10-17 | ***通信集团公司 | 一种选择通信网络的方法、终端及网络侧设备 |
CN103458475A (zh) | 2012-05-31 | 2013-12-18 | 中兴通讯股份有限公司 | Hrpd和lte间移动鲁棒性检测方法、终端和网络侧 |
CN103781130A (zh) | 2012-10-25 | 2014-05-07 | 华为技术有限公司 | 接入网络的方法、网络侧设备与终端 |
EP2770796B1 (en) * | 2013-02-22 | 2016-04-27 | HTC Corporation | Method for simultaneous communications with multiple base stations and related communication device |
PL2802185T3 (pl) * | 2013-04-01 | 2020-05-18 | Innovative Sonic Corporation | Sposób i urządzenie do dodawania komórek obsługujących w systemie komunikacji bezprzewodowej |
AU2014285083B2 (en) * | 2013-07-03 | 2017-07-27 | Interdigital Patent Holdings, Inc. | EPC enhancements for proximity services |
CN104349312B (zh) * | 2013-08-02 | 2019-01-29 | 上海诺基亚贝尔股份有限公司 | 用于支持双连接的安全处理的方法 |
CN104936173B (zh) | 2014-03-18 | 2022-02-25 | 华为技术有限公司 | 密钥生成方法、主基站、辅基站及用户设备 |
CN104936169B (zh) * | 2014-03-18 | 2018-09-04 | ***通信集团公司 | 一种安全验证处理方法、装置、终端及基站 |
CN106375989B (zh) | 2015-07-20 | 2019-03-12 | 中兴通讯股份有限公司 | 实现接入层安全的方法及用户设备和无线接入小节点 |
US10368238B2 (en) * | 2015-12-01 | 2019-07-30 | Htc Corporation | Device and method of handling data transmission/reception for dual connectivity |
CN108617029B (zh) * | 2016-12-30 | 2023-05-12 | 夏普株式会社 | 无线承载配置方法、及相应的ue和基站 |
-
2017
- 2017-04-28 CN CN201710297656.8A patent/CN108810899A/zh active Pending
-
2018
- 2018-04-27 US US16/608,276 patent/US11910195B2/en active Active
- 2018-04-27 EP EP18791933.7A patent/EP3618480B1/en active Active
- 2018-04-27 ES ES18791933T patent/ES2911555T3/es active Active
- 2018-04-27 WO PCT/CN2018/084820 patent/WO2018196852A1/zh active Application Filing
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103188681A (zh) * | 2009-09-28 | 2013-07-03 | 华为技术有限公司 | 数据传输方法、装置及*** |
CN102149088A (zh) * | 2010-02-09 | 2011-08-10 | 工业和信息化部电信传输研究所 | 一种保护移动用户数据完整性的方法 |
CN102547687A (zh) * | 2010-12-23 | 2012-07-04 | 上海贝尔股份有限公司 | 无线通信网络中对数据包进行处理的方法及装置 |
CN102142942A (zh) * | 2011-04-01 | 2011-08-03 | 中兴通讯股份有限公司 | 一种中继节点***中的数据处理方法及*** |
Non-Patent Citations (1)
Title |
---|
See also references of EP3618480A4 * |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2021180051A1 (zh) * | 2020-03-09 | 2021-09-16 | 维沃移动通信有限公司 | 信息上报方法、信息接收方法、终端及网络侧设备 |
Also Published As
Publication number | Publication date |
---|---|
EP3618480A4 (en) | 2020-03-04 |
ES2911555T3 (es) | 2022-05-19 |
US11910195B2 (en) | 2024-02-20 |
US20200092726A1 (en) | 2020-03-19 |
CN108810899A (zh) | 2018-11-13 |
EP3618480B1 (en) | 2022-03-23 |
EP3618480A1 (en) | 2020-03-04 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11653199B2 (en) | Multi-RAT access stratum security | |
US11219082B2 (en) | Base station, user equipment, and related method | |
WO2018171703A1 (zh) | 通信方法与设备 | |
US11109291B2 (en) | Method for performing handover in wireless communication system and device for same | |
US11758422B2 (en) | User equipment and related method | |
US11997738B2 (en) | Systems and methods for the handling of data radio bearer integrity protection failure in NR | |
WO2018196852A1 (zh) | 完整性检测方法、终端及网络侧设备 | |
WO2018228365A1 (zh) | 数据无线承载完整性保护配置方法、终端及网络设备 | |
KR20190039193A (ko) | 무선 디바이스를 위한 라디오 접속을 재개하기 위한 방법들, 디바이스들, 및 노드들 | |
ES2963419T3 (es) | Verificación de la seguridad cuando se reanuda una conexión de RRC | |
WO2019041099A1 (zh) | 传输数据的方法、网络设备和终端设备 | |
US11638151B2 (en) | Method and device for retransmitting data | |
WO2021217363A1 (zh) | 无线通信方法、终端设备和网络设备 | |
TW201842824A (zh) | 處理無線電資源控制連接釋放 | |
WO2019090711A1 (zh) | 传输信息的方法、网络设备和终端设备 | |
TWI513259B (zh) | 訊息處理 | |
WO2019090489A1 (zh) | 配置无线资源的方法、终端设备和网络设备 | |
WO2019056389A1 (zh) | 控制终端设备产生上行信令的方法、终端设备和网络设备 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 18791933 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2018791933 Country of ref document: EP |
|
ENP | Entry into the national phase |
Ref document number: 2018791933 Country of ref document: EP Effective date: 20191128 |