CN102821484B

CN102821484B - To eat dishes without rice or wine the method for building up of upper Deta bearer and device

Info

Publication number: CN102821484B
Application number: CN201110151907.4A
Authority: CN
Inventors: 王涛; 陈璟; 张冬梅
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2011-06-08
Filing date: 2011-06-08
Publication date: 2016-01-13
Anticipated expiration: 2031-06-08
Also published as: CN102821484A

Abstract

The invention discloses a kind of method for building up of upper Deta bearer of eating dishes without rice or wine, comprise the instruction receiving the Deta bearer DRB integrity protection capabilities that via node sends; If described via node does not support DRB integrity protection, then set up the DRB not carrying out integrity protection with described via node or do not set up DRB with described via node.The present invention can know whether this RN supports DRB integrity protection due to DeNB; and then can when this RN does not support DRB integrity protection; set up with RN the DRB that do not carry out integrity protection or do not set up DRB with described RN, avoiding DeNB and RN to occur the problem of mistake owing to consulting inconsistent and on the DRB therebetween caused transfer of data.

Description

To eat dishes without rice or wine the method for building up of upper Deta bearer and device

Technical field

The present invention relates to wireless communication field, particularly a kind of method for building up of upper Deta bearer of eating dishes without rice or wine and device.

Background technology

Via node (RelayNode, RN) is the new access network node introduced in enhancement mode Long Term Evolution (LongTermEvolution-Advanced, LTE-A).RN has dual role in Access Network: relatively common user terminal (UserEquipment, UE), RN is equivalent to evolution base station (evolvedNodeB, eNB) equipment, and for the eNB corresponding with this RN, RN is equivalent to a UE equipment.The above-mentioned eNB corresponding with RN is also referred to as anchor point evolution base station (DonoreNB, DeNB).In the start-up course of RN, first RN can network by UE network access mode traditionally, and then sets up S1 or X2 interface with DeNB, converts eNB role to, for the common UE being connected to him provides service.RN is entering in network process, the same with traditional UE, and meeting and core net node mobile management entity (MobilityManagementEntity, MME) carry out certifiede-mail protocol (AuthenticationandKeyAgreement, AKA).

The introducing of RN, eats dishes without rice or wine to be divided into two sections and eats dishes without rice or wine: eating dishes without rice or wine between UE and RN by between original UE and eNB section, be called for short Uu mouth, and eating dishes without rice or wine between RN and DeNB, is called for short Un mouth.The data that Un mouth transmits, can be mapped to 3 class carryings:

The first kind: wireless signaling carrying (SignalingRadioBearer, SRB), carry wireless heterogeneous networks (RadioResourceControl, the RRC) signaling message between RN and DeNB and non-access layer information (Non-Access-Stratum, NAS);

Equations of The Second Kind: wireless data carrying 1 (DataRadioBearer1, DRBl), carries the chain of command signaling on S1 or X2 interface;

3rd class: wireless data carrying 2 (DataRadioBearer2, DRB2), carry the user face data on S1 or X2 interface.

Different radio bearers is for transmitting different data, and therefore it is also not identical to the demand of safeguard protection.RRC information on Un must carry out integrity protection, is optionally encrypted protection.S1 on Un mouth or the chain of command signaling on X2 interface may be used for transmitting the information such as UE key or handover key, therefore must carry out integrity protection and encipherment protection.For the S1 on Un mouth or the user face data on X2 interface, optionally carry out integrity protection, be optionally encrypted protection.

But, for the user face data of DRB2 carrying on Un mouth, the threat that tunnel endpoint identifier (TunnelEndpointIdentifier, TEID) is tampered may be there is.Therefore industry is discussed the integrity protection of DRB on Un mouth at present, considers to provide optional integrity protection to the DRB on Un mouth.

Owing to providing integrity protection to be optional to the DRB on Un mouth, therefore, under some scenes, may exist in network simultaneously and support to carry out the RN of integrity protection to DRB and do not support to carry out DRB the RN of integrity protection.If DeNB does not know whether corresponding RN possesses ability DRB being provided to integrity protection; then may occur that: DeNB selects to provide integrity protection to DRB; but because RN does not support this characteristic; the integrity protection to DRB cannot be opened, thus cause the transfer of data between DeNB and RN on DRB to occur mistake.

Summary of the invention

In order to the problem of mistake appears in the transfer of data solved on DRB, embodiments provide a kind of method for building up and device of upper Deta bearer of eating dishes without rice or wine.

One aspect of the present invention provides a kind of method for building up of upper Deta bearer of eating dishes without rice or wine, and comprising: the instruction receiving the Data Radio Bearer DRB integrity protection capabilities of via node; If the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then set up the DRB not carrying out integrity protection with described via node or do not set up DRB with described via node.

Another aspect of the present invention provides a kind of method for building up of upper Deta bearer of eating dishes without rice or wine, comprise: via node sends the instruction of DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection; Described via node and described base station are set up the DRB that do not carry out integrity protection or are not set up DRB with described base station.

Another aspect of the present invention provides a kind of base station, comprising: transceiver module, for receiving the instruction of the DRB integrity protection capabilities of via node; First processing module, if indicate described via node not support DRB integrity protection for the instruction of described DRB integrity protection capabilities, then sets up the DRB not carrying out integrity protection or does not set up DRB with described via node with described via node.

Another aspect of the present invention provides a kind of via node, comprising: transceiver module, and for sending the instruction of DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection; Processing module, for setting up with described base station the DRB that do not carry out integrity protection or not setting up DRB with described base station.

The scheme that above-mentioned aspect provides sends because DeNB receives via node the instruction that RN does not support DRB integrity protection; set up with RN the DRB that do not carry out integrity protection or do not set up DRB with described RN, avoiding DeNB and RN to occur the problem of mistake owing to consulting inconsistent and on the DRB therebetween caused transfer of data.

Accompanying drawing explanation

Fig. 1 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that one embodiment of the invention provides;

Fig. 2 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Fig. 3 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Fig. 4 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Fig. 5 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Fig. 6 a is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Fig. 6 b is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Fig. 7 is the formation schematic diagram of UENetworkCapability information in Fig. 6 a and the embodiment corresponding to Fig. 6 b;

Fig. 8 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Fig. 9 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides;

Figure 10 is the module diagram of the DeNB that one embodiment of the invention provides;

Figure 11 is the module diagram of the RN that one embodiment of the invention provides.

Embodiment

For making the object of the embodiment of the present invention, technical scheme and advantage clearly, below in conjunction with the accompanying drawing in the embodiment of the present invention, technical scheme in the embodiment of the present invention is clearly and completely described, obviously, described embodiment is the present invention's part embodiment, instead of whole embodiments.Based on the embodiment in the present invention, the every other embodiment that those of ordinary skill in the art obtain under the prerequisite not making creative work, all belongs to the scope of protection of the invention.

Please refer to Fig. 1, Fig. 1 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that one embodiment of the invention provides.This method for building up of eating dishes without rice or wine upper Deta bearer in the present embodiment comprises the following steps:

The instruction of the DRB integrity protection capabilities that step S11, reception RN send.

In the present embodiment, DeNB receives the instruction of this DRB integrity protection capabilities that RN sends, and the instruction of this DRB integrity protection capabilities is used to indicate this RN and whether supports DRB integrity protection.

In an implementation of the present embodiment, step S11 can perform before DeNB and RN sets up DRB, also can set up in the process of DRB at DeNB and RN and perform.Optionally, perform if step S11 sets up in the process of DRB at DeNB and RN, then the method that the present embodiment provides also comprised before step S11 step S10, to described RN send set up the DRB of integrity protection set up message.

If the instruction of step S12 described DRB integrity protection capabilities indicates described RN not support DRB integrity protection, then set up the DRB not carrying out integrity protection with described RN or do not set up DRB with described RN.

In an implementation of the present embodiment, describedly set up the DRB that do not carry out integrity protection with this RN or do not set up DRB with this RN and can specifically comprise: if be configured to optionally carry out integrity protection to DRB, then set up with described RN the DRB not carrying out integrity protection; If or be configured to carry out integrity protection to DRB is compulsory, then do not set up DRB with described RN.

Such as, operator can set in advance to provide DRB and optionally carry out integrity protection and be also to provide and compulsoryly carry out integrity protection in the configuration information of base station.When according to the instruction of this DRB integrity protection capabilities, this DeNB learns that this RN does not support DRB integrity protection, DeNB judges this configuration information to be setting to DRB provides optionally to carry out integrity protection and be also to provide and compulsoryly carry out integrity protection.If setting provides DRB optionally carry out integrity protection, then set up with this RN the DRB not carrying out integrity protection; If setting provides compulsory to DRB carry out integrity protection, then do not set up DRB with this RN.

In another implementation of the present embodiment, if the instruction comprising step S13 described DRB integrity protection capabilities further indicates described via node to support DRB integrity protection, then set up with described via node the DRB carrying out integrity protection.Such as, when this DeNB learns this RN support DRB integrity protection according to the instruction of this DRB integrity protection capabilities, then the DRB of integrity protection is set up with this RN.

The method that the present embodiment provides can know whether this RN supports DRB integrity protection due to this DeNB; and then can when this RN does not support DRB integrity protection; set up with RN the DRB that do not carry out integrity protection or do not set up DRB with described RN, avoiding DeNB and RN to occur the problem of mistake owing to consulting inconsistent and on the DRB therebetween caused transfer of data.

In addition; the method that the present embodiment provides also still requires compulsory integrity protection selection and this RN of carrying out of DRB is set up to the DRB that do not carry out integrity protection or do not set up DRB with this RN owing to can optionally carry out integrity protection to DRB as requested; therefore more effectively in conjunction with carrier policy, can determine which kind of protection is carried out to DRB.And according to the loading condition of network, operator can also adjustable strategies in real time.Such as, operator according to the loading condition of network, by the adjustment to strategy, can reduce the expense of network for the protection of transfer of data, thus utilizes Internet resources efficiently, increases flexibility and the efficiency of network.

Please refer to Fig. 2, Fig. 2 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.This method for building up of eating dishes without rice or wine upper Deta bearer in the present embodiment comprises the following steps:

Step S21, RN send the instruction of DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicates described RN not support DRB integrity protection;

Optionally, before step S21, the method can also comprise step S20: what what described RN received that described base station sends carried out the DRB of integrity protection sets up message.When having step S20; step S21 can change to: described RN according to described in carry out the DRB of integrity protection set up message; send the instruction of DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicates described RN not support DRB integrity protection.

Step S22, described RN and described base station are set up the DRB that do not carry out integrity protection or are not set up DRB with described base station.

Please refer to Fig. 3, Fig. 3 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.This method for building up of eating dishes without rice or wine upper Deta bearer in the present embodiment comprises the following steps:

Step 31, send wireless heterogeneous networks connect reprovision (RRCConnectionReconfiguration) message to described RN, described RRCConnectionReconfiguration message carries the instruction of opening integrity protection.

In the present embodiment, this DeNB sends RRCConnectionReconfiguration message to this RN, and this RRCConnectionReconfiguration message carries the instruction of opening integrity protection.The instruction of this unlatching integrity protection is used to indicate DeNB and wishes to start integrity protection to the DRB that will set up.

Step 32, receive described RN send radio resource control connection reestablishment request (RRCConnectionReestablishmentRequest) message, described RRCConnectionReestablishmentRequest message carries the instruction of described DRB integrity protection capabilities.

In the present embodiment; after this RN receives the instruction of this unlatching integrity protection; learn that this DeNB starts integrity protection, and this RN self does not support the integrity protection of DRB, then this RN processes according to reconfiguration failure (ReconfigurationFailure).This RN sends RRCConnectionReestablishmentRequest message to this DeNB, and carries out RRC connection reconstruction (RRCConnectionRe-establishment) process between DeNB.Wherein, this RRCConnectionReestablishmentRequest message carries the instruction of DRB integrity protection capabilities; the instruction of this DRB integrity protection capabilities is used to indicate the integrity protection whether this RN supports DRB; such as, the instruction of this DRB integrity protection capabilities is used to indicate the integrity protection that this RN does not support DRB.

If step S33 is configured to optionally carry out integrity protection to DRB, then send radio resource control connection reestablishment (RRCConnectionReestablishment) message to described RN; Or

Step S33 ' if be configured to carry out integrity protection to DRB is compulsory, then sends radio resource control connection reestablishment refusal (RRCConnectionReestablishmentReject) message to described RN.

In the present embodiment; after this DeNB receives this RRCConnectionReestablishmentRequest message; learn that this RN can not for after DRB provides integrity protection according to the instruction of this DRB integrity protection capabilities, this DeNB can determine according to the operation of the strategy of the operator in configuration information to next step.If be configured to optionally carry out integrity protection to DRB, then perform step S23, if be configured to carry out integrity protection to DRB is compulsory, then perform step S23 '.

For step S33; if be configured to optionally carry out integrity protection to DRB; then this DeNB will not carry out integrity protection to DRB; and send RRCConnectionReestablishment message to this RN, and in this RRCConnectionReestablishment message, no longer comprise the instruction of opening integrity protection.Optionally, this RN will not carry out integrity protection to DRB according to this RRCConnectionReestablishment message received, and reply RRCConnectionReestablishmentComplete message to this DeNB.

For step S33 '; if be configured to carry out integrity protection to DRB is compulsory, in such cases, because this RN can not carry out the integrity protection to DRB; this DeNB will send RRCConnectionReestablishmentReject message to this RN, refuse to set up DRB with this RN.

Please refer to Fig. 4, Fig. 4 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.The main thought of the present embodiment and the embodiment basic simlarity corresponding to Fig. 3, difference is, the process of reconstruction that the reconstitution process that in the present embodiment, RRC connects is connected with RRC is separate.Wherein, RRC connection reconstruction process only just starts after RRC connection reconstitution process completes.This method for building up of eating dishes without rice or wine upper Deta bearer in the present embodiment comprises the following steps:

Step S41, send RRCConnectionReconfiguration message to described RN, described RRCConnectionReconfiguration message carries the instruction of opening integrity protection.

Step S42, receive described RN send wireless heterogeneous networks connect reprovision complete (RRCConnectionReconfigurationComplete) message, described RRCConnectionReconfigurationComplete message carries the instruction of described DRB integrity protection capabilities.

Step S43, receive described RN send radio resource control connection reestablishment request RRCConnectionReestablishmentRequest message.

If step S44 requires optionally to carry out integrity protection to DRB, then send radio resource control connection reestablishment RRCConnectionReestablishment message to described RN.

Step S44 ' if require to carry out integrity protection to DRB is compulsory, then sends radio resource control connection reestablishment refusal RRCConnectionReestablishmentReject message to described RN.

Please refer to Fig. 5, Fig. 5 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.This method for building up of eating dishes without rice or wine upper Deta bearer in the present embodiment comprises the following steps:

Step S51, send RRCConnectionReconfiguration message to described RN, described RRCConnectionReconfiguration message carries the instruction of opening integrity protection.

In the present embodiment; with embodiment difference be before; if this RN does not support the integrity protection of DRB, then this RN can preserve this RRCConnectionReconfiguration message, for used during follow-up initiation RRCConnectionRe-establishment process.

Step S52, receive described RN send wireless heterogeneous networks connect reprovision complete RRCConnectionReconfigurationComplete message, described RRCConnectionReconfigurationComplete message carries the instruction of described DRB integrity protection capabilities.

If step S53 requires optionally to carry out integrity protection to DRB; then send wireless heterogeneous networks to described RN and connect reprovision response RRCConnectionReconfigurationAcknowledge message; instruction DRB optionally being carried out to integrity protection is carried in described RRCConnectionReconfigurationAcknowledge message; described RN is made to initiate RRC connection reconstruction process, or

Step S53 ' is if require to carry out integrity protection to DRB is compulsory; then send wireless heterogeneous networks to described RN and connect reprovision response RRCConnectionReconfigurationAcknowledge message, carry in described RRCConnectionReconfigurationAcknowledge message the compulsory instruction carrying out integrity protection of DRB.

Specifically, in step S53, this RN utilizes this RRCConnectionReconfiguration message of preserving in step S51 to initiate RRC connection reconstruction process.This RRC connection reconstruction process comprises: receive the radio resource control connection reestablishment request RRCConnectionReestablishmentRequest message that described RN sends; Radio resource control connection reestablishment RRCConnectionReestablishment message is sent with to described RN.

This RRCConnectionReconfigurationAcknowledge message is for confirming whether RRCConnectionReconfiguration message receives.

Please refer to Fig. 6 a, Fig. 6 a is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.The method for building up of this upper Deta bearer of eating dishes without rice or wine in the present embodiment is substantially identical with the method that the embodiment corresponding to Fig. 1 provides; main difference is: whether RN is supported the instruction of the DRB integrity protection capabilities of DRB integrity protection is placed in the security capabilities of RN; when RN networks, be reported to network side.DeNB can obtain the instruction of this DRB integrity protection capabilities before setting up DRB from network side.When setting up DRB, DeNB according to the instruction of DRB integrity protection capabilities, optionally according to carrier policy, can also decide its operation.

This method for building up of eating dishes without rice or wine upper Deta bearer in the present embodiment comprises the following steps:

User equipment network ability (UEnetworkcapability) information that step S61, reception RN send, carries the instruction of described DRB integrity protection capabilities in described UEnetworkcapability information.

If the instruction of step S62 described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then set up the DRB not carrying out integrity protection with described via node or do not set up DRB with described via node.

Please refer to Fig. 6 b, Fig. 6 b is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.The method that the method that the present embodiment provides provides with the embodiment corresponding to Fig. 6 a is substantially identical, the main distinction is, the method of the present embodiment is applied in the switching of RN between DeNB (Handover) process, is switched to current DeNB by RN from source DeNB.The method of the present embodiment describes from current DeNB, comprises the following steps:

The UEnetworkcapability information of the RN that step S61 ', reception source DeNB send, carries the instruction of the DRB integrity protection capabilities of described RN in described UEnetworkcapability information;

Step S62 ' if the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then sets up the DRB not carrying out integrity protection or does not set up DRB with described via node with described via node.

Please refer to Fig. 7, Fig. 7 is the formation schematic diagram of UEnetworkcapability information in Fig. 6 a and the embodiment corresponding to Fig. 6 b.The instruction of carrying described DRB integrity protection capabilities in UEnetworkcapability information has multiple implementation, such as:

Implementation one: because in LTE, EIA0 position does not use, therefore also can use EIA0 position, namely the 8th bit (bit8) of the 4th byte (octet4) indicates the integrity protection capabilities of RN.

Implementation two: can by the set of the 8th bit (bit8) of the 7th byte (octet7) as above and the 7th bit (bit7) of the 7th byte (octet7) being indicated the integrity protection capabilities of RN.

In above-mentioned Fig. 6 a and two embodiments corresponding to Fig. 6 b; instruction due to the DRB integrity protection capabilities by RN is placed in UEnetworkcapability and reports; and UEnetworkcapability has safety to return mechanism, therefore can not be subject to degradation (bindingdown) and attack.

Please refer to Fig. 8, Fig. 8 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.The method for building up of this upper Deta bearer of eating dishes without rice or wine in the present embodiment is substantially identical with the method that the embodiment corresponding to Fig. 1 provides; main difference is: this RN in ASSMC process, can carry the instruction of DRB integrity protection capabilities in the ASSMP message that DeNB sends.After DeNB receives this instruction, when setting up DRB, DeNB according to the instruction of DRB integrity protection capabilities, optionally according to carrier policy, can also decide its operation.

Step S81, send Access Layer safe mode command ASSMC to described via node;

The Access Layer safe mode that step S82, reception RN send completes ASSMP message, carries the instruction of described DRB integrity protection capabilities in described ASSMP message.

If the instruction of step S83 described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then set up the DRB not carrying out integrity protection with described via node or do not set up DRB with described via node.

In the present embodiment, because ASSMP message is subject to integrity protection, therefore can not be tampered, bindingdown can not be subject to and attack.

Please refer to Fig. 9, Fig. 9 is the flow chart of the method for building up of the upper Deta bearer of eating dishes without rice or wine that another embodiment of the present invention provides.The method for building up of this upper Deta bearer of eating dishes without rice or wine in the present embodiment is substantially identical with the method that the embodiment corresponding to Fig. 1 provides, and main difference is: inside the CAMEL-Subscription-Information instruction of DRB integrity protection capabilities being placed on HSS.MME can send this and be indicated to DeNB and illustrate whether this RN can start the integrity protection of DRB in the attachment of such as RN (Attach) flow process.

Step S91, obtain the instruction of DRB integrity protection capabilities from local CAMEL-Subscription-Information server HSS, the instruction of described DRB integrity protection capabilities is sent by described RN, is included in the CAMEL-Subscription-Information of described RN.

This RN sends CAMEL-Subscription-Information to HSS, comprises the instruction of described DRB integrity protection capabilities in described CAMEL-Subscription-Information.This DeNB obtains the instruction of described DRB integrity protection capabilities from described HSS.

If the instruction of step S92 described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then set up the DRB not carrying out integrity protection with described via node or do not set up DRB with described via node.

Please refer to Figure 10, Figure 10 is the module diagram of the DeNB that one embodiment of the invention provides.This DeNB100 is for realizing the method for embodiment corresponding to Fig. 1, and this DeNB100 comprises transceiver module 110 and the first processing module 120.Transceiver module 110 is for receiving the instruction of the DRB integrity protection capabilities of RN.If the first processing module 120 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities, then set up the DRB not carrying out integrity protection with this RN or do not set up DRB with this RN.

In an implementation of the present embodiment; this transceiver module 110 also for send to this RN carry out the DRB of integrity protection set up message, that carries out the DRB of integrity protection to make this RN according to this sets up the instruction that message sends this Deta bearer DRB integrity protection capabilities.

In another implementation of the present embodiment, this DeNB100 also comprises the second processing module 130, if indicate this RN to support DRB integrity protection for the instruction of this DRB integrity protection capabilities, then sets up with this RN the DRB carrying out integrity protection.

In another implementation of the present embodiment, this DeNB100 also comprises acquisition module 140, for obtaining configuration information.This first processing module 120 comprises the first submodule 121 or the second submodule 122.If the first submodule 121 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities, then, when the instruction of this this configuration information optionally carries out integrity protection to DRB, set up with this RN the DRB not carrying out integrity protection.If the second submodule 122 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities, then, when the instruction of this this configuration information carries out integrity protection to DRB is compulsory, do not set up DRB with this RN.

In another implementation of the present embodiment, this DeNB100 also comprises acquisition module 140, for obtaining configuration information.Transceiver module 110 connects reallocation message specifically for sending wireless heterogeneous networks to this RN, this wireless heterogeneous networks connects reallocation message and carries and open the instruction of integrity protection, and that carries out the DRB of integrity protection to make this RN according to this sets up the instruction that message sends this Deta bearer DRB integrity protection capabilities; With the radio resource control connection reestablishment request message receiving this RN transmission, this radio resource control connection reestablishment request message carries the instruction of the DRB integrity protection capabilities of this RN.This first processing module 120 comprises the first submodule 121 or the second submodule 122.If the first submodule 121 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities; then when the instruction of this this configuration information optionally carries out integrity protection to DRB, send radio resource control connection reestablishment message by this transceiver module 110 to this RN.If the second submodule 122 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities; then when the instruction of this this configuration information carries out integrity protection to DRB is compulsory, send radio resource control connection reestablishment refuse information by this transceiver module 110 to this RN.

In another implementation of the present embodiment, this DeNB100 also comprises acquisition module 140, for obtaining configuration information.Transceiver module 110 connects reallocation message specifically for sending wireless heterogeneous networks to this RN, this wireless heterogeneous networks connects reallocation message and carries and open the instruction of integrity protection, and that carries out the DRB of integrity protection to make this RN according to this sets up the instruction that message sends this Deta bearer DRB integrity protection capabilities; The wireless heterogeneous networks receiving RN transmission connects reprovision and completes message, and this wireless heterogeneous networks connects reprovision and completes the instruction that message carries the DRB integrity protection capabilities of this RN; With the radio resource control connection reestablishment request message receiving this RN transmission.This first processing module 120 comprises the first submodule 121 or the second submodule 122.If the first submodule 121 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities; then when the instruction of this this configuration information optionally carries out integrity protection to DRB, send radio resource control connection reestablishment message by this transceiver module 110 to this RN.If the second submodule 122 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities; then when the instruction of this this configuration information carries out integrity protection to DRB is compulsory, send radio resource control connection reestablishment refuse information by this transceiver module 110 to this RN.

In another implementation of the present embodiment, this DeNB100 also comprises acquisition module 140, for obtaining configuration information.Transceiver module 110 connects reallocation message specifically for sending wireless heterogeneous networks to this RN, this wireless heterogeneous networks connects reallocation message and carries and open the instruction of integrity protection, and that carries out the DRB of integrity protection to make this RN according to this sets up the instruction that message sends this Deta bearer DRB integrity protection capabilities; Be connected reprovision with the wireless heterogeneous networks receiving RN transmission and complete message, this wireless heterogeneous networks connects reprovision and completes the instruction that message carries the DRB integrity protection capabilities of this RN.This first processing module 120 comprises the first submodule 121 or the second submodule 122.If the first submodule 121 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities; then when the instruction of this this configuration information optionally carries out integrity protection to DRB; send wireless heterogeneous networks by this transceiver module 110 to this RN and connect reprovision response message; carry instruction DRB optionally being carried out to integrity protection in this wireless heterogeneous networks connection reprovision response message, make this RN initiate RRC connection reconstruction process.If the second submodule 122 indicates this RN not support DRB integrity protection for the instruction of this DRB integrity protection capabilities; then when the instruction of this this configuration information carries out integrity protection to DRB is compulsory; send wireless heterogeneous networks by this transceiver module 110 to this RN and connect reprovision response message, carry the compulsory instruction carrying out integrity protection of DRB in this wireless heterogeneous networks connection reprovision response message.

In another implementation of the present embodiment, the user equipment network ability information that transceiver module 110 sends specifically for receiving RN, carries the instruction of this DRB integrity protection capabilities in this user equipment network ability information; Or

For receiving the user equipment network ability information that source base station sends, in this user equipment network ability information, carry the instruction of the DRB integrity protection capabilities of this RN; Or

The Access Layer safe mode sent for receiving this RN completes ASSMP message, carries the instruction of this DRB integrity protection capabilities in this ASSMP message; Or

For receiving the instruction of the acquisition DRB integrity protection capabilities that HSS sends, the instruction of this DRB integrity protection capabilities is included in the CAMEL-Subscription-Information of this RN that this HSS preserves; Or

For receiving the user equipment network ability information that RN sends, in the 7th bit of the EIA0 position of this user equipment network ability information or the 8th bit of the 7th byte and the 7th byte, carry the instruction of this DRB integrity protection capabilities; Or

For receiving the user equipment network ability information that source base station sends, in the 7th bit of the EIA0 position of this user equipment network ability information or the 8th bit of the 7th byte and the 7th byte, carry the instruction of this DRB integrity protection capabilities.

Please refer to Figure 11, Figure 11 is the module diagram of the RN that one embodiment of the invention provides.This RN200 is for realizing the method for embodiment corresponding to Fig. 1, and this RN200 comprises transceiver module 210 and processing module 220.Transceiver module 210 is for sending the instruction of DRB integrity protection capabilities to DeNB, the instruction of this DRB integrity protection capabilities indicates this RN not support DRB integrity protection.Processing module 220 is for setting up with this DeNB the DRB that do not carry out integrity protection or not setting up DRB with this DeNB.

In an implementation of the present embodiment; transceiver module 210 also for receive that this DeNB sends carry out the DRB of integrity protection set up message; that carries out the DRB of integrity protection according to this sets up message, sends the instruction of this DRB integrity protection capabilities to DeNB.

In an implementation of the present embodiment, the wireless heterogeneous networks connection reallocation message that transceiver module 210 sends specifically for receiving this DeNB, this wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection; Connect reallocation message according to this wireless heterogeneous networks, send radio resource control connection reestablishment request message to DeNB, this radio resource control connection reestablishment request message carries the instruction of this DRB integrity protection capabilities.Processing module 220 is specifically for the radio resource control connection reestablishment message that received this DeNB by this transceiver module 210 and send according to this radio resource control connection reestablishment request message or radio resource control connection reestablishment refuse information.

In an implementation of the present embodiment, the wireless heterogeneous networks connection reallocation message that transceiver module 210 sends specifically for receiving this DeNB, this wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection; Connect reallocation message according to this wireless heterogeneous networks, send wireless heterogeneous networks connection reprovision to DeNB and complete message, this wireless heterogeneous networks connects reprovision and completes the instruction that message carries this DRB integrity protection capabilities.Processing module 220, specifically for sending radio resource control connection reestablishment request message by this transceiver module 210 to this DeNB, receives by this transceiver module 210 the radio resource control connection reestablishment message or radio resource control connection reestablishment refuse information that this DeNB sends according to this radio resource control connection reestablishment request message.

In an implementation of the present embodiment, RN200 also comprises temporary storage module 230.The wireless heterogeneous networks connection reallocation message that transceiver module 210 sends specifically for receiving this DeNB, this wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection; Connect reallocation message according to this wireless heterogeneous networks, send wireless heterogeneous networks connection reprovision to DeNB and complete message, this wireless heterogeneous networks connects reprovision and completes the instruction that message carries this DRB integrity protection capabilities.Temporary storage module 230 connects reallocation message for this wireless heterogeneous networks temporary.Processing module 220 is connected reprovision according to this wireless heterogeneous networks and completes the wireless heterogeneous networks that message sends specifically for being received this DeNB by this transceiver module 210 and connect reprovision response message, and this wireless heterogeneous networks connects in reprovision response message to carry and optionally carries out the instruction of integrity protection to DRB or carry the compulsory instruction carrying out integrity protection of DRB; If this wireless heterogeneous networks connects in reprovision response message carry instruction DRB optionally being carried out to integrity protection, then temporary according to this temporary storage module 230 wireless heterogeneous networks connects reallocation message, initiates RRC connection reconstruction process; Carry the compulsory instruction carrying out integrity protection of DRB if this wireless heterogeneous networks connects in reprovision response message, then notify that this temporary storage module 230 is deleted this temporary wireless heterogeneous networks and connected reallocation message.

In an implementation of the present embodiment, transceiver module 210, specifically for sending user equipment network ability information to this DeNB, carries the instruction of this DRB integrity protection capabilities in this user equipment network ability information; Or

Send ASSMP message to this DeNB, in this ASSMP message, carry the instruction of this DRB integrity protection capabilities; Or

Send CAMEL-Subscription-Information to HSS, comprise the instruction of this DRB integrity protection capabilities in this CAMEL-Subscription-Information, make this DeNB obtain the instruction of this DRB integrity protection capabilities from this HSS; Or

Send user equipment network ability information to this DeNB, in the 7th bit of the EIA0 position of this user equipment network ability information or the 8th bit of the 7th byte and the 7th byte, carry the instruction of this DRB integrity protection capabilities.

Finally it should be noted that, one of ordinary skill in the art will appreciate that all or part of flow process realized in above-described embodiment method, that the hardware that can carry out instruction relevant by computer program has come, described program can be stored in a computer read/write memory medium, this program, when performing, can comprise the flow process of the embodiment as above-mentioned each side method.Wherein, described storage medium can be magnetic disc, CD, read-only store-memory body (ROM) or random store-memory body (RAM) etc.

Each functional unit in the embodiment of the present invention can be integrated in a processing module, also can be that the independent physics of unit exists, also can be integrated in a module by two or more unit.Above-mentioned integrated module both can adopt the form of hardware to realize, and the form of the functional module that software and hardware also can be adopted to combine realizes.If described integrated module using the form of software function module realize and as independently production marketing or use time, also can be stored in a computer read/write memory medium.The above-mentioned storage medium mentioned can be read-only memory, disk or CD etc.Above-mentioned each device or system, can perform the method in correlation method embodiment.

The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. to eat dishes without rice or wine the method for building up of upper Deta bearer, it is characterized in that, comprising:

Receive the instruction of the Data Radio Bearer DRB integrity protection capabilities of via node;

If the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then set up the DRB not carrying out integrity protection with described via node or do not set up DRB with described via node.

2. the method for claim 1, is characterized in that, before the instruction of the DRB integrity protection capabilities of described reception via node, described method also comprises:

To described via node send carry out the DRB of integrity protection set up message.

3. the method for claim 1, is characterized in that, described method also comprises:

If the instruction of described DRB integrity protection capabilities indicates described via node to support DRB integrity protection, then set up with described via node the DRB carrying out integrity protection.

4. as the method in claims 1 to 3 as described in any one, it is characterized in that, described and described via node is set up the DRB that do not carry out integrity protection or is not set up DRB with described via node and specifically comprises:

If be configured to optionally carry out integrity protection to DRB, then set up with described via node the DRB not carrying out integrity protection; Or

If be configured to carry out integrity protection to DRB is compulsory, then do not set up DRB with described via node.

5. method as claimed in claim 2, is characterized in that,

Described message of setting up of carrying out the DRB of integrity protection to described via node transmission specifically comprises:

Send wireless heterogeneous networks to described via node and connect reallocation message, described wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection;

The instruction of the DRB integrity protection capabilities of described reception via node specifically comprises:

Receive the radio resource control connection reestablishment request message that via node sends, described radio resource control connection reestablishment request message carries the instruction of the DRB integrity protection capabilities of described via node;

Described and described via node is set up the DRB that do not carry out integrity protection or is not set up DRB with described via node and specifically comprises:

If be configured to optionally carry out integrity protection to DRB; then send radio resource control connection reestablishment message to described via node; if or be configured to carry out integrity protection to DRB is compulsory, then send radio resource control connection reestablishment refuse information to described via node.

6. method as claimed in claim 2, is characterized in that,

The wireless heterogeneous networks receiving via node transmission connects reprovision and completes message, and described wireless heterogeneous networks connects reprovision and completes the instruction that message carries the DRB integrity protection capabilities of described via node;

Receive the radio resource control connection reestablishment request message that described via node sends;

7. method as claimed in claim 2, is characterized in that,

If be configured to optionally carry out integrity protection to DRB, then send wireless heterogeneous networks to described via node and connect reprovision response message, instruction DRB optionally being carried out to integrity protection is carried in described wireless heterogeneous networks connection reprovision response message, described via node is made to initiate RRC connection reconstruction process, if or be configured to carry out integrity protection to DRB is compulsory, then send wireless heterogeneous networks to described via node and connect reprovision response message, carry the compulsory instruction carrying out integrity protection of DRB in described wireless heterogeneous networks connection reprovision response message.

8. the method for claim 1, is characterized in that,

Receive the user equipment network ability information that via node sends, in described user equipment network ability information, carry the instruction of described DRB integrity protection capabilities; Or

Receive the user equipment network ability information that source base station sends, in described user equipment network ability information, carry the instruction of the DRB integrity protection capabilities of described via node; Or

The Access Layer safe mode receiving the transmission of described via node completes ASSMP message, carries the instruction of described DRB integrity protection capabilities in described ASSMP message; Or

Receive the instruction of the acquisition DRB integrity protection capabilities that local CAMEL-Subscription-Information server HSS sends, the instruction of described DRB integrity protection capabilities is included in the CAMEL-Subscription-Information of the described via node that described HSS preserves.

9. method as claimed in claim 8; it is characterized in that, the instruction of described DRB integrity protection capabilities is specifically carried in the instruction of carrying described DRB integrity protection capabilities in described user equipment network ability information in the EIA0 position of described user equipment network ability information or the 8th bit of the 7th byte and the 7th bit of the 7th byte.

10. to eat dishes without rice or wine the method for building up of upper Deta bearer, it is characterized in that, comprising:

Via node sends the instruction of wireless data carrying DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection;

Described via node and described base station are set up the DRB that do not carry out integrity protection or are not set up DRB with described base station.

11. methods as claimed in claim 10, is characterized in that, before the instruction of the described DRB integrity protection capabilities sent to base station, described method also comprises:

What what described via node received that described base station sends carried out the DRB of integrity protection sets up message;

Described via node sends the instruction of DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicate described via node not support DRB integrity protection specifically comprises:

Described via node according to described in carry out the DRB of integrity protection set up message, send the instruction of DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection.

12. methods as claimed in claim 11, is characterized in that,

The message of setting up of carrying out the DRB of integrity protection that described via node receives the transmission of described base station specifically comprises:

Described via node receives the wireless heterogeneous networks connection reallocation message that described base station sends, and described wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection;

The instruction of the described DRB integrity protection capabilities sent to base station specifically comprises:

Send radio resource control connection reestablishment request message to base station, described radio resource control connection reestablishment request message carries the instruction of described DRB integrity protection capabilities;

Described via node and described base station are set up the DRB that do not carry out integrity protection or are not set up DRB with described base station and specifically comprise:

Described via node receives the radio resource control connection reestablishment message or radio resource control connection reestablishment refuse information that described base station sends according to described radio resource control connection reestablishment request message.

13. methods as claimed in claim 11, is characterized in that,

Send wireless heterogeneous networks connection reprovision to base station and complete message, described wireless heterogeneous networks connects reprovision and completes the instruction that message carries described DRB integrity protection capabilities;

Described via node sends radio resource control connection reestablishment request message to described base station;

Described via node receives the radio resource control connection reestablishment message or radio resource control connection reestablishment refuse information that base station sends according to described radio resource control connection reestablishment request message.

14. methods as claimed in claim 11, is characterized in that,

Described via node is kept in described wireless heterogeneous networks and is connected reallocation message;

Described via node receives described base station and connects reprovision according to described wireless heterogeneous networks and complete the wireless heterogeneous networks that message sends and connect reprovision response message, and described wireless heterogeneous networks connects in reprovision response message to carry and optionally carries out the instruction of integrity protection to DRB or carry the compulsory instruction carrying out integrity protection of DRB;

If described wireless heterogeneous networks connects in reprovision response message carry instruction DRB optionally being carried out to integrity protection; then described via node connects reallocation message according to described temporary wireless heterogeneous networks; initiate RRC connection reconstruction process; carry the compulsory instruction carrying out integrity protection of DRB if described wireless heterogeneous networks connects in reprovision response message, then described via node deletes described temporary wireless heterogeneous networks connection reallocation message.

15. methods as claimed in claim 10, is characterized in that,

The instruction of the DRB integrity protection capabilities that described via node sends to base station specifically comprises:

Described via node sends user equipment network ability information to described base station, carries the instruction of described DRB integrity protection capabilities in described user equipment network ability information; Or

Described via node sends ASSMP message to described base station, carries the instruction of described DRB integrity protection capabilities in described ASSMP message; Or

Described via node sends CAMEL-Subscription-Information to HSS, comprises the instruction of described DRB integrity protection capabilities in described CAMEL-Subscription-Information, makes described base station obtain the instruction of described DRB integrity protection capabilities from described HSS.

16. methods as claimed in claim 15; it is characterized in that, the instruction of described DRB integrity protection capabilities is specifically carried in the instruction of carrying described DRB integrity protection capabilities in described user equipment network ability information in the EIA0 position of described user equipment network ability information or the 8th bit of the 7th byte and the 7th bit of the 7th byte.

17. 1 kinds of base stations, is characterized in that, comprising:

Transceiver module, for receiving the instruction of the wireless data carrying DRB integrity protection capabilities of via node;

First processing module, if indicate described via node not support DRB integrity protection for the instruction of described DRB integrity protection capabilities, then sets up the DRB not carrying out integrity protection or does not set up DRB with described via node with described via node.

18. base stations as claimed in claim 17, is characterized in that,

Described transceiver module; also for send to described via node carry out the DRB of integrity protection set up message, with make described via node according to described in carry out the DRB of integrity protection message of setting up send the instruction that described wireless data carries DRB integrity protection capabilities.

19. base stations as claimed in claim 17, it is characterized in that, described base station also comprises:

Second processing module, if indicate described via node to support DRB integrity protection for the instruction of described DRB integrity protection capabilities, then sets up with described via node the DRB carrying out integrity protection.

20., as the base station in claim 17 to 19 as described in any one, is characterized in that, described base station also comprises:

Acquisition module, for obtaining configuration information;

Described first processing module comprises the first submodule or the second submodule,

If the instruction that described first submodule is used for described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then when described configuration information instruction optionally carries out integrity protection to DRB, set up with described via node the DRB not carrying out integrity protection;

If the instruction that described second submodule is used for described DRB integrity protection capabilities indicates described via node not support DRB integrity protection; then when described configuration information instruction carries out integrity protection to DRB is compulsory, do not set up DRB with described via node.

21. base stations as claimed in claim 18, it is characterized in that, described base station also comprises:

Acquisition module, for obtaining configuration information;

Described transceiver module connects reallocation message specifically for sending wireless heterogeneous networks to described via node, described wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection, with make described via node according to described in carry out the DRB of integrity protection set up the instruction that message sends described Deta bearer DRB integrity protection capabilities; With the radio resource control connection reestablishment request message receiving the transmission of described via node, described radio resource control connection reestablishment request message carries the instruction of the DRB integrity protection capabilities of described via node;

If the instruction that described first submodule is used for described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then when described configuration information instruction optionally carries out integrity protection to DRB, send radio resource control connection reestablishment message by described transceiver module to described via node;

If the instruction that described second submodule is used for described DRB integrity protection capabilities indicates described via node not support DRB integrity protection; then when described configuration information instruction carries out integrity protection to DRB is compulsory, send radio resource control connection reestablishment refuse information by described transceiver module to described via node.

22. base stations as claimed in claim 18, it is characterized in that, described base station also comprises:

Acquisition module, for obtaining configuration information;

Described transceiver module connects reallocation message specifically for sending wireless heterogeneous networks to described via node, described wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection, with make described via node according to described in carry out the DRB of integrity protection set up the instruction that message sends described Deta bearer DRB integrity protection capabilities; The wireless heterogeneous networks receiving via node transmission connects reprovision and completes message, and described wireless heterogeneous networks connects reprovision and completes the instruction that message carries the DRB integrity protection capabilities of described via node; With the radio resource control connection reestablishment request message receiving the transmission of described via node;

23. base stations as claimed in claim 18, it is characterized in that, described base station also comprises:

Acquisition module, for obtaining configuration information;

Described transceiver module connects reallocation message specifically for sending wireless heterogeneous networks to described via node, described wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection, with make described via node according to described in carry out the DRB of integrity protection set up the instruction that message sends described Deta bearer DRB integrity protection capabilities; Be connected reprovision with the wireless heterogeneous networks receiving via node transmission and complete message, described wireless heterogeneous networks connects reprovision and completes the instruction that message carries the DRB integrity protection capabilities of described via node;

If the instruction that described first submodule is used for described DRB integrity protection capabilities indicates described via node not support DRB integrity protection, then when described configuration information instruction optionally carries out integrity protection to DRB, send wireless heterogeneous networks by described transceiver module to described via node and connect reprovision response message, carry instruction DRB optionally being carried out to integrity protection in described wireless heterogeneous networks connection reprovision response message, make described via node initiate RRC connection reconstruction process;

If the instruction that described second submodule is used for described DRB integrity protection capabilities indicates described via node not support DRB integrity protection; then when described configuration information instruction carries out integrity protection to DRB is compulsory; send wireless heterogeneous networks by described transceiver module to described via node and connect reprovision response message, carry the compulsory instruction carrying out integrity protection of DRB in described wireless heterogeneous networks connection reprovision response message.

24. base stations as claimed in claim 17, is characterized in that,

The user equipment network ability information that described transceiver module sends specifically for receiving via node, carries the instruction of described DRB integrity protection capabilities in described user equipment network ability information; Or

For receiving the user equipment network ability information that source base station sends, in described user equipment network ability information, carry the instruction of the DRB integrity protection capabilities of described via node; Or

The Access Layer safe mode sent for receiving described via node completes ASSMP message, carries the instruction of described DRB integrity protection capabilities in described ASSMP message; Or

For receiving the instruction of the acquisition DRB integrity protection capabilities that HSS sends, the instruction of described DRB integrity protection capabilities is included in the CAMEL-Subscription-Information of the described via node that described HSS preserves; Or

For receiving the user equipment network ability information that via node sends, in the 7th bit of the EIA0 position of described user equipment network ability information or the 8th bit of the 7th byte and the 7th byte, carry the instruction of described DRB integrity protection capabilities; Or

For receiving the user equipment network ability information that source base station sends, in the 7th bit of the EIA0 position of described user equipment network ability information or the 8th bit of the 7th byte and the 7th byte, carry the instruction of described DRB integrity protection capabilities.

25. 1 kinds of via nodes, is characterized in that, comprising:

Transceiver module, for sending the instruction of wireless data carrying DRB integrity protection capabilities to base station, the instruction of described DRB integrity protection capabilities indicates described via node not support DRB integrity protection;

Processing module, for setting up with described base station the DRB that do not carry out integrity protection or not setting up DRB with described base station.

26. via nodes as claimed in claim 25, is characterized in that,

Described transceiver module also for receive that described base station sends carry out the DRB of integrity protection set up message, according to described carry out the DRB of integrity protection set up message, send the instruction of described DRB integrity protection capabilities to base station.

27. via nodes as claimed in claim 26, is characterized in that,

The wireless heterogeneous networks connection reallocation message that described transceiver module sends specifically for receiving described base station, described wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection; Connect reallocation message according to described wireless heterogeneous networks, send radio resource control connection reestablishment request message to base station, described radio resource control connection reestablishment request message carries the instruction of described DRB integrity protection capabilities;

Described processing module is specifically for the radio resource control connection reestablishment message that received described base station by described transceiver module and send according to described radio resource control connection reestablishment request message or radio resource control connection reestablishment refuse information.

28. via nodes as claimed in claim 26, is characterized in that,

The wireless heterogeneous networks connection reallocation message that described transceiver module sends specifically for receiving described base station, described wireless heterogeneous networks connects reallocation message and carries the instruction of opening integrity protection; Connect reallocation message according to described wireless heterogeneous networks, send wireless heterogeneous networks connection reprovision to base station and complete message, described wireless heterogeneous networks connects reprovision and completes the instruction that message carries described DRB integrity protection capabilities;

Described processing module, specifically for sending radio resource control connection reestablishment request message by described transceiver module to described base station, receives by described transceiver module the radio resource control connection reestablishment message or radio resource control connection reestablishment refuse information that described base station sends according to described radio resource control connection reestablishment request message.

29. via nodes as claimed in claim 26, it is characterized in that, described via node also comprises temporary storage module,

Described temporary storage module is used for temporary described wireless heterogeneous networks and connects reallocation message;

Described processing module is connected reprovision according to described wireless heterogeneous networks and completes the wireless heterogeneous networks that message sends specifically for being received described base station by described transceiver module and connect reprovision response message, and described wireless heterogeneous networks connects in reprovision response message to carry and optionally carries out the instruction of integrity protection to DRB or carry the compulsory instruction carrying out integrity protection of DRB; If described wireless heterogeneous networks connects in reprovision response message carry instruction DRB optionally being carried out to integrity protection, then temporary according to described temporary storage module wireless heterogeneous networks connects reallocation message, initiates RRC connection reconstruction process; Carry the compulsory instruction carrying out integrity protection of DRB if described wireless heterogeneous networks connects in reprovision response message, then notify that described temporary storage module is deleted described temporary wireless heterogeneous networks and connected reallocation message.

30. via nodes as claimed in claim 25, is characterized in that,

Described transceiver module, specifically for sending user equipment network ability information to described base station, carries the instruction of described DRB integrity protection capabilities in described user equipment network ability information; Or

Send ASSMP message to described base station, in described ASSMP message, carry the instruction of described DRB integrity protection capabilities; Or

Send CAMEL-Subscription-Information to HSS, in described CAMEL-Subscription-Information, comprise the instruction of described DRB integrity protection capabilities, make described base station obtain the instruction of described DRB integrity protection capabilities from described HSS; Or

Send user equipment network ability information to described base station, in the 7th bit of the EIA0 position of described user equipment network ability information or the 8th bit of the 7th byte and the 7th byte, carry the instruction of described DRB integrity protection capabilities.