MX2019010926A - Solucion de seguridad para encender y apagar la seguridad de datos de up entre ue y ran en 5g. - Google Patents

Solucion de seguridad para encender y apagar la seguridad de datos de up entre ue y ran en 5g.

Info

Publication number
MX2019010926A
MX2019010926A MX2019010926A MX2019010926A MX2019010926A MX 2019010926 A MX2019010926 A MX 2019010926A MX 2019010926 A MX2019010926 A MX 2019010926A MX 2019010926 A MX2019010926 A MX 2019010926A MX 2019010926 A MX2019010926 A MX 2019010926A
Authority
MX
Mexico
Prior art keywords
security
smf
ran
data
udm
Prior art date
Application number
MX2019010926A
Other languages
English (en)
Inventor
Wifvesson Monica
Ben Henda Noamen
Torvinen Vesa
Original Assignee
Ericsson Telefon Ab L M
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ericsson Telefon Ab L M filed Critical Ericsson Telefon Ab L M
Publication of MX2019010926A publication Critical patent/MX2019010926A/es

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10Integrity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/009Security arrangements; Authentication; Protecting privacy or anonymity specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/12Applying verification of the received information
    • H04L63/123Applying verification of the received information received data contents, e.g. message integrity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/16Implementing security features at a particular protocol layer
    • H04L63/162Implementing security features at a particular protocol layer at the data link layer
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/20Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H04L63/205Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03Protecting confidentiality, e.g. by encryption
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03Protecting confidentiality, e.g. by encryption
    • H04W12/033Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10Integrity
    • H04W12/106Packet or message integrity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W76/00Connection management
    • H04W76/10Connection setup

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Infusion, Injection, And Reservoir Apparatuses (AREA)
  • Electrical Discharge Machining, Electrochemical Machining, And Combined Machining (AREA)

Abstract

Se describen métodos para operar un UE, un nodo de red, una función de administración de sesión (SMF) y una administración de datos unificada (UDM). Los métodos incluyen transmitir, por un UE, un mensaje de solicitud de establecimiento de sesión de unidad de datos de protocolo (PDU) hacia una SMF en la red de comunicación (902A), y recibir en el UE una decisión de política sobre protección de seguridad de datos de plano de usuario (UP) que terminen en una RAN para la sesión de PDU (904A). La decisión de política recibida en el UE puede ser de acuerdo con una política de seguridad de UP proporcionada por la SMF a la RAN durante el establecimiento de sesión de PDU. También se describen un UE, nodo de red, SMF y UDM.
MX2019010926A 2017-03-17 2018-03-16 Solucion de seguridad para encender y apagar la seguridad de datos de up entre ue y ran en 5g. MX2019010926A (es)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US201762472722P 2017-03-17 2017-03-17
PCT/EP2018/056751 WO2018167307A1 (en) 2017-03-17 2018-03-16 Security solution for switching on and off security for up data between ue and ran in 5g

Publications (1)

Publication Number Publication Date
MX2019010926A true MX2019010926A (es) 2019-11-05

Family

ID=61763958

Family Applications (1)

Application Number Title Priority Date Filing Date
MX2019010926A MX2019010926A (es) 2017-03-17 2018-03-16 Solucion de seguridad para encender y apagar la seguridad de datos de up entre ue y ran en 5g.

Country Status (7)

Country Link
US (3) US11659382B2 (es)
EP (2) EP4228301A1 (es)
CN (1) CN110447252B (es)
ES (1) ES2950646T3 (es)
MX (1) MX2019010926A (es)
PL (1) PL3596953T3 (es)
WO (1) WO2018167307A1 (es)

Families Citing this family (42)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018079692A1 (ja) * 2016-10-26 2018-05-03 日本電気株式会社 通信システム、基地局、制御方法、及びコンピュータ可読媒体
US11558745B2 (en) 2017-01-30 2023-01-17 Telefonaktiebolaget Lm Ericsson (Publ) Methods for integrity protection of user plane data
JP7066734B2 (ja) * 2017-03-20 2022-05-13 華為技術有限公司 制御プレーン接続管理方法および装置
CN109845389B (zh) * 2017-03-21 2021-05-04 华为技术有限公司 一种通信方法及装置
CN110493774B (zh) * 2017-05-06 2023-09-26 华为技术有限公司 密钥配置方法、装置以及系统
US11178603B2 (en) * 2017-05-09 2021-11-16 Telefonaktiebolaget Lm Ericsson (Publ) AMF relocation with N3IWF handling
CN110800332A (zh) * 2017-06-29 2020-02-14 华为国际有限公司 网络切片分配方法、设备及系统
WO2019025497A1 (en) 2017-08-02 2019-02-07 Sony Corporation METHODS AND APPARATUS FOR SUPPORTING INTEGRITY PROTECTION IN INTERCELLULAR TRANSFERS
WO2019174015A1 (zh) 2018-03-15 2019-09-19 Oppo广东移动通信有限公司 处理数据的方法、接入网设备和核心网设备
BR112020008401A2 (pt) * 2017-11-08 2020-11-03 Guangdong Oppo Mobile Telecommunications Corp., Ltd. método para controlar uma proteção de integridade, dispositivo de rede e meio de armazenamento para computador
CN111448843B (zh) * 2017-11-17 2023-08-15 Lg电子株式会社 发起服务请求过程的方法和用户设备
KR102412441B1 (ko) 2018-04-04 2022-06-22 지티이 코포레이션 무결성 보호를 관리하기 위한 기술
EP3777079A1 (en) * 2018-04-09 2021-02-17 Nokia Technologies Oy Method and apparatus for remote provisioning of protection policies in an edge node based on signaling between edge nodes
US11178717B2 (en) * 2018-05-21 2021-11-16 Electronics And Telecommunications Research Institute Traffic distribution method through multi-access network in a network and network entity performing the same
US11985585B2 (en) * 2018-08-10 2024-05-14 Nokia Technologies Oy Downlink signaling to user equipment in non-3GPP idle state
CN110943964B (zh) * 2018-09-21 2022-07-22 华为技术有限公司 数据校验方法、装置及存储介质
CN111200849B (zh) * 2018-11-19 2022-08-09 大唐移动通信设备有限公司 一种用户路由更新方法及设备
CN113557699B (zh) * 2018-12-11 2024-04-12 索尼集团公司 通信装置、基础设施设备、核心网络设备和方法
CN111464572B (zh) * 2019-01-18 2021-09-07 华为技术有限公司 一种会话配置方法及装置
CN111491394B (zh) * 2019-01-27 2022-06-14 华为技术有限公司 用户面安全保护的方法和装置
CN113424585B (zh) * 2019-02-11 2024-10-18 诺基亚技术有限公司 利用网络切片的蜂窝部署中的增强型移动性
CN111565391B (zh) * 2019-02-14 2022-04-05 华为技术有限公司 一种通信方法及装置
CN111641944A (zh) * 2019-03-01 2020-09-08 华为技术有限公司 一种通信方法及设备
WO2020178159A1 (en) * 2019-03-04 2020-09-10 Telefonaktiebolaget Lm Ericsson (Publ) Establishing a protocol data unit session
CN111800369B (zh) * 2019-04-08 2022-03-29 华为技术有限公司 通信方法与设备
WO2020221688A1 (en) * 2019-04-29 2020-11-05 Telefonaktiebolaget Lm Ericsson (Publ) User plane integrity protection
WO2021033022A1 (en) * 2019-08-16 2021-02-25 Lenovo ( Singapore) Pte. Ltd. Security capabilities in an encryption key request
EP4018620A4 (en) * 2019-08-19 2023-08-30 Telefonaktiebolaget LM Ericsson (publ.) METHOD AND APPARATUS FOR PERFORMING PROTECTION CONTROL IN A CENTRAL NETWORK
US20210105847A1 (en) * 2019-10-02 2021-04-08 Apple Inc. User Plane Integrity Protection Handling Procedures
WO2021074266A1 (en) * 2019-10-16 2021-04-22 Nokia Technologies Oy Network management
CN112788593B (zh) * 2019-11-04 2024-07-05 阿里巴巴集团控股有限公司 安全策略的更新方法及装置、系统
CN114762450A (zh) * 2019-12-23 2022-07-15 中兴通讯股份有限公司 用于协议数据单元会话注册和注销的冲突解决方案
WO2021109395A1 (en) * 2020-04-10 2021-06-10 Zte Corporation A method for slice information update
CN113810902A (zh) * 2020-05-30 2021-12-17 华为技术有限公司 一种确定用户面安全执行信息的方法、装置及系统
EP4173361A1 (en) * 2020-06-25 2023-05-03 Telefonaktiebolaget LM ERICSSON (PUBL) Methods providing flexible communication between radio access and core networks and related nodes
CN113572801B (zh) * 2020-09-30 2022-08-12 中兴通讯股份有限公司 会话建立方法、装置、接入网设备及存储介质
CA3197007A1 (en) * 2020-10-30 2022-05-05 Monica Wifvesson Methods, apparatuses, computer programs and computer program products for user plane integrity protection during x2 handover
US20230422104A1 (en) * 2021-01-11 2023-12-28 Telefonaktiebolaget Lm Ericsson (Publ) User plane encryption policy at interworking handover from eps and 5gs
CN114979079B (zh) * 2021-02-18 2023-07-21 中国移动通信有限公司研究院 信息处理方法、装置、相关设备和存储介质
CN113573375B (zh) * 2021-07-23 2022-08-02 中国电信股份有限公司 融合网关的选择方法及装置、存储介质、电子设备
CN115706973A (zh) * 2021-08-10 2023-02-17 华为技术有限公司 一种安全通信的方法及通信装置
WO2024156140A1 (en) * 2023-03-31 2024-08-02 Zte Corporation Systems and methods for determining network capability via user plane

Family Cites Families (26)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1997294A4 (en) 2006-03-22 2014-08-27 Lg Electronics Inc SECURITY CONSIDERATIONS FOR UMTS LTE
CN101072092B (zh) 2006-05-11 2010-12-08 华为技术有限公司 一种实现控制面和用户面密钥同步的方法
CN101075865B (zh) 2006-05-16 2011-02-02 华为技术有限公司 一种用户面加密的启动方法
CN101128066B (zh) * 2007-09-27 2012-07-18 中兴通讯股份有限公司 不进行用户面加密的方法及系统
US8705738B2 (en) * 2007-09-28 2014-04-22 Cisco Technology, Inc. Selective security termination in next generation mobile networks
PL2266291T3 (pl) 2008-03-20 2019-01-31 Nokia Solutions And Networks Oy Różne interfejsy IP w systemie sieci telekomunikacyjnej
US9276909B2 (en) 2008-08-27 2016-03-01 Qualcomm Incorporated Integrity protection and/or ciphering for UE registration with a wireless network
US8743905B2 (en) * 2008-12-22 2014-06-03 Qualcomm Incorporated Method and apparatus for bundling and ciphering data
CN102014381B (zh) 2009-09-08 2012-12-12 华为技术有限公司 加密算法协商方法、网元及移动台
CN102123391B (zh) 2010-01-08 2015-01-28 中兴通讯股份有限公司 一种基于hip的注册和认证方法及系统
US20110312299A1 (en) 2010-06-18 2011-12-22 Qualcomm Incorporated Methods and apparatuses facilitating synchronization of security configurations
CN102487507B (zh) 2010-12-01 2016-01-20 中兴通讯股份有限公司 一种实现完整性保护的方法及系统
CN102448058B (zh) * 2011-01-10 2014-04-30 华为技术有限公司 一种Un接口上的数据保护方法与装置
US9635694B2 (en) 2011-07-25 2017-04-25 Qualcomm Incorporated Method and apparatus for tunneled direct link setup management
CN103297958B (zh) 2012-02-22 2017-04-12 华为技术有限公司 建立安全上下文的方法、装置及系统
US9344945B2 (en) 2012-11-02 2016-05-17 Telefonaktiebolaget Lm Ericsson (Publ) Methods for coordinating inter-RAT mobility settings
WO2014100929A1 (en) 2012-12-24 2014-07-03 Nokia Corporation Methods and apparatus for differencitating security configurations in a radio local area network
CN104919860B (zh) * 2013-01-10 2019-03-05 Lg 电子株式会社 在支持多通信系统的会聚网络中更新基站信息的方法及其装置
JP6246142B2 (ja) 2015-01-14 2017-12-13 キヤノン株式会社 情報処理装置、情報処理方法及びプログラム
US10362011B2 (en) 2015-07-12 2019-07-23 Qualcomm Incorporated Network security architecture
CN107040398B (zh) 2016-02-04 2020-03-27 中兴通讯股份有限公司 一种数据传输方法、装置及系统
US11558745B2 (en) 2017-01-30 2023-01-17 Telefonaktiebolaget Lm Ericsson (Publ) Methods for integrity protection of user plane data
US10841084B2 (en) * 2017-02-03 2020-11-17 Qualcomm Incorporated Session management authorization token
CN113455050A (zh) * 2019-02-22 2021-09-28 苹果公司 用于减少切换中断的系统和方法
US11082900B1 (en) * 2020-01-28 2021-08-03 PanPsy Technologies, LLC Wireless device and wireless network processes based on wireless device type
EP4175255B1 (en) * 2021-11-02 2024-08-21 Koninklijke KPN N.V. Gateway device, system and method for providing a forwarding policy

Also Published As

Publication number Publication date
US11659382B2 (en) 2023-05-23
US20200100101A1 (en) 2020-03-26
US20230224700A1 (en) 2023-07-13
EP3596953B1 (en) 2023-05-31
EP3596953A1 (en) 2020-01-22
WO2018167307A1 (en) 2018-09-20
US11985496B2 (en) 2024-05-14
CN110447252A (zh) 2019-11-12
EP4228301A1 (en) 2023-08-16
PL3596953T3 (pl) 2023-10-09
US20240259792A1 (en) 2024-08-01
CN110447252B (zh) 2022-12-06
ES2950646T3 (es) 2023-10-11

Similar Documents

Publication Publication Date Title
MX2019010926A (es) Solucion de seguridad para encender y apagar la seguridad de datos de up entre ue y ran en 5g.
EP4290918A3 (en) Access stratum security for efficient packet processing
WO2019032972A8 (en) TRAFFIC ORIENTATION AND SWITCHING BETWEEN MULTIPLE ACCESS NETWORKS
MX2019001997A (es) Metodo para la activacion o desactivacion por conexion del plano de usuario por sesion.
EP4329370A3 (en) Application-friendly protocol data unit (pdu) session management
GB2485080A (en) Switching communications between different networks based on device capabilities
MX367231B (es) Gestión de conexión mejorada para redes de acceso múltiple.
MX2020013800A (es) Metodos que proporcionan cambio de anclaje para sesiones de pdu de ethernet y entidades/nodos de red relacionados.
EP3651436A3 (en) Techniques for securely communicating a data packet via at least one relay user equipment
EP2663107A1 (en) Key generating method and apparatus
MY201177A (en) Access method, device and system for user equipment (ue)
MX2019015592A (es) Equipo de usuario, metodo de control de comunicacion de equipo de usuario, dispositivo de red central, metodo de control de comunicacion de red central, funcion de gestion de sesiones (smf), y metodo de control de comunicacion de funcion de gestion de sesiones (smf).
EP4344172A3 (en) Method and device for communication between network entities in cloud lan environment
MX2013003958A (es) Mecanismo de transmision de datos de peso ligero.
JP2017529754A (ja) クラウド無線アクセスネットワークのための改良型アーキテクチャとフロントホールデータの圧縮方法
MX2010003248A (es) Omisión del identificador de un equipo de usuario en un proceso de canal de acceso aleatorio mejorado.
NZ594787A (en) System and method for providing notifications to an enduser device
EP2876914A3 (en) Providing in-line services through radio access network resources under control of a mobile packet core in a network environment
GB2425694B (en) A method and an apparatus for securely communicating between a management server and a managed node associated with a dynamic provisioning system
WO2010107710A3 (en) System and method for telecommunication with a web-based network, such as a social network
MX2019015590A (es) Aparato terminal y dispositivo de red central.
EP4247034A3 (en) Method and system for providing security from a radio access network
PH12019502668A1 (en) Wireless communication method and device
US20220078608A1 (en) System and Method for Security Activation with Session Granularity
EP3474527A3 (en) Charging session management method and apparatus