Method for detecting security error in mobile telecommunications system and device of mobile telecommunications
According to one embodiment, a method of performing a re-establishment procedure in a mobile communication system includes: receiving, by a packet data convergence protocol (PDCP) entity, at least one PDCP data unit; performing, by the PDCP entity, an integrity check on the received at least one PDCP data unit; indicating, by the PDCP entity, an integrity check failure to a radio resource control (RRC) entity if the integrity check fails with regard to the received at least one PDCP data unit; and performing, by the RRC entity, a re-establishment procedure upon the indication by the PDCP entity of the integrity check failure, wherein the at least one PDCP data unit is for a control plane.
1. A method of performing a re-establishment procedure in a mobile communication system, the method comprising:
receiving, by a packet data convergence protocol (PDCP) entity, at least one PDCP data unit;
performing, by the PDCP entity, an integrity check on the received at least one PDCP data unit;
indicating, by the PDCP entity, an integrity check failure to a radio resource control (RRC) entity if the integrity check fails with regard to the received at least one PDCP data unit; and
performing, by the RRC entity, a re-establishment procedure upon the indication by the PDCP entity of the integrity check failure,
wherein the at least one PDCP data unit is for a control plane.
2. The method of claim 1 , wherein performing the re-establishment procedure comprises at least re-establishing a radio bearer (RB) or re-establishing an RRC connection.
3. The method of claim 1 , wherein performing the integrity check on the received at least one PDCP data unit comprises:
counting a number of integrity-failed PDCP data units among the received at least one PDCP data unit;
comparing the counted number of integrity-failed PDCP data units to a reference value; and
identifying the integrity check failure if the counted number of integrity-failed PDCP data units reaches the reference value.
4. The method of claim 3 , wherein the integrity-failed PDCP data units are in a consecutive order.
5. The method of claim 3 , wherein the integrity check failure is identified if a message authentication code-integrity (MAC-I) value of the received at least one PDCP data unit is different from an expected message authentication code-integrity (XMAC-I) value generated by the PDCP entity.
6. The method of claim 1 , further comprising:
deciphering, by the PDCP entity, the received at least one PDCP data unit.
7. The method of claim 6 , further comprising:
removing, by the PDCP entity, at least one PDCP header from the received at least one PDCP data unit.
8. An apparatus in a mobile communication system, the apparatus comprising:
a packet data convergence protocol (PDCP) entity configured to:
receive at least one PDCP data unit;
perform an integrity check on the received at least one PDCP data unit; and
indicate an integrity check failure to an upper entity if the integrity check fails with regard to the received at least one PDCP data unit; and
the upper entity configured to perform a re-establishment procedure upon indication by the PDCP entity of the integrity check failure, the upper entity comprising a radio resource control (RRC) entity,
wherein the at least one PDCP data unit is for a control plane.
9. The apparatus of claim 8 , wherein the upper entity is configured to perform the re-establishment procedure by at least re-establishing a radio bearer (RB) or re-establishing an RRC connection.
10. The apparatus of claim 8 , wherein the PDCP entity is configured to perform the integrity check by counting a number of integrity-failed PDCP data units among the received at least one PDCP data unit, comparing the counted number of integrity-failed PDCP data units to a reference value, and identifying the integrity check failure if the counted number of integrity-failed PDCP data units reaches the reference value.
11. The apparatus of claim 10 , wherein the integrity-failed PDCP data units are in a consecutive order.
12. The apparatus of claim 10 , wherein the PDCP entity is configured to identify the integrity check failure if a message authentication code-integrity (MAC-I) value of the received at least one PDCP data unit is different from an expected message authentication code-integrity (XMAC-I) value generated by the PDCP entity.
13. The apparatus of claim 8 , wherein the PDCP entity is further configured to decipher the received at least one PDCP data unit.
14. The apparatus of claim 13 , wherein the PDCP entity is further configured to remove at least one PDCP header from the received at least one PDCP data unit.