Security in wireless communication system and device
View Patent ↗A method of implementing security in a wireless communication device ( 108 ) comprises receiving ( 300 ), at the device ( 108 ), a security mode command for activating a security mode in the device and storing a sequence number of the received security mode command. A security mode complete or failure message is sent ( 302 ) based on whether a security mode is activated in the device. An acknowledgement of the security mode complete or failure message is received ( 304 ) and a timestamp of the acknowledgement is stored. On receiving a PDU, sequence numbers and timestamps of segments of the received PDU are compared ( 306 ) with the stored sequence number and timestamp of the acknowledgement. The received PDU segments are managed ( 308 ) in response to the comparisons, and the sending of the security mode complete or security mode failure message. A wireless communication device is also disclosed.
1. A method of implementing security in a wireless communication device, the method comprising:
receiving, at the device, a security mode command for activating a security mode in the device and storing a sequence number of the received security mode command;
sending a security mode complete or failure message based on whether a security mode is activated in the device;
receiving an acknowledgement of the security mode complete or failure message and storing a timestamp of the acknowledgement;
receiving a Packet Data Unit (PDU) and comparing sequence numbers and timestamps of segments of the received PDU with the stored sequence number of the received security mode command and the timestamp of the acknowledgement; and
managing the received PDU segments in response to the comparisons, and the sending of the security mode complete or security mode failure message.
2. The method of claim 1 wherein when a security mode failure message is sent, managing includes:
not applying security to the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement; and
ignoring the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps less than the timestamp of the acknowledgement.
3. The method of claim 2 wherein not applying security includes processing the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement as unciphered segments.
4. The method of claim 1 wherein when a security mode complete message is sent, managing includes:
applying security to the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement or timestamps after the security mode complete message is sent.
5. The method of claim 4 wherein applying security includes processing the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement or timestamps after the security mode complete message is sent as ciphered messages.
6. The method of claim 1 wherein the security mode command is encapsulated in a Radio Link Control (RLC) message and storing a sequence number includes storing a RLC sequence number of the RLC message.
7. The method of claim 1 wherein the received PDU is a Packet Data Convergence Protocol (PDCP) PDU.
8. A wireless communication device including:
a transmitter;
a receiver for receiving a security mode command for activating a security mode in the device; and
a processing unit communicably coupled to the transmitter and receiver, the processing unit being configured to:
store a sequence number of the received security mode command;
send a security mode complete or failure message based on whether a security mode is activated in the device;
receive an acknowledgement of the security mode complete or failure message and store a timestamp of the acknowledgement;
receive a PDU and compare sequence numbers and timestamps of segments of the received PDU with the stored sequence number of the received security mode command and the timestamp of the acknowledgement; and
manage the received PDU segments in response to the comparisons, and the sending of the security mode complete or security mode failure message.
9. The wireless communication device of claim 8 wherein the processing unit is configured to manage the received PDU segments when a security mode failure message is sent by:
not applying security to the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement; and
ignoring the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps less than the timestamp of the acknowledgement.
10. The wireless communication device of claim 9 wherein the processing unit is configured to process the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement as unciphered segments.
11. The wireless communication device of claim 8 wherein the processing unit is configured to manage the received PDU segments when a security mode complete message is sent by:
applying security to the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement or timestamps after the security mode complete message is sent.
12. The wireless communication device of claim 11 wherein the processing unit is configured to process the received PDU segments having sequence numbers greater than the sequence number of the received security mode command and timestamps greater than the timestamp of the acknowledgement or timestamps after the security mode complete message is sent as ciphered messages.
13. The wireless communication device of claim 8 wherein the security mode command is encapsulated in a RLC message and the sequence number is a RLC sequence number of the RLC message encapsulating the security mode command.
14. The wireless communication device of claim 8 wherein the received PDU is a PDCP PDU.
15. The wireless communication device of claim 8 wherein the processing unit is configured to manage the received PDU segments when a security mode failure message or a security mode complete message is sent by:
not applying security to the received PDU segments having sequence numbers less than the sequence number of the received security mode command and timestamps after the security mode failure message or security mode complete message is sent.