Granted Patent B2

US 12,470,928 · App. 17/799,455 · Granted Nov 11, 2025

Inventors: Paul Schliwa-Bertling (Ljungsbro, SE); Prajwol Kumar Nakarmi (Sollentuna, SE); Christofer Lindheimer (Vadstena, SE); Helena Vahidi Mazinani (Lund, SE)

Assignee: Telefonaktiebolaget LM Ericsson (Publ)

H04W12/08G06F21/10H04L63/0807H04W12/037

Abstract

Claims (33)

1 . A method performed by a wireless device, the method comprising:

receiving, over an access stratum, a capability enquiry that requests the wireless device to transmit capability information indicating one or more capabilities of the wireless device, the capability enquiry being received over the access stratum and not having access stratum security, the capabilities of the wireless device being access stratum capabilities; and

after receiving the capability enquiry:

generating a token using one or more input parameters and transmitting the token, the one or more input parameters including at least some part of the capability enquiry and some of the capability information that the wireless device has or will transmit, the token being generated or transmitted based on a non-access stratum security context at the wireless device; and

transmitting the capability information over the access stratum without having activated security over the access stratum, without having activated security over the access stratum comprising without the use of a security key for activating or applying integrity protection and without confidentiality protection over the access stratum.

2 . The method of claim 1 , wherein the one or more input parameters include:

at least some part of the capability enquiry; or

at least some of the capability information.

3 . The method of claim 1 , wherein the one or more input parameters include one or both of:

a key that is in or derived from the non-access stratum security context; and

a count value included in the non-access stratum security context.

4 . The method of claim 1 , wherein generating the token comprises calculating the token as a hash, or as a keyed hash, over the at least some of the capability information.

5 . The method of claim 1 , wherein transmitting the capability information comprises transmitting a response to the capability enquiry, wherein the response includes the capability information and the token.

6 . The method of claim 1 , wherein transmitting the token comprises:

transmitting the token to radio network equipment over the access stratum; or

transmitting the token to core network equipment in a non-access stratum message.

7 . A method performed by network equipment, the method comprising:

receiving, from radio network equipment, at least some part of a capability enquiry that the radio network equipment has sent to a wireless device to request the wireless device to transmit capability information indicating one or more capabilities of the wireless device, the request being transmitted from a first protocol layer of the radio network equipment to the wireless device without security on the first protocol layer, the wireless device transmitting the capability information over an access stratum without having activated security over the access stratum, without having activated security over the access stratum comprising without the use of a security key for activating or applying integrity protection and without confidentiality protection over the access stratum, the capabilities of the wireless device being access stratum capabilities, and at least some of the capability information that the radio network equipment has received from the wireless device in response to the capability enquiry;

generating, by the network equipment, a token using one or more input parameters, the one or more input parameters including the at least some part of the capability enquiry and the at least some of the capability information that the wireless device has or will transmit and that is received from the radio network equipment; and

performing, or assisting the radio network equipment with, verification of whether the token that the network equipment generated matches or corresponds to a token that the wireless device generated.

8 . The method of claim 7 , further comprising, after the network equipment receives the capability information from the wireless device, receiving the token that the wireless device generated.

9 . The method of claim 8 , wherein receiving the token that the wireless device generated comprises:

receiving, from the radio network equipment, the token that the wireless device generated; or

receiving, from the wireless device, the token that the wireless device generated.

10 . The method of claim 7 , wherein generating the token by the network equipment comprises generating the token by the network equipment based on a non-access stratum security context at the network equipment.

11 . The method of claim 7 , wherein generating the token comprises calculating the token as a hash, or as a keyed hash, over the at least some of the capability information.

12 . A wireless device comprising:

communication circuitry; and

processing circuitry configured to:

receive, over an access stratum, a capability enquiry that requests the wireless device to transmit capability information indicating one or more capabilities of the wireless device, the capability enquiry being received over the access stratum and not having access stratum security, the capabilities of the wireless device being access stratum capabilities; and

after receiving the capability enquiry:

generate a token using one or more input parameters and transmit the token, the one or more input parameters including at least some part of the capability enquiry and at least some of the capability information that the wireless device has or will transmit, the token being generated or transmitted based on a non-access stratum security context at the wireless device; and

transmit the capability information over the access stratum without having activated security over the access stratum, without having activated security over the access stratum comprising without the use of a security key for activating or applying integrity protection and without confidentiality protection over the access stratum.

Assignments (1)

Continuity (2)

References Cited (36)