Method and computing device for carrying out data integrity protection
A method for carrying out data integrity protection on a communication network. According to an implementation, a wireless communication device indicates, to a wireless network, the maximum data rate up to which integrity protection is supported for user plane data. A network node (e.g., a node of the core network, such as an SMF) receives this information and determines whether or not to enable integrity protection for user plane data based on the information (possibly in conjunction with other information such as the minimum data rate to be supported, etc.). The network node then communicates the decision to enable or disable integrity protection to a RAN node (e.g., a wireless base station).
1. A method for carrying out data integrity protection on a communication network, the method comprising:
receiving, at a first node, a maximum data rate corresponding to a wireless communication device, the maximum data rate indicating a data rate up to which the wireless communication device supports integrity protection;
making a determination, based on the received maximum data rate, whether to enable data integrity protection for a user plane data session involving the wireless communication device;
compiling a security policy for the user plane data session based on the determination; and
transmitting the security policy to a second network node.
2. The method of claim 1 , wherein the transmitting the security policy to the second network node comprises transmitting the security policy in a session establishment message.
3. The method of claim 1 , wherein the first node is a session management function and the second node is a wireless communication base station.
4. The method of claim 1 , wherein the transmitting the security policy to the second network node comprises:
transmitting, in a case that the security policy enables data integrity protection, the maximum data rate corresponding to the wireless communication device.
5. The method of claim 1 , wherein the security policy indicates whether data integrity protection is applicable to the user plane data session and a maximum supported integrity protection data rate.
6. A method for carrying out data integrity protection at a wireless base station, the method comprising:
receiving a security policy compiled based on a determination as to whether to enable integrity protection for user plane data session involving a wireless communication device, wherein the determination is based on a maximum data rate corresponding to the wireless communication device, and wherein the security policy enables data integrity protection; and
transmitting a data radio bearer configuration to the wireless communication device based on the received security policy.
7. The method of claim 6 , wherein receiving the security policy comprises receiving the security policy in a session establishment message.
8. The method of claim 6 , wherein receiving the security policy comprises:
receiving, in a case that the determination enables data integrity protection, the maximum data rate corresponding to the wireless communication device.
9. An apparatus for carrying out data integrity protection on a communication network, the apparatus comprising:
at least one processor and memory containing instructions that when executed perform operations comprising:
receiving a maximum data rate corresponding to a wireless communication device, the maximum data rate indicating a data rate up to which the wireless communication device supports integrity protection;
making a determination, based on the received maximum data rate, whether to enable data integrity protection for a user plane data session involving the wireless communication device;
compiling a security policy for the user plane data session based on the determination; and
transmitting the security policy to a network node.
10. The apparatus of claim 9 , wherein transmitting the security policy to the network node comprises transmitting the security policy in a session establishment message.
11. The apparatus of claim 9 , wherein the apparatus is a session management function and the network node is a wireless communication base station.
12. The apparatus of claim 9 , wherein the transmitting the security policy to the network node comprises:
transmitting, in a case that the determination enables data integrity protection, the maximum data rate corresponding to the wireless communication device.
13. An apparatus for carrying out data integrity protection at a wireless base station, the apparatus comprising:
at least one processor and memory containing instructions that when executed perform operations comprising:
receiving a security policy compiled based on a determination as to whether to enable integrity protection for user plane data session involving a wireless communication device, wherein the determination is based on a maximum data rate corresponding to the wireless communication device; and
transmitting a data radio bearer configuration to the wireless communication device based on the received security policy.
14. The apparatus of claim 13 , wherein the receiving the security policy comprises receiving in a session establishment message.
15. The apparatus of claim 13 , wherein the receiving the security policy comprises:
receiving, in a case that the determination enables data integrity protection, the maximum data rate corresponding to the wireless communication device.
16. A non-transitory computer readable medium storing executable instructions that when executed by at least one processor perform operations comprising:
receiving, at a first node, a maximum data rate corresponding to a wireless communication device, the maximum data rate indicating a data rate up to which the wireless communication device supports integrity protection;
making a determination, based on the received maximum data rate, whether to enable data integrity protection for user plane data session involving the wireless communication device;
compiling a security policy for the user plane data session based on the determination; and
transmitting the security policy to a second network node.
17. The non-transitory computer readable medium of claim 16 , wherein the transmitting the security policy to the second network node comprises transmitting the security policy to the second network node in a session establishment message.
18. The non-transitory computer readable medium of claim 16 , wherein the first node is a session management function and the second node is a wireless communication base station.
19. The non-transitory computer readable medium of claim 16 , wherein the transmitting the security policy to the second network node comprises:
transmitting, in a case that the determination enables data integrity protection, the maximum data rate corresponding to the wireless communication device.