Apparatus and method for information security in wireless communication
The present disclosure relates to a pre-5 th -Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4 th -Generation (4G) communication system such as Long Term Evolution (LTE). According to various embodiments of the present disclosure, an apparatus of a terminal in a wireless communication system may include a transceiver and at least one processor coupled to the transceiver, wherein the at least one processor may be configured to transmit a registration request message or a service request message including primary information and secondary information to an access and mobility management function (AMF), the primary information may be plain information, and the secondary information may be encrypted information.
1. A method performed by a user equipment (UE) in a wireless communication, the method comprising:
transmitting, to an access and mobility management function (AMF), a first message for a request;
receiving, from the AMF, a security mode command message including indication information for requesting a retransmission of the request, wherein the indication information includes a bit for indicating whether the retransmission is requested or not;
transmitting, to the AMF, a second message for the request by using a security mode complete message in response to the security mode command message, in case that the bit is set to a value indicating that the retransmission is requested; and
receiving, from the AMF, a response message for the request,
wherein the request includes a registration request or a service request,
wherein the value of the bit indicates that the retransmission is requested in case that the AMF is unable to decrypt a ciphered message for the request, and
wherein the security mode complete message is ciphered and integrity protected.
2. The method of claim 1 ,
wherein the request includes the registration request,
wherein the first message comprises includes plain information and protected information associated with a security context,
wherein the plain information includes at least one of:
key set identifier for next generation radio access network (ngSKI),
5 th generation system (5GS) mobile identity,
UE security capability,
additional globally unique temporary identifier (GUTI), or
evolved packet system (EPS) non access stratum (NAS) message container, and
wherein the protected information includes at least one of:
5GS mobility management (5GMM) capability,
S1 information element (IE) network capability,
Uplink data status,
protocol data unit (PDU) session status,
Mobile Initiated Connection Only (MICO) indication,
allowed PDU session status, or
UE's usage setting.
3. The method of claim 1 ,
wherein the request includes the service request,
wherein the first message includes plain information and protected information associated with a security context,
wherein the plain information includes key set identifier for next generation radio access network (ngSKI); and
wherein the protected information includes at least one of:
Uplink data status,
protocol data unit (PDU) session status, or
allowed PDU session status.
4. A method performed by an access and mobility management function (AMF) in a wireless communication, the method comprising:
receiving, from a user equipment (UE), a first message for a request;
transmitting, to the UE, a security mode command message including indication information for requesting a retransmission of the request, wherein the indication information includes a bit for indicating whether the retransmission is requested or not;
receiving, from the UE, a second message for the request using a security mode complete message in response to the security mode command message, in case that the bit being set to a value indicating that the retransmission is requested; and
transmitting, to the UE, a response message for the request,
wherein the request includes a registration request or a service request,
wherein the value of the bit indicates that the retransmission is requested in case that the AMF is unable to decrypt a ciphered message for the request, and
wherein the security mode complete message is ciphered and integrity protected.
5. The method of claim 4 ,
wherein the request includes the registration request,
wherein the first message comprises includes plain information and protected information associated with a security context,
wherein the plain information includes at least one of:
key set identifier for next generation radio access network (ngSKI),
5 th generation system (5GS) mobile identity,
UE security capability,
additional globally unique temporary identifier (GUTI), or
evolved packet system (EPS) non access stratum (NAS) message container, and
wherein the protected information includes at least one of:
5GS mobility management (5GMM) capability,
S1 information element (IE) network capability,
uplink data status,
protocol data unit (PDU) session status,
mobile initiated connection only (MICO) indication,
allowed PDU session status, or
UE's usage setting.
6. The method of claim 4 ,
wherein the request includes the service request,
wherein the first message includes plain information and protected information associated with a security context,
wherein the plain information includes key set identifier for next generation radio access network (ngSKI), and
wherein the protected information includes at least one of:
uplink data status,
protocol data unit (PDU) session status, or
allowed PDU session status.
7. A user equipment (UE) comprising:
at least one transceiver; and
at least one processor coupled to the at least one transceiver and configured to:
transmit, to an access and mobility management function (AMF), a first message for a request,
receive, from the AMF, a security mode command message including indication information for requesting a retransmission of the request, wherein the indication information includes a bit for indicating whether the retransmission is requested or not,
transmit, to the AMF, a second message for the request by using a security mode complete message in response to the security mode command message, in case that the bit is set to a value indicating that the retransmission is requested, and
receive, from the AMF, a response message for the request,
wherein the request includes a registration request or a service request,
wherein the value of the bit indicates that the retransmission is requested in case that the AMF is unable to decrypt a ciphered message for the request, and
wherein the security mode complete message is ciphered and integrity protected.
8. The UE of claim 7 ,
wherein the request includes the registration request,
wherein the first message comprises includes plain information and protected information associated with a security context,
wherein the plain information includes at least one of:
key set identifier for next generation radio access network (ngSKI),
5 th generation system (5GS) mobile identity,
UE security capability,
additional globally unique temporary identifier (GUTI), or
evolved packet system (EPS) non access stratum (NAS) message container, and
wherein the protected information includes at least one of:
5GS mobility management (5GMM) capability,
S1 information element (IE) network capability,
Uplink data status,
protocol data unit (PDU) session status,
mobile initiated connection only (MICO) indication,
allowed PDU session status, or
UE's usage setting.
9. The UE of claim 7 ,
wherein the request includes the service request,
wherein the first message includes plain information and protected information associated with a security context,
wherein the plain information includes key set identifier for next generation radio access network (ngSKI), and
wherein the protected information includes at least one of:
Uplink data status,
protocol data unit (PDU) session status, or
allowed PDU session status.