Method for detecting security error in mobile telecommunications system and device of mobile telecommunications

• US 10,038,701 B2
• Filed: 08/24/2015
• Issued: 07/31/2018
• Est. Priority Date: 08/10/2007
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Yi, Seung June, Park, Sung Jun, Lee, Young Dae, Chun, Sung Duck
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US14/833,526
• Publication Number:
  US 20150365194A1
• Time in Patent Office: 1,072 Days
• Field of Search: 380270, 714807, 370350, 370331, 370503, 713168, 713170, 726 23, 726 27, 726 6
• CPC Class Codes: G06F 11/1004 to protect a block of data words, e.g. CRC or checksum G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00
• CPC Class Codes: H04L 1/0061 Error detection codes
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 49/552 by ensuring the integrity of packets received through redundant connections
• CPC Class Codes: H04L 49/555 Error detection
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 76/18 Management of setup rejection or failure
• CPC Class Codes: H04W 76/19 Connection re-establishment

Abstract

According to one embodiment, a method of performing a re-establishment procedure in a mobile communication system includes: receiving at least one packet data convergence protocol (PDCP) control plane data unit; performing an integrity check on the at least one PDCP control plane data unit; identifying an integrity check failure with regard to the at least one PDCP control plane data unit; and performing a re-establishment procedure if the integrity check failure is identified to exist with regard to the at least one PDCP control plane data unit.

Claims

1. A method of performing a re-establishment procedure in a mobile communication system, the method performed by an apparatus that includes a receiver and a controller, the method comprising:

wirelessly receiving, by the receiver, at least one packet data convergence protocol (PDCP) data unit;

performing, by a packet data convergence protocol (PDCP) layer of the controller, an integrity check on the received at least one PDCP data unit; and

performing, by a radio resource control (RRC) layer of the controller, a wireless re-establishment procedure with an external device upon identifying an integrity check failure,

wherein the integrity check failure is identified by an indication from the PDCP layer.

2. The method of claim 1, wherein the re-establishment procedure comprises at least one of re-establishing a radio bearer (RB) or re-establishing an RRC connection.

3. The method of claim 1, wherein performing the integrity check on the at least one PDCP data unit comprises:

counting a number of integrity-failed PDCP data units among the received at least one PDCP data unit;

comparing the counted number of integrity-failed PDCP data units to a reference value; and

identifying the integrity check failure if the counted number of integrity-failed PDCP data units reaches the reference value.

4. The method of claim 3, wherein the integrity-failed PDCP data units are in a consecutive order.

5. The method of claim 3, wherein the integrity check failure is identified if a message authentication code-integrity (MAC-I) value of the received at least one PDCP data unit is different from an expected message authentication code-integrity (XMAC-I) value generated by the PDCP layer.

6. The method of claim 1, further comprising:

deciphering, by the PDCP layer, the received at least one PDCP data unit.

7. The method of claim 6, further comprising:

removing, by the PDCP layer, at least one PDCP header from the received at least one PDCP data unit.

8. The method of claim 1, wherein the at least one PDCP data unit is for a control plane.

9. An apparatus in a mobile communication system, the apparatus comprising:

a receiver configured to wirelessly receive at least one packet data convergence protocol (PDCP) data unit; and

a controller operatively connected to the receiver and configured to;

perform, by a PDCP layer of the controller, an integrity check on the received at least one PDCP data unit; and

perform, by a radio resource control (RRC) layer of the controller, a wireless re-establishment procedure with an external device upon identifying an integrity check failure,

wherein the integrity check failure is identified by an indication from the PDCP layer.

10. The apparatus of claim 9, wherein the re-establishment procedure comprises at least one of re-establishing a radio bearer (RB) or re-establishing an RRC connection.

11. The apparatus of claim 9, wherein the controller is configured to perform the integrity check by:

counting a number of integrity-failed PDCP data units among the received at least one data unit,

comparing the counted number of integrity-failed PDCP data units to a reference value, and

identifying the integrity check failure if the counted number of integrity-failed PDCP data units reaches the reference value.

12. The apparatus of claim 11, wherein the integrity-failed PDCP data units are in a consecutive order.

13. The apparatus of claim 11, wherein the integrity check failure is identified if a message authentication code-integrity (MAC-I) value of the received at least one data unit is different from an expected message authentication code-integrity (XMAC-I) value generated by the PDCP layer.

14. The apparatus of claim 9, wherein the controller is further configured to decipher the received at least one PDCP data unit.

15. The apparatus of claim 14, wherein the receiver is further configured to remove at least one PDCP header from the received at least one PDCP data unit.

16. The apparatus of claim 9, wherein the at least one PDCP data unit is for a control plane.