Method for detecting security error in mobile telecommunications system and device of mobile telecommunications

• US 8,712,055 B2
• Filed: 07/03/2012
• Issued: 04/29/2014
• Est. Priority Date: 08/10/2007
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Park, Sung-Jun, Lee, Young-Dae, Chun, Sung-Duck, Yi, Seung-June
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US13/541,574
• Publication Number:
  US 20120269055A1
• Time in Patent Office: 665 Days
• Field of Search: 713/150, 713160-163, 713167-171, 713/181, 380/270, 726 2- 3, 726 11- 14, 455/73, 455410-411
• US Class Current: 380/270
• CPC Class Codes: G06F 11/1004 to protect a block of data words, e.g. CRC or checksum G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00
• CPC Class Codes: H04L 1/0061 Error detection codes
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 49/552 by ensuring the integrity of packets received through redundant connections
• CPC Class Codes: H04L 49/555 Error detection
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 76/18 Management of setup rejection or failure
• CPC Class Codes: H04W 76/19 Connection re-establishment

Abstract

According to one embodiment, a method of performing a re-establishment procedure in a mobile communication system includes: receiving, by a packet data convergence protocol (PDCP) entity, at least one PDCP data unit; performing, by the PDCP entity, an integrity check on the received at least one PDCP data unit; indicating, by the PDCP entity, an integrity check failure to a radio resource control (RRC) entity if the integrity check fails with regard to the received at least one PDCP data unit; and performing, by the RRC entity, a re-establishment procedure upon the indication by the PDCP entity of the integrity check failure, wherein the at least one PDCP data unit is for a control plane.

Claims

1. A method of performing a re-establishment procedure in a mobile communication system, the method comprising:

receiving, by a packet data convergence protocol (PDCP) entity, at least one PDCP data unit;

performing, by the PDCP entity, an integrity check on the received at least one PDCP data unit;

indicating, by the PDCP entity, an integrity check failure to a radio resource control (RRC) entity if the integrity check fails with regard to the received at least one PDCP data unit; and

performing, by the RRC entity, a re-establishment procedure upon the indication by the PDCP entity of the integrity check failure,

wherein the at least one PDCP data unit is for a control plane.

2. The method of claim 1, wherein performing the re-establishment procedure comprises at least re-establishing a radio bearer (RB) or re-establishing an RRC connection.

3. The method of claim 1, wherein performing the integrity check on the received at least one PDCP data unit comprises:

counting a number of integrity-failed PDCP data units among the received at least one PDCP data unit;

comparing the counted number of integrity-failed PDCP data units to a reference value; and

identifying the integrity check failure if the counted number of integrity-failed PDCP data units reaches the reference value.

4. The method of claim 3, wherein the integrity-failed PDCP data units are in a consecutive order.

5. The method of claim 3, wherein the integrity check failure is identified if a message authentication code-integrity (MAC-I) value of the received at least one PDCP data unit is different from an expected message authentication code-integrity (XMAC-I) value generated by the PDCP entity.

6. The method of claim 1, further comprising:

deciphering, by the PDCP entity, the received at least one PDCP data unit.

7. The method of claim 6, further comprising:

removing, by the PDCP entity, at least one PDCP header from the received at least one PDCP data unit.

8. An apparatus in a mobile communication system, the apparatus comprising:

a packet data convergence protocol (PDCP) entity configured to;

receive at least one PDCP data unit;

perform an integrity check on the received at least one PDCP data unit; and

indicate an integrity check failure to an upper entity if the integrity check fails with regard to the received at least one PDCP data unit; and

the upper entity configured to perform a re-establishment procedure upon indication by the PDCP entity of the integrity check failure, the upper entity comprising a radio resource control (RRC) entity,

wherein the at least one PDCP data unit is for a control plane.

9. The apparatus of claim 8, wherein the upper entity is configured to perform the re-establishment procedure by at least re-establishing a radio bearer (RB) or re-establishing an RRC connection.

10. The apparatus of claim 8, wherein the PDCP entity is configured to perform the integrity check by counting a number of integrity-failed PDCP data units among the received at least one PDCP data unit, comparing the counted number of integrity-failed PDCP data units to a reference value, and identifying the integrity check failure if the counted number of integrity-failed PDCP data units reaches the reference value.

11. The apparatus of claim 10, wherein the integrity-failed PDCP data units are in a consecutive order.

12. The apparatus of claim 10, wherein the PDCP entity is configured to identify the integrity check failure if a message authentication code-integrity (MAC-I) value of the received at least one PDCP data unit is different from an expected message authentication code-integrity (XMAC-I) value generated by the PDCP entity.

13. The apparatus of claim 8, wherein the PDCP entity is further configured to decipher the received at least one PDCP data unit.

14. The apparatus of claim 13, wherein the PDCP entity is further configured to remove at least one PDCP header from the received at least one PDCP data unit.