Additional time offset for random access channel preamble

By applying an additional time offset and compensation to the user equipment, the problem of eavesdropping on the timing advance command of the preamble in the random access channel is solved, thus achieving security and privacy protection in wireless communication.

CN120917829APending Publication Date: 2025-11-07NOKIA TECHNOLOGIES OY
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202380097060.7
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2023-04-11
Publication Date
2025-11-07

AI Technical Summary

Technical Problem

In wireless communication, the timing advance command of the random access channel preamble is easily intercepted by eavesdropping devices, which can expose the user's location and pose a security threat.

Method used

A user-specific additional time offset (TUSER) is applied to the transmission time of the random access channel preamble at the user equipment, and compensation is performed upon receiving a timing advance command to ensure the accuracy of uplink channel timing adjustment and prevent the timing advance value from being used by unauthorized devices.

Benefits of technology

It effectively prevents radio interface eavesdropping devices from intercepting pre-timed commands, protects user location privacy, and enhances communication security.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120917829A_ABST
    Figure CN120917829A_ABST
Patent Text Reader

Abstract

Disclosed is a method comprising: applying an additional time offset to a transmission time of a random access channel preamble, where the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmitting a random access channel preamble to the radio access network node according to the transmission time to which the additional time offset is applied; receiving a random access response from the radio access network node in response to transmitting the random access channel preamble, where the random access response comprises a timing advance command; determining a first uplink channel timing adjustment based on the timing advance command by compensating for an additional time offset applied to the transmission of the random access channel preamble; and transmitting a message to the radio access network node by applying the first uplink channel timing adjustment compensated for the additional time offset.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The following example embodiments relate to wireless communication. Background Technology

[0002] In wireless communication, there is a desire to improve communication security and privacy. Summary of the Invention

[0003] The scope of protection sought by the various exemplary embodiments is set forth in the independent claims. Exemplary embodiments and features (if any) described in this specification that do not fall within the scope of the independent claims should be interpreted as examples useful for understanding the various embodiments.

[0004] According to one aspect, an apparatus is provided, including at least one processor and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus to at least: apply an additional time offset to the transmission time of a random access channel preamble, wherein the additional time offset is different from the timing corresponding to a downlink channel timing adjustment; transmit the random access channel preamble to a radio access network node according to the transmission time to which the additional time offset is applied; receive a random access response from the radio access network node in response to the transmission of the random access channel preamble, wherein the random access response includes a timing advance command; determine a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to the transmission of the random access channel preamble; and transmit a message to the radio access network node by applying the first uplink channel timing adjustment with the compensated additional time offset.

[0005] According to another aspect, an apparatus is provided, comprising: means for applying an additional time offset to the transmission time of a random access channel preamble, wherein the additional time offset is different from the timing corresponding to a downlink channel timing adjustment; means for transmitting the random access channel preamble to a radio access network node according to the transmission time to which the additional time offset is applied; means for receiving a random access response from the radio access network node in response to the transmission of the random access channel preamble, wherein the random access response includes a timing advance command; means for determining a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to the transmission of the random access channel preamble; and means for transmitting a message to the radio access network node by applying the first uplink channel timing adjustment with the compensated additional time offset.

[0006] According to another aspect, there is provided a method comprising: applying an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmitting the random access channel preamble to a radio access network node in accordance with the transmission time to which the additional time offset is applied; receiving a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command; determining a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmitting the random access channel preamble; and transmitting a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

[0007] According to another aspect, there is provided a computer program comprising instructions which, when executed by an apparatus, cause the apparatus to perform at least the following: applying an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmitting the random access channel preamble to a radio access network node in accordance with the transmission time to which the additional time offset is applied; receiving a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command; determining a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmitting the random access channel preamble; and transmitting a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

[0008] According to another aspect, there is provided a computer readable medium comprising program instructions which, when executed by an apparatus, cause the apparatus to perform at least the following: applying an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmitting the random access channel preamble to a radio access network node in accordance with the transmission time to which the additional time offset is applied; receiving a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command; determining a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmitting the random access channel preamble; and transmitting a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

[0009] According to another aspect, there is provided a non-transitory computer- readable medium comprising program instructions that, when executed by an apparatus, cause the apparatus to perform at least the following: applying an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmitting, to a radio access network node, the random access channel preamble in accordance with the transmission time to which the additional time offset is applied; receiving, from the radio access network node, a random access response in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command; determining, based on the timing advance command, a first uplink channel timing adjustment by compensating for the additional time offset applied to transmitting the random access channel preamble; and transmitting, to the radio access network node, a message by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

[0010] According to another aspect, there is provided an apparatus comprising at least one processor and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus to at least: receive, from a user equipment, a random access channel preamble, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determine, based on the random access channel preamble, a timing advance command for the user equipment; transmit, to the user equipment, a random access response in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and receive, from the user equipment, a message, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

[0011] According to another aspect, there is provided an apparatus comprising: means for receiving, from a user equipment, a random access channel preamble, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; means for determining, based on the random access channel preamble, a timing advance command for the user equipment; means for transmitting, to the user equipment, a random access response in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and means for receiving, from the user equipment, a message, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

[0012] According to another aspect, there is provided a method comprising: receiving a random access channel preamble from a user equipment, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determining a timing advance command for the user equipment based on the random access channel preamble; transmitting a random access response to the user equipment in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and receiving a message from the user equipment, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

[0013] According to another aspect, there is provided a computer program comprising instructions which, when executed by an apparatus, cause the apparatus to perform at least the following: receiving a random access channel preamble from a user equipment, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determining a timing advance command for the user equipment based on the random access channel preamble; transmitting a random access response to the user equipment in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and receiving a message from the user equipment, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

[0014] According to another aspect, there is provided a computer program comprising instructions which, when executed by an apparatus, cause the apparatus to perform at least the following: receiving a random access channel preamble from a user equipment, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determining a timing advance command for the user equipment based on the random access channel preamble; transmitting a random access response to the user equipment in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and receiving a message from the user equipment, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

[0015] According to another aspect, there is provided a non-transitory computer- readable medium comprising program instructions that, when executed by an apparatus, cause the apparatus to perform at least the following: receive, from a user equipment, a random access channel preamble, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determine, based on the random access channel preamble, a timing advance command for the user equipment; transmit, to the user equipment, a random access response in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and receive, from the user equipment, a message, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to the transmission of the random access channel preamble.

[0016] LIST OF DRAWINGS In the following, various example embodiments will be described in more detail by referring to the attached drawings, in which Figure 1 An example of a wireless communication network is shown; Figure 2A And Figure 2B Timing advance is shown; Figure 3 Random access response interception scenario is shown; Figure 4A And Figure 4B Example of additional time offset is shown; Figure 5A Random access response interception scenario is shown; Figure 5B Random access response interception scenario is shown; Figure 5C Random access response interception scenario is shown; Figure 6 Flowchart is shown; Figure 7 Flowchart is shown; Figure 8 Flowchart is shown; Figure 9 Flowchart is shown; Figure 10 Flowchart is shown; Figure 11 Flowchart is shown; Figure 12 Flowchart is shown; Figure 13 Flowchart is shown; Figure 14 Flowchart is shown; Figure 15 Signal flow diagram is shown; Figure 16 An example of possible motion patterns caused by additional time offsets is shown; Figure 17 An example of a device is shown; and Figure 18 An example of a device is shown. DETAILED DESCRIPTION

[0017] The following embodiments are exemplary. It should be noted that the description can make reference to "an" or "one" embodiment in several locations. This does not necessarily mean that each reference must be to the same embodiment, or that a particular feature only applies to a single embodiment. Single features or acts in different embodiments can also be combined to provide other embodiments.

[0018] Some example embodiments described herein can be implemented in a wireless communication network comprising a radio access network based on one or more of the following radio access technologies: Global System for Mobile Communications (GSM) or any other second generation radio access technology, Universal Mobile Telecommunication System (UMTS, 3G) based on Basic Wideband Code Division Multiple Access (W-CDMA), High-Speed Packet Access (HSPA), Long Term Evolution (LTE), LTE-Advanced, Fourth Generation (4G), Fifth Generation (5G), 5G New Radio (NR), Advanced 5G (i.e., 3GPP NR Rel-18 and beyond), or Sixth Generation (6G). Some examples of a radio access network include a Universal Mobile Telecommunication System (UMTS) Radio Access Network (UTRAN), an Evolved Universal Terrestrial Radio Access Network (E-UTRAN), or a Next Generation Radio Access Network (NG-RAN). The wireless communication network can also comprise a core network, and some example embodiments can also be applied to network functions of the core network.

[0019] It should be noted that the embodiments are not limited to the wireless communication network given as an example, but a person skilled in the art can apply the solution to other wireless communication networks or systems provided with the necessary characteristics. For example, some example embodiments can also be applied to a communication system based on IEEE 802.11 specifications or to a communication system based on IEEE 802.15 specifications.

[0020] Figure 1 An example of a simplified wireless communication network showing some physical and logical entities is depicted. Figure 1 The connections shown can be physical or logical. It is apparent to a person skilled in the art that the wireless communication network can also comprise other physical and logical entities than those shown. Figure 1 The connections shown can be physical or logical. It is apparent to a person skilled in the art that the wireless communication network can also comprise other physical and logical entities than those shown.

[0021] However, the example embodiments described herein are not limited to the wireless communication network given as an example, but a person skilled in the art can apply the embodiments described herein to other wireless communication networks having the necessary characteristics.

[0022] Figure 1 The example wireless communication network shown in Fig. 1 comprises an access network, such as a Radio Access Network (RAN), and a core network 110.

[0023] Figure 1 A user equipment (UE) 100, 102 is shown configured for wireless connection with an access node (AN) 104 of the access network on one or more communication channels in a radio cell. The AN 104 can be an evolved Node B (abbreviated as eNB or eNodeB) or a next generation Node B (abbreviated as gNB or gNodeB) providing the radio cell. The wireless connection (e.g. radio link) from the UE to the access node 104 can be referred to as uplink (UL) or reverse link, and the wireless connection (e.g. radio link) from the access node to the UE can be referred to as downlink (DL) or forward link. The UE 100 can also communicate directly with the UE 102 via a wireless connection, commonly referred to as sidelink (SL), and vice versa. It should be appreciated that the access node 104 or its functionality can be implemented by using any entity, host, server or access point, etc. suitable for providing such functionality.

[0024] The access network can comprise more than one access node, in which case the access nodes can also be configured to communicate with each other, either wired or wirelessly. These links between access nodes can be used for transmitting and receiving control plane signaling, and also for routing data from one access node to another.

[0025] The access node can comprise a computing device configured to control radio resources of the access node. The access node can also be referred to as a base station, base transceiver station (BTS), access point, cell site, radio access node, or any other type of node capable of wireless connection with UEs, e.g. the UEs 100, 102. The access node can comprise or be coupled to a transceiver. A connection can be provided from the transceiver of the access node to an antenna unit, which establishes bidirectional radio links to the UEs 100, 102. The antenna unit can comprise an antenna or antenna element, or a plurality of antennas or antenna elements.

[0026] The access nodes 104 can also be connected to a core network (CN) 110. The core network 110 can include an evolved packet core (EPC) network and / or a 5thgeneration core network (5GC). The EPC can include network entities such as a serving gateway (S-GW for routing and forwarding data packets), a packet data network gateway (P-GW) for providing connectivity to external packet data networks, and a mobility management entity (MME). The 5GC can include network functions such as a user plane function (UPF), an access and mobility management function (AMF), and a location management function (LMF).

[0027] The core network 110 can also be able to communicate with one or more external networks 113, such as a public switched telephone network or the Internet, or utilize services provided by them. For example, in a 5G wireless communication network, the UPF of the core network 110 can be configured to communicate with external data networks via an N6 interface. In an LTE wireless communication network, the P-GW of the core network 110 can be configured to communicate with external data networks.

[0028] The UEs 100, 102 shown are one type of apparatus to which the resource allocation and assignment on the air interface can be allocated and assigned. The UEs 100, 102 can also be referred to as wireless communication devices, subscriber units, mobile stations, remote terminals, access terminals, user terminals, terminal devices, or user equipment (to name a few). The UEs can be computing devices operating with or without a subscriber identification module (SIM), including but not limited to the following types of computing devices: mobile phones, smartphones, personal digital assistants (PDAs), cell phones, computing devices including wireless modems (e.g., alarms or measurement devices, etc.), laptop computers, desktop computers, tablet computers, game consoles, notebooks, multimedia devices, low capability (RedCap) devices, wearable devices with radio components (e.g., watches, earpieces, or glasses), sensors including wireless modems, or any computing device including a wireless modem integrated in a vehicle.

[0029] It should be appreciated that a UE can also be an almost exclusive uplink only device, an example of which can be a camera or video camera loading images or video clips to a network. The UE can also be a device having the capability to operate in an Internet of Things (IoT) network, which is a scenario where objects can be provided with the ability to transfer data over a network without requiring human-to-human or human-to-computer interaction capabilities. The UE can also leverage the cloud. In some applications, computations can be performed in the cloud or in another UE.

[0030] The wireless communication network can also be able to support the use of cloud services, for example, at least part of the core network operations can be carried out as a cloud service (this is referred to as network as a service, NaaS, in 3GPP terminology). Figure 1The communication system can also include a central controlling entity, etc., e.g., providing facilities for wireless communication networks of different operators to cooperate, e.g., in spectrum sharing.

[0031] 5G enables the use of multiple input - multiple output (MIMO) antennas in access nodes 104 and / or UEs 100, 102, much more base stations or access nodes than LTE networks (so-called small cell concept), including macro sites operating in co-operation with smaller stations and according to the services needs, use cases and / or available frequency spectrum, employing a variety of radio technologies. 5G wireless communication networks can support a wide range of use cases and related applications, including video streaming, augmented reality, different ways of data sharing and various forms of machine type applications (such as (massive) machine-type communications (mMTC)), including vehicle safety, different sensors, and real-time control.

[0032] In 5G wireless communication networks, access nodes and / or UEs can have multiple radio interfaces, i.e., sub-6 GHz, cmWave and mmWave, and can also be integrated with existing legacy radio access technologies, such as LTE. The integration with LTE, for example, can be implemented as a system where macro coverage can be provided by LTE and 5G radio interface access can come from small base stations aggregated to LTE. In other words, 5G wireless communication networks can support both inter-RAT operability (such as LTE-5G) and inter-RI operability (inter-radio interface operability, such as sub-6 GHz-cmWave-mmWave). One of the concepts considered for use in 5G wireless communication networks can be network slicing, where multiple independent and dedicated virtual sub-networks (network instances) can be created within the same infrastructure to run services with different requirements on latency, reliability, throughput and mobility.

[0033] In some example embodiments, an access node (e.g., access node 104) can comprise a radio unit (RU) including a radio transceiver (TRX), i.e., transmitter (Tx) and receiver (Rx), one or more distributed units (DU) 105, which can be used for so-called layer 1 (LI) processing and real-time layer 2 (L2) processing, and a central unit (CU) 108 (also referred to as a centralized unit), which can be used for non-real-time L2 and layer 3 (L3) processing. The CU 108 can be connected to one or more DUs 105, e.g., via an Fl interface. Such an embodiment of an access node can enable centralization of the CU with respect to the cell site and the DUs, which can be more distributed and can even remain at the cell site. The CU and the DUs together can also be referred to as a baseband or baseband unit (BBU). The CU and the DUs can also be included in a radio access point (RAP).

[0034] The CU 108 can be a logical node hosting the radio resource control (RRC), service data adaptation protocol (SDAP), and / or packet data convergence protocol (PDCP) of the NR protocol stack for the access node. The DU 105 can be a logical node hosting the radio link control (RLC), medium access control (MAC), and / or physical (PHY) layer of the NR protocol stack for the access node. Operation of the DU can be controlled at least in part by the CU. It should also be understood that the distribution of functions between the DU 105 and the CU 108 can vary depending on the implementation. The CU can include a control plane (CU-CP), which can be a logical node hosting the RRC and control plane portion of the PDCP protocol of the NR protocol stack for the access node. The CU can also include a user plane (CU-UP), which can be a logical node hosting the user plane portion of the PDCP protocol and the SDAP protocol of the CU for the access node.

[0035] The cloud computing system can also be used to provide the CU 108 and / or the DU 105. The CU provided by the cloud computing system can be referred to as a virtualized CU (vCU). In addition to the vCU, there can also be a virtualized DU (vDU) provided by the cloud computing system. Further, there can also be a combination in which the DU can be implemented on a so-called bare-metal solution, such as an application-specific integrated circuit (ASIC) or customer-specific standard product (CSSP) system on a chip (SoC).

[0036] The edge cloud can be brought into the access network (e.g., RAN) by utilizing network function virtualization (NFV) and software-defined networking (SDN). Using the edge cloud can mean that access node operations are to be executed at least partly in a computing system that is operably coupled to a remote radio head (RRH) or radio unit (RU) of the access node. It can also be possible that the access node operations can be executed on a distributed computing system or cloud computing system located at the access node. Application of the cloud RAN architecture enables RAN real-time functions to be carried out at the access network (e.g., in the DU 105) and non-real-time functions to be executed in a centralized manner (e.g., in the CU 108).

[0037] It should also be understood that the distribution of functions between the core network operations and the access node operations can be different, or even non-existent, in future wireless communication networks compared to LTE or 5G. Some other technology advancements that can be used include big data and all-IP, which can change the way wireless communication networks are built and managed. The 5G (or new radio (NR)) wireless communication network can support multiple tiers, where a multi-access edge computing (MEC) server can be placed between the core network 110 and the access node 104. It should be understood that MEC can also be applied to LTE wireless communication networks.

[0038] A 5G wireless communication network ("5G network") can also include non-terrestrial communication networks, such as satellite communication networks, to enhance or complement the coverage of the 5G radio access network. For example, satellite communication can support data transfer between the 5G radio access network and the core network, thereby enabling a wider network coverage. Possible use cases can be to provide service continuity for machine-to-machine (M2M) or Internet of Things (IoT) devices or for passengers on board of vehicles, or to ensure service availability for critical communications and future railway / maritime / aeronautical communications. Satellite communication can utilize geostationary Earth orbit (GEO) satellite systems, but also low Earth orbit (LEO) satellite systems, in particular mega-constellations (systems in which several hundred (nano)satellites are deployed). A given satellite 106 in a mega-constellation can cover several satellite-enabled network entities that create terrestrial cells. Terrestrial cells can be created by terrestrial relay access nodes or by access nodes 104 located on the ground or in satellites.

[0039] It will be apparent to those skilled in the art that, Figure 1 The access nodes 104 depicted are merely examples of a part of an access network (e.g., a radio access network), and in practice, the access network can comprise multiple access nodes, the UEs 100, 102 can access multiple radio cells, and the access network can further comprise other apparatuses, such as physical layer relay access nodes or other entities. At least one of the access nodes can be a home eNodeB or a home gNodeB. A home gNodeB or a home eNodeB is a kind of access node that can be used to provide indoor coverage within a home, office, or other indoor environment.

[0040] Additionally, in a geographical area of an access network (e.g., a radio access network), multiple radio cells of different kinds can be provided as well as multiple radio cells. A radio cell can be a macro cell (or umbrella cell), which can be a large cell with a diameter of up to several tens of kilometers, or smaller cells, such as micro cells, femto cells, or pico cells. Figure 1 The access node(s) can provide any kind of these cells. A cellular radio network can be implemented as a multi-tiered access network comprising several kinds of radio cells. In a multi-tiered access network, one access node can provide one or more kinds of radio cells, so multiple access nodes can be needed to provide such a multi-tiered access network.

[0041] To meet the demand for increased access network performance, the concept of a "plug and play" access node can be introduced. In addition to a home eNodeB or a home gNodeB, an access network capable of using "plug and play" access nodes can also include a home nodeB gateway or HNB-GW (not depicted). Figure 1A HNB-GW that can be installed within an operator's access network can aggregate traffic from a large number of home eNodeBs or home gNodeBs back to the operator's core network.

[0042] Due to propagation delays associated with wireless communications, the UE 100, 102 can need proper uplink channel timing adjustment to ensure its uplink transmissions are properly received by the RAN node 104 (base station). For example, a UE that is far away from the RAN node can experience greater propagation delays compared to another UE that is closer to the RAN node.

[0043] Figure 2A and Figure 2B The concept of timing advance is illustrated.

[0044] In Figure 2A , there is no synchronization between the downlink (DL) frame 201 and the uplink (UL) frame 202.

[0045] In Figure 2B , synchronization between the DL frame 201 and the UL frame 202 is achieved by applying a timing advance (TA) 200 to the UL frame 202. The timing advance 200 applied by the UE can also be referred to as uplink channel timing adjustment. Downlink, uplink, and sidelink transmissions can be organized into radio frames having a 10 ms duration, where a given radio frame includes ten 1 ms subframes.

[0046] The timing advance 200 is a negative offset at the UE between the start of the received DL frame 201 and the transmitted UL frame 202. The timing advance can be used to account for the propagation delay between the UE and the RAN node. This offset can be used to ensure that the DL and UL frames are synchronized at the RAN node (in the time domain). Thus, the UE can adjust its uplink transmissions by advancing the sending of uplink symbols by an amount of time defined by the timing advance 200. In other words, the number i of uplink frames used for transmission from the UE starts before the start of the corresponding downlink frame at the UE according to the timing advance 200 computed by the UE.

[0047] In current 5G NR specifications, TA adjustment consists of two parts: 1) network signaling of TA adjustments (e.g., timing advance commands) to the UE, and 2) autonomous UL transmission timing adjustment by the UE. In other words, once the UE has been assigned a TA value by the network (e.g., via a timing advance command), the UE can track its DL timing and adjust the UL transmission timing to within a set threshold.

[0048] Currently, there are two ways to deliver TA adjustment to the UE: 1) as part of the random access procedure, via the random access response (RAR), or 2) via a MAC control element (MAC CE).

[0049] For example, a random access procedure can be needed in the following cases: initial access from RRC idle state, RRC connection re-establishment procedure, handover procedure, arrival of downlink or uplink data during RRC connected when the uplink synchronization state is “non-synchronized”, transition from RRC inactive state (e.g., in 5G), to establish time alignment at secondary cell (SCell) addition (e.g., in 5G), request for other system information (SI) (e.g., in 5G), and / or beam failure recovery (in 5G).

[0050] Whether the random access procedure is contention-based random access (CBRA) or contention-free random access (CFRA) has no impact on the content of the timing advance command.

[0051] In the first option (i.e., delivering TA adjustment via RAR), after achieving downlink channel synchronization based on the synchronization signals (such as primary synchronization signal (PSS) and secondary synchronization signal (SSS)) received from the RAN node, the UE can transmit a random access channel (RACH) preamble to the RAN node. The RACH preamble is transmitted without timing advance. The RACH preamble can also be referred to as Msg1. The RACH preamble can be transmitted at time where can be calculated based on the downlink channel timing synchronization. Then, the RAN node can calculate the required timing advance (TA) based on the guard period and the preamble type of the RACH preamble, and signal this value to the UE via the random access response including the timing advance command. The random access response can also be referred to as Msg2. The UE can use the TA index value from the timing advance command for uplink channel timing adjustment. The UE can apply the timing advance value it extracts from the RAR to synchronize its subsequent one or more uplink transmissions. In case the UE receives a timing advance update (e.g., MAC CE) after the random access procedure, the UE can apply the timing advance value it extracts from the MAC CE to its next uplink transmission.

[0052] For example, the timing advance 200 can be calculated as:

[0053] is the calculated timing advance between uplink and downlink to be applied by the UE.

[0054] It is a timing advance value provided by the RAN node (e.g., provided in the timing advance command).

[0055] It can be a fixed offset value that varies according to different frequency bands and subcarrier spacing.

[0056] It is a basic unit of time, such as 0.509 ns in 5G.

[0057] For example, a RAN node can calculate the timing advance value as:

[0058] This is the index value that indicates the step size for adjustment. In 5G, RAR... .

[0059] μ is a constant related to the subcarrier spacing (SCS).

[0060] In the second option (i.e., TA adjustment delivered via MAC CE), TA estimation is performed at the RAN node based on one or more reference signals, such as demodulation reference signals (DMRS) or sounding reference signals (SRS) transmitted from the UE. As described above, the UE adjusts the UL transmission timing based on RAR during the random access procedure. Once the initial connection is complete, the UE can adjust the UL transmission timing in advance based on MAC CE timing.

[0061] For example, a RAN node can calculate the updated timing advance value for a MAC CE timing advance command as follows:

[0062] Refers to the previous timing advance value provided in the RAR or previous MAC CE.

[0063] In 5G, MAC CE This was in turn compensated. The capabilities. Regarding 5G, Corresponding to A distance of meters.

[0064] For example, This could correspond to 2.44 meters in a round trip or 1.22 meters in a one-way trip.

[0065] Figure 3 The RAR interception scenario is shown. Figure 3 It can be understood as depicting Figure 1 It is part of the wireless communication network, but has greater accuracy compared to RAR interception scenarios. For example, Figure 3The RAN node 304 of Figure 1 may correspond to the access node 104 of Figure 3 and the UE 300 of Figure 1 may correspond to the UE 100 of

[0066] After the RAN node 304 receives the RACH preamble 321 from the UE 300, the timing advance command in the RAR 322 is provided in clear text, as cyphering / encryption cannot be applied at this stage. Thus, as illustrated in Figure 3 , there is a security threat, where a radio interface eavesdropping device 302 can intercept the RAR 322 including the timing advance command and use this information against the UE 300 or the user 301 of the UE 300. For example, as the timing advance is proportional to the distance between the UE 300 and the antenna of the RAN node 304, the timing advance can be used to locate the UE 300 (e.g. by using the extended cell identification (E-CID) technique). For example, this can be considered as a security breach in sensitive network applications such as public safety, government, military, security or 5G dedicated network concepts. Thus, there is a need for a solution that is able to prevent exploiting the above-mentioned security breach.

[0067] Some example embodiments are described below using principles and terminology of the 5G radio access technology without limiting the example embodiments to the 5G radio access technology. For example, some example embodiments can also be applied to LTE.

[0068] Some example embodiments can solve the above-mentioned problem by adding a user-specific time offset (denoted as T USER ) at the UE before transmitting the RACH preamble. This user-specific time offset can be considered as an additional time offset different from the timing corresponding to the downlink channel timing adjustment.

[0069] The additional time offset T USER may be a positive or negative offset and it can be stored in an internal memory of the UE or defined by the user. The network (e.g. the RAN node) can not be aware of the application of this additional time offset at the UE, which means that the timing advance value provided in the RAR also covers the additional time offset applied at the UE. In other words, the RAN node is not aware of the additional time offset when calculating the timing advance value for the UE. Thus, the RAN node can perform a standard random access procedure.

[0070] The additional time offset T USER may be applied to the transmission time of the RACH preamble This makes the RACH preamble time Transmission at that point. As mentioned above, this can be calculated based on standard downlink channel timing synchronization. .

[0071] At the UE, the additional time offset can be compensated. To correct the TA value received from RAR. For example, the corresponding index value. N USER It can be calculated as:

[0072] Then, N USER A reversed sign can be added to determine the correct timing advance (i.e., uplink channel timing adjustment):

[0073] By compensating for the additional time offset as described above, appropriate uplink channel timing adjustments can be provided at the UE.

[0074] Figure 4A and Figure 4B Additional time offset is shown T USER Example of a 404 error.

[0075] exist Figure 4A In this case, there is no synchronization between downlink frame 401 and uplink frame 402, but the UE will add a time offset of 404 (i.e. T USER The additional time offset is applied to the transmission time of uplink frame 402 (i.e., the RACH preamble). In this example, as a result of applying the additional time offset, the RACH preamble is transmitted at time 405, whereas without the additional time offset, the RACH preamble would have been transmitted at time 406. In other words, in this example, the additional time offset is similar to a timing advance applied to the transmission of the RACH preamble. Without the additional time offset, no timing advance would be applied to the transmission of the RACH preamble because the RAN node has not yet calculated the timing advance value required to synchronize downlink frame 401 and uplink frame 402.

[0076] exist Figure 4BIn the RAN node, after calculating the timing advance value based on the RACH preamble and providing it to the UE in the timing advance command, the UE applies uplink channel timing adjustment to synchronize downlink frame 401 and uplink frame 402. The UE determines the uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset 404 applied to transmit the RACH preamble. Since the RAN node is unaware of the additional time offset 404 applied at the UE, the timing advance command will result in an incorrect timing advance 407. However, the UE can determine the correct timing advance 400 by compensating for the additional time offset 404, thereby ensuring correct uplink channel timing adjustment.

[0077] Figure 5A An example of a RAR interception scenario in which the example embodiment is applied is shown. Figure 5A It can be understood as depicting Figure 1 It is part of the wireless communication network, but has greater accuracy compared to RAR interception scenarios. For example, Figure 5A RAN node 504 can correspond to Figure 1 Access node 104, and Figure 5A The UE 500 can correspond to Figure 1 UE 100.

[0078] exist Figure 5A In the middle, the UE 500 at the actual position (x, y, z) will have an additional time offset (i.e. T USER The transmission time of the RACH preamble 521 is applied, and the UE 500 transmits the RACH preamble 521 to the RAN node 504 according to the transmission time with an additional time offset applied.

[0079] RAN node 504 performs the standard random access procedure, that is, (without knowing the additional time offset) determines the timing advance value for UE 500 based on RACH preamble 521, and RAN node 504 transmits the timing advance command to UE 500 in plaintext in the random access response 522, because encryption cannot be applied at this stage.

[0080] The radio interface eavesdropping device 502 can intercept the RAR 522 including the timing advance command and use this information to estimate the location of the UE 500 or the user 501 of the UE 500. However, since the eavesdropper 502 does not know the additional time offset that is applied at the UE 500, the eavesdropper cannot determine the true location (x, y, z) of the UE 500. By applying the additional time offset, the false location (x’, y’, z’) derived from the TA value by the eavesdropper 502 (e.g., in E-CID) can appear to move away from the true location (x, y, z) of the UE 500. Thus, if the RAR 522 with the TA value in clear form has been intercepted, the false location (x’, y’, z’) can be provided to the unauthorized recipient 502 instead of the true location (x, y, z).

[0081] The UE 500 determines the uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset that was applied to the transmitted RACH preamble. The UE 500 can then continue the connection setup procedure. Once the UE authentication is confirmed, cyphering / encryption can be applied to other uplink and downlink transmissions.

[0082] Thus, the correct uplink channel timing adjustment is ensured while also mitigating the threat from the eavesdropper 502. In this way, the problem of providing the TA value in clear form in the RAR 522 can be addressed.

[0083] Figure 5B An example of dilution of RAR TA accuracy is shown when one RAN node 504 is used as reference. Figure 5B An example of possible location estimates of the UE 500 that can be derived from unauthorized interception of RAR TAs from one RAN node 504 used as reference is shown. The UE 500 can use different T USER The setting, or the T USER The mode can be standardized.

[0084] Figure 5C An example of dilution of RAR TA accuracy is shown when two RAN nodes 504, 504A are used as reference. Figure 5C An example of possible location estimates of the UE 500 that can be derived from unauthorized interception of RAR TAs from two RAN nodes 504, 504A used as reference is shown. From Figure 5C As can be seen from the above, if the intercepted TA values from two RAN nodes 504, 504A used as reference are jointly evaluated, the number of potential UE locations is much larger thanFigure 5B Much higher.

[0085] In Figure 5B And Figure 5C In the RAN nodes 504, 504A, the beam size can reduce the number of potential UE locations. However, the beams can not be smaller than 7-14 degrees, as such positioning cannot be accurate, thus providing sufficient protection.

[0086] Figure 6 A flowchart illustrating an example embodiment of a method according to the method performed by the apparatus 1700 is shown. The apparatus 1700 can be or comprise the user equipment 100, 500 or be comprised in the user equipment 100, 500, for example.

[0087] Referring to Figure 6 In block 601, the apparatus applies an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment. The additional time offset refers to the above described T USER .

[0088] It should be noted that before transmitting the RACH preamble, it can be synchronized (e.g., based on PSS and / or SSS) with the downlink channel. However, the additional time offset is different from this synchronization.

[0089] In block 602, the apparatus transmits the random access channel preamble to a radio access network node 104, 504 according to the transmission time to which the additional time offset is applied.

[0090] In block 603, the apparatus receives, from the radio access network node, a random access response in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command.

[0091] In block 604, the apparatus determines a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to the transmission of the random access channel preamble.

[0092] For example, as described above, the first uplink channel timing adjustment can be determined as:

[0093] In block 605, the apparatus transmits a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset. For example, the message can be an RRC setup request message (i.e., Msg3 of the random access procedure) or any other message.

[0094] Figure 7A flowchart illustrating an example embodiment of a method according to the method performed by the apparatus 1700 is shown. For example, the apparatus 1700 can be or comprise the user equipment 100, 500 or be comprised in the user equipment 100, 500.

[0095] Reference is made to Figure 7 In block 701, the apparatus receives a user input indicating an additional time offset. The additional time offset refers to the above-mentioned T USER .

[0096] For example, if the position of the UE 500 derived from the TA value would appear to be moved away by a distance of e.g. 30 meters (i.e. an additional time offset of approximately 0.1 μβ), a safety-, secrecy- or privacy-oriented user 501 can feel more comfortable. 30 meters also corresponds to the rounded 25 T A i.e. one way. Thus, the user 501 can set a distance offset (e.g. 30 meters) at the UE 500, which can be converted to a corresponding time domain value (or expressed in TA steps) for applying an additional time offset corresponding to the distance offset desired by the user.

[0097] In block 702, the apparatus applies the additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment.

[0098] In block 703, the apparatus transmits, to a radio access network node 104, 504, the random access channel preamble according to the transmission time to which the additional time offset is applied.

[0099] In block 704, the apparatus receives, from the radio access network node, a random access response in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command.

[0100] Since the RAN node is not aware of the additional time offset, it can interpret the RACH preamble as originating from a distance extended by the distance offset (e.g. 30 meters) set by the user. Thus, the TA value provided in the RAR timing advance command can comprise the additional time offset (e.g. 25 T A In other words, the TA value provided in the RAR is incorrect and its interception cannot harm the apparatus (UE) or its user.

[0101] In block 705, the apparatus determines a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to the transmission of the random access channel preamble.

[0102] For example, if the additional time offset is 25T A In case the apparatus can use in the following equation for determining the appropriate uplink channel timing adjustment:

[0103] In block 706, the apparatus transmits a message to the radio access network node by applying the first uplink channel timing adjustment that has compensated for the additional time offset. For example, the message can be an RRC setup request message (i.e. Msg3 of the random access procedure) or any other message.

[0104] Figure 8 A flowchart illustrating an example embodiment of a method according to the method performed by the apparatus 1700 is shown. For example, the apparatus 1700 can be or comprise the user equipment 100, 500 or be comprised in the user equipment 100, 500.

[0105] With reference to Figure 8 In block 801, the apparatus can receive a user input indicating an additional time offset. Alternatively, the additional time offset can be predefined or selected by the apparatus. The additional time offset refers to the above-mentioned .

[0106] In block 802, the apparatus applies the additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment.

[0107] In block 803, the apparatus transmits the random access channel preamble to the radio access network node 104, 504 in accordance with the transmission time to which the additional time offset is applied.

[0108] In block 804, the apparatus receives a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command.

[0109] In block 805, the apparatus determines a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmit the random access channel preamble.

[0110] For example, as described above, the first uplink channel timing adjustment can be determined as:

[0111] In block 806, the apparatus transmits a message to the radio access network node by applying the first uplink channel timing adjustment that has compensated for the additional time offset. For example, the message can be an RRC setup request message (i.e. Msg3 of the random access procedure) or any other message.

[0112] In block 807, the apparatus transmits, to the radio access network node, an indication indicating the additional time offset. The indication can be transmitted in a ciphered message to prevent an eavesdropper from learning the additional time offset applied by the apparatus.

[0113] For example, after applying cyphering / encryption, the apparatus can inform the radio access network node about the applied value or N USER value as part of the UE capability information, and thus the radio access network node can know the additional time offset applied at the apparatus. The radio access network node can then compensate for the additional time offset, e.g., in TA-based positioning techniques, e.g., E-CID. In this case, the additional time offset can have no impact on legacy positioning techniques or emergency positioning techniques. For example, in case of a lawful connection or emergency connection or positioning, the may be compensated for at the RAN node. Furthermore, based on the type of connection requested by the user, the may also be compensated for before transmitting the RACH preamble.

[0114] Figure 9 A flowchart illustrating an example embodiment of a method according to the method performed by the apparatus 1700 is shown. The apparatus 1700 can be or comprise the user equipment 100, 500 or be comprised in the user equipment 100, 500, for example.

[0115] With reference to Figure 9 , in block 901, the apparatus can receive a user input indicating an additional time offset. Alternatively, the additional time offset can be predefined or selected by the apparatus. The additional time offset refers to the above-described .

[0116] In block 902, the apparatus applies the additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment.

[0117] In block 903, the apparatus transmits, to a radio access network node 104, 504, the random access channel preamble according to the transmission time to which the additional time offset is applied.

[0118] In block 904, the apparatus receives, from the radio access network node, a random access response in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command.

[0119] In block 905, the apparatus determines a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to the transmission of the random access channel preamble.

[0120] For example, as mentioned above, the first uplink channel timing adjustment can be determined as:

[0121] In block 906, the apparatus transmits a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset. For example, the message can be an RRC setup request message (i.e. Msg3 of the random access procedure) or any other message.

[0122] In block 907, the apparatus transmits an encrypted message to the radio access network node by applying the first uplink channel timing adjustment.

[0123] In other words, after applying the encryption, the apparatus can still use the same value. In this case, the radio access network node can be provided with deliberately incorrect TA data to enhance security, confidentiality and privacy. Since no correct TA data is provided to the network, this means that TA-based positioning techniques can not be accurate. This can be beneficial, for example, in case the apparatus needs to establish a wireless connection in a less trusted standard (e.g. LTE), or when there is a risk that the network is compromised, or when the TA data can be used to target the user.

[0124] Figure 10 A flowchart illustrating an example embodiment of a method according to the method performed by the apparatus 1700 is shown. For example, the apparatus 1700 can be the user equipment 100, 500 or comprise or be comprised in the user equipment 100, 500.

[0125] With reference to Figure 10 In block 1001, the apparatus can receive a user input indicating an additional time offset. Alternatively, the additional time offset can be predefined or selected by the apparatus. The additional time offset refers to the above-mentioned .

[0126] In block 1002, the apparatus applies the additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment.

[0127] In block 1003, the apparatus transmits the random access channel preamble to the radio access network node 104, 504 according to the transmission time to which the additional time offset has been applied.

[0128] In block 1004, the apparatus receives a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command.

[0129] In block 1005, the apparatus determines the first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmit the random access channel preamble.

[0130] For example, as mentioned above, the first uplink channel timing adjustment can be determined as:

[0131] In block 1006, the apparatus transmits a message to the radio access network node by applying the first uplink channel timing adjustment that has compensated for the additional time offset. For example, the message can be an RRC setup request message (i.e., Msg3 of the random access procedure) or any other message.

[0132] In block 1007, the apparatus modifies the value of the additional time offset according to a predefined pattern. For example, the predefined pattern can be selected from a plurality of predefined patterns.

[0133] In other words, after applying the encryption, the apparatus can modify the value or value according to a predefined pattern. In this case, the radio access network node can be provided with deliberately incorrect data to enhance security, confidentiality, and privacy.

[0134] For example, the predefined pattern can be constructed from an initial value provided or requested by the user and subsequent modifications of the initial value.

[0135] As a non-limiting example, the initial value can correspond to a distance offset of 30 meters, and after applying the encryption, the value can be decreased by 10% (3 meters) per second according to the predefined pattern until . In this case, 10 MAC CE timing advance updates can be required until .

[0136] The pattern can be different for different random access procedures, thus making it more difficult for an eavesdropper to identify the pattern.

[0137] In block 1008, the apparatus determines the second uplink channel timing adjustment based on the timing advance command or the timing advance update by compensating for the modified value of the additional time offset. For example, because the apparatus can be moving and thus can require an update of the TA, the timing advance update can be received in a MAC CE timing advance command after the random access procedure.

[0138] In block 1009, the device transmits the ciphered message to the radio access network node by applying a second uplink channel timing adjustment that has compensated the modified value of the additional time offset.

[0139] For example, the ciphered message can comprise an indication indicating a predefined pattern for modifying the value of the additional time offset. For example, after applying cyphering / encryption, the device can inform the radio access network node about the additional time offset and / or the predefined pattern used by the device as part of the UE capability information, and thus the radio access network node can know the additional time offset applied at the device. The radio access network node can then compensate for the additional time offset, e.g., in TA-based positioning techniques. In this case, the additional time offset can have no impact on legacy positioning techniques or emergency positioning techniques.

[0140] Figure 11 A flowchart illustrating an example embodiment of a method according to the method performed by the device 1700 is shown. For example, the device 1700 can be or comprise the user equipment 100, 500 or be comprised in the user equipment 100, 500.

[0141] Reference is made to Figure 11 In block 1101, the device can receive a user input indicating the additional time offset. Alternatively, the additional time offset can be predefined or selected by the device. The additional time offset refers to the above-described .

[0142] In block 1102, the device applies the additional time offset to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to the downlink channel timing adjustment.

[0143] In block 1103, the device transmits the random access channel preamble to the radio access network node 104, 504 according to the transmission time to which the additional time offset is applied.

[0144] In block 1104, the device receives a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command.

[0145] In block 1105, the device determines a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmitting the random access channel preamble.

[0146] For example, as described above, the first uplink channel timing adjustment can be determined as:

[0147] In block 1106, the apparatus transmits a message to the radio access network node by applying the first uplink channel timing adjustment that has compensated for the additional time offset. For example, the message can be an RRC setup request message (i.e., Msg3 of the random access procedure) or any other message.

[0148] In block 1107, the apparatus determines a distance between the apparatus and the radio access network node based on the timing advance command.

[0149] In block 1108, the apparatus modifies the value of the additional time offset based on the distance between the apparatus and the radio access network.

[0150] The maximum range of a RAN node (cell) can be limited by the signal power that needs to be above a minimum sensitivity level and also by the maximum supported timing advance index value that limits the cell operation range TA MAX However, based on signal power measurements, the apparatus (UE) cannot properly assess the proximity to the antenna of the RAN node, as the signal power level can depend on many factors. In this context, the apparatus (UE) can be at any distance from the antenna of the RAN node. Thus, if a positive time offset is added, it can happen that the RAN node identifies the UE as being out of TA MAX which would mean that the corresponding RACH preamble would not be processed. However, this can not be a problem, as the apparatus (UE) can repeat the random access procedure with a negative time offset .

[0151] However, once the RAR with the timing advance command is received, the apparatus can determine the distance to the RAN node based on the TA index value. Thus, based on this distance, the apparatus can apply an additional time offset value within the TA MAX range for the subsequent communication in order to ensure that the additional time offset is within the operation range of the RAN node. For example, in most security, confidentiality, and privacy oriented applications, an additional time offset between ±30m (±0.1 µs) and ±3000m (±10 µs) can be sufficient.

[0152] The modification can also be based on a predefined pattern, as described above with reference to Figure 10 . For example, the predefined pattern can be selected from a plurality of predefined patterns, in which case the pattern can be different for different random access procedures, thus making it more difficult for an eavesdropper to identify the pattern.

[0153] In block 1109, the apparatus determines a second uplink channel timing adjustment based on the timing advance command or the timing advance update by compensating the modified value of the additional time offset. For example, because the apparatus can be moving, the timing advance update can be received in a MAC CE timing advance command after the random access procedure.

[0154] In block 1110, the apparatus transmits the encrypted message to the radio access network node by applying the second uplink channel timing adjustment that has been compensated for the modified value of the additional time offset.

[0155] Figure 12 A flowchart illustrating an example embodiment of a method according to the method performed by the apparatus 1700 is shown. For example, the apparatus 1700 can be or include the user equipment 100, 500 or be included in the user equipment 100, 500.

[0156] Reference Figure 12 In block 1201, the apparatus can receive a user input indicating an additional time offset. Alternatively, the additional time offset can be predefined or selected by the apparatus. The additional time offset refers to the above-mentioned .

[0157] In block 1202, the apparatus applies the additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to the downlink channel timing adjustment.

[0158] In block 1203, the apparatus transmits the random access channel preamble to the radio access network node 104, 504 according to the transmission time to which the additional time offset is applied.

[0159] In block 1204, the apparatus receives a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command.

[0160] In block 1205, the apparatus determines a first uplink channel timing adjustment based on the timing advance command by compensating the additional time offset applied to transmit the random access channel preamble.

[0161] For example, as described above, the first uplink channel timing adjustment can be determined as:

[0162] In block 1206, the apparatus transmits a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset compensation. For example, the message can be an RRC setup request message (i.e. Msg3 of the random access procedure) or any other message.

[0163] In block 1207, the apparatus reduces or increases or maintains the value of the additional time offset.

[0164] For example, after applying the encryption, the apparatus can gradually reduce the value of the additional time offset until which corresponds to the standard timing advance. Since further communications are encrypted, eavesdropping is ineffective, and it can not be necessary to apply the additional time offset to the encrypted communications.

[0165] The value of the additional time offset can be reduced or increased such that the reduction or increase is within the supported range of timing advance updates. Depending on the initial applied value of the additional time offset, the reduction of the additional time offset until may require at least several steps. This is related to the maximum value supported by the MAC CE timing update range. If the reduction (or increase) is too fast, i.e. exceeds the supported MAC CE timing update range, the connection can be lost, and a new random access procedure with RAR can be initialized, which in turn means that the TA value provided in the RAR will be delivered in clear form, which is not desired. Thus, by gradually changing the value of the additional time offset, the RRC connection can be maintained, and the related MAC CE timing advance updates are cyphered / encrypted, which maintains the desired level of security.

[0166] Since the additional time offset is applied to the transmission time of the RACH preamble, any security breach related to providing the timing advance command in clear form in the RAR can be eliminated. Thus, eavesdropping is ineffective.

[0167] In block 1208, the apparatus determines a second uplink channel timing adjustment based on the timing advance command or timing advance update by compensating for the reduced or increased or maintained value of the additional time offset. For example, because the apparatus can be moving, the timing advance update can be received in the MAC CE timing advance command after the random access procedure.

[0168] In block 1209, the apparatus transmits the encrypted message to the radio access network node by applying the second uplink channel timing adjustment with the reduced or increased or maintained value of the additional time offset compensated.

[0169] Figure 13 A flowchart illustrating an example embodiment of a method according to the method performed by the apparatus 1800 is shown. For example, the apparatus 1800 can be or include the radio access network node 104, 504 or be included in the radio access network node 104, 504.

[0170] Reference is made to Figure 13In block 1301, the apparatus receives a random access channel preamble from a user equipment 100, 500, wherein an additional time offset is to be applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment. The additional time offset refers to the above-mentioned .

[0171] In block 1302, the apparatus determines a timing advance command for the user equipment based on the random access channel preamble.

[0172] In block 1303, the apparatus transmits a random access response to the user equipment in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command.

[0173] In block 1304, the apparatus receives a message from the user equipment, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to the transmission of the random access channel preamble.

[0174] Figure 14 A flowchart illustrating an example embodiment of a method according to the apparatus 1800 is shown. For example, the apparatus 1800 can be or include a radio access network node 104, 504 or be included in a radio access network node 104, 504.

[0175] Referring to Figure 14 In block 1401, the apparatus receives a random access channel preamble from a user equipment 100, 500, wherein an additional time offset is to be applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment. The additional time offset refers to the above-mentioned .

[0176] In block 1402, the apparatus determines a timing advance command for the user equipment based on the random access channel preamble.

[0177] In block 1403, the apparatus transmits a random access response to the user equipment in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command.

[0178] In block 1404, the apparatus receives a message from the user equipment, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to the transmission of the random access channel preamble.

[0179] In block 1405, the apparatus receives, from the user equipment, an indication indicating an additional time offset and / or a predefined pattern indicating a value for modifying the additional time offset.

[0180] In block 1406, the apparatus estimates a position of the user equipment by compensating for the additional time offset. For example, the apparatus can estimate the position based on the indication received from the user equipment.

[0181] In other words, after applying cyphering / encryption, the UE can inform the apparatus (RAN node) about the applied value or value as part of the UE capability information, and thus the apparatus (RAN node) can know the additional time offset that is applied at the apparatus. Then, the apparatus (RAN node) can compensate for the additional time offset so that TA-based positioning techniques (e.g., E-CID) can still be used. For example, in case of emergency positioning, the can be compensated at the apparatus (RAN node).

[0182] Figure 15 A signal flow diagram is shown in accordance with example embodiments.

[0183] Referring to Figure 15 , at 1501, a UE 100, 500 at a location (x, y, z) receives a user input requesting additional security protection and specifying an additional time offset , which can apply to the next wireless connection.

[0184] At 1502, a RAN node 104, 504 (e.g., gNB) performs a cell configuration broadcast, which is detected and decoded by the UE 100, 500 and a snooping device 502.

[0185] At 1503, the UE applies the additional time offset to the transmission time of a random access channel preamble. This additional time offset is different from the timing corresponding to the downlink channel timing adjustment.

[0186] At 1504, the UE transmits a random access channel preamble to the RAN node according to the transmission time to which the additional time offset is applied.

[0187] At 1505, because the RAN node is not aware of the additional time offset applied at the UE, the RAN node detects the RACH preamble and interprets it as originating from an erroneous location (x’, y’, z’) (i.e., not the real location (x, y, z) of the UE). This is reflected in the timing advance value determined by the RAN node.

[0188] At 1505, the RAN node transmits, to the UE in response to receiving the RACH preamble, a random access response including a timing advance command. The timing advance command includes a timing advance value determined by the RAN node based on the RACH preamble received from the UE. The timing advance command is provided in cleartext (i.e., without encryption). The RAR is received by the UE.

[0189] However, the RAR can also be intercepted by an eavesdropping device, which also understands it as related to the location (x', y', z') which is actually a false location and different from the real location (x, y, z).

[0190] At 1506, the eavesdropping device can initiate a threat to the UE and / or user. However, since the eavesdropping device does not know the real location (x, y, z) of the UE, the threat can be ineffective because it can target the false location (x', y', z'). Thus, the benefits of security, confidentiality, and privacy can be materialized.

[0191] At 1507, because the UE knows the incorrect TA value in the RAR, the UE determines an uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmit the random access channel preamble. The compensation can be made before transmitting the next message (such as RRC setup request and others) in both uplink and downlink directions.

[0192] At 1508, the UE transmits, to the RAN node, an RRC setup request message by applying the uplink channel timing adjustment that has compensated for the additional time offset.

[0193] At 1509, the RAN node transmits, to the UE, a non-access stratum (NAS) identity request message.

[0194] At 1510, the UE transmits, to the RAN node, a NAS security mode complete message. Thereafter, encryption is applied in both downlink and uplink directions.

[0195] At 1511, the UE can decrease or increase the value of the additional time offset.

[0196] For example, the UE can decrease the value of the additional time offset by 10% to gradually recover the normal timing. In this case, the value of the additional time offset can be set to 90% of the initial value. The value of the additional time offset can be decreased or increased such that the decrease or increase is within a supported range of MAC CE timing advance update, so as not to lose time synchronization.

[0197] ​​​​The RAN node observes a timing related to the uplink channel timing adjustment. If the message from the UE arrives late or early with respect to the downlink channel timing adjustment, the RAN node initiates sending a MAC CE timing advance update with the appropriate time correction. Thus, the UE movement affecting the propagation delay time is considered. For example, if the UE reduces the value (additional time offset), it will be observed by the RAN node that the UE is approaching the RAN node, even though the UE can actually be stationary. This is because the overall TA is higher (normal TA + additional time offset), which also means a longer distance. Thus, if the next TA is lower, it can look like UE the UE is moving towards the RAN node.

[0198] At 1512, the RAN node can transmit, to the UE, a MAC CE including a timing advance update, where a value of the MAC CE timing compensation can be proportional to a changed (reduced or increased) value. Thus, a change in the value will look like the UE is moving as observed by the RAN node (even though the UE can actually be stationary), which can be compensated for by the MAC CE TA correction with a value corresponding to the change made to the value (e.g., if the UE reduces the value by 10%, the MAC CE TA correction is 10% of ).

[0199] A MAC CE timing advance update initiated by standard UE movement has no impact on the value or changes thereof.

[0200] The reduction of the value can continue until , which means that the UE is at the true position (x, y, z). After that, the MAC CE TA update has no impact on further message exchange.

[0201] At 1513, the RAN node can transmit, to the UE, a UE capability enquiry to request UE capability information of the UE.

[0202] At 1514, in response to the UE capability enquiry, the UE can transmit, to the RAN node, the UE capability information in an encrypted message.

[0203] ​The UE capability information can comprise information about an additional time offset and / or a pattern applied at the UE for reducing or increasing the additional time offset. Based on this information, the RAN node can confirm the position of the UE at the real position (x, y, z). If needed, further use of the additional time offset can be supported without any impact at the RAN node as the RAN node can now compensate for its impact. For example, the RAN node can estimate the position of the UE by compensating for the additional time offset.

[0204] The above-described blocks, related functions and information exchanges (messages) are not in absolute chronological order and some of them can be performed simultaneously or in a different order than described. Other functions can also be performed between or within them and other information and / or other rules can be sent. Some blocks or parts of blocks or one or more pieces of information can also be omitted or replaced by corresponding blocks or parts of blocks or one or more pieces of information. Figure 6 to Figure 15 The above-described blocks, related functions and information exchanges (messages) are not in absolute chronological order and some of them can be performed simultaneously or in a different order than described. Other functions can also be performed between or within them and other information and / or other rules can be sent. Some blocks or parts of blocks or one or more pieces of information can also be omitted or replaced by corresponding blocks or parts of blocks or one or more pieces of information.

[0205] As used herein, “at least one of ” and “one or more of ” and similar phrases, in which a list of two or more elements is bound by “and” or “or”, means at least the individual elements, or at least two or more of the elements, or at least all of the elements.

[0206] Figure 16 Examples of possible UE motion patterns caused by an additional time offset (i.e., a time offset that is not zero), as seen at the network side (i.e., at the RAN node), are shown. T USER or N USER .

[0207] 1601 relates to a standard application (i.e., no additional time offset is applied), which means that the TA value received in the RAR timing advance command corresponds to the real position or distance of the UE, i.e., TA UE . TA UE The value does not change, which actually means that the UE is stationary.

[0208] 1602 relates to an example embodiment in which an additional time offset is applied until a secure connection is established. A secure connection can mean that cyphering / encryption is applied in the uplink and downlink direction.

[0209] 1603 relates to an example embodiment in which the UE can maintain a specified T USER or NUSER Example implementation of the mode, wherein the mode can simulate within a given cell (i.e., in the context of...) TA MIN and TA MAX UE motion (within the defined limits).

[0210] Figure 17 An example of an apparatus 1700 is shown, which includes components for performing one or more of the example embodiments described above. For example, apparatus 1700 may be or include user equipment 100, 500, or be included in user equipment 100, 500.

[0211] User equipment can also be referred to as wireless communication equipment, subscriber unit, mobile station, remote terminal, access terminal, user terminal, terminal equipment, or user equipment.

[0212] Apparatus 1700 may include circuitry or chipsets suitable for implementing one or more of the example embodiments described above. For example, apparatus 1700 may include at least one processor 1710. At least one processor 1710 interprets instructions (e.g., computer program instructions) and processes data. At least one processor 1710 may include one or more programmable processors. At least one processor 1710 may include programmable hardware with embedded firmware and may alternatively or additionally include one or more application-specific integrated circuits (ASICs).

[0213] The at least one processor 1710 is coupled to the at least one memory 1720. The at least one processor is configured to read data from and write data to the at least one memory 1720. The at least one memory 1720 can include one or more memory units. The memory units can be volatile or non-volatile. It should be noted that there can be one or more units of non-volatile memory and one or more units of volatile memory, or alternatively, one or more units of non-volatile memory, or alternatively, one or more units of volatile memory. The volatile memory can be, for example, a random access memory (RAM), a dynamic random access memory (DRAM), or a synchronous dynamic random access memory (SDRAM). The non-volatile memory can be, for example, a read only memory (ROM), a programmable read only memory (PROM), an electrically programmable read only memory (EPROM), an electrically erasable programmable read only memory (EEPROM), a flash memory, an optical storage, or a magnetic storage. Generally, the memory can be referred to as a non-transitory computer readable medium. The term “non-transitory,” as used herein with respect to a medium, is to limit the medium to be tangible, and not a signal. It is not a limitation on data storage permanence (e.g., RAM vs. ROM). The at least one memory 1720 stores computer readable instructions executed by the at least one processor 1710 to perform one or more of the above-described example embodiments. For example, the non-volatile memory stores the computer readable instructions, and the at least one processor 1710 executes the instructions using the volatile memory for temporary storage of data and / or instructions. The computer readable instructions can refer to computer program code.

[0214] The computer readable instructions can be pre-stored to the at least one memory 1720, or alternatively or additionally, they can be received by the apparatus via an electromagnetic carrier signal and / or can be copied from a physical entity such as a computer program product. Execution of the computer readable instructions by the at least one processor 1710 causes the apparatus 1700 to perform one or more of the above-described example embodiments. That is, the at least one processor and the at least one memory storing the instructions can provide means for providing or causing performance of any of the above-described methods and / or blocks.

[0215] In the context of this document, a “memory” or “computer readable medium” or “computer readable media” can be any non-transitory medium or means that can contain, store, communicate, propagate or transport the instructions for use by or in connection with an instruction execution system, apparatus, or device, such as a computer. The term “non-transitory,” as used herein with respect to a medium, is to limit the medium to be tangible, and not a signal. It is not a limitation on data storage permanence (e.g., RAM vs. ROM).

[0216] Device 1700 may also include or be connected to input unit 1730. Input unit 1730 may include one or more interfaces for receiving input. The one or more interfaces may include, for example, one or more temperature, motion and / or orientation sensors, one or more cameras, one or more accelerometers, one or more microphones, one or more buttons and / or one or more touch detection units. In addition, input unit 1730 may include interfaces to which external devices can be connected.

[0217] The device 1700 may also include an output unit 1740. The output unit may include or be connected to one or more displays capable of displaying visual content, such as a light-emitting diode (LED) display, a liquid crystal display (LCD), and / or a liquid crystal on silicon (LCoS) display. The output unit 1740 may also include one or more audio outputs. The one or more audio outputs may be, for example, speakers.

[0218] Device 1700 also includes a connection unit 1750. Connection unit 1750 enables wireless connectivity to one or more external devices. Connection unit 1750 includes at least one transmitter and at least one receiver that can be integrated into or connected to device 1700. The at least one transmitter includes at least one transmitting antenna, and the at least one receiver includes at least one receiving antenna. Connection unit 1750 may include an integrated circuit or a set of integrated circuits providing wireless communication capabilities to device 1700. Alternatively, the wireless connection may be a hardwired application-specific integrated circuit (ASIC). Connection unit 1750 may also provide components for performing at least some of the blocks or functions of one or more of the example embodiments described above. Connection unit 1750 may include one or more components controlled by a corresponding control unit, such as: a power amplifier, a digital front-end (DFE), an analog-to-digital converter (ADC), a digital-to-analog converter (DAC), a frequency converter, a (de)modulator, and / or encoder / decoder circuitry.

[0219] It should be noted that device 1700 may further include Figure 17 Various components are not shown. These components can be hardware components and / or software components.

[0220] Figure 18 An example of an apparatus 1800 is shown, comprising components for performing one or more of the example embodiments described above. For example, apparatus 1800 may be or include, or be included in, an apparatus such as radio access network nodes 104, 504.

[0221] A radio access network node can also be referred to as, for example, a network element, a Next Generation Radio Access Network (NG-RAN) node, a NodeB, an eNB, a gNB, a base transceiver station (BTS), a base station, an NR base station, a 5G base station, an access node, an access point (AP), a cell site, a relay node, a repeater, an Integrated Access and Backhaul (IAB) node, an IAB donor node, a Distributed Unit (DU), a Central Unit (CU), a Base Band Unit (BBU), a Radio Unit (RU), a wireless head, a Remote Radio Head (RRH), or a Transceiver Point (TRP), for example.

[0222] The apparatus 1800 can comprise circuitry or a chipset adapted for implementing one or more of the above-described example embodiments, for example. The apparatus 1800 can be an electronic device comprising one or more electronic circuits. The apparatus 1800 can comprise a communication control circuitry 1810, such as at least one processor, and at least one memory 1820 storing instructions 1822 that, when executed by the at least one processor, cause the apparatus 1800 to perform one or more of the above-described example embodiments. Such instructions 1822 can comprise computer program code (software), for example. The at least one processor and the at least one memory storing instructions can provide means for providing or causing to perform any of the methods and / or blocks described above.

[0223] The processor is coupled to the memory 1820. The processor is configured to read data from and write data to the memory 1820. The memory 1820 can include one or more memory units. The memory units can be volatile or non-volatile. It should be noted that there can be one or more units of non-volatile memory and one or more units of volatile memory, or alternatively, one or more units of non-volatile memory, or alternatively, one or more units of volatile memory. The volatile memory can be, for example, a Random Access Memory (RAM), a Dynamic Random Access Memory (DRAM), or a

[0224] The computer readable instructions can be pre-stored to the memory 1820, or alternatively or additionally, they can be received by the apparatus via an electromagnetic carrier signal and / or can be copied from a physical entity such as a computer program product. Execution of the computer readable instructions causes the apparatus 1800 to perform one or more of the above described functions.

[0225] The memory 1820 can be implemented using any suitable data storage technology, such as semiconductor-based memory devices, flash memory, magnetic memory devices and systems, optical memory devices and systems, fixed memory and / or removable memory. The memory can comprise a configuration database for storing configuration data, such as a list of current neighboring cells, and in some example embodiments, the memory comprises the structure of frames used in the detected neighboring cells.

[0226] The apparatus 1800 can also comprise or be connected to a communication interface 1830, such as a radio unit, comprising hardware and / or software for realizing communication connectivity according to one or more communication protocols with one or more wireless communication devices. The communication interface 1830 comprises at least one transmitter (Tx) and at least one receiver (Rx) that can be integrated into the apparatus 1800 or to which the apparatus 1800 can be connected. The communication interface 1830 can provide means for performing some of the blocks of one or more example embodiments described above. The communication interface 1830 can comprise one or more components controlled by a corresponding control unit, such as: power amplifiers, digital front-end (DFE), analog-to-digital converters (ADC), digital-to-analog converters (DAC), frequency converters, (de-)modulators, and / or encoder / decoder circuitry.

[0227] The communication interface 1830 provides the apparatus with radio communication capabilities to communicate in a wireless communication network. The communication interface may, for example, provide a radio interface to one or more wireless communication devices. The apparatus 1800 can also comprise or be connected to another interface towards a core network, such as a network coordinator apparatus or an AMF, and / or to an access node of a wireless communication system.

[0228] The apparatus 1800 can also comprise a scheduler 1840 configured to allocate radio resources. The scheduler 1840 can be configured together with the communication control circuitry 1810, or it can be configured separately.

[0229] It should be noted that the apparatus 1800 can further comprise various components not shown in FIG. 18. The various components can be hardware components and / or software components. Figure 18

[0230] ​As used in this application, the term "circuitry" can refer to one or more or all of the following: a) solely hardware circuit implementations (such as implementations in analog circuitry, digital circuitry, and / or mixed-signal circuitry); b) combinations of hardware circuits and software, such as (as applicable): i) combinations of analog and / or digital hardware circuits with software / firmware; ii) combinations of hardware circuits with software (including the software of a microprocessor, microcontroller, etc.); and iii) combinations of hardware circuits and the software of a microprocessor, microcontroller, etc.; and c) wherein software is an intrinsic part of a hardware circuit such as a microprocessor, microcontroller, etc. that can no longer be considered a software implementation when the software is intrinsic to the hardware circuit such as the software internal to a microprocessor, microcontroller, etc. This definition of circuitry applies to all uses of this term in this application, including in any claims. As a further example, as used in this application the term circuitry also covers an implementation that has a hardware circuit or processor (or multiple processors) and software (or firmware) that works together to make and use the implementation, in the sense of the software and hardware, when the software is a part of the hardware circuit implementation.

[0231] This definition of circuitry applies to all uses of this term in this application, including in any claims. As another example, as used in this application, the term circuitry also encompasses a hardware-only implementation of only a hardware circuit or processor (or multiple processors) or a hardware-only implementation of only a hardware circuit or processor (or multiple processors) and its (or their) associated software and / or firmware. For example, and if applicable to a particular claim element, the term circuitry also encompasses a baseband integrated circuit or processor integrated circuit for a mobile device or similar integrated circuits in server, cellular network device, or other computing or network device.

[0232] The techniques and methods described herein can be implemented by various means. For example, these techniques can be implemented in hardware (one or more devices), firmware (one or more devices), software (one or more modules), or combinations thereof. For a hardware implementation, the apparatus (es) of an example embodiment can be implemented within one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), graphics processing units (GPUs), processors, controllers, micro-controllers, microprocessors, other electronic units designed to perform the functions described herein, or a combination thereof. For firmware or software, the implementation can be carried out through modules of at least one chip set (e.g., procedures, functions, and so on) that perform the functions described herein. The software codes can be stored in memory units and executed by processors. The memory unit can be implemented within the processor or external to the processor, in which case it can be communicatively coupled to the processor via various means as is known in the art. Additionally, the components of the systems described herein can be rearranged and / or complemented by additional components in order to facilitate the achievements of the various aspects, etc., described with regard thereto, and they are not limited to the precise configurations set forth in the given figures, as will be appreciated by one skilled in the art.

[0233] It will be obvious to those skilled in the art that, as technology advances, the inventive concept can be implemented in various ways. The example embodiments are not limited to the examples described above, but can vary within the scope of the claims. Hence, all words and expressions should be interpreted broadly and they are intended to illustrate, but not to limit, the embodiment.

[0234] List of acronyms 3G: Third Generation 4G: Fourth Generation 5G: Fifth Generation 5GC: Fifth Generation Core 6G: Sixth Generation ADC: Analog-to-Digital Converter AMF: Access and Mobility Management Function AN: Access Node ASIC: Application-Specific Integrated Circuit BBU: Base Band Unit BTS: Base Transceiver Station CBRA: Contention-Based Random Access CFRA: Contention-Free Random Access CN: Core Network CP: Control Plane CSSP: Customer Specific Standard Product CU: Central Unit DAC: Digital-to-Analog Converter DFE: Digital Front-End DL: Downlink DMRS: Demodulation Reference Signal DRAM: Dynamic Random Access Memory DSP: Digital Signal Processor DSPD: Digital Signal Processing Device DU: Distributed Unit E-CID: Enhanced Cell ID EEPROM: Electrically Erasable Programmable Read-Only Memory eNB: Evolved Node B EPC: Evolved Packet Core E-UTRA: Evolved Universal Terrestrial Radio Access FPGA: Field-Programmable Gate Array GEO: Geostationary Earth Orbit gNB: Next Generation Node B GPU: Graphics Processing Unit GSM: Global System for Mobile Communications HNB-GW: Home Node B Gateway HSPA: High Speed Packet Access IoT: Internet of Things L1: Layer 1 L2: Layer 2 L3: Layer 3 LCD: Liquid Crystal Display LCoS: Liquid Crystal on Silicon LED: Light Emitting Diode LEO: Low Earth Orbit LMF: Location Management Function LTE: Long Term Evolution LTE-A: Long Term Evolution Advanced M2M: Machine to Machine MAC CE: MAC control element MAC: Media Access Control MEC: Multi-access Edge Computing MIMO: Multiple Input Multiple Output MME: Mobility Management Entity mMTC: Machine Type Communication NFV: Network Functions Virtualization NG-RAN: Next Generation Radio Access Network NR: New Radio PDA: Personal Digital Assistant PDCP: Packet Data Convergence Protocol P-GW: Packet Data Network Gateway PHY: Physics PLD: Programmable Logic Device PROM: Programmable Read-Only Memory PSS: Master Synchronization Signal RACH: Random Access Channel RAM: Random Access Memory RAN: Radio Access Network RAP: Radio Access Point RAR: Random Access Response RedCap: Low Ability RLC: Radio Link Control ROM: Read-Only Memory RRC: Radio Resource Control RRH: Remote Radio Header RU: Radio Unit Rx: Receiver SCell: Secondary Community SCS: Subcarrier Spacing SDAP: Service Data Adaptation Protocol SDN: Software Defined Networking SDRAM: Synchronous Dynamic Random Access Memory S-GW: Serving Gateway SI: System Information SIM: Subscriber Identity Module SL: Sidelink SoC: System on Chip SRS: Sounding Reference Signal SSS: Secondary Synchronization Signal TA: Timing Advance TRP: Transmission Reception Point TRX: Transceiver Tx: Transmitter UE: User Equipment UL: Uplink UMTS: Universal Mobile Telecommunications System UP: User Plane UPF: User Position Function UTRAN: UMTS Radio Access Network vCU: Virtualized Central Unit vDU: Virtualized Distributed Unit W-CDMA: Wideband Code Division Multiple Access

Claims

1. An apparatus comprising at least one processor and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus at least to: apply an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmit, to a radio access network node, the random access channel preamble according to the transmission time to which the additional time offset is applied; in response to transmitting the random access channel preamble, receive, from the radio access network node, a random access response, wherein the random access response comprises a timing advance command; determine, based on the timing advance command, a first uplink channel timing adjustment by compensating for the additional time offset applied to transmitting the random access channel preamble; and transmit, to the radio access network node, a message by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

2. The apparatus of claim 1, further caused to: receive a user input indicating the additional time offset.

3. The apparatus of any of the preceding claims, further caused to: reduce or increase or maintain a value of the additional time offset; determine, based on the timing advance command or a timing advance update, a second uplink channel timing adjustment by compensating for the reduced or increased or maintained value of the additional time offset; and transmit, to the radio access network node, an encrypted message by applying the second uplink channel timing adjustment that has been compensated for the reduced or increased or maintained value of the additional time offset.

4. The apparatus of claim 3, wherein the value of the additional time offset is reduced or increased such that the reduction or the increase is within a supported range of the timing advance update.

5. The apparatus of any of claims 1-2, further caused to: transmit, to the radio access network node, an encrypted message by applying the first uplink channel timing adjustment.

6. The apparatus of any of claims 1-2, further caused to: modify a value of the additional time offset according to a predefined pattern selected from a plurality of predefined patterns; determine, based on the timing advance command or a timing advance update, a second uplink channel timing adjustment by compensating for the modified value of the additional time offset; and transmit, to the radio access network node, an encrypted message by applying the second uplink channel timing adjustment that has been compensated for the modified value of the additional time offset.

7. The apparatus of claim 6, further caused to: determine, based on the timing advance command, a distance between the apparatus and the radio access network node, wherein the value of the additional time offset is modified based on the distance between the apparatus and the radio access network node.

8. The apparatus of any of claims 6-7, further caused to: ​ transmitting, to the radio access network node, an indication indicating the predefined pattern for modifying the value of the additional time offset.

9. The apparatus of any one of the preceding claims, further caused to: transmit, to the radio access network node, an indication indicating the additional time offset.

10. The apparatus of any one of the preceding claims, wherein the apparatus comprises or is comprised in a user equipment.

11. An apparatus comprising at least one processor and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus at least to: receive, from a user equipment, a random access channel preamble, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determine, based on the random access channel preamble, a timing advance command for the user equipment; in response to receiving the random access channel preamble, transmit, to the user equipment, a random access response, wherein the random access response comprises the timing advance command; and receive, from the user equipment, a message, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

12. The apparatus of claim 11, further caused to: receive, from the user equipment, an indication indicating the additional time offset or a predefined pattern for modifying a value of the additional time offset; and estimate a position of the user equipment by compensating for the additional time offset.

13. The apparatus of any one of claims 11 to 12, wherein the apparatus comprises or is comprised in a radio access network node.

14. An apparatus comprising: means for applying an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; means for transmitting, to a radio access network node, the random access channel preamble according to the transmission time to which the additional time offset is applied; means for receiving, from the radio access network node, a random access response in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command; means for determining a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmitting the random access channel preamble; and means for transmitting, to the radio access network node, a message by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

15. An apparatus comprising: means for receiving a random access channel preamble from a user equipment, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; means for determining a timing advance command for the user equipment based on the random access channel preamble; means for transmitting a random access response to the user equipment in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and means for receiving a message from the user equipment, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

16. A method comprising: applying an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmitting the random access channel preamble to a radio access network node according to the transmission time to which the additional time offset is applied; receiving a random access response from the radio access network node in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command; determining a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmitting the random access channel preamble; and transmitting a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

17. A method comprising: receiving a random access channel preamble from a user equipment, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determining a timing advance command for the user equipment based on the random access channel preamble; transmitting a random access response to the user equipment in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and receiving a message from the user equipment, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmitting the random access channel preamble.

18. A non-transitory computer readable medium comprising program instructions that, when executed by an apparatus, cause the apparatus to perform at least the following: applying an additional time offset to a transmission time of a random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; transmitting the random access channel preamble to a radio access network node according to the transmission time to which the additional time offset is applied; ​ ​ ​ receiving, from the radio access network node, a random access response in response to transmitting the random access channel preamble, wherein the random access response comprises a timing advance command; determining a first uplink channel timing adjustment based on the timing advance command by compensating for the additional time offset applied to transmission of the random access channel preamble; and transmitting a message to the radio access network node by applying the first uplink channel timing adjustment that has been compensated for the additional time offset.

19. A non-transitory computer readable medium comprising program instructions that, when executed by an apparatus, cause the apparatus to perform at least the following: receiving, from a user equipment, a random access channel preamble, wherein an additional time offset is applied at the user equipment to a transmission time of the random access channel preamble, wherein the additional time offset is different from a timing corresponding to a downlink channel timing adjustment; determining a timing advance command for the user equipment based on the random access channel preamble; transmitting, to the user equipment, a random access response in response to receiving the random access channel preamble, wherein the random access response comprises the timing advance command; and receiving, from the user equipment, a message, wherein a first uplink channel timing adjustment based on the timing advance command is applied at the user equipment to a transmission of the message by compensating for the additional time offset applied to transmission of the random access channel preamble.