Security algorithm management in communication network environment

The implementation of security algorithm management techniques in 5G networks, enabling both 128-bit and 256-bit algorithms, addresses challenges in transitioning to longer key lengths, ensuring seamless compatibility and enhanced security by prioritizing ciphering and integrity protection/verification, thus bolstering network security.

WO2025210504A1 Publication Date: 2025-10-09NOKIA TECHNOLOGIES OY
4 Cites 0 Cited by

Patent Information

Application Number
PCT/IB2025/053408
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2024-04-01
Filing Date
2025-04-01
Publication Date
2025-10-09

AI Technical Summary

Technical Problem

The transition to 256-bit security algorithms in 5G networks poses challenges such as bidding-down attacks, inconsistent key length selection, and security vulnerabilities due to the coexistence of legacy and enhanced algorithms, necessitating improved security algorithm management.

Method used

Implementing security algorithm management techniques that support both 128-bit and 256-bit algorithms, with ciphering followed by integrity protection for 256-bit algorithms and integrity verification followed by deciphering, while enabling negotiation and selection of appropriate key lengths to ensure seamless compatibility and security.

Benefits of technology

This approach enhances network security by preventing downgrade attacks and ensuring consistent cryptographic protection, supporting backward compatibility and efficient transition to longer key lengths, thereby fortifying 5G network security.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

Techniques are disclosed for security algorithm management. For example, a method includes receiving, at the data transmitting entity associated with a communication network, one or more data packets for transmission to a data receiving entity associated with the communication network, applying, at the data transmitting entity, one or more security algorithms to the one or more data packets, wherein the application of the one or more security algorithms further includes applying ciphering to the one or more data packets and applying integrity protection to the one or more data packets in response to the ciphering, and transmitting, from the data transmitting entity, the one or more data packets to the data receiving entity, in response to the application of the one or more security algorithms to the one or more data packets.
Need to check novelty before this filing date? Find Prior Art