5G UE Deregistration Message Security via NAS Container Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing 5G mobile communication systems lack clarity on how to securely send unavailability period information, leading to potential non-standard behaviors and unpredictable network reactions, particularly in the Deregistration Request message where it is unclear if the Unavailability period duration IE should be sent as cleartext or non-cleartext.
Innovation Solution
A method and apparatus for a user equipment (UE) to include unavailability information in a Deregistration Request message as non-cleartext information, within a Non-Access Stratum (NAS) message container IE, and cipher at least a part of the NAS message container IE to ensure secure transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If unavailability period duration IE is sent as cleartext in Deregistration Request message, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent segments the Deregistration Request message into two parts: cleartext IEs (protocol discriminator, message identity, de-registration type, 5GS mobile identity) and non-cleartext IEs (unavailability period duration IE) encrypted within a NAS message container. This segmentation allows the message to be processed efficiently while protecting sensitive information through selective encryption of only the unavailability period duration IE.
Solution Approach 2:
The patent introduces a NAS message container as an intermediary structure that holds the unavailability period duration IE in encrypted form. This container acts as a mediator between the need for secure transmission and the network's requirement to process the message, allowing encrypted information to be transmitted without requiring the entire message to be encrypted.
2Object-affected harmful factors
If unavailability period duration IE is encrypted in Deregistration Request message, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent applies dynamics by making the NAS message container optional rather than mandatory. The container is only included when the UE needs to send non-cleartext IEs (such as unavailability period duration IE). This dynamic approach allows the message structure to adapt to security requirements without always incurring the overhead of encryption and container management.
Solution Approach 2:
The patent uses copying by placing the unavailability period duration IE inside the NAS message container, which is then included within the Deregistration Request message. This creates a nested structure where the critical information is copied into a protected container, allowing the outer message structure to remain relatively simple while the inner container provides security.
3Reliability
If NAS message container IE is included in Deregistration Request message, then reliability is improved, but device complexity is worsened
Solution Approach 1:
The patent changes the parameter of message structure from fixed to variable. The Deregistration Request message can be sent in two forms: with or without a NAS message container IE, depending on whether non-cleartext IEs need to be transmitted. This parameter change allows the system to balance between simplicity (no container) and security/reliability (container included) based on the specific transmission requirements.
Data Source
AI summary
The disclosure relates to a fifth generation (5G) or sixth generation (6G) communication system for supporting a higher data transmission rate. A method performed by a User Equipment (UE) is provided. The method includes determining to include unavailability information in a deregistration request message, and transmitting, to a network entity, the deregistration request message, wherein the unavailability information is included in the deregistration request message as non-cleartext information, wherein the deregistration request message includes a non-access stratum (NAS) message container information element (IE), wherein the unavailability information is included in the NAS message container IE, and wherein at least a part of the NAS message container IE is ciphered by the UE.