5G Message Validation via Stored AKA Authentication Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing 5G architecture lacks robust security measures, particularly in resource or object-level authorization, making it vulnerable to unauthorized access and denial-of-service attacks, as it relies on API access-based authorization models.
Innovation Solution
Implementing message validation using authentication information derived from the 5G authentication and key agreement (AKA) procedure to identify and validate user devices, thereby preventing unauthorized messages and attacks by storing UE-related authentication information for subsequent message validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If API access-based authorization model is used in 5G networks, then ease of operation is improved, but security is worsened due to vulnerability to unauthorized access and denial-of-service attacks
Solution Approach 1:
The patent applies preliminary action by obtaining and storing authentication information from AKA procedure messages before validating subsequent request messages. The network node stores UE identifiers and authentication status in advance, enabling it to validate future messages against this pre-stored information, thus preventing unauthorized access before it can occur.
Solution Approach 2:
The patent introduces an intermediary validation mechanism where the network node acts as a mediator between the request message sender and the target service. The node intercepts request messages, validates them against stored authentication information, and only forwards valid messages, thus mediating security between the API access model and the underlying authentication system.
2Reliability
If message validation using AKA procedure authentication information is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent applies universality by enabling the network node to perform multiple functions: it acts as both an AKA procedure participant and a message validation entity. The same network node that handles authentication also validates subsequent messages using the obtained authentication information, eliminating the need for separate validation infrastructure and reducing overall system complexity.
Solution Approach 2:
The network node performs self-service by obtaining authentication information from AKA procedures it already participates in and using this information to validate its own received messages. The node serves its own security validation needs without requiring external validation services, thereby reducing device complexity while maintaining security.
3Reliability
If authentication information is stored in data store for validating subsequent messages, then reliability is improved, but loss of time is worsened due to storage and retrieval operations
Solution Approach 1:
The patent applies preliminary action by storing authentication information in the data store during the AKA procedure execution phase, before any message validation is needed. This pre-storage eliminates the need for real-time authentication queries during message validation, reducing validation time while maintaining accuracy through comparison against pre-stored credentials.
Data Source
AI summary
Methods, systems, and computer readable media for message validation in fifth generation (5G) communications networks are disclosed. One method occurring at a first network node of a first network comprises: obtaining, from at least one authentication and key agreement (AKA) procedure related message associated with a user device communicating via a second network, authentication information identifying the user device; storing the authentication information in a data store for validating subsequent messages; receiving a request message associated with the user device; determining, using the authentication information, that the request message is invalid; and in response to determining that the request message is invalid, performing an invalid message action.