5G NAS Signaling Security Mode Command Additional Information Element

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current 5G mobile network specifications do not include information elements in the security mode command message to provide horizontal derivation parameters or Anti-Bidding down Between Architectures parameters to user equipment (UE), limiting the network's ability to enhance security capabilities through NAS signaling.

Innovation Solution

Incorporating a new information element (IE) in the security mode command message to transmit additional 5G security parameters, such as horizontal derivation and ABBA parameters, between the network and UE, allowing for enhanced security mode control procedures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the security mode command message follows current 3GPP specification without additional information elements, then the message structure remains simple and compatible with existing standards, but the network cannot provide horizontal derivation parameters or ABBA parameters to the UE, limiting security capability enhancement

Engineering Contradiction:
Improvesecurity capabilityVSAvoidmessage structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the security parameter transmission by introducing a separate additional information element within the security mode command message. This additional IE is structured with its own identifier, presence indicator, and parameter fields, allowing the base message structure to remain compatible while adding security functionality through a distinct, modular segment.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements nesting by placing the additional 5G security parameter information element inside the existing security mode command message structure. The additional IE is nested within the broader message framework, containing its own nested structure with identifier, presence indicator, and parameter fields, allowing multiple levels of organization without disrupting the outer message structure.

Inventive Principle:
Principle #7Nested doll (Nesting)

2Reliability

If additional 5G security parameter information elements are incorporated in the security mode command message, then the network can transmit horizontal derivation parameters and ABBA parameters to enhance security, but the message structure becomes more complex and deviates from current 3GPP specification

Engineering Contradiction:
Improvesecurity capabilityVSAvoidmessage processing
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements dynamics through the presence indicator field in the additional information element. The network can dynamically include or exclude the additional 5G security parameters based on whether they are needed for the current communication scenario. This allows the message structure to adapt its complexity based on operational requirements, processing only what is necessary.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent enables parameter changes by introducing an identifier field and presence indicator that allow the receiver to dynamically determine which parameters are present and how to process them. The system can change the effective structure of the message based on the values of these control parameters, allowing flexible adaptation to different security requirements.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11457353B2Indication of additional security capabilities using NAS signaling in 5G mobile communications
Publication Date: 2022.09.27 HFI INNOVATION INC
  • US11457353B2 patent drawing
  • US11457353B2 patent drawing
  • US11457353B2 patent drawing

AI summary

Examples pertaining to indication of additional security capabilities using non-access stratum (NAS) signaling in 5th Generation (5G) mobile communications are described. A processor of an apparatus (e.g., a user equipment (UE)) transmits an initial NAS message to a communication entity of a 5G mobile network. The processor then receives a message from the communication entity responsive to the transmitting, the message comprising an additional 5G security parameter information element (IE). The processor proceeds to perform a security mode control procedure using information contained in the additional 5G security parameter IE pertaining to at least one 5G security parameter.