5G NR On-Demand SIB Security Check Merging

Solution Overview

Problem

Existing 5G New Radio (NR) networks face inefficiencies due to redundant access stratum (AS) security checks, which can lead to increased latency and power consumption.

Innovation Solution

Implementing a unified security procedure for on-demand system information blocks (SIBs) in user equipment (UE) devices, where pending SIB requests are buffered and security confirmation is performed before processing, and network nodes delay or transmit SIB responses without signatures to avoid redundant checks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If redundant access stratum (AS) security checks are performed for on-demand SIB requests and connection establishment procedures, then network security is improved, but latency and power consumption increase

Engineering Contradiction:

Improvenetwork securityVSAvoidlatency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent merges the security check procedures for on-demand SIB requests and connection establishment procedures into a unified security procedure. When a UE has both a pending SIB request and initiates a connection establishment, the network performs a single security confirmation that serves both purposes, eliminating redundant security checks and reducing latency while maintaining security.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The network performs security confirmation in advance as part of the connection establishment procedure before the UE processes the SIB request. By confirming security upfront through the connection establishment, the network prepares the security context beforehand, so when the SIB request is processed, no additional security checks are needed, thus reducing latency.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If redundant access stratum (AS) security checks are performed for on-demand SIB requests and connection establishment procedures, then network security is improved, but power consumption increases

Engineering Contradiction:

Improvenetwork securityVSAvoidpower consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent merges the security check procedures for on-demand SIB requests and connection establishment procedures into a unified security procedure. When a UE has both a pending SIB request and initiates a connection establishment, the network performs a single security confirmation that serves both purposes, eliminating redundant security checks and reducing power consumption while maintaining security.

Inventive Principle:

Principle #5Merging (Combining)

3Speed

If on-demand SIB requests are processed immediately without buffering, then response speed is improved, but redundant security checks occur when connection establishment is initiated

Engineering Contradiction:

Improveresponse speedVSAvoidsecurity check redundancy

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The network performs security confirmation in advance as part of the connection establishment procedure before the UE processes the SIB request. By confirming security upfront through the connection establishment, the network prepares the security context beforehand, so when the SIB request is processed, no additional security checks are needed, thus reducing latency.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12556925B25G new radio—avoiding redundant as security checks

Publication Date: 2026.02.17 APPLE INC

AI summary

Apparatuses, systems, and methods for a wireless device to perform methods for improvements to security checks in a fifth generation (5G) New Radio (NR) network, including mechanisms to avoid redundant access stratum (AS) security checks. The wireless device may determine that an on-demand system information block (SIB) request is pending transmission and may buffer the on-demand SIB in response to determining that a connection establishment procedure will be initiated within a specified time period. The wireless device may then perform a unified security procedure for the on-demand SIB request and the connection establishment procedure, including confirming connection security. Further, in response to confirming connection security, the wireless device may use an on-demand SIB received from the network without confirming a corresponding on-demand SIB signature.