5GLAN Group Security Flow for UE State Transition Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The 5GLAN group communication in 5G systems is vulnerable to attacks such as impersonation, unauthorized access, DDoS attacks, and eavesdropping due to inadequate security procedures for UE's, particularly in handling authentication/authorization and security context during state transitions.
Innovation Solution
Implementing a Key for Group Management Function (KGMF) to derive keys for integrity and confidentiality protection, and managing access permissions through a Group Management Function (GMF) to secure message transmission and access in 5GLAN group communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If 5G LAN group communication is implemented without specific security mechanisms, then the system is simpler and easier to deploy, but it becomes vulnerable to attacks such as impersonation, unauthorized access, eavesdropping, and DDoS attacks
Solution Approach 1:
The patent implements preliminary authentication and authorization actions before allowing UE access to 5G LAN group communication services. The AMF performs authentication with the AUSF/UDM and authorization with the GMF before establishing the PDU session, ensuring that only authorized UEs can join the network and access specific services, thereby preventing impersonation and unauthorized access attacks
Solution Approach 2:
The patent introduces the AMF as an intermediary security function that mediates between the UE and the 5G LAN group. The AMF handles authentication with the AUSF/UDM and authorization with the GMF, acting as a security mediator that verifies UE identity and permissions before allowing network access, thus preventing eavesdropping and DDoS attacks
2Reliability
If authentication and authorization procedures are implemented for 5G LAN group communication, then security against attacks is improved, but the procedure complexity and processing time increase
Solution Approach 1:
The patent performs authentication and authorization actions in advance during the PDU session establishment phase. The AMF authenticates the UE with the AUSF/UDM and authorizes access to specific 5G LAN groups with the GMF before the actual data transmission begins, so that when data communication starts, the security clearance is already in place, minimizing time loss during data transfer
Solution Approach 2:
The patent merges the authentication and authorization procedures into a single integrated flow during PDU session establishment. The AMF combines authentication with the AUSF/UDM and authorization with the GMF in one continuous process, eliminating separate authentication steps that would otherwise extend the time loss, while still providing comprehensive security
3Object-affected harmful factors
If access restrictions are applied to UEs in idle/inactive states, then unauthorized access is prevented, but the ease of operation for legitimate UEs is reduced
Solution Approach 1:
The patent applies access restrictions in advance for UEs in idle or inactive states before they attempt to access 5G LAN group communication services. The AMF checks the UE's authentication status and authorization with the GMF before allowing PDU session establishment, preventing unauthorized access while ensuring that authenticated UEs can operate seamlessly once properly authorized
Solution Approach 2:
The patent implements feedback mechanisms where the AMF provides feedback to the UE about its authentication and authorization status. The GMF provides feedback on authorization decisions for specific 5G LAN groups, allowing UEs to understand their access rights and operate accordingly, maintaining ease of operation for legitimate users while blocking unauthorized access
Data Source
AI summary
This disclosure is related to the security procedures for UE (300) in 5GLAN Group Communication. Security procedure involved in this disclosure is based on Authentication and authorization of UE (300) by Group Management Function (GMF) (500) in 5GLAN communication, attachment and detachment of UE (300) in 5GLAN Group due to state transition and the access restrictions imposed on UE (300) during state transition.