Access Stratum Security Setup Using Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in verifying the integrity of unprotected messages exchanged during the random access procedure before establishing access stratum security, which can compromise network security.
Innovation Solution
A method and apparatus for securing access to a wireless network by recording and generating hash values from unprotected messages exchanged during the random access procedure, comparing these hash values to verify the messages, and establishing access stratum security only after verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If unprotected messages are exchanged during random access procedure, then device can establish initial connection with network, but security integrity of the communication cannot be verified
Solution Approach 1:
The patent applies preliminary action by computing hash values of unprotected messages during the random access procedure before security is established. The device computes a first hash value from received unprotected messages and sends it to the network, which computes a second hash value from transmitted unprotected messages. This preliminary hashing allows subsequent verification of message integrity without delaying connection establishment.
Solution Approach 2:
The patent uses hash values as an intermediary mechanism to verify message integrity. Instead of directly verifying the content of unprotected messages, the system uses hash values (first hash value from device, second hash value from network) as intermediaries to indirectly verify that messages were not tampered with during transmission.
2Reliability
If hash verification is performed on all unprotected messages, then message integrity can be verified, but processing time and complexity increase
Solution Approach 1:
The patent transforms the verification problem by changing the parameter from verifying entire messages to verifying compact hash values. Instead of comparing large volumes of unprotected message data, the system computes and compares condensed hash values (first hash value and second hash value), which significantly reduces processing time and computational complexity while maintaining verification reliability.
3Productivity
If access stratum security is established without verification, then connection setup is faster, but security robustness is compromised
Solution Approach 1:
The patent performs preliminary hashing of unprotected messages during the random access procedure itself, before access stratum security is established. The device computes the first hash value from received messages and sends it to the network in advance. This allows verification to be completed as part of the connection setup process rather than as a separate step, maintaining connection speed while ensuring security robustness.
Data Source
AI summary
Systems and techniques are disclosed for securing wireless communications. For example, a process for securing access to a wireless network can include: recording a set of unprotected messages exchanged between a wireless device and a wireless node, wherein the set of unprotected messages include at least one of: portions of system information messages broadcast by the wireless node, portions of a set of RA messages, or portions of a set of radio resource control (RRC) messages; receiving a first hash value from the wireless node; generating a second hash value based on the recorded set of unprotected messages; and comparing the second hash value to the first hash value to verify the set of unprotected messages.