Anonymized Network Charging via Segmented Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In communication networks, particularly in anonymized service scenarios, there is a lack of straightforward methods for charging subscribers due to the inability of service providers to identify or track usage by subscribers, as anonymity maintains privacy but hinders billing processes.
Innovation Solution
A method where a user device determines service-specific and charging-specific key materials, generates a charging record, and sends it with authentication information to network nodes incapable of linking these keys to subscriber identities, allowing for anonymous yet chargeable network service utilization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If GBA authentication is used to maintain subscriber anonymity, then privacy protection is improved, but charging capability deteriorates
Solution Approach 1:
The patent segments the authentication system into two distinct key materials: service-specific key material (Ks_NAF) for authentication and charging-specific key material (Ks_C) for charging records. This segmentation allows the network node to verify service authentication without being able to link charging records to subscriber identity, thus maintaining anonymity while enabling charging.
Solution Approach 2:
The patent introduces a bootstrapping server function (BSF) as an intermediary that holds the mapping between charging-specific key material and subscriber identity. The BSF receives authenticated charging records from network nodes and forwards them to charging entities, acting as a mediator that enables charging capability while preserving subscriber anonymity from service providers.
2Reliability
If service provider cannot identify subscriber, then privacy is protected, but billing accuracy deteriorates
Solution Approach 1:
The patent divides key materials into service-specific (Ks_NAF) and charging-specific (Ks_C) components. The network node verifies service authentication using Ks_NAF and generates charging records authenticated with Ks_C, ensuring that service providers cannot link charging records to subscribers while maintaining billing accuracy through cryptographic verification.
Solution Approach 2:
The patent implements a feedback mechanism where the bootstrapping server function verifies charging records by authenticating them with the charging-specific key material and compares them against actual service usage. This feedback loop ensures billing accuracy by validating that charged services were actually consumed, even while maintaining subscriber anonymity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A user device (10) provides a subscriber with access to a network service. The user device (10) determines service-specific key material and charging-specific key material. The user device (10) determines a charging record indicating usage of the network service by the subscriber and associates the charging record with first authentication information based on the charging-specific key material. The user device (10) generates at least one message including the charging record and the associated first authentication information. The user device (10) associates the at least one message with second authentication information based on the service-specific key material. The user device (10) sends the at least one message to a first network node (150) which is incapable of relating the charging-specific key material or the service-specific key material to a subscriber identity of the subscriber. The first network node (150) receives the at least one message and the associated second authentication information from the user device (10) and authenticates the at least one message based on the service-specific key material and the second authentication information. In response to authenticating the at least one message, the first network node forwards the charging record and the associated first authentication information to a second network node (120). The second network node (120) is capable of relating the charging- specific key material to the subscriber identity of the subscriber. The second network node (120) receives the charging record and the associated first authentication information from the first network node (150) and authenticates the charging record based on the charging- specific key material and the first authentication information. In response to authenticating the charging record, the second network node (120) controls charging of the network service.