Attribute-Based Credentials for Private Wireless Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless communication systems lack solutions for enabling attribute-based credentials (ABCs) to facilitate access to wireless communication networks, particularly in scenarios where user equipment (UE) is not subscribed to the network, and there are no defined processes for UE to utilize ABCs for network registration and access.
Innovation Solution
UEs generate or obtain credentials, such as ABCs, by pre-generating attributes like root keys and subscription identities, which are encrypted and signed by an issuer, allowing them to authenticate and access networks without a subscription, using a pseudonym and public keys for decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If UEs use traditional subscription-based authentication, then network security is maintained, but UEs without subscriptions cannot access the network
Solution Approach 1:
The authentication credential is segmented into multiple attributes (public key, pseudonym, encrypted root key, encrypted subscription identity) that can be selectively presented and verified. This allows the system to provide access to unsubscription UEs while maintaining security through selective attribute verification.
Solution Approach 2:
An issuer entity acts as an intermediary that generates and signs the ABC credential for the UE. The issuer vouches for the UE's authenticity without requiring the UE to have a direct subscription with the network, enabling trusted access for unsubscription devices.
2Reliability
If UEs reveal real identities for authentication, then network can verify user legitimacy, but user privacy is compromised
Solution Approach 1:
Instead of the UE revealing its real identity for verification, the system inverts the approach by having the UE present a pseudonym that can be verified through cryptographic proof. The network verifies the authenticity of the pseudonym without learning the user's real identity, protecting privacy while maintaining verification reliability.
Solution Approach 2:
The UE uses a pseudonym (a copy or representation of its identity) instead of its real identity for authentication. The pseudonym is cryptographically linked to the user's legitimate credentials through the issuer's signature, allowing verification without exposing the user's actual identity information.
3Adaptability or versatility
If the network implements ABC credential verification, then access is enabled for unsubscription UEs, but system complexity increases
Solution Approach 1:
The ABC credential structure is designed to be universal and can be used by both subscription and unsubscription UEs. The same credential format and verification process handles different access scenarios, reducing the need for separate complex authentication systems for different user types.
Data Source
AI summary
Various aspects of the present disclosure relate to attribute-based credentials for resource access. An apparatus, such as a UE, communicates a registration request message for registration of the apparatus to a wireless communication network, the registration request message including a credentials indication associated with a credential. The apparatus receives a response message including a presentation policy for registration to the wireless communication network, and communicates a presentation token generated based at least in part on the presentation policy, the presentation token including proof information for a private key. The apparatus receives an authentication challenge, and generates, based at least in part on the authentication challenge, an authentication result using a root key and a subscription identity from the credential.