Base Station SBI Gateway for Secure WTRU–Core Registration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face challenges in efficiently managing the distribution of control plane architecture and security in wireless networks, particularly in integrating service-based interfaces between wireless transmit/receive units and core networks.
Innovation Solution
Implementing a base station that functions as a service-based interface (SBI) gateway, enabling end-to-end SBI registration and authentication by transmitting specific RRC messages to authenticate and authorize wireless units within the core network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a base station operates as a traditional relay without SBI gateway functionality, then the control plane architecture remains simple and centralized, but security and efficiency in managing service-based interfaces between WTRUs and core networks deteriorate
Solution Approach 1:
The patent merges the SBI gateway functionality directly into the base station, combining traditional relay functions with new service-based interface capabilities. This integration allows the base station to simultaneously perform radio resource control and SBI message routing, enhancing security without requiring a separate gateway device.
Solution Approach 2:
The base station is designed with multi-functionality, serving both as a traditional radio access node and as an SBI gateway. It can handle both conventional control plane traffic and service-based interface messages, making it a universal node that improves security across multiple protocol layers.
2Reliability
If end-to-end SBI registration and authentication are implemented through the base station, then integration and authentication processes are enhanced, but message routing and processing complexity increase
Solution Approach 1:
The base station acts as an intermediary between WTRUs and the core network for SBI message exchange. It receives RRC messages from WTRUs, extracts embedded SBI registration requests, routes them to appropriate core network functions, and manages the authentication process, thereby enhancing security while distributing processing complexity.
Solution Approach 2:
The authentication and registration process is segmented into distinct phases: RRC message exchange at the radio interface, SBI message extraction and routing at the base station, and core network authentication. This segmentation allows each component to focus on specific tasks, improving overall authentication reliability while managing complexity through functional separation.
3Productivity
If the base station routes SBI messages between WTRUs and core network, then integration efficiency improves, but control plane architecture complexity increases
Solution Approach 1:
The base station performs preliminary actions by pre-configuring SBI message routing paths and authentication parameters before actual WTRU connections are established. It prepares the control plane infrastructure in advance, enabling efficient SBI message routing once connections are active, thereby improving integration efficiency while managing architecture complexity through proactive setup.
Data Source
AI summary
Methods and apparatus are described. A method, implemented in a base station, includes transmitting information in a system information block (SIB). The information includes an indication that the base station is configured to operate as a service based interface (SBI) gateway between one or more wireless transmit/receive units (WTRUs) and an SBI capable core network. The base station receives, from a WTRU of the one or more WTRUs, a first radio resource control (RRC) message. The first RRC message includes an end-to-end SBI registration request message for the SBI capable core network. The base station send a first SBI message, to an authentication and authorization function (AAF) of the SBI capable core network. The first SBI message includes the end-to-end SBI registration request message and an indication of a type of authentication and authorization requested.