Backhaul Radio Link Failure Authenticity Verification in IAB Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current 5G mobile communication systems lack protection for Backhaul Radio Link Failure (BH-RLF) indications, making them vulnerable to attacks that can trigger false BH-RLF recoveries, leading to service disruptions and reputation loss.
Innovation Solution
An apparatus and method are introduced to verify the authenticity of BH-RLF indications using a unique, secret key shared among IAB-Donor, IAB-parent node, and IAB-child node, and by employing hashing and verification procedures to protect the BH-RLF indication from tampering.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If BH-RLF indication is transmitted without protection, then device complexity is reduced and ease of operation is improved, but reliability deteriorates due to vulnerability to fake attacks
Solution Approach 1:
The patent applies preliminary action by pre-establishing a secret key between the IAB-donor and IAB-node before BH-RLF indication transmission. This key is used to generate a verification value in advance, which is then included with the BH-RLF indication. The receiving node can verify authenticity using this pre-shared key without requiring complex real-time authentication protocols.
Solution Approach 2:
The patent introduces a verification value as an intermediary element that mediates between the BH-RLF indication and the secret key. This verification value, generated through hashing the secret key with the BH-RLF indication, serves as a trusted intermediary that proves authenticity without requiring the receiving node to directly handle or store the secret key itself.
2Reliability
If verification procedure is implemented, then reliability is improved by preventing fake BH-RLF attacks, but device complexity increases due to additional verification steps
Solution Approach 1:
The patent replaces complex mechanical verification systems with a cryptographic hashing mechanism. Instead of implementing complex challenge-response protocols or mutual authentication sequences, the system uses a hash function to generate a verification value from the secret key and BH-RLF indication. This substitution dramatically simplifies the verification process while maintaining high reliability.
Solution Approach 2:
The patent changes the parameter of verification from complex multi-step protocols to a simple hash-based verification value. By transforming the verification mechanism into a parameter-based approach where the verification value is simply compared against an expected hash result, the system achieves high reliability with minimal processing complexity.
3Object-affected harmful factors
If no protection mechanism is used, then ease of manufacture and deployment is improved, but harmful factors increase due to service disruptions from false attacks
Solution Approach 1:
The patent applies preliminary anti-action by proactively protecting the BH-RLF indication against fake attacks through pre-shared secret keys and verification values. This preventive measure counteracts potential harmful factors before they can manifest, ensuring that even if an attacker attempts to send fake BH-RLF indications, the attack will be detected and neutralized by the verification mechanism.
Data Source
AI summary
The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein provide an apparatus and method for verifying authenticity of a BH-RLF. A method is provided for using a new message to verify the authenticity of the BH-RLF. A method is provided for using existing and/or message over an F1AP and an RRC to verify the authenticity of the BH-RLF. A method is provided for using a hash based procedure for protection of the BH-RLF indication. A method is provided for generating a unique secret key at an parent IAB node and a child IAB node to protect the BAP control messages. Further, a method is provided for re-using ICMP ping messages to check the destination availability based on a received BH-RLF indication.