Capability Information Tokens Without Access Stratum Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for protecting capability information transfer in wireless communication networks are inadequate when access stratum security is not activated, leaving devices vulnerable to tampering and consuming excessive battery power or delaying network optimizations.

Innovation Solution

The solution involves using non-access stratum security and multiple protocol layers to protect capability information transfer, generating and verifying tokens based on input parameters, ensuring the provided information corresponds to the network's request, even without access stratum security activation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access stratum security is activated to protect capability information transfer, then security is improved, but device complexity and battery consumption increase

Engineering Contradiction:

Improvecapability information securityVSAvoidsecurity activation requirement

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a token as an intermediary element that mediates between the capability information and the security mechanism. The token is generated based on the capability information and a secret key, and is transmitted along with the capability information. The network verifies the token to ensure the capability information has not been tampered with, without requiring full access stratum security activation. This intermediary token mechanism provides security while reducing the complexity and battery consumption associated with full security activation.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If access stratum security is activated to protect capability information transfer, then security is improved, but battery consumption increases

Engineering Contradiction:

Improvecapability information securityVSAvoidwireless device battery consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The token acts as a lightweight security intermediary that requires minimal processing compared to full access stratum security activation. The wireless device generates the token using a hash function or similar lightweight cryptographic operation on the capability information combined with a secret key, rather than establishing full security context and performing extensive cryptographic operations. This significantly reduces battery consumption while still providing tamper detection capability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Instead of applying full security measures (excessive action) to all capability information transfers, the patent applies a partial security mechanism - the token verification - only when needed for tamper detection. The network can choose to verify the token selectively rather than always activating full access stratum security, reducing unnecessary battery consumption on both the device and network side.

Inventive Principle:

Principle #16Partial or excessive action

3Use of energy by moving object

If capability information is transmitted without security protection, then battery consumption is reduced and device complexity is lowered, but security deteriorates leaving devices vulnerable to tampering

Engineering Contradiction:

Improvewireless device battery consumptionVSAvoidcapability information integrity

Core Design Contradiction:

Use of energy by moving objectVSReliability

Solution Approach 1:

The patent introduces a token as a lightweight intermediary that provides integrity verification without requiring full security activation. The token is generated by the wireless device using the capability information and a secret key, and is transmitted with the capability information. The network verifies the token to detect tampering. This approach maintains low battery consumption and device complexity while improving reliability through tamper detection.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If known security approaches are used, then security is improved, but adaptability deteriorates when AS security is not supported by some devices

Engineering Contradiction:

Improvecapability information securityVSAvoidcompatibility with devices lacking AS security support

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent creates a universal security mechanism that works across all device types regardless of whether they support access stratum security. The token-based approach uses only basic cryptographic operations (hash functions or lightweight encryption) that can be implemented on any device, making it universally applicable. The network can verify tokens from all devices uniformly, providing consistent security adaptation across diverse device capabilities.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12470928B2Protecting capability information transfer in a wireless communication network

Publication Date: 2025.11.11 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

AI summary

A wireless device (14) receives, over an access stratum (18), a capability enquiry (24) that requests the wireless device (14) to transmit capability information (22) indicating one or more capabilities of the wireless device (14). After receiving the capability enquiry (24), the wireless device (14) generates a token (26) using one or more input parameters (28) and transmits the token (26). The one or more input parameters (28) include at least some part of the capability enquiry (24) and/or at least some of the capability information (22). In some embodiments, the token (26) is generated or transmitted based on a non-access stratum security context (30) at the wireless device (14). The wireless device (14) also transmits the capability information (22) over the access stratum (18).