Concealed Identifier Registration Against SUPI Guessing Attacks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Adversaries can launch SUPI guessing attacks to determine valid Subscription Permanent Identifiers (SUPIs) in wireless networks by observing network responses to Registration Request messages, potentially compromising user privacy.

Innovation Solution

A wireless communication method that determines a concealed identifier based on a permanent identifier and a check value, encrypting it for transmission in a registration procedure, and includes a wireless network node that verifies the identifier and check value to ensure secure registration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the network responds to Registration Request messages differently based on SUPI validity, then authentication can be performed, but adversaries can launch SUPI guessing attacks to determine valid SUPIs

Engineering Contradiction:

Improveauthentication reliabilityVSAvoidSUPI guessing attack vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a concealed identifier (SUCI) as an intermediary between the permanent identifier (SUPI) and the network response. The SUCI is generated by encrypting the SUPI with the home network's public key, so that network responses based on SUCI validity do not reveal information about SUPI validity to adversaries. This mediator prevents the harmful feedback loop that enables guessing attacks while maintaining authentication reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the parameter used in registration requests from the plaintext permanent identifier (SUPI) to an encrypted concealed identifier (SUCI). This parameter transformation ensures that network responses based on identifier validation do not leak information about the validity of guessed identifiers, thereby preventing SUPI guessing attacks while maintaining reliable authentication.

Inventive Principle:

Principle #35Parameter changes

2Ease of operation

If permanent identifiers are transmitted in clear text for registration, then registration procedure is simple, but user privacy is compromised

Engineering Contradiction:

Improveregistration procedure simplicityVSAvoiduser privacy loss

Core Design Contradiction:

Ease of operationVSLoss of information

Solution Approach 1:

The patent uses the concealed identifier (SUCI) as an intermediary that preserves user privacy while enabling the registration procedure. The SUCI is constructed by encrypting the permanent identifier (SUPI) with the home network's public key, allowing the network to process registration requests without exposing the actual SUPI. This maintains operational simplicity while preventing privacy loss.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical transmission of plaintext permanent identifiers with a cryptographic substitution system. Instead of sending SUPI in clear text, the system uses public key encryption to transform SUPI into SUCI, substituting the direct identification mechanism with a privacy-preserving cryptographic representation that still enables network processing.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12471050B2Wireless communication method for registration procedure

Publication Date: 2025.11.11 ZTE CORP

AI summary

The present disclosure relates to a wireless communication method, systems and devices for a registration procedure. The wireless communication method for use in a wireless terminal includes determining a concealed identifier based on a permanent identifier and a check value. A message with the concealed identifier for a registration procedure is transmitted to a wireless network node.