Communication Device Security Parameter Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In communication networks, especially with 3GPP CT4 specifications, there is a lack of security mechanisms to ensure the legitimacy and authorization of devices attempting to modify or establish connections, particularly after a previous connection has been completed, leading to potential attacks and outages.
Innovation Solution
A method where a device determines the validity of a connection request by comparing the security parameters of the new request with those of a previous connection, ensuring that the parameters are identical before establishing the connection, thereby strengthening security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate N32-c TLS connection and N32-f TLS connection are defined in CT4 specifications, then connection security is improved, but device complexity increases due to multiple connection management requirements
Solution Approach 1:
The patent merges the security verification logic for N32-c and N32-f connections by introducing a unified security parameter comparison mechanism. The first device compares security parameters from the second device with stored parameters from previous connections, applying the same verification logic across different connection types, thereby reducing management complexity while maintaining security.
Solution Approach 2:
The patent implements preliminary security verification by storing security parameters from completed connections before new connection requests arrive. When a new connection request is received, the device retrieves and compares these pre-stored parameters with the new request, enabling rapid security validation without complex real-time analysis.
2Reliability
If security parameter verification is performed for every connection request, then connection legitimacy is improved, but processing time increases
Solution Approach 1:
The patent applies partial verification by comparing only the essential security parameters (such as TLS certificates and security algorithms) from the connection request against stored parameters, rather than performing a complete re-verification of all security attributes. This selective comparison maintains legitimacy verification while reducing processing time.
Solution Approach 2:
The patent uses copying by storing security parameters from previously completed connections in a repository. When new connection requests arrive, the device retrieves these stored parameter copies and compares them with the new request, avoiding the need to re-generate or re-verify all security parameters from scratch, thus reducing establishment time while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present disclosure relate to method, device and computer readable media for communications. A first device receives, from a second device, a request for establishment of a connection between the first device and the second device. If a first set of security parameters associated with the connection is identical to a second set of security parameters associated with a previous connection which was completed between the first device and the second device, the first device performs the establishment of the connection.