Communication Device Security Parameter Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In communication networks, especially with 3GPP CT4 specifications, there is a lack of security mechanisms to ensure the legitimacy and authorization of devices attempting to modify or establish connections, particularly after a previous connection has been completed, leading to potential attacks and outages.

Innovation Solution

A method where a device determines the validity of a connection request by comparing the security parameters of the new request with those of a previous connection, ensuring that the parameters are identical before establishing the connection, thereby strengthening security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If separate N32-c TLS connection and N32-f TLS connection are defined in CT4 specifications, then connection security is improved, but device complexity increases due to multiple connection management requirements

Engineering Contradiction:
Improveconnection securityVSAvoidconnection management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the security verification logic for N32-c and N32-f connections by introducing a unified security parameter comparison mechanism. The first device compares security parameters from the second device with stored parameters from previous connections, applying the same verification logic across different connection types, thereby reducing management complexity while maintaining security.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent implements preliminary security verification by storing security parameters from completed connections before new connection requests arrive. When a new connection request is received, the device retrieves and compares these pre-stored parameters with the new request, enabling rapid security validation without complex real-time analysis.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If security parameter verification is performed for every connection request, then connection legitimacy is improved, but processing time increases

Engineering Contradiction:
Improveconnection legitimacyVSAvoidconnection establishment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies partial verification by comparing only the essential security parameters (such as TLS certificates and security algorithms) from the connection request against stored parameters, rather than performing a complete re-verification of all security attributes. This selective comparison maintains legitimacy verification while reducing processing time.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The patent uses copying by storing security parameters from previously completed connections in a repository. When new connection requests arrive, the device retrieves these stored parameter copies and compares them with the new request, avoiding the need to re-generate or re-verify all security parameters from scratch, thus reducing establishment time while maintaining security.

Inventive Principle:
Principle #26Copying

Data Source

PatentEP4270870A1Method, device and computer readable medium for communications
Publication Date: 2023.11.01 NOKIA TECHNOLOGIES OY
  • EP4270870A1 patent drawingFigure 1
  • EP4270870A1 patent drawingFigure 2
  • EP4270870A1 patent drawingFigure 3

AI summary

Embodiments of the present disclosure relate to method, device and computer readable media for communications. A first device receives, from a second device, a request for establishment of a connection between the first device and the second device. If a first set of security parameters associated with the connection is identical to a second set of security parameters associated with a previous connection which was completed between the first device and the second device, the first device performs the establishment of the connection.