Distributed Cellular Identity Management for Secure Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication standards using symmetric keys for encrypting radio-frequency signals are vulnerable to key mismanagement and cyberattacks, which can lead to unauthorized access and privacy breaches.
Innovation Solution
A distributed network cellular identity management system that employs a DNCIM server with a lookup table containing UE and CN public keys and subscriber identifiers, allowing UE and authentication servers to generate asymmetric cipher keys for secure communication, eliminating the need for a single symmetric key to be stored securely in two locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric keys are used for encrypting radio-frequency signals, then encryption capability is provided, but key mismanagement and vulnerability to cyberattacks occur
Solution Approach 1:
The patent transitions from symmetric key cryptography to asymmetric key cryptography. Each user equipment (UE) and network node generate asymmetric key pairs (private and public keys) where the public key can be shared openly while the private key remains secret. This asymmetric approach eliminates the key distribution and management vulnerabilities inherent in symmetric systems, as each party uses their own private key for encryption and decryption without requiring secure key exchange mechanisms.
Solution Approach 2:
The patent segments the key management function across multiple distributed entities rather than centralizing it. Each UE maintains its own private key, and network nodes maintain their own private keys. The public keys are distributed through a key management server, but the critical private keys remain segmented and isolated at different locations. This segmentation prevents a single point of failure and eliminates the vulnerability of storing a single symmetric key in multiple locations.
2Reliability
If a single symmetric key is stored securely in two locations, then key availability is improved, but the risk of cyberattacks and key distribution vulnerabilities increases
Solution Approach 1:
The patent implements self-service key management where each UE and network node generates and manages its own asymmetric private keys independently. The key management server only handles the distribution of public keys, not the sensitive private keys. Each entity uses its own private key for encryption and decryption operations, eliminating the need for a centralized key storage system and the associated complexity of securing multiple key copies.
3Reliability
If asymmetric keys are generated based on public keys and private keys, then key security is enhanced, but computational complexity increases
Solution Approach 1:
The patent employs parameter changes in the form of different key sizes and cryptographic algorithms adapted to the specific requirements of each communication scenario. The system can select appropriate key lengths (e.g., 2048-bit or 4096-bit RSA keys, or elliptic curve keys) based on the security requirements and computational resources available at each UE and network node. This allows optimization between security strength and computational complexity for different deployment scenarios.
Data Source
AI summary
This document describes techniques and apparatuses for distributed network cellular identity management. In particular, a distributed-network cellular-identity-management (DNCIM) server includes a lookup table that stores and relates together a user-equipment (UE) public key associated with a UE private key, a core-network (CN) public key associated with a CN private key, and a subscriber identity. Using the DNCIM server, the UE and an authentication server respectively generate two different (e.g., asymmetric) cipher keys based on the UE private key and the CN public key, and the UE public key and the CN private key. The UE and the authentication server can also authenticate one another by referencing information in the lookup table of the DNCIM server. Using these cipher keys, the UE and the authentication server can establish secure communications with each other.