Terminal Registration Using Dual Machine IDs for CU-Separated Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies do not effectively prevent unauthorized use of terminals that are CU-separated, particularly when a user-plane function is handled by a publicly accessible device.
Innovation Solution
A terminal acquires and transmits machine identification numbers to a network node during registration, enabling the network to verify and authorize both the user-plane and control-plane functions, ensuring only authorized use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If CU separation is applied to the terminal to enable flexible HMI deployment, then adaptability and versatility are improved, but security and reliability deteriorate due to susceptibility to unauthorized use
Solution Approach 1:
The terminal is segmented into two separate entities: a control-plane terminal (handling authentication and control functions) and a user-plane terminal (handling data transmission). This segmentation allows flexible deployment where the user-plane terminal can be a public display or shared device, while the control-plane terminal remains with the user for security. The network node verifies both terminals through machine identification numbers, enabling secure CU separation.
2Ease of operation
If the user-plane function is handled by a publicly accessible device, then ease of operation is improved, but security and reliability worsen due to unauthorized use risks
Solution Approach 1:
The control-plane terminal acts as an intermediary between the user and the public user-plane terminal. It establishes an association with the user-plane terminal and provides authentication credentials. The network node uses this intermediary relationship to verify that the public device is legitimately associated with an authorized user, enabling public accessibility while maintaining security through the mediating control-plane terminal.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A terminal includes: a reception unit configured to receive, from another terminal, a second terminal machine identification number; and a transmission unit configured to, in a registration procedure, transmit a first terminal machine identification number and the second terminal machine identification number to a network node apparatus.