Edge Network Authentication Using Dynamic UE Computing Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication networks face challenges in providing low latency and high performance computing for applications like VR and IoT services, requiring efficient and robust dual end authentication between User Equipment (UE) and edge computing networks to establish a trusted computing environment.
Innovation Solution
A method for UE authentication and authorization in edge data networks involves generating a device computing key based on a unique identifier, creating a registration request signature, and establishing secure communication links using encryption keys to authenticate and authorize terminal devices within edge computing networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If traditional authentication methods are used in communication networks, then device connectivity is maintained, but latency increases and authentication robustness decreases for edge computing applications
Solution Approach 1:
The authentication process is segmented into multiple independent stages: device computing key generation based on unique identifier, registration request signature creation using encryption key, and multi-server verification (exposure server and configuration server). This segmentation allows parallel processing of authentication steps, reducing overall latency while maintaining robust security through layered verification.
Solution Approach 2:
The device computing key is generated preliminarily based on the device's unique identifier before the actual authentication process. This pre-computed key enables faster authentication transactions by avoiding complex key generation during the authentication exchange, thereby reducing latency without compromising security robustness.
2Reliability
If security measures are strengthened for edge computing authentication, then authentication robustness improves, but device complexity and processing overhead increase
Solution Approach 1:
The authentication system implements self-service mechanisms where the device autonomously generates its computing key from its unique identifier and creates its own registration request signature using its encryption key. This eliminates the need for complex key distribution infrastructure and reduces server-side verification complexity, thereby improving robustness without proportionally increasing device complexity.
Solution Approach 2:
The device computing key serves multiple functions: it authenticates the device to the exposure server, authorizes service requests to the configuration server, and enables secure communication channels. This multi-functionality reduces the need for separate authentication mechanisms, simplifying the overall authentication process while maintaining high security robustness.
Data Source
AI summary
This disclosure generally relates to User Equipment (UE) authentication and authorization with an edge data network in communication networks. Such authentication and authorization may be based on the generation and application of an edge computing key for a UE. Such edge computing key may be used for bi-directional authentication and may be dynamically updated during various stages of the authentication and authorization process. The authentication and authorization supports a UE connected to multiple Access Management Functions (AMFs) belonging to different Public Land Mobile Networks (PLMNs).