Emergency Call Attestation Routing for Unsigned PSAP Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for prioritizing emergency calls in cellular networks are inefficient due to the inability of some network components to confirm cryptographically signed identity attestation, leading to wasted time and inefficiencies when not all parts of the call routing process support cryptographic identity verification.
Innovation Solution
Implementing selective identity attestation by querying a Gateway Mobile Location Center (GMLC) to determine if the destination Public Safety Answering Point (PSAP) supports emergency call signing, and adjusting the call processing accordingly to remove or maintain headers based on this support, thereby optimizing call routing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic identity attestation headers are added to all emergency call requests, then call security and identity verification are improved, but call routing efficiency deteriorates due to unnecessary processing steps when the destination does not support cryptographic verification
Solution Approach 1:
The patent applies local quality by making the identity attestation optional rather than universal. The system queries the GMLC to determine whether the specific destination network supports cryptographic verification, and only adds attestation headers when needed. This resolves the contradiction by applying security measures locally to compatible networks while allowing faster routing to networks that don't support verification.
Solution Approach 2:
The patent implements dynamics by making the call routing process adaptive based on destination capabilities. The system dynamically queries the GMLC to check cryptographic support and adjusts the call request accordingly - adding headers only when the destination supports verification. This dynamic approach optimizes both security and efficiency based on real-time network conditions.
2Reliability
If cryptographic signing is performed for all emergency calls, then identity authentication reliability is improved, but call handling time increases due to unnecessary signing operations
Solution Approach 1:
The patent applies preliminary action by querying the GMLC about cryptographic support capabilities before initiating the call signing process. This advance check prevents unnecessary cryptographic operations from being performed when the destination doesn't support verification, thereby reducing call handling time while maintaining authentication reliability where needed.
Solution Approach 2:
The system applies cryptographic signing locally only to calls destined for networks that support verification. By checking destination capabilities in advance and applying signing only where needed, the patent eliminates wasted time on unnecessary cryptographic operations while maintaining security where required.
3Reliability
If identity attestation headers are always included in call requests, then security against spoofing is improved, but network compatibility deteriorates when routing through components that do not support cryptographic verification
Solution Approach 1:
The patent implements dynamics by making the call request adaptive to destination capabilities. The system dynamically determines whether to include attestation headers based on whether the destination network supports cryptographic verification. This resolves the contradiction by maintaining spoofing protection where needed while ensuring compatibility with networks that don't support verification.
Solution Approach 2:
The patent applies spoofing protection locally to only those network segments that support cryptographic verification. By querying the GMLC and conditionally adding headers based on destination capabilities, the system maintains security where possible while ensuring broad network compatibility.
Data Source
AI summary
Systems and methods are provided for selective attestation for emergency calls. An example method may include receiving a call request for a wireless device from a proxy server. The method may further include determining whether the destination network for the call request supports emergency call signing. The method may further include, in response to determining that the destination network for the call request does not support emergency call signing, removing identity attestation headers from the call request.