Emergency Text Message Hash Verification in Inactive UEs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile communication systems are vulnerable to overshadowing attacks where false emergency text messages are broadcasted, posing as legitimate messages, especially when user equipment (UEs) are in inactive or idle states, and current security solutions like hash values, symmetric keys, and asymmetric keys face challenges in managing keys efficiently in large-scale environments.
Innovation Solution
A method and apparatus for verifying emergency text messages using hash values by calculating and comparing hash values for System Information Blocks (SIBs) or Master Information Blocks (MIBs) during Radio Resource Control (RRC) connections or Access Stratum (AS) security mode procedures, even when UEs are in inactive or idle states, to determine message legitimacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hash values are used to verify emergency text messages, then message authenticity is improved, but device complexity increases due to additional verification procedures
Solution Approach 1:
The base station calculates and transmits the hash value of the emergency text message in advance through system information blocks (SIB) or master information blocks (MIB) before the UE receives the actual message. This preliminary action allows the UE to verify authenticity without performing complex real-time calculations, resolving the contradiction by shifting computational burden forward in time.
Solution Approach 2:
The patent introduces hash values as an intermediary element that mediates between the base station and UE for authentication purposes. Instead of direct complex verification procedures, the hash value serves as a simplified mediator that the UE can easily compute and compare, reducing verification complexity while maintaining reliability.
2Reliability
If key management solutions are implemented for large-scale environments, then security is improved, but resource overhead increases
Solution Approach 1:
Each UE independently calculates the hash value of the received emergency text message using the publicly available hash algorithm and compares it with the pre-transmitted hash value from the base station. This self-service approach eliminates the need for complex centralized key management infrastructure, achieving security without proportional resource overhead increases in large-scale environments.
Solution Approach 2:
The patent uses disposable, publicly available hash algorithms that do not require long-term key management or complex cryptographic infrastructure. The hash values are single-use verification tokens that can be easily generated and discarded, providing security with minimal resource overhead compared to traditional key management systems.
Data Source
AI summary
There is provided a method for verifying an emergency text message, performed by a base station, the method may comprise receiving a Radio Resource Control (RRC) Resume Request message from a mobile communication terminal in an inactive state that has received a broadcast message related to an emergency text message, establishing an RRC connection with the mobile communication terminal, receiving a message including a hash value from the mobile communication terminal with which the RRC connection has been established, verifying validity of the hash value included in the received message, and transmitting a message including information indicating receipt of a false emergency text message to the mobile communication terminal when the hash value included in the received message is determined to be invalid.