False Base Station Detection Using Signed System Information
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication systems, unauthorized network devices (false base stations) can modify system information, compromising communication security, as the terminal device cannot verify the authenticity of received information during initial network access.
Innovation Solution
A method and apparatus for detecting false base stations by incorporating signatures and timestamps in system information, allowing the network and terminal devices to verify authenticity through signature checking and timestamp validation, reducing signaling overheads by reusing existing messages in the random access process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If system information is broadcast by network device without digital signature, then the network device can send system information to terminal device, but the terminal device cannot verify the authenticity of the system information and is vulnerable to false base station attacks
Solution Approach 1:
The network device performs preliminary actions by generating a digital signature and timestamp before broadcasting system information. The signature is created using the network device's private key and the timestamp records the generation time, ensuring that the system information is authentic and has not been tampered with before being sent to the terminal device.
Solution Approach 2:
The digital signature acts as an intermediary mechanism between the network device and terminal device. It provides a mathematical proof of authenticity without requiring direct physical verification, allowing the terminal device to trust the system information originated from the legitimate network device.
2Reliability
If the terminal device checks the timestamp difference to prevent replay attacks, then communication security is improved, but the authentication process becomes more complex
Solution Approach 1:
The terminal device performs self-service by independently verifying the timestamp difference and digital signature using its own resources. The terminal device compares the current time with the timestamp in the system information and verifies the signature using the network device's public key, without requiring additional authentication servers or complex verification processes.
3Reliability
If the network device signs private information to obtain a second signature, then the terminal device can verify the network device's identity, but the signaling overhead increases
Solution Approach 1:
The network device performs partial action by signing only the necessary private information (such as identity identifiers) rather than the entire system information block. This selective signing approach provides sufficient verification capability while minimizing the amount of data that needs to be transmitted and processed.
Data Source
AI summary
Embodiments of this application provide a method and an apparatus for detecting a false base station. The method includes: A network device sends system information to a terminal device, where the system information includes a first signature of the system information and a first timestamp, and the first timestamp identifies time at which the network device generates the first signature. The network device receives private information from the terminal device. The network device signs the private information of the terminal device by using a private key corresponding to the network device, to obtain a second signature. The network sends the second signature to the terminal device. According to the foregoing method, the terminal device can accurately verify whether the terminal device is attacked by a false base station, to improve communication security.