False Base Station Detection via Uplink Timing Windows

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless communication systems face challenges in detecting false base stations (FBS) that imitate legitimate base stations, leading to potential denial of service attacks by synchronizing user equipment (UE) with FBS instead of legitimate base stations, which can decode and drop transmissions.

Innovation Solution

A method for base stations and UEs to detect FBS by determining a window of time for uplink signal arrival and using timing advance thresholds to identify delayed signals, allowing for mitigation operations such as handover to different cells or updating communication parameters to avoid FBS.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a false base station repeats legitimate base station transmissions at higher power to synchronize user equipment, then the false base station can successfully imitate the legitimate base station and potentially launch denial of service attacks, but the detection capability of the network remains insufficient

Engineering Contradiction:
Improvenetwork securityVSAvoidfalse base station detection
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system performs preliminary detection actions by calculating expected time windows for uplink signals before FBS attacks occur. The network pre-determines the time window based on cell radius and propagation characteristics, enabling proactive detection rather than reactive response. This allows the network to identify FBS attempts before they can successfully synchronize UEs.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms where UEs report detected FBS conditions back to the network. The network uses this feedback information to adjust detection parameters, update time windows, and trigger mitigation operations. This continuous feedback loop enhances the detection capability and adapts to varying attack conditions.

Inventive Principle:
Principle #23Feedback

2Measurement precision

If the network monitors uplink signal timing to detect false base stations, then detection accuracy improves, but the system complexity and processing requirements increase

Engineering Contradiction:
Improvetime of arrival measurementVSAvoiddetection system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system changes the monitoring parameter from continuous signal analysis to discrete time window checking. Instead of analyzing every signal characteristic, the network only needs to verify whether uplink signals arrive within the pre-calculated time window. This parameter simplification reduces processing complexity while maintaining detection precision.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The system extracts only the critical timing information from the complex uplink signal stream. By focusing solely on the arrival time relative to the expected time window, the network isolates the most useful detection feature while filtering out unnecessary signal processing requirements. This extraction approach simplifies the detection system significantly.

Inventive Principle:
Principle #2Taking out (Extraction)

3Stability of the object's composition

If user equipment applies timing advance based on legitimate base station signals, then uplink synchronization is maintained, but the timing advance may be manipulated by false base stations to mask their presence

Engineering Contradiction:
Improveuplink synchronizationVSAvoidsynchronization authenticity
Core Design Contradiction:
Stability of the object's compositionVSReliability

Solution Approach 1:

The network performs preliminary verification of timing advance values against the pre-calculated time window before accepting UEs uplink transmissions. This preliminary check ensures that even if FBS manipulate timing advance, the network can detect inconsistencies and reject fraudulent synchronization attempts.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The time window acts as an intermediary verification mechanism between the UE's timing advance and the network's acceptance criteria. Rather than directly trusting the timing advance value, the network uses the time window as an intermediate check to validate whether the timing advance is consistent with legitimate propagation characteristics.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11716700B2False base station detection based on time of arrival or timing advance
Publication Date: 2023.08.01 QUALCOMM INC
  • US11716700B2 patent drawing
  • US11716700B2 patent drawing
  • US11716700B2 patent drawing

AI summary

A base station determines a window of time for arrival of uplink signals, wherein the window of time includes a start based on a first expected time of arrival for a first uplink signal from a first UE and an end based on a second expected time of arrival for a second uplink signal from a second UE. The base station detection detects a false base station, such as a L1 man-in-the-middle false base station, based on an uplink signal being received outside of the determined window of time for the arrival of uplink signals.