False Base Station Detection via OTDOA Distance Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current false base station (BS) defense mechanisms require modifications to wireless communication protocols and core network components, leading to high engineering costs and inefficiencies.

Innovation Solution

A threat detection apparatus and method that utilize observed time difference of arrival (OTDOA) messages and measurement reports from user equipment (UE) to determine if it connects to a false BS without modifying existing protocols, by calculating positions and distances to verify the authenticity of serving BSs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication mechanisms (e.g., digital signature with timestamp) are adopted to detect false BS, then the ability to detect false BS is improved, but the device complexity and engineering cost increase due to protocol modifications

Engineering Contradiction:
Improvefalse BS detection capabilityVSAvoidprotocol modification complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system uses the UE's own positioning measurement messages (OTDOA) to detect false BS. The UE independently generates and reports its positioning data, which the network then verifies against the actual serving BS identity, eliminating the need for external authentication protocols

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The network uses the UE's positioning measurement report as an intermediary to indirectly verify the authenticity of the serving BS. By comparing the BS identity in the measurement report with the actual serving BS identity, the system detects false BS without direct authentication

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication mechanisms are adopted to detect false BS, then the false BS detection capability is improved, but the loss of time and productivity increase due to firmware updates and system modifications

Engineering Contradiction:
Improvefalse BS detection capabilityVSAvoidfirmware update time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The existing positioning functionality of the UE is leveraged to provide false BS detection. The UE continues its normal positioning operations while simultaneously enabling detection, eliminating the need for separate authentication protocol implementations and firmware updates

Inventive Principle:
Principle #25Self-service

3Reliability

If authentication mechanisms are adopted to detect false BS, then the false BS detection capability is improved, but the ease of operation and ease of manufacture worsen due to protocol modification requirements

Engineering Contradiction:
Improvefalse BS detection capabilityVSAvoidsystem implementation ease
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The system repurposes the UE's existing positioning measurement functionality for false BS detection. No new authentication protocols or firmware updates are needed - the system simply verifies whether the BS identity reported in positioning measurements matches the actual serving BS

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The positioning measurement mechanism serves dual purposes: normal positioning functionality and false BS detection. The same OTDOA measurement process provides both location information and authentication verification, eliminating the need for separate authentication infrastructure

Inventive Principle:
Principle #6Universality (Multi-functionality)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enables effective detection of false BS connections without protocol modifications, reducing costs and improving economic efficiency by using existing network infrastructure.

Implementation Method 1

calculating a position of a user equipment (UE) according to the OTDOA message

Methodology Applied
Scientific EffectTime of Flight: Time of Flight

Implementation Method 2

calculating a first distance between the UE and the BS according to the measurement report message

Methodology Applied
Scientific EffectTime of Flight: Time of Flight

Data Source

PatentUS11368846B2Threat detection apparatus and threat detection method therefor for wireless communication system
Publication Date: 2022.06.21 INSTITUTE FOR INFORMATION INDUSTRY
  • US11368846B2 patent drawing
  • US11368846B2 patent drawing
  • US11368846B2 patent drawing

AI summary

A threat detection apparatus and a threat detection method thereof for a wireless communication system are provided. The threat detection apparatus receives an observed time difference of arrival (OTDOA) message for positioning a user equipment (UE) from a serving base station (BS), and determines that the UE connects to a false BS when the identity of the serving BS is not on the identity list. If the identity of the serving BS is on the identity list, the threat detection apparatus calculates a first distance according to the measurement report message transmitted from the UE, and calculates a second distance between the UE and the serving BS according to the OTDOA message. When the difference between the first distance and the second distance is larger than a threshold, the threat detection apparatus determines that the UE connects to the false BS.