Femtocell Rejection List for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current femtocell systems are vulnerable to denial-of-service attacks due to the lengthy verification process, which allows malicious users to disrupt normal access and consume network bandwidth through repeated log-in attempts, especially in environments with a large number of subscribers.
Innovation Solution
Implementing a femtocell and femtocell gateway that utilize a rejection list to immediately terminate wireless connections for malicious users by recording subscriber identification codes after receiving a subscriber access rejection message, thereby bypassing the need for repeated verification processes and reducing the impact of such attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the verification message is transmitted through the femtocell, security gateway, and femtocell gateway to the core network server for processing, then the access control reliability is improved, but the verification duration becomes too long
Solution Approach 1:
The patent implements preliminary action by establishing a rejection list in the femtocell before the verification process completes. When a subscriber access rejection message is received from the core network server, the femtocell immediately records the subscriber identification code in the rejection list and terminates the wireless connection without allowing repeated verification attempts. This preliminary preparation of the rejection list enables rapid response to malicious users while maintaining the reliability of access control through the established verification pathway.
2Reliability
If the verification process is performed for each log-in attempt, then the access control reliability is improved, but the network transmission performance is degraded due to repeated verification messages
Solution Approach 1:
The patent applies feedback by implementing a rejection list mechanism that provides immediate feedback to the femtocell when a subscriber access rejection message is received. The femtocell stores the subscriber identification code in the rejection list and uses this feedback information to terminate wireless connections immediately without requiring repeated verification messages. This feedback loop maintains access control reliability while significantly improving network transmission performance by eliminating redundant verification attempts from malicious users.
3Speed
If the femtocell terminates the wireless connection immediately when the subscriber identification code is found in the rejection list, then the response speed is improved, but the device complexity increases due to the rejection list management
Solution Approach 1:
The patent implements self-service by enabling the femtocell to autonomously manage the rejection list without requiring continuous intervention from the core network server or external systems. The femtocell receives the subscriber access rejection message, automatically records the subscriber identification code in its local rejection list, and independently terminates wireless connections based on this stored information. This self-service capability achieves fast connection termination while minimizing the complexity increase by localizing the rejection list management within the femtocell itself.
Data Source
AI summary
A femtocell, a femtocell gateway and an access rejection method thereof are provided. A wireless network system comprises a wireless device, a plurality of the femtocells, the femtocell gateway and a core network server. The wireless device has a Subscriber Identification and the core network server stores a Closed Subscribers Group Identification of the femtocells. The femtocell gateway receives an access rejection message corresponding to the Subscriber Identification of the wireless device from the core network server, and transmits the access rejection message to the femtocells. Each femtocell records the Subscriber Identification in a rejection list thereof, and it is capable of adding/deleting Subscriber Identifications in its rejection list. When each femtocell receives the Subscriber Identification of the wireless device again and determines that the Subscriber Identification has been recorded in the rejection list thereof, each femtocell immediately terminates a wireless connection from the wireless device.