Hybrid HeNB Handover Verification Using CSG ID and Access Mode
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing wireless communication systems lack effective methods to verify the identity of Home eNBs (HeNBs) during handover procedures, making them susceptible to attacks that compromise network security and user safety.
Innovation Solution
Implement a method where the Mobile Management Entity (MME) and HeNB Gateway (GW) verify the validity of the access mode and CSG ID of target HeNBs through various handover messages, ensuring the HeNBs are legitimate before allowing handovers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the HeNB GW does not verify the HeNB ID during registration, then the registration process is simple and fast, but the network becomes vulnerable to attacks by malicious HeNBs
Solution Approach 1:
The patent applies preliminary action by having the MME verify the HeNB ID and access mode during the handover preparation phase, before the actual handover occurs. This allows the system to maintain simple registration procedures while still performing security verification at the appropriate time (during handover setup), preventing malicious HeNBs from compromising the network.
2Reliability
If the MME and HeNB GW verify the access mode and CSG ID of target HeNBs during handover, then network security is improved, but the handover procedure complexity increases
Solution Approach 1:
The patent applies universality by utilizing existing handover message structures (Handover Request, Handover Request Acknowledge) to carry additional verification information (access mode, CSG ID). Rather than creating separate verification procedures, the existing handover signaling is enhanced to perform multiple functions: both handover coordination and security verification, thereby improving security without significantly increasing procedural complexity.
3Adaptability or versatility
If the system allows hybrid-HeNB to serve both CSG UEs and non-CSG UEs, then access service enrichment is achieved, but access control security is compromised
Solution Approach 1:
The patent applies local quality by implementing differentiated access control based on the access mode of the target HeNB. For CSG-mode HeNBs, the system verifies CSG ID and restricts access to authorized CSG UEs only. For hybrid-mode HeNBs, the system verifies access mode information and applies appropriate access control policies. This localized verification approach allows the system to maintain versatile access services while applying appropriate security controls specific to each HeNB type.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method to perform a handover for a user equipment, UE, by a mobile management entity, MME, in a wireless communication system, the method comprising: receiving, from a source evolved node b, eNB, a handover required message including a closed subscriber group, CSG, identity, ID, of a cell served by a target home eNB, HeNB, and an access mode of the target HeNB; transmitting, to the target HeNB, a handover request message including the CSG ID and a CSG membership status for indicating that the UE is a CSG member; receiving, from the target HeNB, a handover request acknowledgement message including the CSG ID and the access mode of the target HeNB; determining that the target HeNB is a hybrid cell based on the access mode of the target HeNB included in the handover request acknowledgement message; performing a membership verification for the UE based on the CSG ID included in the handover required message when the target HeNB is the hybrid cell; and transmitting, to the source eNB, a handover command message.