IAB Hop-by-Hop Security Using Donor-Distributed Symmetric Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In integrated access and backhaul (IAB) networks, there is a lack of secure communication mechanisms between IAB nodes, making them vulnerable to attacks such as fake backhaul link failure and flow control message injection, which can disrupt end-user services.
Innovation Solution
Establish secure communication between IAB nodes using symmetric keys derived from the access stratum security context, with the donor IAB node facilitating key distribution and message protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IAB nodes communicate directly without security mechanisms, then communication simplicity is maintained, but security and reliability deteriorate due to vulnerability to attacks
Solution Approach 1:
The donor IAB node acts as an intermediary that facilitates secure communication between IAB nodes by distributing symmetric keys. Instead of implementing complex security protocols between each pair of IAB nodes, the donor IAB node mediates the key distribution process, simplifying the overall security architecture while ensuring reliable protected communication.
Solution Approach 2:
The patent changes the security parameter from asymmetric key exchange (complex) to symmetric key distribution (simpler). By using symmetric keys that are distributed by the donor IAB node, the system achieves strong security with reduced computational complexity and simpler implementation at the IAB nodes.
2Reliability
If symmetric key distribution is implemented, then communication security is improved, but key management complexity increases
Solution Approach 1:
The donor IAB node serves as a central intermediary for key management, eliminating the need for complex distributed key management systems. Each IAB node only needs to store and use its assigned symmetric key, while the donor IAB node handles the generation and distribution of these keys, centralizing the complexity in a single entity.
Solution Approach 2:
Once symmetric keys are distributed by the donor IAB node, each IAB node autonomously uses these keys for message protection without requiring further intervention or complex coordination with other nodes. The keys are self-contained and enable independent secure communication between node pairs.
3Object-affected harmful factors
If security mechanisms are added to protect against attacks, then system security is improved, but processing overhead and complexity increase
Solution Approach 1:
The patent simplifies the security parameter from asymmetric cryptography (public/private key pairs, complex key exchange protocols) to symmetric cryptography (single shared key). This parameter change dramatically reduces the computational complexity and processing overhead while maintaining strong security against attacks such as message injection and tampering.
Solution Approach 2:
By using the donor IAB node as an intermediary for key distribution, the system avoids the need for complex peer-to-peer key exchange protocols between IAB nodes. The intermediary approach centralizes the security setup process, reducing the processing burden on individual IAB nodes during normal operation.
Data Source
AI summary
A method by an integrated access and backhaul, IAB, node and an IAB node for securely communicating with at least one second IAB node is provided. A connection is established a connection with a donor IAB node of a network. A first message including a symmetric key to use in securely communicating with the at least one second IAB node is received from the donor IAB node. A second message is transformed into a secure message using the symmetric key and a message protection algorithm. The secure message is transmitted to the at least one second IAB node.