IAB Node Identity Mapping for Secure 5G Backhaul Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for authenticating Integrated Access Backhaul (IAB) nodes in 5G networks are vulnerable to impersonation attacks, particularly in open environments, as authentication credentials can be transferred without authorization, disrupting core network services.
Innovation Solution
Implementing a system that stores mapping information including UICC credentials, pre-authorized IAB-ME identities, and location information in network entities like UDM, AMF, EIR, and HSS, to authenticate and authorize IAB nodes by checking against stored authentication information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IAB nodes transmit full S-TFTs for every connection request, then connection authorization is comprehensive, but uplink signaling overhead and network resource consumption increase significantly
Solution Approach 1:
The patent extracts and transmits only the necessary identity information (such as IAB node ID or partial TFT content) from the complete S-TFT, rather than transmitting the entire S-TFT. This extraction approach maintains connection authorization reliability while significantly reducing uplink signaling overhead and network resource consumption.
Solution Approach 2:
The patent segments the S-TFT into essential identity information components that can be transmitted separately. By dividing the full S-TFT into manageable identity elements, the system achieves comprehensive authorization verification without the burden of transmitting complete TFT data, thus reducing signaling overhead while maintaining reliability.
2Reliability
If IAB nodes transmit full S-TFTs for every connection request, then connection authorization is comprehensive, but network resource consumption increases significantly
Solution Approach 1:
The patent extracts only the essential identity information from the complete S-TFT for transmission during connection requests. This extraction mechanism ensures that network resources are consumed minimally while still providing comprehensive authorization verification through the transmitted identity elements.
Solution Approach 2:
The patent applies partial action by transmitting only the necessary portion of S-TFT (identity information) rather than the complete TFT. This partial transmission approach is sufficient for connection authorization purposes, avoiding the excessive consumption of network resources that would result from transmitting full S-TFTs while maintaining authorization reliability.
3Ease of operation
If IAB nodes use traditional connection methods without identity-based authorization, then connection setup is simpler, but network security and unauthorized access prevention are compromised
Solution Approach 1:
The patent introduces identity information as an intermediary element in the connection authorization process. This intermediary mechanism enables secure authorization verification without significantly complicating the connection setup procedure, thus maintaining ease of operation while enhancing network security and preventing unauthorized access.
Solution Approach 2:
The patent implements preliminary action by pre-configuring identity information in IAB nodes before connection requests are made. This preliminary preparation allows for rapid and simple connection setup while ensuring that security authorization is already in place, thus maintaining both ease of operation and network security reliability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods for wireless communications are disclosed herein. In one embodiment, a wireless communication method includes storing, by a first network entity, mapping information and determining, by the first network entity, based on identification information and the mapping information, that a first node is authorized to connect to a network.