Identity-Based Cryptography for 5G Transmission Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data transmission in 4G and 5G networks lacks effective protection for user privacy, as plaintext transmission and reliance on temporary identities increase network complexity and signaling overhead, while existing security measures in 5G networks fail to adequately protect connectionless data and user identity information.
Innovation Solution
A transmission data protection system utilizing identity-based cryptography (IBC) technology, where user equipment (UE) and access points use public and private keys for encryption and decryption of data, ensuring secure transmission by encrypting data with global public keys and private keys stored prestored data, and authenticating messages using message authentication codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If plaintext transmission is used for data communication between UE and network, then transmission simplicity is maintained, but user privacy and identity information are exposed to attackers
Solution Approach 1:
The patent applies preliminary action by pre-establishing security contexts and authentication credentials between the UE and network before actual data transmission begins. The network authentication and security parameter configuration are performed in advance, so that when data transmission occurs, encryption and authentication are already in place, preventing privacy leakage while maintaining transmission efficiency
2Object-affected harmful factors
If temporary identity information (PMSI) is used to protect UE identity, then permanent identity (IMSI) privacy is protected, but network side server complexity and implementation costs increase
Solution Approach 1:
The patent extracts the identity protection function from the complex PMSI management system and implements it through cryptographic authentication. Instead of relying on the network side to manage and update temporary identities, the UE's identity is protected through cryptographic binding of the security context to the UE identity, eliminating the need for complex identity management servers while maintaining protection against IMSI eavesdropping
3Reliability
If cookie with security context is used for connectionless data transmission, then data security is improved, but signaling overheads increase due to large cookie content
Solution Approach 1:
The patent segments the security context into essential and non-essential components. Only the critical authentication credentials and security parameters are included in the signaling exchange, while less critical information is either derived locally or transmitted through more efficient channels. This segmentation reduces signaling overhead while maintaining the security necessary for connectionless data transmission
4Reliability
If cookie includes user identity information for security context, then authentication is enabled, but sensitive privacy information is exposed in the cookie
Solution Approach 1:
The patent applies asymmetry by using cryptographic key pairs where the UE possesses private keys that prove its identity without exposing the actual identity information. The authentication mechanism is asymmetric in that the UE can authenticate itself to the network without revealing its identity, and the network can verify authentication without learning the UE's private identity information, thus protecting privacy while enabling authentication
Data Source
AI summary
A system for transmission data protection includes user equipment (UE) and an access point. The access point sends a broadcast message that carries a public key for encryption. The UE receives and stores the public key for encryption. The UE obtains a global public key or a private key corresponding to the UE, and protects transmission data using the public key for encryption and the global public key or the private key corresponding to the UE.