Identity Module Bonding Verification for MTC Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current management and security solutions for identity modules in radiotelephone systems, such as UICCs, are inadequate for preventing theft and fraudulent use, especially in remote or unmanned MTC terminal equipment, as they rely on human intervention or PIN locking mechanisms that are difficult to manage and secure.
Innovation Solution
A method and apparatus that verify identity modules by determining if they are in a bonded state, reading bonding identifiers, and comparing them with terminal equipment identifiers, shifting the modules and equipment into predetermined operating conditions if they match, thereby facilitating secure operation without human intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PIN locking mechanisms are used to safeguard identity modules, then security against theft is improved, but device complexity and ease of operation deteriorate due to manual PIN entry requirements
Solution Approach 1:
The terminal equipment automatically performs verification of the identity module using stored verification data, eliminating the need for manual PIN entry by the user. The system serves itself by autonomously comparing identification data and determining operational status.
Solution Approach 2:
Verification data is pre-stored in the terminal equipment during manufacturing or initial setup. This preliminary action enables automatic verification to occur without requiring user intervention during operation, resolving the contradiction between security and ease of operation.
2Reliability
If PIN locking mechanisms are used, then security is improved, but ease of operation worsens when users forget PINs or equipment is not immediately associated with a user
Solution Approach 1:
The system automatically verifies identity modules without requiring user input, making the equipment immediately accessible upon power-up without manual PIN entry. This eliminates operational barriers while maintaining security through automated verification.
3Ease of operation
If the same PIN code is used for multiple MTC terminal equipments, then ease of operation is improved, but security deteriorates
Solution Approach 1:
The verification mechanism is segmented to use unique verification data for each terminal equipment-instance combination. Each terminal equipment has distinct verification data stored, allowing automatic verification tailored to each specific device, thus maintaining both security and ease of operation.
4Reliability
If identity modules are locked to specific terminal equipment, then security against theft is improved, but adaptability worsens
Solution Approach 1:
The bonding between identity module and terminal equipment is dynamic rather than static. The system can transition between bonded and unbonded states, allowing the identity module to be reassigned to different terminal equipment when needed, thus providing both security through verification and adaptability through reassignability.
Data Source
AI summary
The present invention provides method, apparatus and computer program product for facilitating verification of an identity module, such as associated with a UICC, operatively coupled to a terminal equipment, such as a machine-type communication device. Upon determining that the identity module is in a bonded state, one or more bonding identifiers are read from the identity module and compared with at least a predetermined portion of the terminal equipment identifier, such as an IMEI, stored in the terminal equipment. If at least one of the bonding identifiers corresponds with at least a predetermined portion of the terminal equipment identifier, the identity module and/or the terminal equipment are shifted into predetermined operating conditions. A bonding process may also be performed, whereby the identity module acquires the terminal equipment identifier of currently associated terminal equipment and stores a bonding identifier in identity module memory based thereon.