IoT Terminal Onboarding Using Temporary Network Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The inefficiency of onboarding terminal devices, particularly small IoT devices without display screens, in standalone non-public networks (SNPNs) due to the need for manual intervention and lack of automatic network configuration, is a challenge that current technologies have not adequately addressed.
Innovation Solution
A communication method that enables terminal devices to obtain auxiliary authentication information, determine access information for a network, and perform mutual temporary authentication to receive configuration information, allowing automatic onboarding without manual intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual onboarding is used in PLMN, then network access is secured through SIM card provisioning, but onboarding efficiency is low and requires manual intervention
Solution Approach 1:
The terminal device autonomously performs onboarding operations by selecting networks based on auxiliary authentication information and performing temporary authentication, eliminating the need for manual SIM card provisioning and service center visits
Solution Approach 2:
Auxiliary authentication information is pre-configured in the terminal device before network access, enabling the device to automatically select and authenticate with appropriate networks without manual intervention during the onboarding process
2Productivity
If existing PLMN onboarding is applied to SNPN with large quantity of small IoT devices, then network security is maintained, but onboarding efficiency is low and operation and maintenance personnel cooperation is required
Solution Approach 1:
Each terminal device independently performs network selection and temporary authentication using pre-configured auxiliary authentication information, eliminating the need for operation and maintenance personnel to manually provision each device
Solution Approach 2:
The onboarding process is divided into autonomous terminal-side operations (network selection based on auxiliary authentication information, temporary authentication) that do not require centralized manual intervention for each device
3Productivity
If automatic onboarding is implemented without preconfigured network-side information, then onboarding efficiency is improved, but network security may be compromised
Solution Approach 1:
Auxiliary authentication information is pre-configured in the terminal device before network access, providing a security foundation for automatic network selection and authentication without requiring manual SIM card provisioning
Solution Approach 2:
Temporary authentication information acts as an intermediary mechanism that enables secure network access without permanent SIM card provisioning, allowing the terminal to authenticate with the network temporarily and obtain configuration information
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A communication method, apparatus, and system are provided, to implement automatic onboarding when no network-side information is configured on a terminal device. The method includes: The terminal device obtains auxiliary authentication information that includes identification information of one or more networks; determines access information of a first network based on first temporary authentication information and identification information of the first network, where the first network is any one of the one or more networks; triggers mutual temporary authentication with the first network based on the access information of the first network; and receives configuration information of the first network from the first network when the mutual temporary authentication succeeds. The terminal device may trigger the mutual temporary authentication with the first network based on the access information of the first network. After the mutual temporary authentication succeeds, the terminal device may obtain the configuration information, to access the first network based on the configuration information. In this way, the terminal device can securely obtain subscription information of the first network when no network-side information is configured on the terminal device.