Mobile Terminal Public Warning Message Security Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In conventional mobile communication systems, terminals receive warning messages without verifying the transmitter, leading to potential security vulnerabilities and inappropriate actions in response to public warning messages.
Innovation Solution
A method and apparatus for securely receiving public warning messages in mobile communication systems, involving the reception of a public key and key index from a cell broadcast center, verification of a digital signature within the warning message using the public key, and authentication of the sender.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the terminal receives warning messages without verifying the transmitter, then the reception process is simple and fast, but the security of the warning message is compromised
Solution Approach 1:
The terminal pre-stores multiple public keys and their corresponding key indices in a lookup table before receiving warning messages. This preliminary preparation eliminates the need for complex real-time verification, allowing the terminal to quickly match the key index in the received message with the stored public key for immediate authentication.
Solution Approach 2:
The system enables self-service authentication by including the key index directly in the warning message. The terminal autonomously retrieves the corresponding public key using this index and performs verification without requiring external assistance or complex cryptographic computations, making the security process self-contained and efficient.
2Reliability
If the terminal verifies the digital signature of the warning message, then the authenticity of the sender is confirmed, but the processing time increases
Solution Approach 1:
The terminal pre-stores multiple public keys and their corresponding key indices in a lookup table before receiving warning messages. This preliminary preparation eliminates the need for complex real-time verification, allowing the terminal to quickly match the key index in the received message with the stored public key for immediate authentication.
Solution Approach 2:
The verification process dynamically adapts to the received message by using the key index to select the appropriate public key from storage. This dynamic lookup approach replaces static, time-consuming verification methods with a flexible, index-based retrieval system that minimizes processing time while maintaining authentication reliability.
3Productivity
If the terminal stores multiple public keys and key indices, then the verification efficiency is improved, but the storage requirement increases
Solution Approach 1:
The terminal stores public keys and their corresponding key indices in a nested structured format, where each key index points to its associated public key. This nesting approach organizes cryptographic data compactly, allowing efficient retrieval and verification while minimizing storage requirements compared to storing all keys in separate, unstructured locations.
Solution Approach 2:
The system changes the parameter of key storage from storing only full public keys to storing compact key indices that reference pre-stored public keys. This parameter transformation significantly reduces the storage burden while maintaining verification efficiency, as the terminal only needs to store the small index values frequently and can retrieve full keys as needed.
Data Source
AI summary
The present invention relates to a public warning system (PWS) in a mobile Communication network, and the present invention relates to a method and an apparatus for resolving a security problem occurring in the PWS with a protocol and actions between other network entities, and managing same. A user equipment (UE), according to the present invention, saves a public key and a public key index pair of a cell broadcast center (CBC), verifies the CBC which has transmitted a digital signature when the digital signature is received from a subject that transmits a public warning, and resolves a security problem related to a public security system so as to receive a message by the public warning system. As a result, according to the present invention, when the public warning message is received in environments such as an evolved universal terrestrial radio access network (EUTRAN), a universal terrestrial radio access network (UTRAN), or a GSM/EDGE radio access network (GERAN), the subject that has sent the public warning message is verified by the user equipment, thereby enabling the user equipment to perform an action appropriate to the warning message in an emergency disaster situation.