Group Bootstrapping Architecture for MTC Message Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current group bootstrapping architectures for machine type communication (MTC) are inefficient due to the lack of support for group attributes, leading to high message exchange requirements and vulnerability to Man-In-The-Middle attacks, and are costly and complex to deploy compared to PKI systems.
Innovation Solution
An enhanced Group Bootstrapping Architecture (GBA) mechanism that enables secure group communication by pre-configuring group information on the application layer, using a gateway for authentication and key agreement, and reducing message exchanges through a private communication protocol, eliminating the need for user enrollment and secure key/certificate deployment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If GBA is used to establish session keys individually for each MTC device in a group, then security is maintained, but the number of messages exchanged increases linearly with the number of group members, resulting in low efficiency
Solution Approach 1:
The patent merges multiple individual authentication processes into a single group-based authentication. Instead of each MTC device performing separate GBA authentication with the network, the gateway performs one authentication on behalf of all group members, establishing a single shared session key for the entire group. This reduces the number of authentication messages from N (number of devices) to 1, dramatically improving efficiency while maintaining security through the gateway's representation of all members.
Solution Approach 2:
The gateway acts as an intermediary that represents multiple MTC devices to the network. It performs authentication and key establishment on behalf of all group members, then distributes the derived keys to individual devices. This intermediary approach eliminates the need for each device to independently communicate with the network for authentication, reducing message exchange complexity while preserving individual device security through key derivation.
2Reliability
If PKI/certificate based group key exchange methods are used to achieve secure group communication, then security against MITM attacks is improved, but deployment cost increases and implementation becomes complex
Solution Approach 1:
The patent extracts the authentication and key establishment functions from the complex PKI infrastructure and relocates them to the gateway-based GBA mechanism. By removing the need for certificates, public key infrastructure, and complex deployment processes, the solution achieves security without the associated complexity. The gateway handles all authentication overhead, eliminating the need for individual device certificate management.
Solution Approach 2:
The patent replaces expensive, complex PKI certificates with simpler, gateway-based authentication vectors. Instead of deploying costly certificate infrastructure, the system uses lightweight GBA authentication that can be easily integrated into terminals and service providers. The authentication mechanism is designed to be simple and disposable, avoiding the need for complex long-term key management infrastructure.
Data Source
AI summary
A group key is computed based on unique identifications of each member device of a group of machine type communication devices, wherein communication with a network application function is performed by using a session identification of the group, and/or by using a session identification of a member device of the group, generated based on the session identification of the group and the unique identification of the member device.