Network Access Restriction for Lost or Stolen Wireless Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Lost or stolen wireless devices can be misused to access sensitive information or incur unauthorized network usage, posing risks to the owner.
Innovation Solution
A network-initiated mechanism where a lost or stolen device is reported to a wireless network, which restricts access and triggers security measures such as lockdown mode or factory reset, while the network modifies access parameters and notifies the device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the device is accessible without restrictions, then ease of operation is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The system performs preliminary actions by notifying the device of lost/stolen status before unauthorized access can occur. The network sends a notification message to the device, which then proactively enters lockdown mode or performs factory reset in advance, preventing potential misuse while the device is still in possession of unauthorized users.
Solution Approach 2:
The system applies preliminary anti-action by implementing network access restrictions and triggering security measures (lockdown mode, factory reset) before unauthorized operations can be performed. The network modifies access parameters to block communication, and the device executes counter-measures to neutralize potential threats in advance.
2Object-affected harmful factors
If network access is restricted for lost devices, then security is improved, but loss of time for legitimate users deteriorates
Solution Approach 1:
The system implements dynamic access control where network restrictions and device lockdown status are not permanent but changeable. The network can modify access parameters dynamically, and the device can transition between operational states (normal mode, lockdown mode) based on received notifications, allowing flexible adjustment of security measures over time.
Solution Approach 2:
The system employs feedback mechanisms where the device reports its status to the network, and the network responds by adjusting access parameters. The notification system creates a feedback loop that allows the network to monitor and control device status, enabling timely modification of restrictions when the device is recovered or re-provisioned.
3Object-affected harmful factors
If security measures such as factory reset are implemented, then protection of data is improved, but device functionality is temporarily lost
Solution Approach 1:
The system performs data protection actions (lockdown mode, factory reset) as preliminary measures when the device is reported lost or stolen. These security measures are executed in advance before any unauthorized access or data breach can occur, prioritizing data protection over temporary operational continuity.
Solution Approach 2:
The system converts the harmful situation of device loss into a beneficial security outcome by automatically triggering factory reset or lockdown mode. The loss of device possession becomes an opportunity to enforce security measures that protect data, transforming a negative event into a protective action that prevents greater harm.
Data Source
AI summary
A system described herein may receive a first indication that a particular User Equipment (“UE”) has been reported as lost or stolen. The first indication may be received via an interface with an Equipment Information Repository (“EIR”). The system may output, to an access function (e.g., an Access and Mobility Management Function (“AMF”)) of a network to which the UE is connected, a second indication that the UE has been reported as lost or stolen. The access function of the network may modify access of the particular UE to the network based on the indication that the particular UE has been reported as lost or stolen, and/or may output, to the UE, a third indication that the UE has been reported as lost or stolen. The UE may perform further security-related measures, such as disabling one or more applications, performing a factory reset, or entering a restricted mode.