Network Authentication via Public Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Next-generation wireless communication systems face challenges in authenticating and validating serving networks without pre-existing roaming agreements, especially with dynamic and diverse access technologies, leading to security and trust issues for users.
Innovation Solution
A method involving encryption and decryption of public keys between user equipment (UE), serving networks, and home networks using shared keys, along with blockchain authentication, to establish trust and validate serving networks on a per-access point basis, enabling three-way authentication without pre-provisioned public keys or centralized authorities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (Certificate Authorities or Web of Trust) are used, then authentication can be established, but the system becomes dependent on centralized authorities or pre-provisioned keys, creating single points of failure
Solution Approach 1:
The patent implements mutual authentication where the UE and serving network authenticate each other directly using embedded public keys, without requiring external Certificate Authorities or Web of Trust infrastructure. The UE stores a public key for the serving network, and the serving network stores a public key for the UE, enabling them to verify each other's identities independently
Solution Approach 2:
The authentication system is segmented into independent components: the UE contains its own private key and the serving network's public key, while the serving network contains its own private key and the UE's public key. This segmentation eliminates the need for a centralized authentication authority and distributes trust across the system
2Adaptability or versatility
If pre-provisioned public keys are used for authentication, then authentication can occur without centralized authorities, but the system requires pre-configured trust relationships between UE and serving network
Solution Approach 1:
The UE is pre-provisioned with the serving network's public key before attempting to access the network. This preliminary configuration enables immediate authentication without requiring real-time key exchange or pre-existing roaming agreements, allowing the UE to quickly establish secure communication with the serving network
3Reliability
If roaming agreements are required between home network and serving network, then authentication can be established, but the system cannot support dynamic or unpredictable serving network access patterns
Solution Approach 1:
The authentication system enables the UE to independently authenticate with any serving network that has the UE's public key embedded, without requiring pre-established roaming agreements between networks. The serving network similarly authenticates the UE using its stored public key, enabling flexible and dynamic network access while maintaining security
Data Source
AI summary
Serving network authentication and validation by a UE includes encrypting an identifier associated with the UE using a first instance of a public key associated with a serving network to which the UE is attempting to gain access; transmitting the identifier to the serving network; receiving from the serving network an authentication vector containing a second instance of the public key, the second instance of the public key having been encrypted using a key shared by the UE and a home network associated with the UE; decrypting the second instance of the public key using the key shared by the UE and the home network; comparing the first instance of the public key to the second instance of the public key; and when the first instance and the second instance are the same, determining that the home network has authenticated the serving network.