Network Element Authorization Checks for Secure Terminal Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Attackers masquerade as legitimate network elements to perform unauthorized operations on terminal devices, compromising communication security in network slice and uncrewed aerial vehicle scenarios.
Innovation Solution
A communication method and apparatus that verifies the authorization of network elements by using identifiers and security links to ensure legitimate operations are performed on terminal devices, reducing unauthorized actions and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If network elements perform operations based on request messages without verification, then system operation efficiency is improved, but communication security deteriorates due to attacker masquerading
Solution Approach 1:
The patent applies preliminary action by establishing security links and performing integrity protection setup before actual communication operations. The first network element establishes a security link with the second network element and performs integrity protection setup in advance, so that when request messages are received, the verification mechanism is already in place. This prevents attackers from masquerading as legitimate network elements while maintaining efficient operations.
2Reliability
If authorization verification is performed on all request messages, then communication security is improved, but system complexity increases due to additional verification steps
Solution Approach 1:
The patent uses integrity protection as an intermediary mechanism to simplify verification. Instead of complex authorization checks on every message, the system establishes a security link with integrity protection setup between the first and second network elements. This intermediary layer automatically validates message authenticity through integrity checks, reducing the need for complex verification logic while maintaining security.
3Measurement precision
If integrity protection is established between network elements, then message authenticity is improved, but communication overhead increases due to additional protection mechanisms
Solution Approach 1:
The patent applies parameter changes by dynamically configuring integrity protection parameters based on the security requirements of different communication scenarios. The security link establishment and integrity protection setup adjust protection parameters such as algorithm selection and key management based on the specific network elements involved and the sensitivity of the operations being performed. This optimizes the balance between authenticity verification and communication overhead.
Data Source
AI summary
This application provides a communication method and apparatus. The method includes: A first network element receives a first request message from a second network element, where the first request message is used to request to perform a first operation on a first terminal device. The first network element determines, based on the first request message, whether the second network element is authorized to request to perform the first operation on the first terminal device. Whether a network element that sends a request message is authorized to request to perform a related operation is verified, to determine whether the network element is an attacker. This reduces impact on a system service resulting from requests of an attacker and improves system security.