Network Element Authorization for Secure Terminal Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Attackers can compromise communication security by masquerading as legitimate entities, leading to unauthorized re-authentication or authentication revocation in network slices and uncrewed aerial vehicle systems.
Innovation Solution
Implement a communication method and apparatus that verifies the identity of network elements through secure identifiers and security links, using mapping and authentication mechanisms to authorize operations on terminal devices, thereby preventing unauthorized requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If identity verification mechanisms are implemented to prevent masquerading attacks, then communication security is improved, but system complexity increases due to additional authentication procedures
Solution Approach 1:
The patent applies preliminary action by pre-establishing security links between network elements before authentication operations occur. The first network element pre- verifies the identity of the second network element using pre-shared identifiers, so that when authentication or authorization operations are requested, the verification has already been completed, preventing attacks without adding complex real-time authentication procedures
Solution Approach 2:
The patent uses identifiers (first identifier and second identifier) as intermediaries to enable verification between network elements. These identifiers act as mediators that carry identity information, allowing the first network element to verify the second network element's identity without direct complex authentication protocols, thus improving security while maintaining system simplicity
2Reliability
If authorization verification is performed for each operation request, then unauthorized operations are prevented, but processing time increases due to additional verification steps
Solution Approach 1:
The patent performs identity verification in advance by establishing security links and verifying identifiers before authorization operations. The first network element verifies the second network element's identity using pre-shared identifiers, so that when authorization requests are made, the verification is already complete, preventing unauthorized operations without adding time-consuming verification steps to each request
Solution Approach 2:
The patent enables the second network element to self-verify its identity by including its identifier in the request message. The first network element simply compares the provided identifier against its stored security information, allowing rapid verification without complex authentication protocols, thus maintaining both security and efficiency
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This application provides a communication method and apparatus. The method includes: A first network element receives a first request message from a second network element, where the first request message is used to request to perform a first operation on a first terminal device. The first network element determines, based on the first request message, whether the second network element is authorized to request to perform the first operation on the first terminal device. Whether a network element that sends a request message is authorized to request to perform a related operation is verified, to determine whether the network element is an attacker. This reduces impact on a system service resulting from requests of an attacker and improves system security.