Network Key Pre-loading for Roaming-Free Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless telecommunications devices face challenges in accessing guest networks without roaming capabilities, as existing methods require interconnections or roaming agreements between networks, and IMSI switching can be triggered undesirably without network coverage.
Innovation Solution
A method is introduced where a network key is generated at the home network, loaded onto the guest network, and communicated to the device, allowing the device to authenticate and subscribe to the guest network, even in the absence of roaming interfaces or agreements, using a System Information Broadcast message and encrypted with unique identifiers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If roaming agreements and interconnections are established between networks, then device access to guest networks is enabled, but network complexity and infrastructure requirements increase
Solution Approach 1:
The patent extracts the authentication capability from the traditional roaming infrastructure. Instead of requiring full roaming agreements and interconnections (S6a, S8, S9 interfaces), the solution extracts only the essential authentication function by pre-loading authentication credentials (KASUMI keys, IMSI) directly onto the SIM card. This allows devices to access guest networks without the complex inter-network infrastructure that traditional roaming requires.
Solution Approach 2:
The patent introduces a roaming hub as an intermediary entity that mediates between the home network and guest networks. The roaming hub pre-configures authentication credentials on SIM cards, enabling direct authentication at guest networks without requiring real-time communication or interconnections between the home network and guest network infrastructure. This intermediary approach eliminates the need for complex direct interconnections while maintaining authentication security.
2Adaptability or versatility
If IMSI switching is implemented to enable network access, then device can connect to different networks, but undesired switching may occur without network coverage
Solution Approach 1:
The patent applies preliminary action by pre-loading authentication credentials (IMSI, KASUMI keys) for multiple networks directly onto the SIM card before the device needs to access them. Unlike traditional IMSI switching that changes network identification in real-time based on signal strength, this approach pre-provisions all necessary authentication data, allowing the device to reliably select and authenticate on the appropriate network without risking undesired switching in areas with poor coverage.
3Adaptability or versatility
If multiple IMSIs are stored on a single SIM for network access, then device can authenticate on different networks, but SIM application complexity increases
Solution Approach 1:
The patent makes the SIM card universal by enabling it to store and manage authentication credentials for multiple networks simultaneously. The SIM card functions as both the traditional single-network identifier and a multi-network authentication repository, containing IMSI and KASUMI keys for home and guest networks. This multi-functionality eliminates the need for separate SIM cards or complex switching applications, as the SIM itself handles all authentication scenarios.
Data Source
AI summary
A method of authenticating User Equipment (UE) to a wireless telecommunications network, wherein the UE is subscribed to a first wireless telecommunications network, and authenticating being performed so as to subscribe the UE to a second wireless telecommunications network, and wherein there is an absence of a roaming capability between the first wireless telecommunications network and the second wireless telecommunications network for the UE, the method including generating, at the first wireless telecommunications network, a network key for authenticating the UE at the second wireless telecommunications network; loading the generated network key to the second wireless telecommunications network; subsequently communicating the generated network key to the UE from the first wireless telecommunications network; and authenticating the UE at the second wireless telecommunications network by communicating the network key from the UE to the second wireless telecommunications network, thereby to permit the UE to subscribe to the second wireless telecommunications network.