Neutral Host LTE Authentication Using Secure Element Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication networks, particularly those using LTE standards, face security vulnerabilities in credential storage and processing, especially with HotSpot 2.0 systems, where mobile device credentials are not adequately secured, making them susceptible to attacks.
Innovation Solution
The Retail-based Neutral Host LTE authentication system uses preconfigured UE certificates with private keys available only in secure processing, ensuring secure storage and processing, and provides options for username/password, SP-issued certificates, and pre-configured mobile device certificates, similar to MNO-based LTE, to enhance security assurances.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If credentials are stored and processed in the mobile device HLOS as in HS2.0, then compatibility with HotSpot 2.0 systems is maintained, but security of credential storage and processing deteriorates due to HLOS vulnerabilities
Solution Approach 1:
The patent segments the credential storage and processing functions from the general-purpose HLOS into a dedicated secure environment (TEE or SE). This separation allows the system to maintain HS2.0 compatibility through the OSU interface while isolating sensitive credential operations in a secure zone that is resistant to attacks targeting the main HLOS.
Solution Approach 2:
The patent introduces a secure environment (TEE or SE) as an intermediary layer between the HS2.0 OSU interface and the credential storage/processing functions. This intermediary provides a trusted execution environment that mediates all credential-related operations, ensuring security while maintaining compatibility with external HS2.0 systems.
2Ease of operation
If pre-configured mobile device certificates are used with HLOS storage, then authentication functionality is enabled, but security assurance deteriorates due to HLOS attack vulnerabilities
Solution Approach 1:
The patent segments certificate storage and private key processing from the vulnerable HLOS into a secure environment. The HLOS handles high-level authentication protocols while the secure environment protects the actual cryptographic materials, enabling authentication functionality while improving security assurance.
Solution Approach 2:
The patent implements beforehand cushioning by pre-configuring certificates in a secure environment that is hardened against attacks before authentication operations occur. This prior preparation in a protected environment ensures that even if the HLOS is compromised, the core cryptographic credentials remain secure.
3Adaptability or versatility
If credential processing is performed in the general-purpose HLOS, then processing flexibility is maintained, but security deteriorates due to the complex and vulnerable nature of HLOS
Solution Approach 1:
The patent divides credential processing into two segments: high-level protocol handling in the flexible HLOS and low-level cryptographic operations in the secure environment. This segmentation maintains processing flexibility for authentication protocols while isolating vulnerable cryptographic processing from attack vectors.
Solution Approach 2:
The secure environment acts as an intermediary that handles sensitive cryptographic processing between the flexible HLOS and external systems. This intermediary protects against attacks by providing a hardened execution environment for critical operations while allowing the HLOS to maintain its processing flexibility.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Various features pertain to the authentication of mobile devices or other User Equipment. In some aspects, a Retail-based Neutral Host LTE is provided for use with Long Term Evolution (LTE) networks that, among other features, provides a WiFi Alliance HotSpot 2.0 (HS2.0) user experience using LTE technology for non-mobile network operator (non-MNO) Service Providers (SPs), while maintaining high security assurances as with LTE. That is, in some examples, Retail Neutral Host-LTE is configured to provide the same or similar security assurances as with MNO-based LTE. Moreover, retail Neutral Host-LTE offers options for provisioning credentials and authentication with the AAA that are analogous to the options for HS2.0, that is: username/password, SP-issued certificate, and pre-configured mobile device certificate. This is achieved, at least in part, while providing or ensuring that Retail Neutral Host-LTE security provides similar security assurances to MNO-based LTE.