NF-NRF Message Integrity Protection via Digital Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication mechanisms in 5G communications networks do not effectively prevent hackers from accessing and manipulating subscribe/notify and discovery messages between Network Functions (NFs) and Network Function Repository Functions (NRFs), leading to potential disruptions in network communications.
Innovation Solution
Implementing integrity protection methods, including the use of digital signatures, by computing and comparing integrity check values for subscribe/notify and discovery messages. This involves generating digital signatures using private keys and validating them using public keys, ensuring the integrity and authenticity of these messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing authentication mechanisms are used between NF and NRF, then authentication between entities is provided, but integrity protection of communications is not ensured allowing message manipulation
Solution Approach 1:
The patent applies preliminary action by computing integrity check values (hashes) of messages before transmission and attaching them to the messages. The receiving entity then verifies these pre-computed check values to detect any modifications. This proactive approach ensures integrity protection is built into the communication flow from the start, rather than requiring complex post-transmission verification mechanisms.
Solution Approach 2:
The patent introduces digital signatures as an intermediary mechanism to verify message integrity. By using public key infrastructure where the sender signs messages with their private key and the receiver verifies with the sender's public key, the system creates a trusted intermediary layer that proves message authenticity and detects tampering without requiring the receiver and sender to share secret keys directly.
2Reliability
If digital signatures are implemented for all messages, then message integrity is protected, but processing overhead and computational complexity increase
Solution Approach 1:
The patent applies local quality by implementing integrity protection selectively rather than uniformly for all messages. The system computes integrity check values and applies digital signatures based on specific conditions, such as message type, sensitivity level, or communication context. This localized approach ensures critical messages receive enhanced protection while less sensitive messages use lighter verification mechanisms, optimizing the balance between security and processing efficiency.
Data Source
AI summary
A method for integrity protection for subscribe/notify and NF discovery transactions between an NF and an NRF includes receiving, from the NF, a subscribe or discovery request message, determining that the subscribe or discovery request message includes at least one indicator requesting NRF communications integrity protection, and computing an integrity check value of at least a portion of the subscribe or discovery request message and comparing the computed integrity check value to an integrity check value included in the subscribe or discovery request message. The method further includes determining that the computed integrity check value matches the integrity check value included in the subscribe or discovery request message, and formulating a response to the subscribe or discovery request message, generating and adding at least one digital signature to the response message, and transmitting the response message to the NF.