Obscuring Temporary User Equipment Identities in Wireless Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless communication networks face security vulnerabilities due to the transmission of UE identities in the clear, which can lead to linkability attacks and tracking of user equipment locations, compromising security.

Innovation Solution

Transforming Radio Network Temporary Identifiers (RNTIs) using a hash function with a salt value to create a second ID, which is sent in messages via common channels, making it difficult for attackers to determine the original ID and preventing linkability attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If UE identities (RNTIs) are transmitted in the clear without ciphering, then message delivery efficiency is improved, but security is worsened due to linkability attacks and tracking vulnerabilities

Engineering Contradiction:
Improvemessage delivery efficiencyVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces a transformed identity (second ID) as an intermediary between the original RNTI and the transmitted message. This second ID is generated by applying a hash function to the RNTI, allowing messages to be delivered efficiently while preventing attackers from directly observing or linking the original UE identity across different communications

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms the RNTI parameter through a hash function to create a second ID with different properties. This parameter transformation maintains the functionality of message addressing while changing the security characteristics, making the identity untraceable and preventing linkability attacks

Inventive Principle:
Principle #35Parameter changes

2Reliability

If RNTI transformation using hash function with salt value is implemented, then security is improved by obscuring UE identities, but device complexity is worsened due to additional transformation operations

Engineering Contradiction:
ImprovesecurityVSAvoidtransformation operation complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent performs the hash transformation of the RNTI in advance, before message transmission. The transformed second ID is then used for message delivery, eliminating the need for complex real-time transformations during critical communication operations. The salt value is also prepared beforehand to enhance security without adding operational complexity

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses a salt value that can be changed frequently or discarded after use. This disposable security element enhances the transformation's security properties without requiring complex long-term management, as the salt can be regenerated or replaced easily to maintain security

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS9154464B2Obscuring temporary user equipment identities
Publication Date: 2015.10.06 QUALCOMM INC
  • US9154464B2 patent drawing
  • US9154464B2 patent drawing
  • US9154464B2 patent drawing

AI summary

Techniques for concealing temporary identifiers (IDs) assigned to user equipments (UEs) by a wireless communication system are described. At a network entity, a first ID Assigned to a UE and possibly a salt value are transformed, e.g., based on a hash function, to obtain a second ID for the UE. An output message directed to the UE is generated based on an input message, the second ID, and the salt value (if present). The output message is sent via a common channel shared by the UE and other UEs. At the UE, a message is received via the common channel, and a salt value (if sent) is obtained from the received message. The first ID and the salt value are transformed to obtain the second ID, which is used to determine whether the received message is intended for the UE.