Wireless Device Paging Channel Hijack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication networks are vulnerable to sophisticated cyber-attacks, such as paging channel hijacking, where malicious base stations spoof legitimate ones, leading to tracking, denial of service, and resource drainage of resource-constrained devices.
Innovation Solution
A method involving a wireless device monitoring a shared paging channel during a discontinuous reception cycle to detect IMSI-based paging messages, adjusting a rogue probability for the base station based on irregular message reception, and performing protective actions such as ignoring future messages or detaching from the base station if the probability exceeds a threshold.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If wireless devices monitor paging channels continuously to detect rogue base stations, then security against paging channel hijacking attacks is improved, but energy consumption increases
Solution Approach 1:
The system uses discontinuous reception (DRX) cycles where the wireless device monitors paging channels periodically rather than continuously. The device wakes up at specific paging occasions to check for IMSI-based paging messages and returns to sleep mode otherwise, reducing energy consumption while maintaining security detection capability.
Solution Approach 2:
The wireless device autonomously monitors its own paging channel for rogue base station attacks without requiring external assistance. The device independently detects IMSI-based paging messages, calculates rogue probabilities, and performs protective actions, enabling self-protection against security threats.
2Measurement precision
If wireless devices monitor all subframes for IMSI-based paging messages to accurately detect rogue base stations, then detection accuracy is improved, but processing complexity increases
Solution Approach 1:
The monitoring process is segmented into specific paging occasions within DRX cycles rather than monitoring all subframes continuously. The device focuses monitoring efforts on predetermined paging frames and occasions, reducing processing complexity while maintaining detection accuracy for rogue base station attacks.
Solution Approach 2:
The device applies different monitoring strategies to different time periods: active monitoring during paging occasions and sleep mode during non-paging periods. This localized approach optimizes resource usage by concentrating processing efforts only when paging messages are expected.
3Reliability
If wireless devices perform protective actions such as detaching from base stations upon detecting potential attacks, then security is improved, but service continuity deteriorates
Solution Approach 1:
The system uses a rogue probability calculation mechanism that provides feedback before executing protective actions. The device monitors IMSI-based paging messages, calculates the probability that a base station is rogue, and only performs protective actions like detachment when the probability exceeds a threshold, reducing false positives and maintaining service continuity.
Solution Approach 2:
The device performs preliminary monitoring and probability assessment before executing protective actions. By detecting potential rogue base stations in advance through IMSI-based paging message analysis and calculating rogue probabilities, the system can take protective measures proactively while minimizing disruption to legitimate services.
Data Source
AI summary
Methods for countering a shared paging channel hijack attack. In an example embodiment, a wireless device may monitor the shared paging channel during a paging occasion in a DRX cycle to detect a first IMSI-based paging message in the paging occasion, and continue monitoring for IMSI-based paging in subsequent radio subframes in the paging frame and radio subframes in subsequent radio frames within the DRX cycle to determine whether there are indications of a paging channel hijack attack. In an example embodiment, this monitoring may be to determine whether one or more subframes that are not the paging occasion receive IMSI-based paging messages, in response to which a threat probability may be increased. The wireless device may perform an operation (e.g., an actuation operation such as disabling monitoring of, and preventing connection attempts to, the base station, etc.) to protect against a shared paging channel hijack attack.