PDU Number Verification for LTE Radio Resource Re-establishment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In LTE-system-based IMS services, the risk of IMS terminals is increased during the re-establishment of radio resources due to the lack of encryption for data transmission, making them vulnerable to illegal access and data tampering, especially in scenarios with low security requirements.
Innovation Solution
A method where a terminal sends a request indication message to a target evolved Node B to acquire and compare PDU numbers, determining if the Node B is legal by ensuring the difference in PDU numbers does not exceed a threshold, thereby avoiding resource consumption in encryption and decryption and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by moving object
If data transmission without encryption is used in low security requirement scenarios, then resource consumption is reduced, but terminal security is worsened
Solution Approach 1:
The patent applies different security measures to different re-establishment scenarios. PDU number verification is applied locally at the terminal side without requiring encryption, providing adequate security for low-security scenarios while saving resources. Encryption is reserved for high-security scenarios where it is truly needed, thus optimizing the balance between resource consumption and terminal security.
Solution Approach 2:
The patent changes the security verification parameter from encryption/decryption operations to PDU number comparison. This parameter change allows the system to achieve security verification with minimal resource consumption, as PDU number comparison is computationally much less intensive than cryptographic operations, while still providing sufficient security for basic scenarios.
2Reliability
If PDU number verification is implemented during radio resource re-establishment, then terminal security is improved, but device complexity is worsened
Solution Approach 1:
The patent extracts the essential security verification function from the complex encryption/decryption process and isolates it as a separate PDU number comparison mechanism. This extracted verification mechanism operates independently without requiring the full cryptographic stack, reducing device complexity while maintaining security verification capability.
Solution Approach 2:
The patent uses PDU numbers as a simplified copy or representation of the actual data transmission state. Instead of verifying the integrity of actual data through complex cryptographic means, the system verifies a copied identifier (PDU number) that represents the transmission state, significantly reducing computational complexity while maintaining verification effectiveness.
3Reliability
If encryption and decryption are performed during radio resource re-establishment, then data security is improved, but processing time is worsened
Solution Approach 1:
The patent performs PDU number verification as a preliminary action before actual data transmission during radio resource re-establishment. This preliminary verification quickly validates the legitimacy of the network side device, preventing unnecessary time consumption on subsequent encrypted data transmission with illegitimate devices. The verification is done in advance using minimal computational resources.
Solution Approach 2:
The patent uses lightweight, disposable verification tokens (PDU numbers) instead of heavy cryptographic operations. These PDU number comparisons are computationally cheap and can be performed rapidly, providing security verification without the time penalty of encryption/decryption, effectively replacing expensive cryptographic operations with inexpensive alternatives for the verification purpose.
Data Source
Figure 1~3
Figure 4
Figure 5~7
AI summary
The embodiments of the disclosure disclose a method, apparatus and system, and a storage medium for re-establishing radio resource(s). The method may include: when a terminal triggers re-establishing of the radio resource(s), a request indication message is sent by the terminal; the terminal receives a response message sent by a target evolved Node B; the terminal compares a second Packet Data Unit (PDU) number which is locally maintained with a first PDU number to acquire a difference value between the second PDU number and the first PDU number; and when the difference value does not exceed a preset threshold value, the terminal determines that the target evolved Node B is a legal evolved Node B, and the terminal implements re-establishing of the radio resource(s) between the terminal and the target evolved Node B.