Position Report Authentication Using UE Digital Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Location-based applications face challenges in ensuring the accuracy and integrity of position estimates due to spoofing attacks that compromise position engines, leading to inaccurate and unreliable location estimates.
Innovation Solution
Implementing a digital signature generated by a security module using a private key associated with the UE to authenticate position report messages, ensuring secure transmission to location applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signature authentication is implemented using private keys, then position report message security and integrity are improved, but device complexity and computational overhead increase
Solution Approach 1:
The patent implements preliminary action by pre-generating and storing digital signature pairs (private and public keys) in the security module before position reporting occurs. The position report message is then authenticated by signing with the private key and verifying with the public key, ensuring security without adding complexity during the actual positioning operation.
Solution Approach 2:
The patent introduces a security module as an intermediary component that handles the complex cryptographic operations. This security module acts as a mediator between the position engine and the location application, encapsulating the complexity of digital signature generation and verification while providing a simple authentication interface.
2Reliability
If digital signature authentication is implemented using private keys, then position estimate reliability is improved, but processing time and energy consumption increase
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing the digital signature pairs in the security module. The actual signing operation during position reporting is computationally efficient since it only requires processing the position report message with the pre-existing private key, rather than generating keys or complex authentication structures during time-critical positioning operations.
Solution Approach 2:
The patent extracts the computationally intensive key generation and management operations from the real-time position reporting process. By separating key management (performed preliminarily) from signature verification (performed during positioning), the system minimizes processing time impact on the critical position estimation function.
Data Source
AI summary
An example method of position information authentication for a location application performed by a UE, the method comprising determining by a position engine, a position estimate of the UE and determining by the position engine, a position report message indicating the position estimate. The method also comprises determining by a security module, a digital signature generated using a first private key known to the UE and the position report message. The method further comprises transmitting the position report message associated with the digital signature to a location application executed by the UE or another device, wherein the location application is configured to provide one or more location-based services to the UE using the position estimate responsive to a successful authentication of the position report message using the digital signature generated based on the first private key.