Pre-calculated SUCI Transmission in 5G Security Elements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The transmission of the International Mobile Subscriber Identifier (IMSI) in clear poses a security risk, particularly in 5G networks, as it can be intercepted by IMSI-catchers, and the calculation of the encrypted Subscription Concealed Identifier (SUCI) takes approximately 150 ms, which is problematic for IoT devices that require rapid data transmission.
Innovation Solution
Pre-calculating and storing the encrypted subscription identifier, such as the SUCI, in a security element like a UICC or eUICC using an ECIES encryption scheme during events like terminal startup or inactivity, allowing for immediate transmission to the network without the need for real-time computation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the encrypted subscription identifier (SUCI) is calculated in real-time when the terminal asks for it, then the security is maintained through proper encryption, but the transmission time is delayed by approximately 150 ms
Solution Approach 1:
The patent applies preliminary action by pre-calculating the encrypted subscription identifier (SUCI) before it is actually needed for network registration. The terminal device computes and stores the SUCI in advance, so when network attachment is required, the pre-computed encrypted identifier can be immediately transmitted without the 150 ms calculation delay. This resolves the contradiction by performing the security-critical encryption operation beforehand, eliminating the time penalty during actual transmission.
Solution Approach 2:
The patent applies preliminary anti-action by proactively computing the encrypted identifier to counteract the potential time delay before it becomes critical. By calculating the SUCI in advance during periods when the device is not actively seeking network attachment, the system prepares the security credential ahead of time, preventing the time loss from occurring during mission-critical transmission scenarios.
2Speed
If the IMSI is transmitted in clear for rapid network attachment, then the transmission speed is maximized, but the security is compromised due to interception risks from IMSI-catchers
Solution Approach 1:
The patent applies preliminary action by pre-computing the encrypted subscription identifier (SUCI) before network attachment is needed. This allows the terminal to immediately transmit the pre-encrypted identifier without real-time computation delay, achieving both rapid transmission and enhanced security. The encryption is performed in advance during idle periods or device startup, so when network attachment is critical, the secure encrypted identifier is ready for immediate transmission.
Data Source
AI summary
The invention concerns a method for transmitting to a physical or virtual element of a telecommunications network, an encrypted subscription identifier stored in a security element, or an encrypted identifier of the security element or an encrypted identifier of a terminal cooperating with the security element. The method includes pre-calculating proactively, at the occurrence of an event, the encrypted identifier using a key and storing it in a file or memory of the security element with a parameter enabling the key to be calculated by the element of the telecommunications network, in order to be able to transmit to the element of the telecommunications network the encrypted identifier and the parameter, without having to compute the encrypted identifier when the terminal is asking for it.