Private 5G Certificate Delivery via SIM-Based Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing private 5G networks face challenges in transitioning from SIM-based to certificate-based authentication, requiring UEs to first obtain and provision enterprise-trusted certificates, with visibility to SIM credentials, and lack efficient management of authentication methods.
Innovation Solution
A method where SIM-based authentication triggers the delivery of an enterprise-owned certificate to the UE, which is stored and used for subsequent authentication, with an authentication policy determining when to use certificate-based authentication, either enterprise-hosted or cloud-hosted, and routing authentication requests accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SIM-based authentication is used for private 5G network access, then network access is enabled, but certificate provisioning and authentication management become complex
Solution Approach 1:
The system performs preliminary actions by automatically triggering certificate provisioning and delivery during the initial SIM-based authentication process. The certificate is obtained from the enterprise, delivered to the UE, and stored before the UE needs to use certificate-based authentication, eliminating the need for separate manual certificate provisioning steps and reducing authentication management complexity.
2Reliability
If certificate-based authentication is implemented in private 5G networks, then authentication security is improved, but the process requires additional certificate provisioning steps
Solution Approach 1:
The patent merges the SIM-based authentication process with the certificate provisioning process into a single integrated workflow. When the UE performs SIM-based authentication, the system automatically triggers certificate delivery and storage. This combination allows the UE to seamlessly transition to certificate-based authentication without requiring separate manual certificate provisioning steps, maintaining authentication security while improving ease of operation.
3Adaptability or versatility
If cloud-hosted authentication is used, then authentication flexibility is improved, but network access fails when cloud connectivity is lost
Solution Approach 1:
The system prepares backup authentication capabilities in advance by storing enterprise-trusted certificates locally in the UE's secure element. This beforehand cushioning ensures that if cloud connectivity is lost, the UE can still perform certificate-based authentication using the pre-delivered certificates and enterprise-hosted authentication, maintaining network access reliability while preserving authentication flexibility.
4Reliability
If enterprise-hosted authentication is used, then network access reliability is improved during cloud failures, but authentication management complexity increases
Solution Approach 1:
The patent introduces an intermediary authentication decision function that automatically routes authentication requests based on cloud connectivity status. This intermediary component manages the complexity of switching between cloud-hosted and enterprise-hosted authentication by making routing decisions automatically, thereby improving network access reliability during cloud failures while preventing authentication management complexity from increasing for end users.
Data Source
AI summary
Presented herein are efficient techniques through which an enterprise certificate is obtained for a user device based on a Subscriber Identity Module (SIM)-based authentication of the user device. A request for a SIM-based authentication is received from a user device accessing a private cellular network. A certificate is obtained from an enterprise based on the SIM-based authentication of the user device. The certificate is stored at the user device and used for subsequent authentication of the user device when accessing the private cellular network.