Fully Protected Connection Resume Message for Wireless Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication systems, particularly user equipment devices (UEs), are vulnerable to man-in-the-middle (MiTM) attacks when resuming a suspended or released connection, as existing methods do not adequately protect messages related to reconnecting, which can impact the quality and security of services.
Innovation Solution
The solution involves determining support for exchanging messages using a new format for resuming a connection, specifically employing a fully protected connection resume message with a new ResumeMAC-I that includes all fields of the RRCResumeRequest message for protection, to prevent MiTM attacks and ensure secure reconnection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing connection resume methods are used, then connection resumption is possible, but messages are vulnerable to man-in-the-middle attacks
Solution Approach 1:
The patent applies preliminary anti-action by introducing a protection mechanism that preemptively defends against MiTM attacks. The network node determines whether to protect the resume message using a new format with enhanced security features, and if protection is applied, the message is secured before transmission, preventing potential attacks rather than responding to them after occurrence.
Solution Approach 2:
The patent implements parameter changes by modifying the message format parameters. When protection is determined to be necessary, the system changes from using a legacy message format to a new message format that includes additional security parameters and fields, thereby altering the structural parameters of the resume message to enhance security against MiTM attacks.
2Reliability
If a new protected message format is used, then security against MiTM attacks is improved, but message format complexity increases
Solution Approach 1:
The patent applies dynamics by making the message format adaptive rather than static. The system dynamically selects between the legacy message format and the new protected message format based on the determined protection requirement. This dynamic approach allows the system to use the simpler legacy format when protection is not needed and the more complex protected format only when security threats are detected, thereby optimizing the balance between security and complexity.
3Reliability
If all fields of the resume message are protected, then service quality integrity is maintained, but processing overhead increases
Solution Approach 1:
The patent implements local quality by applying protection selectively to specific fields within the resume message rather than uniformly to all fields. The new message format structure allows certain critical fields to be protected while potentially using different protection levels or methods for different parts of the message, thereby maintaining service quality integrity for critical information while reducing overall processing overhead compared to protecting every field with the same level of security.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Embodiments are presented herein of apparatuses, systems, and methods for a user equipment device (UE) and/or cellular network to resume a connection. To resume the connection, the UE may transmit a fully protected connection resume message, e.g., which may include protection for a resume cause field.