Pseudo-AUSF Identity Resolution for 5G UE Tracking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In 5G mobile networks, the use of encrypted identifiers (SUCI) makes it difficult to determine the identity of a User Equipment (UE), complicating legal investigations and location tracking, as the ever-changing concealed identifiers prevent correlation of signal strength readings and techniques like trilateration.
Innovation Solution
Implementing a pseudo-AUSF component within the 5G mobile network architecture that communicates with the existing UDM module to de-conceal the concealed identifier (SUCI) and generate the permanent identifier (SUPI) for authorized data processing devices like a Cell-Site Simulator (CSS).
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted identifiers (SUCI) are used in 5G mobile networks to protect user privacy and security, then user privacy and security are improved, but the ability to identify and locate UEs for legal investigations deteriorates
Solution Approach 1:
The patent introduces a pseudo-AUSF component as an intermediary that mediates between the CSS and the UDM. This pseudo-AUSF receives SUCI from the CSS, communicates with the UDM to obtain the corresponding SUPI, and returns it to the CSS. This intermediary mechanism allows authorized entities to resolve encrypted identifiers without compromising the overall encryption scheme, thus resolving the contradiction between privacy protection and lawful identification.
Solution Approach 2:
The patent segments the identifier resolution function by creating a dedicated pseudo-AUSF component with a narrow subset of functionalities. This pseudo-AUSF is distinct from the existing AUSF module and handles only the specific task of resolving SUCI to SUPI for authorized devices. By segmenting this function, the system maintains security while enabling targeted identification capabilities for legal investigations.
2Object-affected harmful factors
If concealed identifiers (SUCI) are used instead of permanent identifiers (SUPI) for UE self-identification, then security against nefarious uses is improved, but the capability to correlate signal strength readings and apply trilateration deteriorates
Solution Approach 1:
The pseudo-AUSF acts as a mediator that enables the correlation process. When the CSS captures signal strength readings, it can query the pseudo-AUSF with the corresponding SUCI to obtain the SUPI. This allows the CSS to correlate signal strength data with permanent identifiers for trilateration and location tracking, while the rest of the network continues to use encrypted identifiers for security.
Solution Approach 2:
The system dynamically adapts the identifier usage based on the context. For general network operations, SUCI is used to maintain security. For authorized location tracking operations, the pseudo-AUSF dynamically resolves SUCI to SUPI when needed. This dynamic approach allows the system to switch between security mode and identification mode as required.
Data Source
AI summary
A method and systems for identity resolution of a User Equipment (UE) connectable to a Fifth Generation (5G) mobile network are disclosed. In accordance therewith, a server implements a pseudo-Authentication Server Function (AUSF) component as an architectural component of a core mobile network of the 5G mobile network distinct from an existing AUSF module and an existing core functionality of the core mobile network and a Unified Data Management (UDM) module thereof. In accordance with an authorized data processing device self-identifying to a Cell-Site Simulator (CSS) with a concealed identifier of the UE, the pseudo-AUSF component instead of the existing AUSF module is utilized to communicate with the existing UDM module of the core mobile network. In accordance with the communication between the pseudo-AUSF component and the existing UDM module, the concealed identifier is de-concealed to generate a permanent identifier of the UE accessible to the authorized data processing device.