Radio Connection Security Triggering for Signaling-Only 5G Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the 5G System architecture, there is an inefficiency in establishing access stratum (AS) security for signaling-only connections, as the core network (CN) often initiates a full UE context setup, which is resource-intensive and unnecessary for certain events, such as Tracking Area Updates, where the UE moves to idle shortly after.
Innovation Solution
A method and system where the radio access network (RAN) indicates to the core network (CN) the need for security information, allowing the CN to trigger a UE context setup only when necessary, using specific events like logged minimization of drive test statistics or emergency fallback procedures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the core network initiates a full UE context setup to establish AS security, then security information is provided to the RAN, but resource consumption increases unnecessarily for signaling-only connections
Solution Approach 1:
The patent segments the UE context setup procedure into two distinct paths: a full context setup for connections requiring AS security, and a simplified signaling-only path for connections that do not require AS security. This segmentation allows the network to provide security information selectively based on the specific connection requirements, avoiding unnecessary resource consumption while ensuring security where needed.
Solution Approach 2:
The patent implements partial action by providing only the necessary security information to the RAN when AS security is required, rather than always initiating a complete UE context setup. The core network evaluates whether AS security is needed based on the connection type, and only triggers the security information provision procedure when necessary, thus avoiding excessive resource usage for signaling-only connections.
2Reliability
If the core network always triggers UE context setup for security information, then security is ensured, but signaling overhead and processing complexity increase
Solution Approach 1:
The patent introduces dynamic decision-making at the core network level to determine whether AS security is required for a given connection. The system adapts the signaling procedure complexity based on real-time conditions: for signaling-only connections, a simplified path is used; for connections requiring AS security, the full UE context setup is triggered. This dynamic approach optimizes signaling overhead and processing complexity while ensuring security when needed.
Solution Approach 2:
The patent changes the parameter of security requirement evaluation from a static always-true condition to a dynamic parameter that varies based on connection type. The core network evaluates specific conditions (such as whether the connection is signaling-only or requires user plane resources) to determine the appropriate security provisioning path, thereby reducing unnecessary signaling complexity while maintaining security where required.
3Reliability
If AS security is established for all connections, then security requirements are met, but unnecessary security procedures are performed for connections that move to idle quickly
Solution Approach 1:
The patent performs preliminary evaluation at the core network level to determine whether AS security is required before initiating the security establishment procedure. By evaluating connection characteristics in advance (such as whether the UE will move to idle shortly after connection), the system可以避免 unnecessary security procedures, thereby improving network efficiency while ensuring security is established when truly needed.
Data Source
AI summary
A method for securing radio connections comprises performing a connection setup with a user equipment (UE); determine that security information is needed for the UE based on an event which triggers a need of the security information; send an indication to a second network node to request the security information for the UE; and receiving the security information from the network node via a UE context setup procedure. The method may avoid a waste of resource in network by determining whether the UE is required to set up a security procedure by either a network node of a radio access network or a management and function node of a core network.