Cellular Relay Station Secure PDU Session Establishment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current relay-based systems in cellular networks face challenges in establishing secure PDU sessions without pre-configuration of slicing information and require interaction with the core network for privacy protection, leading to increased workload and latency.
Innovation Solution
A method where the secondary station and relay station receive security elements from the Core Network during initial connection, allowing for secure authentication and minimal interaction with the Core Network during operation, using secure messages with configuration parameters like Relay Service Codes and public/private encryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If relay-based systems establish secure PDU sessions without pre-configuration of slicing information, then adaptability is improved, but security reliability deteriorates
Solution Approach 1:
The patent applies preliminary action by having the secondary station receive and store security elements (including slicing information and authentication credentials) from the core network during initial connection establishment. This pre-configuration occurs before the station becomes out-of-coverage, enabling secure PDU session establishment later without requiring real-time core network interaction or pre-configured slicing information at the relay level.
Solution Approach 2:
The patent uses the core network as an intermediary during the initial connection phase to distribute security elements to both the relay station and secondary station. These security elements act as intermediaries that enable subsequent secure authentication and PDU session establishment without requiring continuous core network involvement, thus resolving the contradiction between adaptability and security reliability.
2Reliability
If the system requires interaction with the core network for privacy protection, then security reliability is improved, but loss of time increases
Solution Approach 1:
The patent implements preliminary action by having the secondary station receive privacy protection mechanisms and security elements from the core network during initial connection. This includes receiving encrypted or protected PDU parameters and authentication credentials in advance, enabling the station to maintain privacy protection autonomously when out-of-coverage without requiring real-time core network interaction, thus eliminating latency while preserving security reliability.
3Reliability
If the system pre-configures slicing information, then security reliability is improved, but device complexity increases
Solution Approach 1:
The patent applies the taking out principle by extracting the slicing information and security configuration management from the relay station and secondary station devices. Instead of requiring these devices to store and manage complex slicing configurations locally, the system retrieves necessary security elements from the core network during initial connection and uses them for authentication, thereby reducing device complexity while maintaining security reliability.
4Reliability
If the system requires pre-configuration of slicing information, then security reliability is improved, but adaptability deteriorates
Solution Approach 1:
The patent uses security elements received from the core network as intermediaries that enable flexible PDU session establishment. These elements include authentication credentials and security parameters that allow the secondary station to establish secure sessions with different relays dynamically without requiring pre-configured slicing information, thus achieving both security reliability and adaptability.
Data Source
AI summary
The invention relates to a method for operating a communication system including a primary station linked to a Core Network, said primary station serving a cell, a relay station served by the primary station and a secondary station served by the primary station, the method comprising the steps of the relay station establishing a connection with the primary station, including receiving in at least one first secure message from the primary station a first set of configuration parameters, the secondary station establishing a connection with the primary station, including receiving from the primary station in at least one second secure message a second set of configuration parameters linked to an upcoming data session, the relay station transmitting at least one transmitted service code from the first set, the secondary station establishing a direct communication with the relay station upon determination that the transmitted configuration parameters is included in the second set.