Relay UE Authentication Using Serving Network Name Vectors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in efficiently authenticating devices providing proximity-based services, particularly in scenarios where direct network connectivity is unavailable, such as when a user equipment (UE) is out of coverage.
Innovation Solution
The solution involves determining an authentication vector based on a serving network name (SNN) for UE-to-network relay services, using network nodes and user equipment to facilitate proximity-based service authentication, and providing authentication information through extensible authentication protocol messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional network-based authentication is used, then authentication security is maintained, but device connectivity reliability deteriorates when out of coverage
Solution Approach 1:
The patent applies preliminary action by pre-configuring authentication vectors and serving network names in the UE before out-of-coverage scenarios occur. The UE stores authentication data locally, enabling it to perform authentication independently when network coverage is unavailable, thus maintaining both reliability and security without requiring real-time network connection.
Solution Approach 2:
The patent introduces the serving network name (SNN) as an intermediary element that bridges traditional network-based authentication and device-to-device authentication. The SNN acts as a mediator that enables the UE to authenticate using pre-stored authentication vectors while maintaining association with the serving network, resolving the contradiction between operating independently and maintaining security.
2Adaptability or versatility
If device-to-device service is implemented, then connectivity flexibility is improved, but authentication complexity increases
Solution Approach 1:
The patent applies universality by designing the authentication mechanism to serve multiple functions: it enables both in-coverage and out-of-coverage authentication scenarios, supports both direct device-to-device communication and relay-based communication, and maintains compatibility with existing network authentication systems. This multi-functionality reduces overall system complexity despite the enhanced versatility.
Solution Approach 2:
The patent uses parameter changes by dynamically selecting and switching between different authentication parameters (such as different authentication vectors or SNN values) based on the operational context. The UE can change the authentication parameters depending on whether it is in coverage, acting as a relay, or performing direct communication, thereby managing complexity through adaptive parameter selection.
3Reliability
If serving network name is shared, then authentication reliability is improved, but information security deteriorates
Solution Approach 1:
The patent applies local quality by ensuring that authentication vectors and serving network names are stored and processed locally in the UE's security module rather than being transmitted over the air interface. The local processing and storage of sensitive authentication data ensures that even though SNN is shared for authentication purposes, the actual authentication credentials remain secure and are not exposed during transmission.
Data Source
AI summary
There is provided an apparatus for a network node comprising means for receiving an indication of a serving network name of a first user equipment, the first user equipment configured to operate as a relay between a second user equipment and a network by providing a proximity-based service between the first user equipment and the second user equipment, means for determining an authentication vector for a proximity-based service authentication for the second user equipment based on the serving network name of the first user equipment; and means for providing an indication of the serving network name of the first user equipment to the second user equipment.