Roaming Device IMEI Blocking via Home Visited Network EIR Check
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless telecommunication networks face challenges in effectively blocking devices with blocked IMEIs from accessing networks during roaming scenarios, as current systems may not adequately prevent unauthorized access across different network domains.
Innovation Solution
Implementing an Equipment Identity Register (EIR) checking mechanism that involves both the home and visited networks to verify if a device's IMEI is marked as blocked, ensuring that only authorized devices can access the network by communicating between the Mobile Management Entity (MME), Serving Gateway (SGW), Packet Data Network Gateway (PDN GW), Policy and Charging Rules Function (PCRF), and Home Subscriber Server (HSS) to validate the IMEI status.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If EIR checking is implemented only at the visited network, then device blocking is simpler to implement, but security reliability deteriorates because blocked devices can still access networks through roaming partners
Solution Approach 1:
The EIR checking function is segmented and distributed across multiple network entities: the visited network's MME performs initial blocking checks, while the home network's HSS maintains the authoritative EIR database. This segmentation allows each entity to perform its specific function without requiring complete system redesign, improving security while managing complexity through functional distribution.
Solution Approach 2:
The HSS acts as an intermediary between the visited network and the home network's EIR database. When a roaming device attempts access, the visited network's MME queries the HSS to verify IMEI status before allowing connection. This intermediary mechanism enables reliable cross-network blocking without requiring direct integration between all network components.
2Reliability
If EIR checking is performed by both home and visited networks, then device blocking effectiveness is improved, but processing time increases due to multiple verification steps
Solution Approach 1:
The visited network's MME performs preliminary EIR checking locally before establishing a connection to the home network. This preliminary action filters out obviously blocked devices early in the process, reducing the burden on subsequent verification steps and minimizing overall processing time while maintaining blocking effectiveness.
Solution Approach 2:
The HSS provides feedback to the visited network's MME about the IMEI status, and the MME accordingly accepts or rejects the roaming device's access request. This feedback mechanism enables efficient decision-making by leveraging the HSS's authoritative database results, avoiding redundant verification steps and optimizing processing time.
3Reliability
If the visited network performs EIR checking, then local security is improved, but adaptability deteriorates because roaming partners may not implement the same checking mechanisms
Solution Approach 1:
The HSS's EIR checking function is designed with universality, serving both the home network's security requirements and the visited network's roaming partners. The standardized interface between MME and HSS allows any roaming partner to access blocked device information through a common protocol, enabling universal security enforcement across diverse network configurations without requiring partner-specific implementations.
Data Source
AI summary
In certain cellular communication systems, a roaming communication device may attempt to establish a connection with a visited wireless communication network. Before allowing the connection, the visited network may check to see whether the International Mobile Equipment Identity (IMEI) of the device has been listed in an Equipment Identity Register (EIR) as being blocked, and may refuse the connection if the IMEI is listed as being blocked. In addition, when the home network of the device receives a request to authorize usage of the device, the home network may also check its own EIR to determine whether the IMEI has been blocked. If the IMEI has been blocked in the EIR of the home network, the home network indicates to the visited network that the connection should be refused.