Roaming Terminal Small-Data Routing for Trusted HPLMN Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In future mobile communication systems, the assumption that a Home Public Land Mobile Network (HPLMN) does not trust a Visited PLMN (VPLMN) poses a challenge for secure communication of small user data, as existing transmission schemes may not ensure secure communication when a terminal is roaming.
Innovation Solution
A terminal is equipped with a reception unit to receive a session establishment accept message and a control unit to determine a communication partner for user small data, using an identifier to ensure secure and integrity-protected communication by separating AMF functions between the HPLMN and VPLMN, and implementing a UPF security protocol layer for U-plane integrity protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing transmission schemes for small user data are used when a terminal is roaming, then communication can be established, but security and integrity protection cannot be ensured when the HPLMN does not trust the VPLMN
Solution Approach 1:
The patent introduces an intermediary mechanism by establishing a direct secure communication channel between the terminal and the HPLMN's UPF, bypassing the untrusted VPLMN's user plane for small data transmission. The control plane remains in the VPLMN for mobility management, while the user plane for small data is routed through the HPLMN, creating a mediator architecture that ensures security while maintaining roaming functionality.
Solution Approach 2:
The patent segments the communication architecture by separating the control plane functions (remaining in VPLMN) from the user plane small data transmission (routed through HPLMN). This segmentation allows the terminal to use different paths for control signaling and small data, enabling secure small data transmission through the HPLMN while maintaining roaming control through the VPLMN.
2Reliability
If the HPLMN does not trust the VPLMN, then security concerns arise, but roaming communication must still be maintained
Solution Approach 1:
The patent segments the communication functions by maintaining control plane connectivity through the VPLMN for roaming operations while establishing a separate direct user plane connection to the HPLMN's UPF for small data transmission. This segmentation allows roaming communication to continue through the VPLMN while integrity protection is ensured through the HPLMN's direct connection.
Solution Approach 2:
The HPLMN's UPF acts as an intermediary for small data transmission, receiving data directly from the terminal and forwarding it to the appropriate network functions. This intermediary architecture allows the terminal to maintain roaming communication through the VPLMN's control plane while ensuring integrity protection through the HPLMN's user plane connection.
3Adaptability or versatility
If multiple transmission schemes for small user data are implemented, then communication flexibility is improved, but security cannot be ensured in untrusted roaming environments
Solution Approach 1:
The patent applies local quality by implementing different transmission characteristics for different data types and network conditions. Specifically, small user data is transmitted through the HPLMN's UPF with enhanced security measures (concealment and integrity protection), while other data can use traditional routing. This local quality approach allows the system to maintain flexibility in transmission scheme selection while ensuring security for critical small data transmissions.
Solution Approach 2:
The patent introduces an intermediary secure transmission path through the HPLMN's UPF specifically for small user data. This intermediary mechanism provides a secure channel that operates parallel to existing transmission schemes, allowing the system to maintain multiple transmission schemes for flexibility while adding a protected path that guarantees security for small data in untrusted roaming environments.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A terminal includes: a reception unit configured to receive, from a network, a session establishment accept message; and a control unit configured, based on an identifier, included in the session establishment accept message, that identifies a user small-data transmission scheme, to determine a communication partner of user small data that is concealed and integrity-protected.