RRC Security Token Binding to Cell Global Identity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communications networks, the security token used for Radio Resource Control (RRC) connection re-establishment is not globally unique across multiple Public Land Mobile Networks (PLMNs, leading to reduced security as it may not be bound to a specific cell, allowing attackers to intercept and misuse the token for connection establishment in other cells.
Innovation Solution
Incorporating a globally unique cell identifier, such as the Cell Global Identity (CGI), into the security token calculation ensures that the token can only be used within the intended target cell, preventing unauthorized RRC connection re-establishment by combining the PLMN ID with the Cell ID to create a unique identifier.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a security token is used for RRC connection re-establishment without including PLMN ID, then the connection re-establishment process is simpler and faster, but the security is reduced as the token is not globally unique and can be misused in other cells
Solution Approach 1:
The patent merges the PLMN ID with the Cell ID to form a globally unique identifier (CGI or similar composite identifier) that is then included in the security token calculation. This combination ensures that the security token is unique across multiple PLMNs and cells, preventing unauthorized reuse of tokens in different networks while maintaining a straightforward calculation process.
2Reliability
If a globally unique cell identifier like CGI is included in the security token calculation, then the security is enhanced by binding the token to a specific cell, but the device complexity increases
Solution Approach 1:
The patent changes the parameters included in the security token calculation from just local cell identifiers to globally unique identifiers that incorporate PLMN ID. This parameter expansion ensures global uniqueness of the security token across different PLMNs and cells. The calculation remains efficient as it uses standard identifier fields already available in the network infrastructure, avoiding overly complex computational requirements.
Data Source
AI summary
Methods, User Equipment, UE, (120) and source network node (111) for re-establishing a Radio Resource Control, RRC, connection to a target cell in a wireless communications network (100), The UE generates a security token using a set of input parameters, and sends a re-establishment request with the security token to a target network node (112) serving the target cell. When receiving the re-establishment request, the source network node generates a security token using a set of input parameters in the same manner as the UE. If the received security token is successfully verified when compared with the generated security token, the source network node provides to the target network node a UE context of the UE, to enable the target network node to re-establish the RRC connection.