SACCH Signaling Security via Message Variant Pseudo-Randomization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The GSM's A5/1 encryption technique is vulnerable to known plaintext attacks due to repetitive and predictable information transmitted on the slow associated control channel (SACCH), which can be exploited to obtain the cipher session key, compromising the security of mobile communications.

Innovation Solution

The method involves varying the formatting and scheduling of SACCH block contents, including pseudo-randomization and different message variants for different mobile devices, to prevent known plaintext attacks by making it difficult for attackers to determine the encryption key.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the same message variants are repeatedly transmitted on SACCH, then compatibility with legacy devices is maintained, but security is compromised due to known plaintext attacks

Engineering Contradiction:
ImprovesecurityVSAvoidmessage variant diversity
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic selection of message variants for SACCH transmission. Instead of using static, repetitive message formats, the system dynamically chooses from multiple variant formats (different system information message types) based on pseudo-random criteria. This dynamic variation prevents attackers from accumulating sufficient known plaintext samples while ensuring legacy devices can still decode the transmissions using their existing protocols.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the parameters of transmitted messages by using different message variants with different structures and content arrangements. System information messages are transmitted in various formats (e.g., different information element compositions, different message types like SI5, SI5bis, SI5ter) rather than repeating identical formats. This parameter variation disrupts plaintext attack patterns while maintaining decodability by legacy equipment.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If message formatting is varied and pseudo-randomized, then security against plaintext attacks is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidmessage processing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the message transmission process into distinct variant types. Instead of creating entirely new complex message structures, the system divides message formatting into predefined segments or templates (different system information message variants). Each variant follows established structural patterns that legacy devices can parse, reducing the complexity burden while still providing sufficient variation for security purposes.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent uses lightweight, simple message variant structures that can be quickly generated and discarded. Each message variant is a simple reformatting of existing system information using standardized GSM message types. These variants are computationally inexpensive to generate and process, requiring minimal additional complexity in both network and mobile device implementations.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Data Source

PatentEP3217693B1Methods and systems for slow associated control channel signaling
Publication Date: 2019.12.11 BLACKBERRY LTD
  • EP3217693B1 patent drawingFigure 1
  • EP3217693B1 patent drawingFigure 2
  • EP3217693B1 patent drawingFigure 3

AI summary

A method, a computer-readable medium storing instructions and an apparatus for securing communications in a mobile network are disclosed. An example method for securing communications comprises transmitting a message (312) of a first type on a broadcast control channel (BCCH) (312), and after ciphering is started (332) on a slow associated control channel (SACCH) (320), transmitting a variant (626) of the message of the first type on the SACCH (320, 704), wherein the variant of the message is different from the message.