Secure Element Pre-computation for 5G Identity Query Response
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In 5G communication networks, the encryption of identity data to prevent IMSI catcher attacks is computationally intensive, making it challenging for low-resource Secure Elements (SEs) to respond within the limited time frame, leading to potential network login failures.
Innovation Solution
A method where the SE pre-computes and stores partial results for generating encrypted identity data and a message authentication code before receiving an identity query, allowing for a quicker response by performing only the final computing steps when the query is received, thus reducing computational complexity and time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the SE encrypts identity data using complex encryption algorithms to prevent IMSI catcher attacks, then security is improved, but the computing time increases and the SE cannot respond within the limited time frame
Solution Approach 1:
The SE pre-computes and stores partial results for generating encrypted identity data and message authentication codes before receiving an identity query. When the query is received, the SE only needs to perform the final computing steps using the pre-computed partial results, significantly reducing the total computing time while maintaining security through proper key management and encryption algorithms
2Productivity
If the SE uses higher-resource SEs with crypto-co-processor or multiplication accelerator to reduce computing time, then productivity is improved, but the device complexity and cost increase
Solution Approach 1:
By pre-computing and storing partial encryption results and cryptographic parameters before the identity query is received, the SE eliminates the need for expensive crypto-co-processors or multiplication accelerators. The simple SE can complete the encryption operation quickly by only performing the final computing steps when the query is received, achieving high productivity without increased device complexity
Solution Approach 2:
The encryption process is divided into two parts: pre-computation of partial results (performed in advance) and final computation (performed only when needed). This segmentation allows the SE to maintain simplicity while achieving fast response times, as the bulk of the computational work is done beforehand and stored for quick retrieval
Data Source
AI summary
A method in a secure element (SE), includes the following method steps: obtaining, in the SE, an identity query, in particular a GET IDENTITY command, sent by a network; encrypting, by means of the SE, identity data stored on the SE, in order to generate encrypted identity data using a symmetrical key generated in the SE before the obtaining step; applying, by means of the SE, a message authentication code (MAC) algorithm to the generated encrypted identity data in order to obtain a MAC; and creating and sending a response to the identity query from the SE to the network, wherein the message contains the encrypted identity data and the MAC. An SE is provided for a computer program product, and a system comprising a SE and a network.