Sensing Permission Control for Restricted-Area Network Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication technologies face challenges in enhancing sensing security, particularly in supporting advanced use cases like automated driving and smart cities, where unauthorized or uncontrolled sensing can compromise network integrity.
Innovation Solution
Implementing a communication method that dynamically configures sensing permissions and performs restricted processing based on area and service type information, using network elements like the sensing network element, PCF, and NEF to manage and authorize sensing services, thereby improving security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If sensing services are allowed in all areas without restriction, then sensing coverage and service availability are improved, but sensing security and network integrity deteriorate due to unauthorized sensing
Solution Approach 1:
The patent segments the network area into restricted and non-restricted zones using area information (e.g., geographic coordinates, cell IDs). The sensing network element applies different sensing policies to different segments, allowing sensing services in non-restricted areas while blocking them in restricted areas, thus achieving both service availability and security.
Solution Approach 2:
The sensing network element acts as an intermediary between the sensing service request and the execution object (base station or terminal). It receives sensing service requests, checks them against restricted sensing information, and only permits execution if the request does not violate restricted area constraints, thereby ensuring security while maintaining service availability.
2Reliability
If restricted sensing information is enforced strictly, then sensing security is improved, but sensing service flexibility and user convenience deteriorate
Solution Approach 1:
The patent implements dynamic sensing permission management where the sensing network element can adjust sensing permissions based on current conditions. The restricted sensing information includes time information that allows sensing services to be dynamically permitted or restricted at different times, providing flexibility while maintaining security constraints.
Solution Approach 2:
The patent changes the parameters of sensing services (area, service type, time) to enforce security policies. By modifying service parameters such as restricting sensing to specific geographic areas, service types, or time periods, the system maintains security while allowing legitimate sensing operations to proceed with adjusted parameters.
3Reliability
If comprehensive sensing authorization checks are performed, then sensing security is improved, but network signaling overhead and processing complexity increase
Solution Approach 1:
The patent performs preliminary authorization checks by the sensing network element before sensing services are executed. The sensing network element pre-evaluates sensing service requests against restricted sensing information and makes authorization decisions in advance, preventing unauthorized sensing before it occurs and reducing the need for complex real-time checks during service execution.
Solution Approach 2:
The patent extracts the authorization check function from the execution objects (base stations and terminals) and centralizes it in the sensing network element. The sensing network element independently determines whether sensing services are permitted based on restricted sensing information, simplifying the complexity for execution objects while maintaining comprehensive security checks.
Data Source
AI summary
This application relates to the field of communication technologies, and discloses a communication method and apparatus. The method includes: A sensing network element receives restricted sensing information, where the restricted sensing information includes first area information, and the first area information indicates an area of restricted sensing. The sensing network element sends indication information to an execution object of a first sensing service or an AMF network element based on the restricted sensing information, where the indication information indicates to perform restricted processing on the first sensing service, and an area corresponding to the first sensing service overlaps the area of restricted sensing. According to the foregoing method, sensing permission can be dynamically configured, and restricted processing is performed on a sensing service based on the dynamically configured sensing permission, thereby improving sensing security.