SEPP Location And Velocity Checks Using SCP UE Update Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
5G networks lack an effective mechanism for validating incoming service-based interface request messages at the security edge protection proxy (SEPP), which can lead to spoofing attacks due to inadequate location and velocity checks, allowing attackers to falsely authenticate from outside the network.
Innovation Solution
Perform a location and velocity check at the SEPP using a service communication proxy (SCP) by querying it for the last known update of user equipment (UE) and comparing it with the current request to determine if the UE is within allowed timelines and location, blocking unauthorized messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If location and velocity check is performed at SEPP using existing authentication data, then network security against spoofing attacks is improved, but the complexity of the SEPP system increases due to additional validation mechanisms
Solution Approach 1:
The patent introduces an intermediate validation mechanism at the SEPP that acts as a mediator between incoming authentication requests and the core network. This intermediary performs location and velocity checks using available authentication data before forwarding requests to the AUSF, thereby enhancing security without requiring complex modifications to the core authentication system.
Solution Approach 2:
The patent implements preliminary location and velocity validation at the SEPP before authentication requests reach the core network. By performing these checks in advance using timestamps and location data from previous authentications, the system prevents spoofing attacks early in the process without adding complexity to the main authentication flow.
2Reliability
If location and velocity check is implemented at SEPP, then spoofing attack prevention is improved, but processing time increases due to additional validation steps
Solution Approach 1:
The patent applies partial validation by performing only location and velocity checks using existing authentication data at the SEPP, rather than implementing complete re-authentication. This partial action approach provides sufficient security against spoofing while minimizing additional processing time by leveraging already-available timestamps and location information.
3Measurement precision
If SEPP performs comprehensive location and velocity validation, then accuracy of authentication validation is improved, but the difficulty of detecting and measuring UE location and velocity increases
Solution Approach 1:
The patent uses copied data from previous authentication events (timestamps, location identifiers, velocity information) to perform validation checks. Instead of directly measuring current UE location and velocity, the system copies historical authentication data and compares it with current request parameters, thereby achieving validation accuracy without the complexity of real-time location and velocity measurement.
Data Source
AI summary
A method for performing a location and velocity check at a security edge protection proxy (SEPP) using a service communication proxy (SCP) includes receiving, at an SEPP, an SBI request message relating to a user equipment (UE). The method further includes querying, by the SEPP, a service communication proxy (SCP) to obtain information indicative of a last known update of the UE with the home network of the UE. The method further includes receiving, at the SEPP, a response from the SCP, the response including the information indicative of the last known update of the UE. The method further includes reading, by the SEPP and from the response, the information indicative of the last known update of the UE. The method further includes performing, by the SEPP and using the information indicative of the last known update of the UE, a location and velocity check for the UE. The method further includes performing a network security action based on results of the location and velocity check.