Sidelink Positioning Security via Pre-configured Cipher Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security solutions for sidelink positioning in V2X communication, such as public key/certificate-based authentication/ciphering and common private key-based solutions, have limitations including high processing/latency requirements, scalability issues, and vulnerability to rogue UEs, making them less suitable for securing sidelink positioning protocols.
Innovation Solution
A method where a server configures UEs with private cipher keys and random values to derive common cipher keys for secure communication, enabling secure sidelink communication and positioning by authenticating and encrypting messages between UEs using these derived keys, supporting all coverage scenarios and preventing key data exposure to attackers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key/certificate-based authentication/ciphering is used for sidelink positioning, then security is provided, but processing time and latency increase significantly
Solution Approach 1:
The patent applies preliminary action by pre-configuring UEs with private cipher keys and random values before sidelink positioning occurs. The server distributes authentication credentials in advance through cellular networks, so that when UEs need to communicate securely over sidelink, the authentication data is already available, eliminating real-time processing delays associated with public key infrastructure.
Solution Approach 2:
The patent extracts the heavy computational burden of public key cryptography and separates it from the sidelink positioning process. By using pre-shared symmetric keys derived from initial public key exchange, the system removes complex cryptographic operations from the time-critical positioning path, keeping only lightweight symmetric encryption for actual sidelink communication.
2Device complexity
If common private key-based security solutions are used, then implementation is simplified, but vulnerability to rogue UEs increases
Solution Approach 1:
The patent segments the security system into hierarchical levels: a master private key held by the server, individual UE-specific random values, and derived cipher keys for each UE pair. This segmentation allows each UE to have unique authentication credentials while maintaining systematic key management, preventing rogue UEs from impersonating others while keeping implementation manageable through structured key distribution.
Solution Approach 2:
The patent introduces a server as an intermediary that facilitates secure key distribution between UEs. The server acts as a trusted mediator that generates and distributes private cipher keys and random values to UEs through secure cellular channels, eliminating the need for UEs to directly manage complex key pairs while maintaining security against rogue participants.
3Reliability
If secure authentication is implemented for all UEs, then trustworthiness of location data improves, but system scalability is reduced
Solution Approach 1:
The patent enables self-service by allowing UEs to autonomously derive their own cipher keys using the formula DK = f(PK, RV) where PK is the pre-configured private key and RV is a random value. Each UE independently generates its authentication credentials without requiring manual configuration or complex group management, enabling the system to scale to large numbers of UEs while maintaining individual authentication and data trustworthiness.
Data Source
AI summary
Techniques are described for supporting secure sidelink communication and secure sidelink positioning for user equipments (UEs). A server may configure each UE with a private cipher key, a random value and derived cipher keys. Two UEs may exchange their random values and may each use their private cipher key and a received random value to determine a derived cipher key already configured in the other UE. The two derived cipher keys now known to both UEs can enable secure communication and positioning. In a degenerate case, a Type B UE is configured with a random value and a derived cipher key which can be determined by a Type A UE configured with a private cipher key using the random value. The technique can be extended to secure communication and positioning for a group of UEs.