Sidelink Ranging Security via Temporary Group Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communications systems face challenges in protecting broadcast ranging and positioning messages over sidelink interfaces, as existing technologies like ProSe do not provide security for broadcast messages, leaving SL positioning assistance data and location information vulnerable to eavesdropping and tampering.
Innovation Solution
The implementation of a method where an initiator UE sends a broadcast authorization request, receives a temporary group ID and validity time, and then sends a SL broadcast message with a requested positioning or ranging action, with secondary UEs requesting and receiving a broadcast key to encrypt their responses, forming an ad-hoc temporary group for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If broadcast messages are used for SL positioning, then communication efficiency is improved, but security is worsened due to lack of encryption
Solution Approach 1:
The patent applies preliminary action by distributing encryption keys to secondary UEs before they participate in the ranging procedure. The key distribution occurs in advance through key request and key response messages, allowing UEs to have the necessary security credentials ready before actual positioning data exchange begins. This resolves the contradiction by preparing security measures beforehand, enabling both efficient broadcast communication and secure encrypted messaging.
Solution Approach 2:
The patent introduces an intermediary mechanism through the key management function and the temporary group identifier system. Instead of direct encryption between initiator and responders, a structured key distribution protocol acts as an intermediary layer. This mediator establishes secure associations between UEs through temporary group IDs and corresponding encryption keys, enabling secure broadcast communication without compromising efficiency.
2Reliability
If encryption keys are distributed to all secondary UEs, then security is improved, but device complexity is worsened due to key management overhead
Solution Approach 1:
The patent applies segmentation by dividing the key management process into distinct phases: key request phase, key distribution phase, and key usage phase. Additionally, keys are segmented by association with temporary group identifiers, allowing organized management of encryption credentials. This structured segmentation reduces the perceived complexity by breaking down the key management task into manageable, sequential steps rather than a monolithic complex system.
Solution Approach 2:
The patent utilizes parameter changes by introducing temporary group identifiers that dynamically change for each ranging procedure. Instead of managing complex permanent key relationships, the system changes the group ID parameter for each session, with corresponding encryption keys tied to these temporary identifiers. This parameter-based approach simplifies key management by making it session-oriented rather than device-oriented, reducing overall system complexity.
3Adaptability or versatility
If temporary group ID is used for broadcast, then adaptability is improved, but loss of information is worsened due to key validation requirements
Solution Approach 1:
The patent applies preliminary action by establishing key associations before the actual ranging procedure begins. The key request and key response messages are exchanged in advance, ensuring that all necessary encryption credentials are in place before positioning data needs to be protected. This preliminary key setup prevents information loss by ensuring encryption readiness before data exchange, while maintaining adaptability through temporary group ID usage.
Solution Approach 2:
The patent implements feedback mechanisms through the key request and key response message exchange. The system provides feedback to secondary UEs about their key status and validates their participation in the ranging procedure. This feedback loop ensures that only properly authenticated UEs receive and use encryption keys, preventing information loss while maintaining the adaptability of the broadcast system through structured validation.
Data Source
AI summary
Various aspects of the present disclosure relate to protecting broadcast ranging and positioning messages over sidelink interface. An initiator user equipment (UE) can initiate a ranging or positioning procedure with secondary UEs that are in close proximity with the initiator. The initiator UE sends a sidelink (SL) broadcast message with a requested positioning or ranging action, along with a temporary group identifier. The secondary UEs perform the requested positioning or ranging action and return their results to the initiator UE. The results are protected (e.g., encrypted) using one or more keys associated with the temporary group identifier. These one or more keys may be a group broadcast key known by all of the secondary UEs, or individual broadcast keys for the individual secondary UEs.