Sidelink Timing Authentication for False Sync Signal Attacks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In new radio (NR) vehicle-to-everything (V2X) systems, synchronization procedures are vulnerable to attacks by malicious UEs that transmit false synchronization signals, leading to legitimate UEs deriving incorrect timing and jeopardizing their operation and safety.

Innovation Solution

Transmitter UEs generate and transmit a message authentication code alongside the sidelink synchronization signal block, allowing receiver UEs to verify the authenticity of the transmission using a shared key, ensuring that only legitimate timing is derived.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If synchronization procedures are performed without authentication in NR V2X systems, then the system operates with simple procedures and low overhead, but malicious UEs can transmit false synchronization signals and legitimate UEs can derive incorrect timing

Engineering Contradiction:
Improvetiming authenticityVSAvoidsynchronization procedure complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by pre-sharing authentication keys between UEs before synchronization procedures. The transmitter UE generates a message authentication code (MAC) using a pre-shared key and the SL-MIB information, then transmits the MAC alongside the synchronization signal. This allows the receiver UE to verify authenticity before deriving timing, preventing malicious attacks while maintaining procedural simplicity.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If message authentication codes are transmitted with every synchronization signal, then timing authenticity is ensured, but transmission overhead and processing complexity increase

Engineering Contradiction:
Improvesynchronization securityVSAvoidtransmission data volume
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent applies local quality by making the authentication mechanism selective rather than universal. The MAC is generated and transmitted only for synchronization signals that require authentication verification, not for all transmissions. The receiver UE verifies the MAC only when receiving synchronization signals from potential attackers or in untrusted environments, reducing overall overhead while maintaining security where needed.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS12483887B2Secure timing for sidelink systems
Publication Date: 2025.11.25 QUALCOMM INC
  • US12483887B2 patent drawing
  • US12483887B2 patent drawing
  • US12483887B2 patent drawing

AI summary

Certain aspects of the present disclosure provide a method for wireless communications by a transmitter user equipment (UE). The transmitter UE generates a message authentication code, based on information within a sidelink master information block (SL-MIB) and a key shared between the transmitter UE and a receiver UE. The transmitter UE transmits a sidelink broadcast channel (SL-BCH) transmission carrying the SL-MIB and the message authentication code.