Signaling Firewall Validation for Multi-Border Location Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current telecommunication signaling security solutions fail to accurately identify fraudulent location updates by hackers exploiting multiple borders between neighboring countries, leading to false positives and potential interception of legitimate traffic.
Innovation Solution
Implement a location update message validation technique at a signaling firewall using a directional state database to predict a mobile subscriber's trajectory and compare the indicated location with predicted neighboring countries, flagging suspicious updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If time and distance related security countermeasures are used to validate location updates, then security against fraudulent location updates is improved, but false positives increase when home network borders multiple neighboring countries
Solution Approach 1:
The patent segments the validation process into multiple independent checks: time-distance feasibility check, directional trajectory check, and border proximity check. Each check operates independently and contributes to the overall validation decision, allowing the system to distinguish between legitimate multi-border travel and fraudulent location updates more accurately.
Solution Approach 2:
The patent introduces a directional dimension to the validation process by calculating the angle between the subscriber's movement vector and the border normal vector. This angular measurement provides an additional dimension of analysis that helps determine whether the subscriber is actually attempting to cross a specific border or is simply passing through multiple borders legitimately.
2Speed
If simple plausible movement check is used to validate location updates, then processing speed is improved, but fraudulent location updates from multiple borders are not detected
Solution Approach 1:
The patent performs preliminary calculations of the directional trajectory and border normal vectors during the location update validation process. By pre-computing these geometric relationships and storing them in the validation logic, the system can quickly compare against incoming location updates without performing complex real-time analysis, thus maintaining processing speed while improving fraud detection.
3Ease of operation
If multiple border scenarios are allowed without additional validation, then ease of operation for legitimate subscribers is improved, but security against hackers exploiting multiple borders deteriorates
Solution Approach 1:
The patent introduces an intermediary validation layer that sits between the location update request and the subscriber record repository. This intermediary layer performs the directional trajectory and border proximity checks before allowing the location update to be processed, thereby protecting against fraudulent updates while allowing legitimate multi-border travel to proceed uninterrupted.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The subject matter described herein includes a methods, systems, and computer readable media for validating location update messages. One method includes receiving, by a signaling firewall from a non-home network, an ingress location update request message related to a mobile subscriber, querying a directional state database to obtain predicted country trajectory data associated with the mobile subscriber, and comparing the obtained predicted country trajectory data with country code information included in the ingress location update request message. The method further includes validating the ingress location update request message if the predicted country trajectory data and the country code information match.