SL Unicast Counter Check for Secure Sidelink Connections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
SL unicast communications face issues such as 'man-in-the-middle' attacks, failures in PDCP re-establishment, and complications with logical channel ID usage during PDCP duplication, which compromise security and data integrity.
Innovation Solution
Implementing an SL counter check procedure to detect and release connections upon count mismatches, performing PDCP re-establishment with new ciphering and integrity algorithms, and configuring a primary SL RLC entity for PDCP duplication to ensure secure SL communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If SL unicast communication is implemented without counter check, then communication simplicity is maintained, but security against man-in-the-middle attacks deteriorates
Solution Approach 1:
The patent implements a counter check procedure where the transmitting UE sends a counter check request containing a first counter value to the receiving UE before data transmission. The receiving UE compares this with its own second counter value to detect potential man-in-the-middle attacks. This preliminary verification action establishes security credentials before actual communication occurs.
Solution Approach 2:
The patent establishes a feedback mechanism where the receiving UE sends a counter check response containing the second counter value back to the transmitting UE. This feedback loop allows both UEs to verify their counter values match, providing confirmation that no intermediate device is manipulating the communication stream.
2Reliability
If PDCP duplication is implemented without primary logical channel ID configuration, then redundancy and reliability are improved, but logical channel ID ambiguity and security issues worsen
Solution Approach 1:
The patent applies local quality by designating a specific primary logical channel ID among multiple logical channels used for PDCP duplication. Instead of treating all logical channels equally, the system identifies one primary channel (e.g., logical channel 0) to serve as the reference for security algorithms and counter check procedures, while other channels provide redundancy.
Solution Approach 2:
The patent introduces the primary logical channel ID as an intermediary identifier that mediates between multiple logical channels in PDCP duplication. This primary ID serves as the reference point for security verification, allowing the system to manage multiple channels without ambiguity by anchoring security procedures to a single primary identifier.
Data Source
AI summary
The exemplary embodiments relate to a computer-readable storage medium, a device, an integrated circuit and a method that perform operations related to a first user equipment (UE) configured with a sidelink (SL) connection with a second UE. The operations include generating an SL counter check request including at least a first count for data transmissions from the first UE to the second UE as determined by the first UE. The operations further include transmitting the request to the second UE and receiving a counter check response to the request, the response comprising at least a second count for data transmissions from the first UE to the second UE as determined by the second UE. The operations further include determining a first difference between the first count and the second count and, when the first difference exceeds a threshold, releasing the SL connection with the second UE.