Digital Signatures for Small Cell Authentication in 5G Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

5G wireless telecommunications networks face challenges in authenticating small cells securely, which are vulnerable to cyberattacks due to their increased presence and potential for network congestion, requiring an efficient method to verify their authenticity and connectivity schedules.

Innovation Solution

Implementing a digital signature system where small cells transmit unique signatures based on their connectivity schedules, which are processed through hashing algorithms and stored at Unified Data Management (UDM)/User Data Repository (UDR) nodes, allowing the network to authenticate them by matching received signatures with expected ones at specific times, thereby safeguarding against malicious activity and balancing network load.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If small cells are added to increase network capacity and coverage, then network capacity and coverage are improved, but network security vulnerabilities and authentication complexity increase

Engineering Contradiction:
Improvenetwork capacityVSAvoidnetwork security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent implements preliminary authentication by assigning unique digital signatures to small cells before they connect to the network. The UDM/UDR nodes store expected signatures in advance, enabling the network to verify small cell authenticity before granting full access, thus preventing unauthorized devices from compromising network security while maintaining expanded capacity

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces digital signatures as an intermediary authentication mechanism between small cells and the network. This intermediary verification layer, managed through UDM/UDR nodes, allows the network to securely authenticate numerous small cells without direct complex verification processes, resolving the contradiction between expanded network capacity and maintained security reliability

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If digital signature authentication is implemented for all small cells, then network security is improved, but processing time and computational overhead increase

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent uses digital signatures as simplified copies of authentication credentials that can be rapidly verified. Instead of complex mutual authentication protocols, the system uses pre-generated signature copies stored at UDM/UDR nodes, enabling fast verification of small cell authenticity without time-consuming real-time cryptographic exchanges, thus maintaining high security while minimizing authentication processing time

Inventive Principle:
Principle #26Copying

3Productivity

If connectivity schedules are enforced to balance network load, then network congestion is reduced, but flexibility in small cell operation is limited

Engineering Contradiction:
Improvenetwork efficiencyVSAvoidsmall cell operational flexibility
Core Design Contradiction:
ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic connectivity schedules that can adapt to changing network conditions. The UDM/UDR nodes manage flexible scheduling parameters that allow small cells to adjust their connection patterns based on real-time network load, ensuring network efficiency is maintained while preserving operational flexibility for legitimate small cells to respond to varying traffic demands and environmental conditions

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS12133091B2Digital signatures for small cells of telecommunications networks
Publication Date: 2024.10.29 T MOBILE US INC
  • US12133091B2 patent drawing
  • US12133091B2 patent drawing
  • US12133091B2 patent drawing

AI summary

A security system generates a digital signature for a small cell of a wireless network and assigns the digital signature to the small cell for connecting to the wireless network. The digital signature can be generated based on a connectivity schedule for the small cell. When the security system obtains a connection request from the small cell to connect to the wireless network, the security system compares an instance of the digital signature included in the connection request with an expected digital signature and compares the point in time when the connection request was communicated with an expected time indicated in the connectivity schedule. The security system detects an anomaly when the instance of the digital signature deviates from the expected digital signature or the point in time deviates from the expected time, and causes performance of an action based on a type or degree of the anomaly.