SS and USSD Message Spoofing Detection via Location Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The VLR-HLR link in communications networks is vulnerable to spoofing attacks, allowing unauthorized SS and USSD messages to flood the network, which negatively impacts traffic and resource performance.
Innovation Solution
A method and system that compare location information from a first network node (VLR) with location information from a second network node (HLR) to determine the authenticity of SS and USSD messages, using signaling messages like MAP AnyTimeInterrogation or SendRoutingInfoForSM to verify the sender's location and prevent unauthorized messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If location verification is implemented to prevent spoofing, then network security is improved, but device complexity increases
Solution Approach 1:
A verification unit is introduced as an intermediary component between the message receiving unit and the message processing logic. This verification unit specifically checks whether the source location information in the signaling message matches the location information obtained from querying the serving network node, thereby preventing spoofing attacks without requiring complex changes throughout the entire system.
Solution Approach 2:
The system performs preliminary verification of location information before processing SS or USSD messages. By querying the serving network node (HLR or ESR) for the actual location of the sending VLR and comparing it with the source location in the message beforehand, the system prevents unauthorized messages from being processed, thus securing the network in advance.
2Measurement precision
If location information comparison is performed for every message, then message authenticity is improved, but processing time increases
Solution Approach 1:
The verification process extracts only the essential location information from the signaling message and compares it with the location information obtained from the serving network node. This selective extraction and comparison of key parameters (source location vs. actual location) enables efficient verification without requiring comprehensive analysis of the entire message content.
3Reliability
If spoofing prevention mechanisms are added, then network integrity is improved, but traffic performance deteriorates
Solution Approach 1:
The serving network node (HLR or ESR) automatically provides the location information of the sending VLR when queried by the message receiving unit. This self-service mechanism eliminates the need for manual configuration or complex external verification systems, allowing the network to maintain integrity through automated, efficient location verification that does not significantly impact traffic performance.
Data Source
AI summary
A method is described for detecting an unauthorized service message in a communications network. The method comprising the steps of: receiving a signaling message associated with a supplementary service (SS) message and/or a unstructured supplementary service data (USSD) message from a first network node, the signaling message comprising identification information of the sender of the SS message and/or USSD message and first location information of the first network node; requesting second location information of the first network node from the a second network node serving the sender of the SS message and/or USSD message; and, comparing the first location information with the second location information in order to determine whether the SS message and/or USSD message is authorized or not.