Subnetwork Authorization Token for 5G Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In 5G mobile radio networks, existing systems lack flexibility in managing access authorization for subscriber devices to access subnetworks, particularly in industrial environments where temporary or permanent access needs to be granted for services like maintenance or troubleshooting, without requiring pre-configured access permissions by the mobile radio network operator.
Innovation Solution
A method where a subnetwork authorization token is assigned and transmitted to the subscriber device by the mobile radio administration device, which is validated by the subnetwork access server upon access request, allowing flexible access management independent of the mobile radio network authorization, and enabling decoupling of subnetwork access from public mobile radio network access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If access authorization is fixedly configured by mobile radio network operator, then network security is maintained, but flexibility in granting temporary access to subnetwork is reduced
Solution Approach 1:
The patent segments the access authorization system into two independent parts: mobile radio network access authorization and subnetwork access authorization. The subnetwork operator can independently manage subnetwork access tokens without affecting the mobile radio network operator's authorization system, enabling flexible temporary access grants while maintaining overall system security.
Solution Approach 2:
The patent introduces an intermediary subnetwork authorization token that mediates between the mobile radio network and the subnetwork. This token is issued by the mobile radio administration device but validated independently by the subnetwork access server, allowing flexible access management without direct coupling between the two authorization systems.
2Adaptability or versatility
If subnetwork access is coupled with mobile radio network authorization, then centralized control is maintained, but independent subnetwork administration is prevented
Solution Approach 1:
The patent extracts subnetwork access authorization from the centralized mobile radio network authorization system. The subnetwork authorization token is issued by the mobile radio administration device but validated independently by the subnetwork access server, allowing subnetwork operators to independently manage access without requiring changes to the mobile radio network's central authorization infrastructure.
3Ease of operation
If pre-configured access permissions are required, then security is ensured, but temporary access for maintenance or troubleshooting is hindered
Solution Approach 1:
The patent implements preliminary action by pre-generating subnetwork authorization tokens that can be activated on demand. The tokens are issued in advance by the mobile radio administration device but remain inactive until needed, allowing rapid deployment of temporary access for maintenance or troubleshooting without compromising security through pre-configured permanent permissions.
Data Source
AI summary
Provided is a method for setting up access authorization for a subscriber apparatus to access a subnetwork of a mobile radio network, wherein the subnetwork is administrated by a mobile radio administration apparatus and the access authorization for the subscriber apparatus to access the subnetwork is checked by an access apparatus of the mobile radio network, wherein—access authorization to access the subnetwork is requested for the subscriber apparatus from the mobile radio administration apparatus by a local administration apparatus,—a subnetwork authorization token is assigned to the subscriber apparatus by the mobile radio administration apparatus and transmitted to the subscriber apparatus, wherein the subscriber apparatus is authorized to access the subnetwork only if the subnetwork authorization token is transmitted from the subscriber apparatus to the subnetwork during an access request and is confirmed as valid.