Network Access via Subscription Data for Ambient Power IoT
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic security approaches in 3GPP systems are not applicable to ambient power-enabled IoT devices due to their limited power and processing capabilities, making authentication and security processing challenging.
Innovation Solution
A network access management method and apparatus that involves the AMF, UDM, and UDR to facilitate registration and access of ambient power-enabled IoT devices by utilizing subscription data without requiring complex cryptographic processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic authentication protocols are implemented in 3GPP systems, then security and authentication are ensured, but ambient power-enabled IoT devices cannot be supported due to their limited power and processing capabilities
Solution Approach 1:
The authentication and security management functions are segmented between network elements (AMF, UDM, UDR) and terminal devices. The network side performs complex cryptographic operations and subscription data management, while terminal devices only need to execute simple authentication workflows, making ambient power-enabled IoT devices capable of accessing the network without compromising security.
Solution Approach 2:
The patent introduces subscription data as an intermediary mechanism that enables ambient power-enabled IoT devices to access the network. The UDM network element retrieves subscription data from UDR and provides it to the AMF, which then uses this data to authenticate and authorize terminal devices without requiring the devices to perform complex cryptographic operations locally.
2Reliability
If complex cryptographic processing is required for authentication, then security is maintained, but energy consumption increases beyond what ambient power-enabled IoT devices can provide
Solution Approach 1:
Instead of requiring terminal devices to perform complex cryptographic verification, the patent inverts the approach by having the network side (UDM, AMF) perform all cryptographic operations and generate authentication results. Terminal devices only need to present their identity and receive authentication decisions, dramatically reducing their energy consumption while maintaining security.
Solution Approach 2:
The network elements perform subscription data retrieval and authentication preparation in advance. The UDM retrieves subscription data from UDR before the actual authentication process, and the AMF prepares authentication parameters beforehand. This preliminary action reduces the computational burden on terminal devices during the authentication moment, enabling ambient power-enabled IoT devices to participate.
3Reliability
If traditional authentication protocols are used, then security standards are met, but registration and access processes become too complex for ambient power-enabled IoT devices
Solution Approach 1:
The patent extracts the complex cryptographic processing and subscription data management functions from the terminal device and relocates them to the network side (UDM, UDR, AMF). Terminal devices only need to execute simple registration requests and receive authentication decisions, reducing their operational complexity to levels suitable for ambient power-enabled IoT devices while maintaining standard compliance through network-side enforcement.
Data Source
Figure 1a~2a
Figure 2b~2c
Figure 3
AI summary
The present disclosure relates to a network-access management method, apparatus and system, and a communication device and a medium. The network-access management method comprises: an access and mobility management function network element receiving a registration request from a terminal; determining that the terminal is successfully registered on a unified data management network element (UDM), and determining subscription data for the terminal; and making the terminal access a network according to the subscription data. In this way, an access and mobility management function network element can be supported to make a terminal access a network according to an indication in subscription data.