SUCI Parameter Verification for Secure Network Attachment

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The incorrectness of MNC/MCC, RoutingID, or errors in the home network public key identifier can lead to the SUCI being routed to the wrong network or entity, preventing decryption and network access, while vulnerabilities in read/write memory expose these parameters to attack during subscription data migration.

Innovation Solution

A method and apparatus for confirming the correctness of parameters like RoutingID by constructing and verifying a Subscription Concealed Identifier (SUCI) using a secure storage mechanism, ensuring correct storage and retrieval of critical network access parameters.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If parameters like RoutingID and home network public key are stored in read/write memory to enable updates during subscription data migration, then adaptability is improved, but security is worsened due to vulnerability to attacks

Engineering Contradiction:

Improveability to update parameters during subscription data migrationVSAvoidsecurity of stored parameters

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the storage system into two distinct parts: secure read-only storage (UICC/eUICC) for critical parameters like home network public key and RoutingID, and read/write memory for temporary or updateable data. This segmentation allows the system to maintain security for critical parameters while still enabling updates where needed, resolving the contradiction between adaptability and security.

Inventive Principle:

Principle #1Segmentation

2Reliability

If parameters are stored in secure read-only storage to prevent corruption, then security is improved, but adaptability is worsened because updates during subscription data migration are not possible

Engineering Contradiction:

Improveprotection against parameter corruption and attacksVSAvoidability to update parameters

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a dynamic parameter update mechanism where the home network can send updated parameters (like new RoutingID or home network public key) to the UE. The UE verifies these updates using the existing secure parameters and then stores the updated parameters in read/write memory, enabling the system to adapt to subscription data migration while maintaining security through verification processes.

Inventive Principle:

Principle #15Dynamics

3Speed

If incorrect parameters are used for SUCI construction, then network access is improved in terms of speed, but reliability is worsened because the SUCI cannot be decrypted

Engineering Contradiction:

Improvespeed of network attachmentVSAvoidsuccess of SUCI decryption

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The patent implements a feedback mechanism where the home network verifies the correctness of parameters used by the UE for SUCI construction. The network can detect parameter errors and provide feedback to the UE, allowing the UE to correct incorrect parameters and retry the attachment process, thus ensuring reliable SUCI decryption while maintaining efficient network access.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS12563392B2Apparatus and method

Publication Date: 2026.02.24 NEC CORP

AI summary

An apparatus is provided. The apparatus includes a memory storing one or more instructions and a processor. The processor execute the one or more instructions to: receive update information from an external apparatus, the update information corresponding to a network communication; obtain a Subscription Concealed Identifier (SUCI) based on the update information; and transmit the SUCI to the external apparatus.