SUCI Structure With Protection Scheme ID for SUPI De-Concealment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing UDM systems in 5G networks face challenges in executing the SUCI de-concealment process due to the lack of knowledge about the SUPI protection scheme used by user equipment, leading to potential tampering and failure in subscriber identification.
Innovation Solution
The proposed solution involves generating a Subscription Concealed Identifier (SUCI) that includes a Subscription Permanent Identifier (SUPI) concealed using a predetermined protection scheme and a protection scheme identifier, which is sent to a network apparatus for de-concealment, ensuring the network can identify the appropriate de-concealment method and protect the integrity of the SUCI.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If UDM performs SUCI de-concealment without knowing the protection scheme, then the de-concealment process cannot be executed, but adding protection scheme information increases message complexity
Solution Approach 1:
The protection scheme identifier is nested within the SUCI structure itself, specifically as part of the parameter information field. This allows the UDM to extract the identifier directly from the SUCI without requiring separate signaling messages, thereby resolving the contradiction between enabling de-concealment and maintaining message simplicity
Solution Approach 2:
The protection scheme identifier acts as an intermediary element that bridges the gap between the concealed SUPI and the UDM. It provides the necessary information about the protection scheme without requiring direct communication between the UE and UDM about the scheme selection, enabling automated de-concealment while keeping the interface simple
2Reliability
If SUPI is concealed without protection scheme identifier, then subscriber identification is protected, but the network cannot identify the correct de-concealment method
Solution Approach 1:
The protection scheme identifier is prepared and embedded in the SUCI structure before the de-concealment process begins. This preliminary inclusion of information ensures that when the UDM receives the SUCI, it already has all necessary information to identify and apply the correct de-concealment method without requiring additional information exchange
Solution Approach 2:
The SUCI structure is segmented into distinct components, including the protection scheme identifier as a separate element. This segmentation allows the UDM to easily extract and process the identifier independently from the concealed SUPI, ensuring accurate identification of the protection scheme while maintaining the confidentiality of the subscriber identifier
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A communication terminal (10) includes control means for generating a subscription concealed identifier (SUCI) including a subscription permanent identifier (SUPI) concealed using a predetermined protection scheme, and a protection scheme identifier identifying the protection scheme, and transmission means for sending the SUCI to a first network apparatus during a registration procedure, the SUCI being sent for a second network apparatus to de-conceal the SUPI from the SUCI based on the protection scheme used to generate the SUCI.