SUCI Version Signaling for Reliable Network Registration

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing communication networks face challenges in managing expired, updated, or multiple protection scheme and home network keys used for subscription concealed identifier (SUCI) calculation, leading to failed registrations due to outdated versions, which cannot be de-concealed by the network.

Innovation Solution

Incorporating a version indication in the protection scheme identifier and home network public key identifier within the SUCI, allowing the network to detect and reject registration requests using outdated versions, and providing a default configuration for successful registration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the network uses updated protection scheme identifiers and home network public key identifiers, then network security is improved, but devices that missed OTA updates cannot be authenticated and registration fails

Engineering Contradiction:

Improvenetwork securityVSAvoiddevice compatibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces version indications in the protection scheme identifier and home network public key identifier to dynamically track the evolution of security parameters. The network can detect the version indicated in the SUCI and determine whether to accept or reject the registration request based on version compatibility, enabling the system to adapt between security updates and backward compatibility requirements

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent performs preliminary version detection and compatibility assessment before the actual authentication process. By checking the version indication in the SUCI beforehand, the network can pre-determine whether to proceed with authentication using updated keys or to reject the request, avoiding unnecessary authentication failures and enabling smoother transitions during security updates

Inventive Principle:

Principle #10Preliminary action

2Reliability

If the network rejects outdated SUCI versions, then security is maintained, but registration success rate decreases

Engineering Contradiction:

ImprovesecurityVSAvoidregistration success rate

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements a feedback mechanism where the network detects the version indication in the SUCI and provides implicit feedback by accepting or rejecting the registration request based on version compatibility. This feedback loop allows the system to maintain security by rejecting outdated versions while providing clear guidance to devices about version requirements, balancing security with registration success

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS12470917B2Registering a user equipment to a communication network

Publication Date: 2025.11.11 NOKIA TECHNOLOGIES OY

AI summary

There is provided an apparatus for a communication network comprising means for generating a subscription concealed identifier, SUCI, comprising a protection scheme identifier and a home network public key identifier. At least one of: a part of the protection scheme identifier and a part of the home network public key identifier comprises a version number of the at least one of: the protection scheme identifier and the home network public key identifier, correspondingly.