Temporary Identifier for Secure Non-3GPP Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Next-generation wireless communication systems, such as 5G and 6G, face complexities in securing trusted non-3GPP access networks, particularly in ensuring secure authentication and identification of user equipment (UE) in non-trusted environments.

Innovation Solution

The implementation of a trusted non-3GPP gateway function (TNGF) generates a temporary identifier for UE, which is used to establish a secure connection, ensuring secure authentication and identification without associating it with personally identifiable information, utilizing an encrypted channel and integrity protection mechanisms.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If temporary identifier is generated and used for UE authentication in non-3GPP access networks, then authentication security is improved, but system complexity increases

Engineering Contradiction:

Improveauthentication securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a temporary identifier (such as 5G-GUTI) as an intermediary element between the UE and the network. This temporary identifier serves as a mediator that enables secure authentication without exposing the UE's permanent identity to the non-3GPP access network, thereby resolving the contradiction between security and complexity by adding a protective layer without requiring fundamental system redesign

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication mechanism is segmented into distinct components: the temporary identifier generation, the identifier mapping to permanent identity, and the authentication verification. This segmentation allows the system to maintain security through the temporary identifier while managing complexity through modular processing of authentication steps

Inventive Principle:

Principle #1Segmentation

2Object-affected harmful factors

If temporary identifier is used to protect personal information, then data protection is improved, but identification accuracy may be compromised

Engineering Contradiction:

Improvepersonal information exposureVSAvoididentification accuracy

Core Design Contradiction:

Object-affected harmful factorsVSMeasurement precision

Solution Approach 1:

The patent creates a copy of the UE's identity in the form of a temporary identifier that can be used for authentication purposes. This copy allows the system to identify and authenticate the UE without using the original permanent identifier in the non-3GPP network, thus protecting personal information while maintaining accurate identification through the temporary identifier

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The system transitions from using the permanent identifier directly (one dimension) to using a temporary identifier that maps to the permanent identifier (two dimensions). This dimensional change adds a layer of protection while maintaining the ability to accurately identify the UE through the mapping relationship between temporary and permanent identifiers

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS20240305982A1Secure authentication and identification in trusted non-3GPP access networks

Publication Date: 2024.09.12 INTEL CORP

AI summary

An apparatus and system are described for secure authentication and identification in trusted non-3GPP access networks. A temporary identifier is generated by a trusted non-3GPP gateway function (TNGF) and sent to a user equipment (UE) over an encrypted channel. The temporary identifier is unique and not associated with personally identifiable information of a user of the UE. The UE uses the temporary identifier to establish a secure connection with the TNGF.