TNGF Key Mapping for Trusted Non-3GPP UE Registration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing communication systems, a trusted non-3GPP gateway function (TNGF) cannot accurately determine unique TNGF keys for different user equipment (UEs) due to the use of anonymous subscription concealed identifiers (SUCIs), leading to failed secure connections and registration issues.
Innovation Solution
The UE generates identification information that uniquely represents itself and sends it to the TNGF, allowing the TNGF to associate this information with the corresponding TNGF key, ensuring secure connection establishment by using this key for subsequent communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If anonymous subscription concealed identifiers (SUCI) are used for privacy protection, then user privacy is protected, but the TNGF cannot distinguish between different UEs and cannot establish secure connections
Solution Approach 1:
The patent segments the identification system into two parts: the anonymous SUCI for privacy protection and a separate unique identifier (such as a random number or hash value) for TNGF key determination. This allows the system to maintain privacy while enabling secure connection establishment by using different identifier types for different purposes.
Solution Approach 2:
The patent introduces an intermediary unique identifier that mediates between the anonymous SUCI and the TNGF key. This intermediary identifier (such as a random number generated by the UE or a hash value derived from UE parameters) allows the TNGF to determine the correct key without exposing the UE's real identity, thus resolving the contradiction between privacy and secure connection establishment.
2Adaptability or versatility
If the same anonymous SUCI is used by different UEs, then privacy protection is maintained, but the TNGF cannot obtain the corresponding TNGF key for each UE
Solution Approach 1:
The patent applies local quality by making different parts of the identification system serve different functions: the SUCI part maintains privacy with the same value for different UEs, while the unique identifier part provides differentiation for each UE. This allows the system to have uniform privacy protection while maintaining individual distinguishability where needed.
Solution Approach 2:
The patent adds another dimension to the identification system by introducing a unique identifier that exists alongside the SUCI. This additional dimension allows the system to differentiate between UEs without compromising the privacy protection provided by the SUCI, effectively moving from a single-dimension anonymous identifier to a multi-dimension identification approach.
3Reliability
If unique identification information is collected from UEs, then secure connection establishment is enabled, but the complexity of the registration process increases
Solution Approach 1:
The patent implements self-service by enabling the UE to autonomously generate its own unique identifier (such as a random number or hash value) without requiring complex network-side processing or additional infrastructure. This simplifies the overall system complexity while still enabling secure connection establishment, as the UE independently provides the necessary identification information.
Data Source
AI summary
This application provides a communication method and apparatus related to access of a network through trusted non-3GPP. An example method includes: when a user equipment (UE) registers with a core network through a trusted non-3GPP access network, the UE generates identification information that is capable of uniquely representing the UE, and sends the identification information to a trusted non-3GPP gateway function (TNGF); and the TNGF associates the identification information with a corresponding TNGF key. After subsequently receiving the identification information sent by the UE, the TNGF can determine, based on the identification information, the TNGF key corresponding to the UE, to establish a secure connection with the UE by using the TNGF key corresponding to the UE.