UAS Identity Verification via Mobile Network Key Exchange

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing technologies lack effective solutions for securely and efficiently implementing communication between unmanned aerial systems and mobile communication networks, particularly for remote identification and identity verification.

Innovation Solution

A communication method utilizing a mobile communication network to facilitate identity verification through network devices, employing symmetric keys for encryption to ensure security and efficiency, reducing the need for frequent certificate configurations and minimizing computational overhead.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If asymmetric key pairs are used for encryption, then security is improved, but computation cost increases

Engineering Contradiction:
ImprovesecurityVSAvoidcomputation cost
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent segments the encryption system into two parts: asymmetric key pairs are used only for initial key exchange and authentication, while symmetric keys are used for actual message encryption. This division allows the system to benefit from the security of asymmetric encryption without bearing its high computational cost for all encryption operations.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces symmetric keys as an intermediary between the asymmetric key exchange and the actual communication. The symmetric key acts as a mediator that is established through asymmetric encryption but then used for efficient symmetric encryption, bridging the gap between security requirements and computational efficiency.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If identity verification is performed for every message, then security is improved, but communication efficiency decreases

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent performs identity verification and key exchange in advance before actual communication begins. Once identities are verified and symmetric keys are established, subsequent messages can be encrypted and transmitted without repeated verification processes, improving communication efficiency while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements periodic identity verification rather than verification for every single message. The verification is performed at predetermined intervals or when key expiration is reached, allowing efficient communication during verified periods while maintaining security through regular re-verification.

Inventive Principle:
Principle #19Periodic action

3Reliability

If certificates are frequently configured, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidcertificate management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes the asymmetric key pair serve multiple functions: authentication, key exchange, and establishing trust relationships. This multi-functionality reduces the need for separate certificate configurations for different purposes, simplifying device complexity while maintaining comprehensive security coverage.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP4117320B1Communication method, apparatus, and system
Publication Date: 2026.04.22 HUAWEI TECH CO LTD
  • EP4117320B1 patent drawingFigure 1
  • EP4117320B1 patent drawingFigure 2
  • EP4117320B1 patent drawingFigure 3~4

AI summary

Embodiments of this application provide a communication method, apparatus, and system, to ensure secure and efficient communication when an unmanned aerial system accesses a mobile communication system. The method includes: Second user equipment sends a second message, first user equipment sends a first message to a network device in response to the second message, to request to perform identity verification on the second user equipment, and the network device verifies whether an identity of the second user equipment is valid, and sends, to the first user equipment, a verification result indicating whether the identity of the second user equipment is valid. Alternatively, the first user equipment sends a third message for request the second user equipment to reply with information used for remote identification, and the second user equipment replies with a fourth message, where the fourth message includes the information used for remote identification on the second user equipment, and the third message and the fourth message are encrypted by using corresponding keys.