UAS Network Authentication Using Identifier-Based Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The integration of unmanned aerial systems (UAS) with mobile communications networks poses security challenges regarding unauthorized access and usage, necessitating robust identity authentication methods to ensure network security and reliability.
Innovation Solution
An identity authentication method involving network devices that utilize UAS identifiers to authenticate terminal devices, determining eligibility based on device type, business type, or service type, and managing authentication status to prevent unauthorized access, thereby enhancing network security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If UAS authentication is implemented using mobile communications network, then network security is improved, but authentication complexity increases
Solution Approach 1:
The authentication function is segmented between the terminal device and network device. The terminal device stores UAS identifier and authentication information locally, while the network device performs the actual authentication verification. This segmentation reduces the complexity burden on individual components while maintaining security.
Solution Approach 2:
The terminal device performs preliminary authentication preparation by storing UAS identifier and authentication information before actual authentication is needed. The network device also pre-configures authentication parameters, enabling efficient authentication processes without complex real-time calculations.
2Speed
If authentication information is stored in terminal device, then authentication speed is improved, but security vulnerability increases
Solution Approach 1:
The network device acts as an intermediary that verifies authentication information without storing it in the terminal device permanently. The terminal device stores only non-sensitive identifiers, while sensitive authentication credentials are verified through the network device, reducing security vulnerabilities while maintaining fast authentication.
Solution Approach 2:
The system changes the parameter of where authentication information is stored and verified. Instead of storing all authentication credentials in the terminal device, the system uses a hybrid approach where identifiers are stored locally but full authentication verification is performed by the network device, balancing speed and security.
3Reliability
If UAS identifier verification is performed, then unauthorized access is prevented, but network load increases
Solution Approach 1:
The system performs partial authentication verification by checking UAS identifier and associated authentication information only when needed, rather than continuously verifying all parameters. This partial action approach prevents unauthorized access while reducing unnecessary network load during normal operations.
Solution Approach 2:
The terminal device performs self-verification by checking its own UAS identifier and authentication information storage before attempting network access. This self-service mechanism reduces the burden on the network device by filtering out obviously unauthorized access attempts before they reach the network core.
Data Source
AI summary
Disclosed is an identity authentication method. A first network device receives first authentication indication information from a first terminal device, wherein the first request carries first authentication indication information and an unmanned aerial system (UAS) identifier of the first terminal device, and sends the UAS identifier of the first terminal device to a second network device. The second network device performs UAS authentication on the first terminal device based on the UAS identifier, and sends a UAS authentication result of the first terminal device to the first network device. By implementing embodiments of this application, a terminal device manufactured by an unmanned aerial system device vendor that has not signed with an operator of a mobile communications network can be prevented from using the mobile communications network.