UAV C2 Security Establishment Across Multi-PLMN Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems for unmanned aerial vehicles (UAVs) lack secure and efficient methods for establishing, modifying, and revoking command and control (C2) keys, particularly in complex wireless environments involving multiple radio access technologies and networks.
Innovation Solution
Implementing a system that uses a Unified Secure Server (USS) and UAS Traffic Management (UTM) to broker C2 key material, employing bootstrapped and TLS-derived keys, secure proxies, and network-assisted key distribution mechanisms to manage C2 communications securely across various networks and during changes in network conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional communication systems are used for UAS C2 communications, then device complexity is reduced, but security and reliability deteriorate across different PLMNs and access technologies
Solution Approach 1:
The patent introduces a key management function (KMF) as an intermediary entity that mediates key distribution and security management between UAVs and UAV-Cs across different PLMNs. The KMF receives key material from home PLMNs and distributes appropriate keys to visiting PLMNs, eliminating the need for direct complex key management between end devices while ensuring secure communications across network boundaries.
2Adaptability or versatility
If direct C2 communication between UAV and UAV-C is implemented, then device complexity is minimized, but adaptability to different PLMNs and access technologies deteriorates
Solution Approach 1:
The patent segments the key management functionality into distinct components: home PLMN key generation, visiting PLMN key distribution, and intermediate KMF coordination. This segmentation allows each entity to perform its specialized function independently, enabling adaptability across different PLMNs and access technologies without requiring end devices to handle the complexity of inter-network key management.
3Reliability
If comprehensive key management is implemented for all C2 communications, then security is improved, but loss of time in key establishment increases
Solution Approach 1:
The patent implements preliminary key establishment where the home PLMN pre-generates and secures key material before the UAV visits a foreign PLMN. The KMF receives and stores this key material in advance, so when the UAV needs to communicate via a visiting PLMN, the key distribution occurs rapidly without requiring time-consuming key generation or authentication protocols during the actual C2 communication session.
Data Source
AI summary
Methods, apparatus, systems, architectures and interfaces for performing secure command and control (C2) communications in an Unmanned Aerial System (CAS) including a UAV controller (UAV-C) are provided. The method includes on condition that the UAV has completed a registration procedure with a network, transmitting, to a session management function (SMF) of the network, a packet data unit (PDU) session establishment request message; performing a secondary authentication, with any of the USS and the UTM, via the SMF; receiving a PDU session establishment accept message including C2 security information; and establishing C2 communications security with the peer UAV-C using the C2 security information.