UE Authentication Filtering Against 4G/5G Tracking Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User equipment (UE) in 4G and 5G networks is vulnerable to malicious attacks, such as man-in-the-middle (MiTM) attacks, where attackers can track or disrupt UE operations by intercepting and manipulating authentication messages, leading to security loopholes and potential user tracking.
Innovation Solution
The UE is designed to discard non-integrity protected authentication and identity request messages in specific states, maintain a list of failed authentication token and random value pairs, and initiate mobility registration procedures when necessary, ensuring secure communication and preventing unauthorized tracking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the UE processes all authentication request messages received from the network, then the network can maintain normal authentication procedures, but the UE becomes vulnerable to tracking attacks and security breaches
Solution Approach 1:
The UE performs preliminary validation of authentication request messages by checking integrity protection indicators and service state before processing. This preliminary action filters out malicious messages early in the reception process, preventing tracking attacks while maintaining legitimate authentication procedures. The UE checks whether the message includes proper integrity protection and whether the current service state permits processing, discarding messages that fail these checks.
2Object-affected harmful factors
If the UE discards non-integrity protected authentication messages, then the UE is protected against tracking attacks, but legitimate authentication procedures may be interrupted
Solution Approach 1:
The UE uses feedback from the network's authentication procedures to determine whether to process or discard messages. The UE monitors the service state and authentication context, using this feedback to make intelligent decisions about message processing. Legitimate authentication messages that are properly protected and context-appropriate are processed, while malicious messages lacking proper protection are discarded.
3Reliability
If the UE maintains a list of failed authentication token pairs, then repeated attacks with same tokens are prevented, but memory resources are consumed
Solution Approach 1:
The UE discards authentication token pairs that have failed validation and adds them to a blocking list, preventing their reuse in subsequent authentication attempts. This discarding mechanism effectively blocks repeated attacks using the same tokens. The list is maintained with limited scope and duration, balancing security effectiveness with memory resource consumption.
Data Source
AI summary
A UE may receive a first GUTI from a network. The UE may transition to a Connected mode in response to a paging procedure with the network. The UE may take actions to ensure that a second GUTI is obtained from the network. Other aspects are described.