UE Base Station Verification via Digital Signature Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The 5G mobile communication system faces security threats from fake base stations, where User Equipment (UE) does not verify the authenticity of the base station, leading to potential attacks and data breaches.
Innovation Solution
A method and apparatus for UE to verify base stations by receiving multiple sets of verification information, selecting and comparing digital signatures, and reporting verification results to prevent security attacks, involving the use of public keys and digital signatures for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If UE does not verify base station authenticity, then communication simplicity is maintained, but security vulnerability increases
Solution Approach 1:
The patent applies preliminary action by having the network side pre-generate and transmit verification information (public key, system information with digital signature) before the UE establishes communication. The UE then performs verification using this pre-provided information, eliminating the need for complex real-time authentication protocols while maintaining security.
Solution Approach 2:
The patent introduces verification information as an intermediary element between the base station and UE. This intermediary includes public keys, system information blocks, and digital signatures that mediate the authentication process, allowing the UE to verify base station authenticity without direct complex interaction.
2Measurement precision
If multiple sets of verification information are received and processed, then verification accuracy is improved, but processing complexity increases
Solution Approach 1:
The patent applies segmentation by dividing verification information into multiple distinct components: public key information, system information blocks (SIB), and digital signatures. Each component serves a specific verification function, allowing the UE to process and validate them systematically to achieve accurate verification.
Solution Approach 2:
The patent implements feedback mechanisms where the UE reports verification results back to the network. When verification fails, the UE sends feedback information indicating the failure, allowing the network to take corrective actions and improving overall verification accuracy through iterative feedback loops.
3Reliability
If verification failure information is stored and reported, then security response capability is improved, but information storage requirements increase
Solution Approach 1:
The patent applies the extraction principle by selectively storing only the critical verification failure information (such as failure indicators, timing data, and relevant system information blocks) rather than storing all communication data. This extracted subset of information is sufficient for security analysis and response while minimizing storage requirements.
Data Source
AI summary
Base station verification method and apparatus for use in a mobile communication system are provided. The method includes receiving by UE multiple sets of verification information from network, selecting a set of verification information, determining verification result by comparing digital signatures broadcasted by the network and digital signature generated by UE based on the verification information, storing, if verification fails, verification failure information and reporting verification failure information when verification succeed.