UE Authentication via Cellular Credentials for Efficient Edge Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user equipment (UE) authentication procedures for accessing edge data networks are inefficient and lack a standardized method for authorization, leading to potential security vulnerabilities and suboptimal performance.
Innovation Solution
A method involving the generation of a first credential based on a second credential from a cellular network procedure, creating an identifier and authorization parameter, and transmitting an application registration request to an edge data network server for authentication acceptance or rejection, ensuring secure and efficient access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing authentication procedures are used for edge data network access, then connection establishment is possible, but authentication efficiency is low and security vulnerabilities exist
Solution Approach 1:
The patent performs preliminary authentication with the cellular network to obtain a second credential before edge network authentication. This pre-established trust relationship enables faster, more secure edge network access by reusing the already-verified identity information, eliminating the need for complete re-authentication and thereby improving both security reliability and authentication efficiency
Solution Approach 2:
The patent introduces an edge configuration server (ECS) as an intermediary that mediates between the UE and the edge data network. The ECS receives authentication requests, validates credentials through the cellular network authentication mechanism, and manages the credential generation process. This intermediary streamlines the authentication flow, reduces direct security risks, and improves overall authentication efficiency by centralizing credential management
2Productivity
If new authentication procedures are implemented for edge networks, then security and efficiency improve, but procedural complexity increases
Solution Approach 1:
The patent makes the edge network authentication procedure universal by leveraging the existing cellular network authentication framework. The same authentication mechanism and credential types used in cellular networks are reused for edge network access, allowing a single authentication infrastructure to serve multiple network types. This multi-functionality reduces procedural complexity while maintaining improved security and efficiency
Solution Approach 2:
The patent copies the successful cellular network authentication procedure and credential structure for use in edge network authentication. By replicating the proven authentication flow and credential generation methods from cellular networks, the system avoids creating entirely new complex procedures while adapting them to edge network requirements, thereby improving efficiency without proportionally increasing complexity
Data Source
AI summary
A user equipment (UE) may attempt to access an edge data network. The UE generates a first credential based on a second credential, the second credential generated for a procedure between the UE and a cellular network, generating an identifier corresponding to the first credential, and generates a multi-access edge computing (MEC) authorization parameter. The UE then transmits an application registration request message to a server associated with an edge data network, the application registration request message including an indication of the first credential, the identifier corresponding to the first credential and the first authorization parameter. The UE then receives an authentication accept message or an authentication reject message from the server associated with the edge data network.