UE Location Verification Using Signed Tokens and Network Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing location services for user equipment (UE) in 5G telecommunication systems lack mechanisms to prevent manipulation of location estimates, such as the location, time of estimation, or UE identifier, by clients requesting location data.
Innovation Solution
Implement a method and system where the UE and an Application Function (AF) entity exchange signed tokens containing location estimates, with verification checks to ensure the estimates differ by an error margin, and a verifying entity verifies the hashes of these tokens to ensure authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the UE or external AF entity requests location estimation from the network, then location services can be provided for various applications, but there is no mechanism to prevent the LCS client from manipulating the location result, timestamp, or UE identifier
Solution Approach 1:
The patent introduces a verifying entity as an intermediary between the LCS client and the location estimation process. This verifying entity receives the location result, timestamp, and UE identifier from the network, verifies their authenticity using cryptographic methods, and only accepts them if they pass verification. This intermediary prevents manipulation by LCS clients without eliminating the location service functionality.
Solution Approach 2:
The patent implements preliminary verification actions before the location data is fully processed or used. The verifying entity performs cryptographic verification of the location result, timestamp, and UE identifier against expected values or signatures before the data is accepted into the system. This preliminary check prevents manipulated data from entering the location service chain.
2Ease of operation
If the network forwards location estimates to external entities, then location-based communication services can be enabled, but the location data may be manipulated by the client receiving it
Solution Approach 1:
The verifying entity serves as a trusted intermediary that the network can use to deliver location data securely. Instead of the network directly trusting external clients, it forwards location data through the verifying entity which validates the data's integrity. This maintains ease of operation for location-based services while preventing data manipulation through the intermediary's verification process.
Solution Approach 2:
The system implements a feedback mechanism where the verifying entity checks the location data against cryptographic references and provides verification results back to the system. This feedback loop ensures that any manipulation attempts are detected and rejected, maintaining information integrity while allowing legitimate location-based services to operate smoothly.
Data Source
AI summary
There is provided techniques for verifiable location estimation of a UE. A method is performed by the UE. The method comprises determining a first estimate of the location of the UE. The method comprises providing a request to a serving mobile network for the serving mobile network to forward the first estimate to an AF entity. The method comprises receiving a signed token from the AF entity. The signed token comprises either a second estimate of the location of the UE as determined by the serving mobile network in response to an MT-LR having been triggered by the AF entity or the first estimate of the location. The method comprises storing the signed token.