UE Registration Security Context Reuse for Wireless Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless communication network registration processes lack efficient integrity protection and ciphering, leading to insecure message transmission and increased signaling requirements, which slows down the registration process and reduces network capacity.
Innovation Solution
Implementing integrity protection and ciphering using UE security context data, including cipher keys and integrity keys, to securely transmit registration messages, allowing for faster registration and reduced signaling by encrypting and protecting messages during both initial and subsequent sessions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If integrity protection and ciphering are implemented for registration messages, then security is improved, but device complexity increases
Solution Approach 1:
The patent applies preliminary action by performing integrity protection and ciphering using previously stored UE security context data (including cipher keys and integrity keys) from prior sessions. This allows the UE to securely protect registration messages without requiring complex real-time key generation or authentication procedures, thus improving security while managing device complexity.
2Reliability
If integrity protection and ciphering are used for registration, then security is improved, but signaling requirements increase
Solution Approach 1:
The patent applies copying by reusing previously established UE security context data (cipher keys and integrity keys) from prior sessions. Instead of generating new security parameters or performing full authentication procedures, the UE copies and applies existing security context to protect registration messages, thereby improving security while minimizing additional signaling overhead.
3Reliability
If additional authentication vectors are used for secure registration, then security is improved, but registration time increases
Solution Approach 1:
The patent applies preliminary action by performing authentication and establishing security context during prior sessions. The UE stores this pre-established security context (including cipher keys and integrity keys) for future use. During subsequent registrations, the UE can directly apply these pre-computed security parameters without undergoing time-consuming authentication procedures again, thus improving security while reducing registration time.
4Reliability
If integrity protection and ciphering are implemented, then message security is improved, but network capacity is reduced
Solution Approach 1:
The patent applies copying by reusing existing UE security context data from prior sessions. This approach allows the network to secure registration messages without requiring additional authentication vectors or extensive signaling exchanges, thereby improving message security while minimizing the impact on network capacity and throughput.
Data Source
AI summary
Techniques for performing registration with a wireless network using integrity protection and/or ciphering are described. A user equipment (UE) may perform a security procedure with the wireless network for a first session and may generate UE security context data at the UE. The UE security context data may include a cipher key used for ciphering, an integrity key used for integrity protection, a temporary UE identity, and/or other information. The UE may use the UE security context data for secure communication with the wireless network during the first session. The UE may store the UE security context data upon termination of the first session. The UE may thereafter use the stored UE security context data for registration with the wireless network for a second session following the first session. The UE may perform integrity protection and/or ciphering for message(s) for registration based on the stored UE security context data.