UE Relay Trust Verification for Secure L3 Relay Connections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing Layer 3 (L3) relay communication systems without a Non-3GPP InterWorking Function (N3IWF), relay user equipment (UE) cannot determine the trustworthiness of communication peers, leading to potential security and privacy risks.
Innovation Solution
A communication method and apparatus that utilize relationship information delivered from a network side to indicate trust relationships, enabling UE to perform or refuse relay connections based on identification information from peer UEs, and involving network functions to authenticate and schedule resources based on trust relationships.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If relay communication is established without trust relationship verification, then relay connection establishment is simplified and faster, but security risks and privacy risks increase
Solution Approach 1:
The network side device performs trust relationship determination in advance by obtaining identification information from both the first UE and second UE, and determines whether they have a trust relationship before relay communication is established. This preliminary action ensures security requirements are met while avoiding complex verification during the relay connection establishment process itself.
Solution Approach 2:
The network side device acts as an intermediary that facilitates trust relationship verification. It obtains identification information from both UEs, determines the trust relationship, and provides guidance to the first UE on whether to establish relay communication. This intermediary approach centralizes the security verification function and simplifies the overall process.
2Reliability
If trust relationship verification is implemented, then security risks are reduced, but the process of establishing relay connection becomes more complex
Solution Approach 1:
The trust relationship determination function is extracted from the UE devices and placed on the network side device. The network side device obtains identification information from both UEs, determines the trust relationship, and provides guidance to the first UE. This extraction simplifies the operation for UEs while ensuring security requirements are met through centralized verification.
3Reliability
If identification information is exchanged between UEs, then trust relationship can be determined, but information exchange overhead increases
Solution Approach 1:
The network side device serves as an intermediary that collects identification information from both the first UE and second UE. Instead of requiring extensive direct information exchange between UEs, the network side device obtains the necessary identification information and performs the trust relationship determination, reducing the amount of information that needs to be exchanged directly between communicating parties.
Data Source
AI summary
A communication method and apparatus for a relay, a terminal, and a network side device are provided. The communication method includes: receiving, by first user equipment (UE), relationship information delivered from a network side, where the relationship information is used to indicate a trust relationship of the first UE; receiving, by the first UE, identification information sent by second UE; and based on the relationship information and the identification information, performing, by the first UE, relay connection or relay communication with the second UE, or refusing, by the first UE, to perform relay connection or relay communication with the second UE.