Universal Connectivity Stack for Non-3GPP Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Non-SIM devices in 5G telecommunications networks are limited in accessing network services and resources compared to SIM-based devices, lacking direct access to the user plane function and restricted by secure connections through the N3IWF, which hampers their integration and utilization within the network.
Innovation Solution
Implementing a 3GPP compatible universal connectivity stack (UCS) in non-3GPP devices to establish secure tunnels using 3GPP authentication and security protocols, enabling these devices to access network functions and services by extending the N3 user plane tunnel and providing a quasi-SIM device identity for authentication, thus allowing access to APIs and services similar to SIM-based devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If non-3GPP devices use secure connections through N3IWF to access the network, then device security is improved, but device access capability and network integration are limited
Solution Approach 1:
The patent introduces a universal connectivity stack (UCS) as an intermediary component within non-3GPP devices that enables 3GPP authentication protocols. This intermediary layer allows devices to gain trusted status in the network while maintaining their non-3GPP access methods, thus resolving the contradiction between security and access capability.
Solution Approach 2:
The universal connectivity stack provides multi-functionality by enabling non-3GPP devices to perform 3GPP authentication, access user plane functions, and integrate with the core network. This universal solution allows diverse non-3GPP devices to gain full network access rights, transforming them from limited-access devices to fully integrated trusted devices.
2Adaptability or versatility
If non-3GPP devices are granted trusted model status with extended N3 user plane tunnel access, then device access capability is improved, but network security management complexity increases
Solution Approach 1:
The patent implements self-service mechanisms where non-3GPP devices autonomously perform 3GPP authentication protocols and manage their own security credentials through the universal connectivity stack. This reduces the network's manual security management burden while maintaining strong security controls, thus resolving the contradiction between enhanced access capability and management complexity.
3Measurement precision
If ledger-based event archiving is implemented for non-3GPP devices, then event record accuracy and immutability are improved, but system complexity and data storage requirements increase
Solution Approach 1:
The patent employs a ledger-based system that stores event records in an immutable, append-only format. This approach uses efficient data structures that minimize storage requirements while ensuring accuracy. The ledger's design allows for low-cost, high-performance event archiving without significant increases in system complexity, as the ledger itself handles the complexity of ensuring accuracy and immutability.
Data Source
AI summary
In various embodiments, ledger-based telecommunications network event archiving for trusted model non-3GPP devices and systems are provided. Trusted model non-3GPP devices can access network functions and services to utilize a ledger-based event recordation service. Through the recordation service, network events associated with trusted model non-3GPP UE device usage of network functions and services may be recorded to an event ledger. The event ledger may comprise a hyperledger and/or blockchain technology, and/or may comprise an element of a distributed ledger network (DLN) and/or distributed ledger technology (DLT)-based records repository. In some embodiments, to function as a trusted model device, a non-3GPP device is configured with a 3GPP compatible universal connectivity stack (UCS). The UCS may comprise software for creating a secure tunnel using 3GPP authentication and security protocols to functionally extend the N3 user plane tunnel from an N3IWF of the core network to the UCS within the non-3GPP device.