VoLTE PDCP Keystream Uniqueness via Dynamic Bearer Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
VoLTE PDCP encryption faces a security breach when the same keystream is used for consecutive calls, allowing adversaries to decipher previous calls by intercepting and analyzing subsequent calls, due to the lack of key regeneration between calls.
Innovation Solution
Implement a hybrid approach by regenerating the key and allocating a new bearer value for each VoLTE call, ensuring a unique keystream for each call, which can be achieved through horizontal or vertical key generation and managing bearer values to prevent reuse.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the same key is reused for consecutive VoLTE calls, then implementation complexity is reduced, but security reliability deteriorates due to keystream reuse vulnerability
Solution Approach 1:
The patent implements dynamic key management where the bearer value changes between calls. Instead of static key reuse, the system dynamically selects different bearer values from an available pool for each VoLTE call, ensuring keystream uniqueness while maintaining implementation feasibility through structured bearer management
Solution Approach 2:
The patent changes the bearer parameter between consecutive VoLTE calls to prevent keystream reuse. By modifying the bearer value (a cryptographic parameter) while keeping the key structure intact, the system achieves enhanced security without complete key regeneration, balancing complexity and reliability
2Reliability
If key regeneration is performed for each VoLTE call, then security reliability is improved, but air interface overhead increases
Solution Approach 1:
The patent applies partial key regeneration by changing only the bearer value rather than regenerating the entire key material. This partial action approach provides sufficient security enhancement to prevent keystream reuse while minimizing the overhead associated with full key regeneration protocols
Solution Approach 2:
The patent segments the key material into a persistent key component and a variable bearer component. By segmenting the cryptographic structure, the system can regenerate only the bearer portion between calls rather than the entire key, reducing air interface overhead while maintaining security reliability
3Device complexity
If bearer values are reused across VoLTE calls, then device complexity is reduced, but security reliability deteriorates due to keystream predictability
Solution Approach 1:
The patent implements dynamic bearer value selection where the bearer changes between calls based on a management structure. This dynamic approach prevents predictability while maintaining reasonable device complexity through systematic bearer allocation and tracking mechanisms
Solution Approach 2:
The patent implements self-service through automated bearer value management where the system automatically selects and tracks bearer values without manual intervention. This self-managing approach ensures unique bearers for each call while keeping device complexity manageable through algorithmic bearer selection
Data Source
AI summary
Systems, methods and computer software are disclosed for providing Voice over Long-Term Evolution (VoLTE) Packet Data Conversion Protocol (PDCP) protection. In one embodiment a method is disclosed, comprising: connecting a User Equipment (UE) Radio Resource Control (RRC); providing a VoLTE call; determining, when the VoLTE call has ended, if unused bearer values for a current key are used; and when unused bearer values for a current key are unused, allocating new bearer value for a next VoLTE call.