Wireless Device Authentication Error Code Asymmetry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless devices and cellular communication networks are increasingly vulnerable to sophisticated cyber-attacks from adversarial network entities, such as fake or malicious base stations, which can disrupt services by tracking users, launching denial of service attacks, and draining resources.
Innovation Solution
Implementing methods in wireless devices to detect adversarial network entities by verifying authentication request messages, including checking the validity of message authentication codes and sequence numbers, and generating specific authentication failure error codes to prevent differentiation from other devices, thereby preventing replay and traceability attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the wireless device uses standard authentication failure error codes to indicate authentication failures, then the authentication process is simple and standardized, but the adversarial network entity can differentiate and track the targeted wireless device based on unique error code patterns
Solution Approach 1:
The patent applies asymmetry by making the error code generation dependent on the device identity. Instead of using uniform error codes for all devices, the system generates asymmetric error codes that are unique to each wireless device based on its identity information (such as IMSI or device identifier). This ensures that while the authentication failure response is still sent, the error code pattern cannot be used to track or identify specific targeted devices, thus preventing location tracking while maintaining standardized authentication failure handling.
2Reliability
If the wireless device sends authentication failure responses with detailed error codes, then the authentication protocol is fully compliant, but the adversarial network entity can use these responses to determine if the device is the targeted victim of a replay attack
Solution Approach 1:
The patent extracts the tracking-sensitive information from the error code response. Instead of including detailed error codes that reveal whether the failure is due to a replay attack or other reasons, the system removes this differentiating information and replaces it with a generic error code. This allows the device to detect replay attacks internally while preventing the leakage of information that would compromise device anonymity and enable tracking by adversarial network entities.
Solution Approach 2:
The patent converts the potentially harmful detailed error code information into a beneficial anonymity-preserving response. By transforming the specific error code that would reveal device status into a generic error code, the system turns what could be a tracking vulnerability into a security feature. The device still maintains full awareness of the authentication status and can detect replay attacks, but the response sent to the network entity no longer compromises device anonymity.
3Reliability
If the wireless device implements comprehensive authentication verification including MAC validation and sequence number checking, then the security against adversarial network entities is improved, but the processing time and computational resources increase
Solution Approach 1:
The patent applies preliminary action by performing the most computationally intensive verification - the Message Authentication Code (MAC) validation - first in the authentication process. The MAC verification uses the shared secret key to authenticate the entire authentication request message, including the sequence number and random challenge. By performing this comprehensive verification first, the system can quickly reject obviously forged messages without needing to perform additional sequence number range checks or other verifications, thus reducing overall processing time while maintaining security.
Solution Approach 2:
The patent segments the authentication verification process into distinct stages: MAC validation, sequence number verification, and challenge-response verification. This segmentation allows the system to perform checks in an optimized order and to exit early if any verification fails. The MAC validation is performed first as a gatekeeper, followed by sequence number checking only if the MAC is valid, and finally the challenge-response verification. This segmented approach reduces average processing time compared to performing all checks sequentially regardless of earlier failures.
Data Source
AI summary
Methods for detecting and preventing an adversarial network entity (e.g., fake base stations, etc.) from tracking a wireless device's location. A wireless device may be equipped with a random value (RAND) database or cache memory RAND values previously received by the wireless device. In response to receiving an authentication request message from a network component, performing AKA procedures and determining that the authentication failed, the wireless device may compare the RAND value included in the received authentication request message to RAND values stored in secure storage memory. The wireless device may generate an authentication response message that includes an error code that is different than standard error code used so that the target wireless device can't be differentiated from other wireless devices thereby preventing tracking in response to determining that the RAND value included in the received authentication request message is included in the RAND secure storage memory.