INFORMATION PROTECTION TO DETECT FAKE BASE STATIONS

    公开(公告)号:US20200236554A1

    公开(公告)日:2020-07-23

    申请号:US16743927

    申请日:2020-01-15

    Abstract: Methods, systems, and devices for wireless communications are described. In some systems, devices may use information protection to detect fake base stations. A base station verified by a network may transmit first information to a user equipment (UE) in an unprotected message. If a fake base station intercepts and modifies the message before relaying the message to the UE, the UE may receive different information than the transmitted first information. The UE may then transmit an indication of the received information to the verified base station in a protected message. In some cases, based on the indication, the verified base station may re-transmit the first information to the UE in a message protected against modification by the fake base station. If the UE determines that the initially received information is different from the information received in the protected retransmission, the UE identifies message modification by the fake base station.

    METHOD, APPARATUS, AND SYSTEM FOR REESTABLISHING RADIO COMMUNICATION LINKS DUE TO RADIO LINK FAILURE

    公开(公告)号:US20200015310A1

    公开(公告)日:2020-01-09

    申请号:US16575200

    申请日:2019-09-18

    Abstract: One feature pertains to a method that includes establishing a radio communication connection with a first radio access node (RAN) that uses control plane signaling connections to carry user plane data. The method also includes determining that the wireless communication device is experiencing radio link failure (RLF) with the first RAN and that the radio communication connection should be reestablished with a second RAN. A reestablishment request message is transmitted to the second RAN that includes parameters that enable a core network node communicatively coupled to the second RAN to authenticate the wireless communication device and allow or reject reestablishment of the radio communication connection. The parameters include at least a message authentication code (MAC) based in part on one or more bits of a non-access stratum (NAS) COUNT value maintained at the wireless communication device.

    Stateless access stratum security for cellular internet of things

    公开(公告)号:US10298549B2

    公开(公告)日:2019-05-21

    申请号:US15199924

    申请日:2016-06-30

    Abstract: Aspects of security schemes (e.g., integrity protection, encryption, or both) are described. A measure of access stratum security can be realized without overhead associated with establishing and/or maintaining the per-cellular-device access stratum security context at a Cellular Internet of Things (CIoT) base station (C-BS). A gateway (e.g., a CIoT Serving Gateway Node (C-SGN)) may derive a first key. The first key may be only known to the C-SGN. The C-SGN may derive a second key from the first key and a parameter unique to the C-BS. The C-SGN may also derive a third key from the second key and an identity of a cellular device. The C-SGN may send the second and third keys to the C-BS and cellular device, respectively. Small data messages encrypted and/or integrity protected by the cellular device may be decrypted and/or verified by the C-BS.

    APPARATUS AND METHOD FOR MOBILITY PROCEDURE INVOLVING MOBILITY MANAGEMENT ENTITY RELOCATION
    18.
    发明申请
    APPARATUS AND METHOD FOR MOBILITY PROCEDURE INVOLVING MOBILITY MANAGEMENT ENTITY RELOCATION 有权
    涉及移动性管理实体移动的移动性程序的装置和方法

    公开(公告)号:US20170078874A1

    公开(公告)日:2017-03-16

    申请号:US15089396

    申请日:2016-04-01

    CPC classification number: H04W12/04 H04W12/02 H04W36/0038 H04W36/0055

    Abstract: A device that identifies entry into a new service area, transmits a service area update request to a network device associated with a network, receives a control plane message from the network indicating control plane device relocation or a key refresh due to a service area change in response to transmitting the service area update request, and derives a first key based in part on data included in the control plane message and a second key shared between the device and a key management device. Another device that receives a handover command from a network device associated with a network, the handover command indicating a new service area, derives a first key based on data included in the handover command and on a second key shared between the device and a key management device, and sends a handover confirmation message that is secured based on the first key.

    Abstract translation: 识别进入新服务区域的设备向与网络相关联的网络设备发送服务区域更新请求,从网络接收指示控制平面设备重定位的控制平面消息或由于服务区域改变引起的密钥刷新 响应于发送服务区域更新请求,并且部分地基于包括在控制平面消息中的数据和在设备和密钥管理设备之间共享的第二密钥来导出第一密钥。 从与网络相关联的网络设备接收切换命令的另一设备,指示新服务区域的切换命令基于包括在切换命令中的数据和在设备与密钥管理之间共享的第二密钥来导出第一密钥 并且发送基于第一密钥被保护的切换确认消息。

    NETWORK ARCHITECTURE AND SECURITY WITH SIMPLIFIED MOBILITY PROCEDURE
    19.
    发明申请
    NETWORK ARCHITECTURE AND SECURITY WITH SIMPLIFIED MOBILITY PROCEDURE 审中-公开
    网络架构和安全性与简化的机动性程序

    公开(公告)号:US20170012947A1

    公开(公告)日:2017-01-12

    申请号:US15160282

    申请日:2016-05-20

    Abstract: In an aspect, a network supporting a number of client devices includes a network device that generates a context for a client device. The client device context may include network state information for the client device that enables the network to communicate with the client device. The client device may obtain, from a network device that serves a first service area of the network, information that includes a first client device context. The client device may enter a second service area of the network served by a second network device. Instead of performing a service area update procedure with the network, the client device may transmit a packet in the different service area with the information that includes the client device context. The client device may receive a service relocation message including information associated with the different network device in response to the transmission.

    Abstract translation: 在一方面,支持多个客户端设备的网络包括生成客户端设备的上下文的网络设备。 客户端设备上下文可以包括使得网络能够与客户端设备进行通信的客户端设备的网络状态信息。 客户端设备可以从服务于网络的第一服务区域的网络设备获得包括第一客户端设备上下文的信息。 客户端设备可以进入由第二网络设备服务的网络的第二服务区域。 客户端设备可以不使用网络执行服务区域更新过程,而是可以在不同的服务区域中发送包含客户端设备上下文的信息。 客户端设备可以响应于传输而接收包括与不同网络设备相关联的信息的服务重定位消息。

    SPONSORED CONNECTIVITY TO CELLULAR NETWORKS USING EXISTING CREDENTIALS
    20.
    发明申请
    SPONSORED CONNECTIVITY TO CELLULAR NETWORKS USING EXISTING CREDENTIALS 有权
    赞助连接到使用现有证书的细胞网络

    公开(公告)号:US20160262021A1

    公开(公告)日:2016-09-08

    申请号:US14817123

    申请日:2015-08-03

    Abstract: Systems and techniques are disclosed to facilitate the sponsored connectivity of a user equipment on a serving network so that the UE may access a service whose connectivity is sponsored by an application service provider. The application service provider provisions the serving network so that it is aware of the sponsored connectivity. In an attach attempt to the serving network, the UE provides a client token based on a pre-existing credential (established between the UE and the application service provider) instead of a subscriber identifier with the attach request. The application service provider's server validates the access credential to authenticate the UE and provides information that the serving network uses to mutually authenticate with the UE. The UE may then use the serving network to access the service via the sponsored connection, even where the UE does not have a subscriber identity and subscription with a cellular network.

    Abstract translation: 公开了系统和技术以促进服务网络上的用户设备的赞助连接,使得UE可以访问由应用服务提供商赞助其连接的服务。 应用服务提供商规定服务网络,以便它知道赞助的连接。 在对服务网络的附着尝试中,UE基于预先存在的凭证(在UE和应用服务提供商之间建立)而不是具有附加请求的订户标识符来提供客户端令牌。 应用服务提供商的服务器验证访问凭证以验证UE,并提供服务网络用于与UE相互认证的信息。 UE然后可以使用服务网络经由赞助的连接来访问服务,即使在UE没有用户标识和订阅蜂窝网络的情况下也是如此。

Patent Agency Ranking