Method and Apparatus for Detecting Man-In-The-Middle Attack

    公开(公告)号:US20190281070A1

    公开(公告)日:2019-09-12

    申请号:US16422051

    申请日:2019-05-24

    Abstract: A system and method for detecting a man-in-the-middle attack, where the includes sending, by a secondary base station, a first check request message to a master base station, wherein the first check request message comprises first identifier information of an evolved random access bearer (ERAB) and a first data packet count value corresponding to the first identifier information; receiving, by the master base station, the first check request message; obtaining second identifier information that matches the first identifier information, wherein the second identifier information is an identifier of a data radio bearer (DRB) corresponding to the ERAB; sending a second check request message to a user terminal, wherein the second check request message comprises the first data packet count value and the second identifier information; and receiving, by the master base station, a check response message from the user terminal.

    Communication system, method, and apparatus

    公开(公告)号:US12256005B2

    公开(公告)日:2025-03-18

    申请号:US17954167

    申请日:2022-09-27

    Abstract: This application provides a communication system, method, and apparatus. The system is applied to implement authentication and key management for applications (AKMA) service-based data transmission between a terminal device and an application function network element. The system includes an AKMA anchor function network element and a network exposure function network element. The network exposure function network element obtains first identification information from a unified data management network element, where the first identification information is used to determine an authentication server function network element corresponding to the terminal device, and sends the first identification information to the AKMA anchor function network element. The AKMA anchor function network element obtains, from the unified data management network element based on the first identification information, identification information of the authentication server function network element corresponding to the terminal device.

    COMMUNICATION METHOD AND APPARATUS
    44.
    发明申请

    公开(公告)号:US20250071555A1

    公开(公告)日:2025-02-27

    申请号:US18937730

    申请日:2024-11-05

    Abstract: This application provides a communication method and an apparatus. In an implementation, the communication method is applied to a universal integrated circuit card, the universal integrated circuit card is configured with a subscription permanent identifier and a pseudo identifier corresponding to the subscription permanent identifier, and the method includes: The universal integrated circuit card generates a subscription concealed identifier based on the pseudo identifier, where a length of a username included in the pseudo identifier is different from a length of a username included in the subscription permanent identifier, and the length of the username included in the pseudo identifier is greater than a first threshold and less than a second threshold; and then the universal integrated circuit card sends the subscription concealed identifier to a mobile equipment.

    COMMUNICATION METHOD AND APPARATUS
    45.
    发明申请

    公开(公告)号:US20250048076A1

    公开(公告)日:2025-02-06

    申请号:US18922273

    申请日:2024-10-21

    Abstract: A communication method and apparatus are provided. The method may include: A mobility management network element receives a transaction identifier of a remote terminal device and a name of a data network from a relay terminal device. The mobility management network element determines a subscription permanent identifier of the remote terminal device based on the transaction identifier, and then sends the subscription permanent identifier and the name of the data network to a session management network element. After receiving the subscription permanent identifier and the name of the data network, the session management network element determines, by using a data management network element based on the subscription permanent identifier and the name of the data network, whether to perform secondary authentication on the remote terminal device. Whether to perform secondary authentication on the remote terminal device can be determined by using the provided solution.

    COMMUNICATION METHOD AND RELATED APPARATUS
    46.
    发明公开

    公开(公告)号:US20240179519A1

    公开(公告)日:2024-05-30

    申请号:US18431568

    申请日:2024-02-02

    Inventor: He Li Rong Wu

    CPC classification number: H04W12/06 H04W12/041 H04W12/0431

    Abstract: Embodiments of this application disclose a communication method and a related apparatus. The method includes: A UDM receives a plurality of authentication vector obtaining request messages from one or more AUSFs for same UE, where the plurality of authentication vector obtaining request messages are for obtaining authentication vectors corresponding to the UE; and the UDM sequentially processes the plurality of authentication vector obtaining request messages, to avoid a problem that subsequently an intermediate key Kausf stored on the UE and an intermediate key Kausf stored on a network device side are out of synchronization because the UE receives a plurality of NAS SMC messages or EAP-Success messages whose receiving time sequence is uncontrollable.

    SECURE COMMUNICATION METHOD AND DEVICE
    49.
    发明公开

    公开(公告)号:US20230354013A1

    公开(公告)日:2023-11-02

    申请号:US18348473

    申请日:2023-07-07

    CPC classification number: H04W12/02 H04W12/72

    Abstract: A method includes: User equipment determines whether confidentiality protection is activated for communication data between the user equipment and an application function device. The user equipment sends a user plane message to the application function device. The user plane message includes an identifier of the user equipment, and the identifier is an encrypted identifier in a case in which the confidentiality protection is inactivated.

    Network roaming protection method, related device, and system

    公开(公告)号:US10743368B2

    公开(公告)日:2020-08-11

    申请号:US16351772

    申请日:2019-03-13

    Inventor: Rong Wu Bo Zhang Lu Gan

    Abstract: Embodiments of the present disclosure disclose a network roaming protection method and related device. The method includes: receiving, by a visited session management device, a first session establishment request that includes a first security requirement; obtaining, by the visited session management device, a target security policy, where the target security policy is obtained by processing the first security requirement set and a second security requirement set using a preset rule; and sending the target security policy to the UE instructing the UE to generate a target shared key based on a reference shared key and according to a rule defined by the target security policy, where the target shared key is used to protect secure end-to-end data transmission between the UE and the visited gateway.

Patent Agency Ranking