Samsung Electronics Co., Ltd.

Nec Corporation

Rohini Rajendran

Nivedya Parambath Sasi

Rajavelsamy Rajadurai

Varini Gupta

Anil Agiwal

Lalith Kumar

Mangesh Abhimanyu Ingale

Anand Raghawa Prasad

Basavaraj Jayawant Pattan

Nishant Gupta

Fasil Abdul Latheef

Narendranath Durga Tangudu

Sivabalan Arumugam

Kiran Gurudev Kapale

Takahito Yoshizawa

Arunprasath Ramamoorthy

Ashok Kumar Nayak

Rajavelsamy Rajadura

Pradheep Kumar Singaravelu

The disclosure relates to 5G/6G communication systems for supporting a higher data transmission rate. Embodiments provide a method for controlling an ad-hoc group communication with a security context for MCX services. The method includes sending, by first MC service client device, an ad-hoc group communication request message to an MC service server to establish the ad-hoc group communication with a second MC service client device. The MC service server determines whether the ad-hoc group communication is supported and successfully authorized based on the received ad-hoc group communication request. The method includes: receiving an ad-hoc group communication request return message from the MC service server when the ad-hoc group communication is supported and successfully authorized; generating the security context for the second MC service client device for the ad-hoc group communication; and establishing the ad-hoc group communication with the second MC service client device using the generated security context.

Method and system for controlling ad-hoc group communication with security context for mission critical services

The present disclosure relates to a communication method and system for converging a 5-Generation (5G) communication system for supporting higher data rates beyond a 4-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Embodiments herein provide a method of enabling authentication and key management application (AKMA) services in roaming mode comprising generating a key associated with the AKMA services after a primary authentication of the UE with a wireless network; determining whether to share the at least one key associated with the AKMA services with a visited AKMA anchor function (vAAnF); and sharing the at least one key associated with the AKMA services with the vAAnF.

Method and system of enabling AKMA service in roaming scenario

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method for limiting a scope of authorization provided to a network function service consumer (NFC) device in a wireless network by a network repository function (NRF) server is provided. The method includes receiving an NF-registration request message from a network function producer (NFP) device. The NF-registration request message includes at least one of a set of the first information element indicating a single-network slice selection assistance information (S-NSSAI) of the NFC device allowed to access by the NFP device, a corresponding second information element indicating operations allowed on resources of the NFP device belonging to a S-NSSAI of the NFP device, and a third information element indicating a trust-level of the NFC device.

System and method for limiting a scope of authorization provided to NFC device

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein provide an apparatus and method for verifying authenticity of a BH-RLF. A method is provided for using a new message to verify the authenticity of the BH-RLF. A method is provided for using existing and/or message over an F1AP and an RRC to verify the authenticity of the BH-RLF. A method is provided for using a hash based procedure for protection of the BH-RLF indication. A method is provided for generating a unique secret key at an parent IAB node and a child IAB node to protect the BAP control messages. Further, a method is provided for re-using ICMP ping messages to check the destination availability based on a received BH-RLF indication.

Apparatus and method for verifying authenticity of a backhaul-radio link failure

A communication system, a UE (User Equipment), a communication method and a computer readable medium may be provided. The communication system () includes: a first UE (User Equipment) () including a first controller and a first transceiver, wherein the first controller is configured to control the transceiver to send a message including L2 ID (Layer 2 Identity) and verification information; and a second UE () including a second controller and a second transceiver, wherein the second controller is configured: to control the transceiver to receive the message from the first UE (); and to determine whether to accept the L2 ID or not using the verification information.

Method and device for reducing security risk in communication

Methods and systems for authentication and establishment of secure connection for accessing edge computing services are provided. The method includes dynamically deriving a pre-shared key (PSK) and use the dynamically derived PSK for the authentication, while performing or before performing a secure connection establishment or while or before establishing a secure interface between a user equipment (UE), and a server, wherein the UE includes an Edge Enabler Client (EEC), and the server is an Edge Configuration Server (ECS). The method further includes deriving the PSK based on an Authentication and Key Management for Applications (AKMA) application key.

Methods and systems for authentication and establishment of secure connection for edge computing services

The disclosure relates to 5G or 6G communication systems for supporting higher data transmission rates. A method of detecting cyber-attacks using network analytics in a user equipment (UE) is provided. The method includes receiving, by a network data analytics function (NWDAF), a request for sharing analytics information associated with the UE from a consumer network function (NF), requesting the analytics information associated with the UE and causing the cyber-attack to at least one 5th generation core (5GC) network entity, receiving the analytics information associated with the UE and causing the cyber-attack from the at least one 5GC network entity, comparing an expected behavior of the UE with an actual behavior based on the analytics information provided by the at least one 5GC network entity, deriving analytics associated with the cyber-attack based on the analytics information and the comparison, and sending the analytics associated with the UE to the consumer NF.

Method and system for detecting cyber-attacks using network analytics

The method includes: generating, by a source base station, a UE specific Anonymity Challenge Parameter to the UE based on sensitive information from the UE, cell information, source base station information and initial Anonymity Challenge Parameter assigned to the particular base station; and sending, by the source base station, a measurement command message including the UE specific Anonymity Challenge Parameter to the UE. Further, the method includes receiving, by the source base station, an Anonymity Challenge Parameter acknowledgement as a response from the UE; and negotiating, by the source base station, the UE specific Anonymity Challenge Parameter with the UE to prevent the UE from attaching to the false base station.

Source base station, UE, method in wireless communication system

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Embodiments herein provide a method for determining whether a base station is genuine or rouge in a wireless network. If a received authentication key matches with the authentication key generated in the UE, the method includes identifying a base station as genuine base station and carrying out a normal procedure. If the received authentication key does not match with the generated authentication key, the method includes identifying the base station as a rouge base station. The authentication key can be a digital signature (DS), a Message Authentication Code-Integrity (MAC-I), and a hash of MIB/SIBs including PCI.

Method and user equipment for determining whether base station is genuine or rouge in wireless network

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). A method performed by a user equipment (UE) in a wireless network, the method comprising: establishing a communication with an application function (AF) server using a first authentication and key management for applications (AKMA) application key (K); receiving a message over the established communication from the AF server, the message indicating that a lifetime of the first Khas expired; and configuring a back-off flag in the UE to optimize an AKMA key refresh mechanism in the wireless network in response to receiving the message, wherein the back-off flag prevents a request for a first AKMA anchor key (K) until a fresh primary authentication is performed.

Method and system for optimizing AKMA key refresh mechanism in wireless network

The present disclosure relates to a communication method and system for converging a 5-Generation (5G) communication system for supporting higher data rates beyond a 4-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Methods and systems for generating/deriving CU-UP security keys for disaggregated gNB architecture are described herein. A UE/gNB can inform the gNB/UE about the capability of the UE/gNB to derive CU-UP security keys. CU-UP security keys comprise an integrity protection key and a ciphering key. The gNB derives an integrity protection key and a ciphering key upon determining that the UE supports derivation of the CU-UP security keys or the UE has capability to derive CU-UP security keys. The integrity protection key protects the integrity of data, in a DRB, traversing through a CU-UP. The ciphering key encrypts the data, in the DRB, traversing through the CU-UP. The gNB sends RRC connection reconfiguration messages, which include multiple parameters. The UE derives an integrity protection key and a ciphering key, for each DRB, based on the plurality of parameters, for protecting the integrity of the data and encrypting the data.

Methods and systems for deriving cu-up security keys for disaggregated gNB architecture

The present disclosure relates to a pre-5G or 5G communication system to support higher data rates beyond 4G communication system such as LTE. The present disclosure enables the 3GPP system to protect the broadcasted unique UAV identities for a secured UAV communication. In remote identification process, the UAVs send the messages with flight information to the receiving party (i.e., UTM/USS, a TPAE or another UAV). Also, there are use cases on local broadcast of UAV identities for remote identification and tracking purposes. The present disclosure renders a mechanism that only the authorized personnel is able to decode the received broadcasting ID from the initiating UAV. The present disclosure protects unique UAV identities broadcasted so that, the fake UAV or unauthorized personnel cannot use the broadcasted ID for certain attacks such as impersonation of genuine UAV, tracking of the UAV and so on.

Growing community of inventors

Bengaluru, India

Rohini Rajendran