IP Library Granted Patent US 12701421
Granted Patent B2
US 12701421 · App. 18/543,977 · Granted Aug 4, 2026

Method and system to protect clear text transmission of user identity in wireless networks

Inventors: Brejesh Lall (New Delhi, IN); Dhiman Saha (Chattisgarh, IN); Anand Madhavrao Baswade (Chattisgarh, IN); Pabitra Pal (New Delhi, IN); Aman Verma (New Delhi, IN)
Assignee: Indian Institute of Technology Delhi
H04W12/42H04W8/205H04W12/06
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12701421
App. No.
18/543,977
Granted
Aug 4, 2026
Kind
B2
Abstract

The present disclosure provides a method to protect clear text transmission of user identity in wireless networks. The method includes sending a registration request to a Home Network (HN) to start an authentication process of a User Equipment (UE). In addition, the method includes receiving a subscription concealed identifier (SUCI) at the server network (SN). Further, the method includes generating a Subscription permanent identifier (SUPI) and a privacy key. The Subscription permanent identifier (SUPI) is de-concealed from the subscription concealed identifier (SUCI). Furthermore, the method includes generating and mapping, a virtual Subscription permanent identifier (SUPI) corresponding to the received Subscription permanent identifier (SUPI). Also, the method includes generating and sending, an authentication vector (AV) to the server network (SN). The response message includes the virtual Subscription permanent identifier (SUPI). The server network (SN) generates a globally unique temporary identifier (GUTI).

Claims (23)

1 . A method to protect clear text transmission of user identity in wireless networks comprising one or more 3GPP network nodes, the method comprising:

generating, a virtual Subscription permanent identifier corresponding to a received Subscription permanent identifier (SUPI), wherein the virtual Subscription permanent identifier is generated by a Unified Data Management (UDM) in a home network (HN);

mapping, the virtual Subscription permanent identifier with the received Subscription permanent identifier (SUPI); and

generating and sending, an authentication vector (AV) to a server network (SN), wherein the authentication vector (AV) is sent as a response message comprising the virtual Subscription permanent identifier, and wherein the server network (SN) generates a globally unique temporary identifier (GUTI), wherein the generation of the virtual Subscription permanent identifier (SUPI) facilitates communication between the home network (HN) and the server network (SN) in accordance with a 5G AKA protocol.

2 . The method to protect clear text transmission of user identity in wireless networks as recited in claim 1 , wherein the Subscription permanent identifier (SUPI) is generated at the Home Network (HN) by:

receiving, a registration request at the Home Network (HN) to start an authentication process of a User Equipment (UE), wherein the server network (SN) sends the registration request to the home network (HN) for the authentication process;

receiving ( 104 ), a subscription concealed identifier (SUCI) at the home network (HN), wherein the subscription concealed identifier (SUCI) comprises an encrypted part and a clear text, wherein the encrypted part of the subscription concealed identifier (SUCI) generated by the User Equipment (UE) identifies subscription of the home network (HN); and

generating, a Subscription permanent identifier (SUPI) and a privacy key, wherein the privacy key comprises a public key of the home network of the User Equipment (UE); wherein the privacy key comprises an identifier of the home network (HN), wherein the Subscription permanent identifier (SUPI) is generated based on decrypting from the subscription concealed identifier (SUCI), wherein the Subscription permanent identifier (SUPI) is in one or more formats.

3 . The method to protect clear text transmission of user identity in wireless networks as recited in claim 2 , wherein the one or more formats of the Subscription permanent identifier (SUPI) are International Mobile Subscriber Identifiers (IMSI).

4 . The method to protect clear text transmission of user identity in wireless networks as recited in claim 1 , wherein the mapping information is stored in the UDM.

5 . The method to protect clear text transmission of user identity in wireless networks as recited in claim 1 , wherein the virtual Subscription permanent identifier (SUPI) generated at the UDM is in a clear text form.

6 . The method to protect clear text transmission of user identity in wireless networks as recited in claim 1 , wherein the home network (HN) consists of a mobile country code (MCC) and a mobile network code (MNC) and wherein the subscription permanent identifier is a mobile subscription identifier (MSIN).

7 . The method to protect clear text transmission of user identity in wireless networks as recited in claim 1 , wherein a successful match between the virtual Subscription permanent identifier (SUPI) and the Subscription permanent identifier (SUPI) at the UDM causes tracking and monitoring of the user.

8 . A method to protect clear text transmission of user identity in wireless networks comprising one or more 3GPP network nodes, the method comprising:

generating, a virtual Subscription permanent identifier corresponding to a received Subscription permanent identifier (SUPI), wherein the virtual Subscription permanent identifier is generated by a Unified Data Management (UDM) in a home network (HN);

mapping, the virtual Subscription permanent identifier with the received Subscription permanent identifier (SUPI); and

generating and sending, an authentication vector (AV) to a server network (SN), wherein the authentication vector (AV) is sent as a response message comprising the virtual Subscription permanent identifier, and wherein the server network (SN) generates a globally unique temporary identifier (GUTI), wherein the virtual Subscription permanent identifier (SUPI) is accessed upon intercepting the home network (HN) and the server network (SN) and wherein the Subscription permanent identifier (SUPI) of the user is unrevealed during the intercepting.

9 . A telecommunication node to protect clear text transmission of user identity in 3GPP wireless network, the node comprising:

a transceiver;

a processor coupled to the transceiver and configured to:

generate, a virtual Subscription permanent identifier corresponding to a received Subscription permanent identifier (SUPI), wherein the virtual Subscription permanent identifier is generated by a Unified Data Management (UDM) at a home network (HN);

map, the virtual Subscription permanent identifier with the received Subscription permanent identifier (SUPI); and

generate and send, an authentication vector (AV) to a server network (SN), wherein the authentication vector (AV) is sent as a response message, wherein the response message comprises the virtual Subscription permanent identifier, and wherein the server network (SN) generates a globally unique temporary identifier (GUTI), wherein the generation of the virtual Subscription permanent identifier (SUPI) facilitates communication between the home network (HN) and the server network (SN) in accordance with a 5G AKA protocol.