Prevention of eavesdropping type of attack in hybrid communication system
View Patent ↗Techniques are disclosed for use in securing communications in environments comprising hybrid communication systems. For example, a method comprises, in a hybrid communication system wherein at least one computing device is configured to selectively operate in a first communication mode or a second communication mode, preventing the at least one computing device from completing an attachment process in the first communication mode when it is determined that authentication data being used to authenticate the at least one computing device in the first communication mode was generated for an authentication process in the second communication mode.
1. A method, comprising:
in a hybrid communication system wherein at least one computing device is configured to selectively operate in a first communication mode or a second communication mode;
preventing the at least one computing device from completing an attachment process in the first communication mode in the event that it is determined that authentication data being used to authenticate the at least one computing device in the first communication mode was generated for an authentication process in the second communication mode.
2. The method of claim 1 , wherein the first communication mode is a Global System for Mobile Communication (GSM) mode.
3. The method of claim 2 , wherein the second communication mode is one of a Universal Mobile Telecommunications System (UMTS) mode and an Evolved Packet System (EPS) mode.
4. The method of claim 1 , wherein the preventing step further comprises monitoring a value in a portion of the authentication data.
5. The method of claim 4 , wherein the value comprises a bit value in an authentication management field contained in the authentication data.
6. The method of claim 5 , wherein the bit value comprises a separation bit in the authentication management field.
7. The method of claim 6 , wherein the separation bit is set by an authentication authority in a home network of the at least one computing device during computation of an authentication vector.
8. The method of claim 4 , wherein, in the event that the value is set to a first value, the at least one computing device terminates the attachment process.
9. The method of claim 8 , wherein, in the event that the value is set to a second value, the at least one computing device continues the attachment process.
10. The method of claim 8 , wherein the value being set to the first value is an indication that the attachment process is part of a security attack.
11. The method of claim 10 , wherein the security attack comprises a man-in-the-middle attack.
12. The method of claim 1 , wherein the at least one computing device comprises a mobile station.
13. Apparatus, comprising:
a memory; and
at least one processor coupled to the memory and configured to, in a hybrid communication system, selectively operate in a first communication mode or a second communication mode, and prevent an attachment process in the first communication mode from completing in the event that it is determined that authentication data being used to perform authentication in the first communication mode was generated for an authentication process in the second communication mode.
14. The apparatus of claim 13 , wherein the first communication mode is a Global System for Mobile Communication (GSM) mode.
15. The apparatus of claim 14 , wherein the second communication mode is one of a Universal Mobile Telecommunications System (UMTS) mode and an Evolved Packet System (EPS) mode.
16. The apparatus of claim 13 , wherein the preventing step further comprises monitoring a value in a portion of the authentication data.
17. The apparatus of claim 16 , wherein the value comprises a bit value in an authentication management field contained in the authentication data.
18. The apparatus of claim 17 , wherein the bit value comprises a separation bit in the authentication management field.
19. The apparatus of claim 18 , wherein the separation bit is set by an authentication authority in a home network during computation of an authentication vector.
20. The apparatus of claim 16 , wherein, in the event that the value is set to a first value, the attachment process terminates.
21. The apparatus of claim 20 , wherein, in the event that the value is set to a second value, the attachment process continues.
22. User equipment, comprising:
in a hybrid communication system wherein the user equipment is configured to selectively operate in a first communication mode or a second communication mode;
a memory; and
at least one processor coupled to the memory and configured to prevent an attachment process in the first communication mode from completing in the event that it is determined that authentication data being used to perform authentication in the first communication mode was generated for an authentication process in the second communication mode.
23. The user equipment of claim 22 , wherein the preventing step further comprises monitoring a value in a portion of the authentication data.
24. The user equipment of claim 23 , wherein, in the event that the value is set to a first value, the attachment process terminates.
25. The user equipment of claim 24 , wherein, in the event that the value is set to a second value, the attachment process continues.