IP Library Granted Patent US 10,165,546
Granted Patent B2
US 10,165,546 · App. 15/462,207 · Granted Dec 25, 2018

Protection of privacy in paging of user equipment

Inventors: Suresh P. Nair (Whippany, NJ); Anja Jerichow (Grafing, DE)
Assignees: NOKIA TECHNOLOGIES OY; NOKIA OF AMERICA CORPORATION
H04W68/02H04W8/02H04W12/02
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,165,546
App. No.
15/462,207
Granted
Dec 25, 2018
Kind
B2
Abstract

Techniques are provided for protecting the privacy of user equipment during paging operations in a communication system. In one example, a method includes determining at a mobility management element of a communication system that a paging operation is to be initiated for given user equipment. The method further includes restricting the paging operation between the mobility management element and the given user equipment to use of a temporary identifier for the given user equipment. By not using a permanent identifier of the given user equipment during paging operations, the given user equipment is effectively non-trackable by malicious base stations and active/passive listeners.

Claims (54)

1. A method comprising:

determining at a mobility management element of a communication system that a paging operation is to be initiated for given user equipment;

receiving, at the mobility management element from a core network of the communication system, a first paging request comprising a permanent identifier for the given user equipment;

restricting the paging operation between the mobility management element and the given user equipment to use of a temporary identifier for the given user equipment by:

utilizing the permanent identifier in the first paging request to retrieve the temporary identifier for the given user equipment from a cache of the mobility management element;

generating a second paging request comprising the retrieved temporary identifier for the given user equipment; and

sending the second paging request to a base station element of the communication network to initiate the paging operation utilizing the temporary identifier for the given user equipment;

wherein the mobility management element comprises a processor and memory configured to execute the above steps.

2. The method of claim 1 , wherein the paging operation restricting step further comprises:

determining at the mobility management element existence of one or more conditions associated with the given user equipment; and

in response to the existence of the one or more conditions, paging the given user equipment using the temporary identifier for the given user equipment.

3. The method of claim 2 , wherein the one or more conditions associated with the given user equipment comprise the given user equipment being non-communicative from the perspective of the mobility management element.

4. The method of claim 2 , wherein the one or more conditions associated with the given user equipment comprise the mobility management element no longer having a security context for the given user equipment.

5. The method of claim 2 , wherein the one or more conditions associated with the given user equipment comprise the given user equipment providing an indication to the mobility management element that the given user equipment will not listen for a paging message that uses a permanent identifier for the given user equipment.

6. The method of claim 1 , further comprising the mobility management element storing the temporary identifier for the given user equipment in the cache in association with the permanent identifier for the given user equipment.

7. The method of claim 6 , wherein the temporary identifier for the given user equipment is a Temporary Mobile Subscriber Identity (TMSI) or equivalent.

8. The method of claim 6 , wherein the permanent identifier for the given user equipment is an International Mobile Subscriber Identity (IMSI) or equivalent.

9. The method of claim 6 , further comprising the mobility management element performing a search of the cache for the temporary identifier for the given user equipment when the security context for the given user equipment is no longer available.

10. The method of claim 1 , wherein the determining step further comprises arrival of downlink packet data at a serving gateway element of the communication system.

11. The method of claim 10 , wherein the mobility management element comprises an access and mobility management function.

12. The method of claim 10 , wherein the serving gateway element comprises a session management function and a user plane function.

13. The method of claim 1 , wherein communication between the mobility management element and the given user equipment is through the base station element of the communication system.

14. An article of manufacture comprising a non-transitory computer-readable storage medium having embodied therein executable program code that when executed by a processor causes the processor to perform the method of claim 1 .

15. An apparatus comprising:

a network element in a communication system configured to provide a mobility management function and further configured to:

determine that a paging operation is to be initiated for given user equipment;

receive, from a core network of the communication system, a first paging request comprising a permanent identifier for the given user equipment; and

restrict the paging operation between the mobility management function and the given user equipment to use of a temporary identifier for the given user equipment by:

utilizing the permanent identifier in the first paging request to retrieve the temporary identifier for the given user equipment from a cache of the network element;

generating a second paging request comprising the retrieved temporary identifier for the given user equipment; and

sending the second paging request to a base station element of the communication network to initiate the paging operation utilizing the temporary identifier for the given user equipment;

wherein the network element comprises a processor and memory configured to execute the above operations.

16. The apparatus of claim 15 , wherein the paging operation restriction further comprises:

determining the existence of one or more conditions associated with the given user equipment; and

in response to the existence of the one or more conditions, paging the given user equipment using the temporary identifier for the given user equipment.

17. The apparatus of claim 16 , wherein the one or more conditions associated with the given user equipment comprise the given user equipment being non-communicative from the perspective of the mobility management function.

18. The apparatus of claim 16 , wherein the one or more conditions associated with the given user equipment comprise the mobility management function no longer having a security context for the given user equipment.

19. The apparatus of claim 16 , wherein the one or more conditions associated with the given user equipment comprise the given user equipment providing an indication to the mobility management function that the given user equipment will not listen for a paging message that uses a permanent identifier for the given user equipment.

20. The apparatus of claim 15 , wherein the mobility management function is further configured to store the temporary identifier for the given user equipment in the cache in association with the permanent identifier for the given user equipment.

21. The apparatus of claim 20 , wherein the temporary identifier for the given user equipment is a Temporary Mobile Subscriber Identity (TMSI) or equivalent.

22. The apparatus of claim 20 , wherein the permanent identifier for the given user equipment is an International Mobile Subscriber Identity (IMSI) or equivalent.

23. The apparatus of claim 20 , wherein the network element is further configured to perform a search operation of the cache for the temporary identifier for the given user equipment when the security context for the given user equipment is no longer available.

24. The apparatus of claim 15 , wherein the determining step further comprises arrival of downlink packet data at a serving gateway element of the communication system.

25. The apparatus of claim 15 , wherein communication between the network element and the given user equipment is through the base station element of the communication system.

26. A method comprising:

determining at a mobility management element of a communication system that a paging operation is to be initiated for given user equipment; and

restricting the paging operation between the mobility management element and the given user equipment to use of a temporary identifier for the given user equipment;

wherein the mobility management element comprises a processor and memory configured to execute the above steps;

wherein the paging operation restricting step further comprises:

determining at the mobility management element existence of one or more conditions associated with the given user equipment; and

in response to the existence of the one or more conditions, paging the given user equipment using the temporary identifier for the given user equipment;

wherein the one or more conditions associated with the given user equipment comprise the given user equipment providing an indication to the mobility management element that the given user equipment will not listen for a paging message that uses a permanent identifier for the given user equipment; and further comprising:

the mobility management element storing the temporary identifier for the given user equipment in a cache in association with a permanent identifier for the given user equipment; and

the mobility management element performing a search of the cache for the temporary identifier for the given user equipment when the security context for the given user equipment is no longer available.

Assignments (4)
CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNEE'S CITY PREVIOUSLY RECORDED AT REEL: 47240 FRAME: 680. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Feb 14, 2019
From: ALCATEL-LUCENT USA INC.
To: NOKIA OF AMERICA CORPORATION
Reel/Frame 049872/0072 →
CHANGE OF NAME Recorded Oct 16, 2018
From: ALCATEL-LUCENT USA INC.
To: NOKIA OF AMERICA CORPORATION
Reel/Frame 047240/0680 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 14, 2017
From: NAIR, SURESH P.
To: ALCATEL-LUCENT USA INC.
Reel/Frame 043008/0266 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 14, 2017
From: JERICHOW, ANJA
To: NOKIA TECHNOLOGIES OY
Reel/Frame 043008/0348 →
Continuity (1)
Related Publication 20180270786A1 · Sep 20, 2018