IP Library Granted Patent US 11,115,824
Granted Patent B1
US 11,115,824 · App. 16/874,641 · Granted Sep 7, 2021

5G cybersecurity protection system

Inventors: Venson Shaw (Kirkland, WA); Sunil Lingayat (Issaquah, WA)
Assignee: T-Mobile USA, Inc.
H04W12/122H04L41/06H04W8/18H04W12/08H04W60/00H04W84/042
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,115,824
App. No.
16/874,641
Granted
Sep 7, 2021
Kind
B1
Abstract

The disclosed technology includes a method and system for preventing or reducing cyber-attacks in a 5G network. The system can register a connected device with the 5G network, monitor the connected device by the computing device associated with the 5G network, and detect or determine that the connected device is at risk of a cyber-attack based on one or more conditions. The conditions can include detecting that the connected device is obsolete or unmaintained, the connected device fails to respond to status checks, or a service provider associated with the connected device is not supporting the connected device or is out of business. In response to detecting or determining that the connected device is at risk of the cyber-attack, the system can deauthorize the connected device.

Claims (81)

1. A method of preventing or reducing cyber-attacks in a 5G network, the method comprising:

registering a connected device with the 5G network,

wherein the registering is performed by a computing device associated with the 5G network;

monitoring the connected device by the computing device associated with the 5G network;

detecting or determining that the connected device is at risk of a cyber-attack based on one or more conditions,

wherein the one or more conditions include at least one of:

detecting that the connected device is obsolete or unmaintained,

the connected device fails to respond to status checks, or

a service provider associated with the connected device is not supporting the connected device or is out of business; and

in response to detecting or determining that the connected device is at risk of the cyber-attack, deauthorizing the connected device;

wherein deauthorizing the connected device incudes:

determining a category of risk of the cyber-attack;

determining, by the computing device associated with the 5G network, a type of deauthorizing based at least in part on the category of the risk of the cyber-attack,

wherein types of deauthorizing comprise:

 turning the connected device to an off state,

 erasing content and settings from the connected device,

 disabling an application on the connected device, or

 temporarily disabling access of the connected device to the 5G network; and

determining a component of the 5G network to perform the deauthorizing of the connected device based at least in part on the type of deauthorizing.

2. The method of claim 1 , wherein the type of deauthorizing comprises disabling the application on the connected device, and wherein the method further comprises:

determining that the component of the 5G network to perform the deauthorizing of the connected device is an application server.

3. The method of claim 1 , wherein deauthorizing the connected device comprises temporarily disabling access of the connected device to the 5G network, and wherein the method further comprises:

in response to determining that the connected device is no longer at risk of the cyber-attack, granting, to the connected device, access to the 5G network.

4. The method of claim 1 , further comprising allocating resources within the 5G network to monitor the connected device based on a time of day and a physical location of the connected device.

5. The method of claim 1 , wherein the service provider associated with the connected device is not supporting the connected device or is out of business, wherein the method further comprises:

identifying other connected devices associated with the service provider; and

deauthorizing the other connected devices associated with the service provider, wherein deauthorizing the other connected devices comprises erasing content and settings from the other connected devices.

6. The method of claim 1 , wherein the connected device is one of a cloud Radio Access Network (“RAN”) node device.

7. At least one non-transitory, computer-readable medium, storing instructions, which when executed by at least one data processor, performs a method of preventing or reducing cyber-attacks in a 5G network, the method comprising:

registering a connected device with the 5G network,

wherein the registering is performed by a computing device associated with the 5G network;

monitoring the connected device by the computing device associated with the 5G network;

detecting or determining that the connected device is at risk of a cyber-attack based on one or more conditions,

wherein the one or more conditions include at least one of:

detecting that the connected device is obsolete or unmaintained,

the connected device fails to respond to status checks, or

a service provider associated with the connected device is not supporting the connected device or is out of business;

in response to detecting or determining that the connected device is at risk of the cyber-attack, deauthorizing the connected device; and

allocating resources within the 5G network to monitor the connected device based on a time of day and a physical location of the connected device.

8. The at least one non-transitory, computer-readable medium of claim 7 , wherein the method further comprises:

determining a category of risk of the cyber-attack;

determining, by the computing device associated with the 5G network, a type of deauthorizing based at least in part on the category of the risk of the cyber-attack,

wherein the types of deauthorizing comprise turning the connected device to an off state, erasing content and settings from the connected device, disabling an application on the connected device, or temporarily disabling access of the connected device to the 5G network; and

determining a component of the 5G network to perform the deauthorizing of the connected device based at least in part on the type of deauthorizing.

9. The at least one non-transitory, computer-readable medium of claim 8 , wherein the type of deauthorizing comprises disabling the application on the connected device, wherein the method further comprises:

determining that the component of the 5G network to perform the deauthorizing of the connected device is an application server.

10. The at least one non-transitory, computer-readable medium of claim 7 , wherein deauthorizing the connected device comprises temporarily disabling access of the connected device to the 5G network, and wherein the method further comprises:

in response to determining that the connected device is no longer at risk of the cyber-attack, granting, to the connected device, access to the 5G network.

11. The at least one non-transitory, computer-readable medium of claim 7 , wherein the connected device is a cloud Radio Access Network (“RAN”) node device.

12. The at least one non-transitory, computer-readable medium of claim 7 , wherein the service provider associated with the connected device is not supporting the connected device or is out of business, wherein the method further comprises:

identifying other connected devices associated with the service provider; and

deauthorizing the other connected devices associated with the service provider, wherein deauthorizing the other connected devices comprises erasing content and settings from the other connected devices.

13. A system for preventing or reducing cyber-attacks in a 5G network, the system comprising:

a memory;

a processor in communication with the memory, the processor operable to execute software modules, the software modules comprising:

a registration module configured to:

register a connected device with the 5G network, wherein the registering is performed by a computing device associated with the 5G network;

monitor the connected device by the computing device associated with the 5G network;

a risk detection module configured to

detect or determine that the connected device is at risk of a cyber-attack based on one or more conditions,

wherein the one or more conditions include at least one of:

detecting that the connected device is obsolete or unmaintained,

the connected device fails to respond to status checks, or

a service provider associated with the connected device is not supporting the connected device or is out of business;

a deauthorization module configured to:

deauthorize the connected device in response to detecting or determining that the connected device is at risk of the cyber-attack,

wherein deauthorizing the connected device comprises:

 temporarily disabling access of the connected device to the 5G network, and

grant, to the connected device, access to the 5G network in response to determining that the connected device is no longer at risk of the cyber-attack.

14. The system of claim 13 , wherein the deauthorization module is further configured to:

determine a category of risk of the cyber-attack;

determine a type of deauthorizing based at least in part on the category of the risk of the cyber-attack,

wherein the types of deauthorizing comprise turning the connected device to an off state, erasing content and settings from the connected device, disabling an application on the connected device, or temporarily disabling access of the connected device to the 5G network; and

determine a component of the 5G network to perform the deauthorizing of the connected device based at least in part on the type of deauthorizing.

15. The system of claim 14 , wherein the type of deauthorizing comprises disabling the application on the connected device, wherein the deauthorization module is further configured to:

determine that the component of the 5G network to perform the deauthorizing of the connected device is an application server.

16. The system of claim 13 , wherein the service provider associated with the connected device is not supporting the connected device or is out of business, wherein the deauthorization module is further configured to:

identify other connected devices associated with the service provider; and

deauthorize the other connected devices associated with the service provider, wherein deauthorizing the other connected devices comprises erasing content and settings from the other connected devices.

17. The system of claim 13 , wherein the deauthorization module is further configured to:

allocate resources within the 5G network to monitor the connected device based on a time of day and a physical location of the connected device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 18, 2020
From: SHAW, VENSON; LINGAYAT, SUNIL
To: T-MOBILE USA, INC.
Reel/Frame 052692/0061 →
Cited By (2)
US 12,532,178 US 12,537,828