IP Library Granted Patent US 12,432,639
Granted Patent B2
US 12,432,639 · App. 18/957,054 · Granted Sep 30, 2025

Handover in presence of false base stations

Inventors: Serge Papillon (Massy, FR); Afef Feki (Massy, FR); Ahmad Awada (Munich, DE)
Assignee: NOKIA SOLUTIONS AND NETWORKS OY
H04W36/362H04W36/0085
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,432,639
App. No.
18/957,054
Granted
Sep 30, 2025
Kind
B2
Abstract

The present subject matter relates to an apparatus for handover of a user equipment into a target base station of communication system, the apparatus comprising means, the means being configured for: in response to selecting the target base station for handover of the user equipment to the target base station performing a first handover method by at least: comparing a current set of cell measurements of the user equipment with reference sets of cell measurements for determining whether the target base station is a fake base station; performing a handover of the user equipment based on a determination that the target base station is not a fake base station.

Claims (62)

1. An apparatus for handover of a user equipment to a target base station of a communication system, the apparatus comprising: at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus at least to perform:

providing reference sets of cell measurements, each reference set of cell measurements comprising cell measurements of a respective set of cells; and

in response to selecting the target base station for handover of the user equipment to the target base station performing a first handover method comprising at least:

comparing a current set of cell measurements of the user equipment with the reference sets of cell measurements for determining whether the target base station is a fake base station; and

performing a handover of the user equipment based on a determination—that the target base station is not a fake base station,

wherein the number of cell measurements being n, the apparatus being further caused to perform:

determining a n-dimensional space of points whose axes are associated with the n cells, wherein each point represents a respective reference set of cell measurements;

projecting the points along each axis, thereby creating a number n of (n−1)-dimensional projected spaces associated with the cells respectively; and

using the (n−1)-dimensional projected spaces for comparing the current set of cell measurements with the reference sets of cell measurements.

2. The apparatus of claim 1 , wherein the instructions, when executed by the at least one processor, further cause the apparatus at least to perform:

determining whether the target base station is part of at least one of: a first list of candidate fake base stations or a second list of fake base stations;

in response to determining that the target base station is part of at least one of the first list or the second list, performing the first handover method;

in response to determining that the target base station is not part of the first and second lists performing a second handover method comprising at least: performing a handover of the user equipment to the target base station.

3. The apparatus of claim 2 , wherein the instructions, when executed by the at least one processor, further cause the apparatus at least to perform: adding to the second list the target base station if the target base station is a fake base station and is not part of the second list.

4. The apparatus of claim 2 , wherein the comparison of the current set of cell measurements of the user equipment with the reference sets of cell measurements for determining whether the target base station is a fake base station is performed in accordance with a first detection algorithm, the apparatus being further caused to build the second list of fake base stations by at least:

executing the first detection algorithm multiple times for different user equipments, resulting in determinations of respective fake base stations;

adding each resulting fake base station to the list based on the number of times the base station was detected as fake base station.

5. The apparatus of claim 1 , wherein the instructions, when executed by the at least one processor, further cause the apparatus for performing the comparing of the current set of cell measurements with the reference sets of cells measurement comprising at least:

identifying a minimum deviation of the current set of cell measurements from the reference sets;

comparing the minimum deviation with a threshold; and

in response to determining that the minimum deviation exceeds the threshold, determining that the target base station is a fake base station.

6. The apparatus of claim 5 , wherein the instructions, when executed by the at least one processor, further cause the apparatus for identifying the minimum deviation by at least computing the deviations between the current set of cell measurements from the reference sets using a similarity metric, and selecting the lowest computed deviation.

7. The apparatus of claim 1 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to perform the first handover method automatically or upon receiving a request.

8. The apparatus of claim 7 , wherein in response to selecting the target base station for handover of the user equipment to the target base station and in case the request is not received, the apparatus is further caused to perform a second handover method.

9. The apparatus of claim 1 , wherein the instructions, when executed by the at least one processor, further cause the apparatus at least to perform: regularly updating the reference sets of cell measurements by at least one of: adding sets of cell measurements or removing sets of cell measurements.

10. The apparatus of claim 1 , the wherein the instructions, when executed by the at least one processor, further cause the apparatus at least to perform: storing the reference sets of cell measurements in a database, wherein each record of the database represents a respective set of cell measurements of the reference sets of cell measurements.

11. The apparatus of claim 1 , wherein the instructions, when executed by the at least one processor, further cause the apparatus at least to perform: storing the predefined sets of cell measurements in an octree database, wherein the octree of the octree database represents a respective set of cell measurements of the predefined sets of cell measurements.

12. The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to compare the current set of cell measurements with the reference sets of cells measurement by at least:

determining whether the current set of cell measurements corresponds to an octree of the octree database;

in response to determining that the current set of cell measurements does not correspond to an octree of the octree database, determining that the target base station is a fake base station.

13. The apparatus of claim 1 , wherein the set of cell measurements comprises the highest n cell measurements, wherein n is 2, 3, 4 or another number of measurements that can be used for the determining whether the target base station is a fake base station.

14. The apparatus of claim 1 , the cell measurement being a reference signal received power (RSRP) or reference signal received quality (RSRQ) measurement.

15. The apparatus of claim 1 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to receive the current set of cell measurements automatically or upon sending a message to the user equipment.

16. The apparatus of claim 1 , wherein the instructions, when executed by the at least one processor, further cause the apparatus at least to perform:

receiving automatically an initial current set of cell measurements from the user equipment,

determining whether the initial current set of cell measurements has a same number of measurements as the reference sets;

in response to determining that the initial current set of cell measurements has a different number of measurements compared to the reference sets, controlling the user equipment to perform and send the current set of measurements;

wherein in case the initial current set of cell measurements has the same number of measurements as the reference sets, the current set of cell measurements is the initial current set of cell measurements.

17. A method for handover of a user equipment into a target base station of a communication system, the method comprising:

providing reference sets of cell measurements, each reference set of cell measurements comprising cell measurements of a respective set of cells; and

in response to selecting the target base station for handover of the user equipment to the target base station performing a first handover method comprising at least:

comparing a current set of cell measurements of the user equipment with the reference sets of cell measurements for determining whether the target base station is a fake base station; and

performing a handover of the user equipment based on a determination that the target base station is not a fake base station,

wherein the number of cell measurements being n, the method further comprises:

determining a n-dimensional space of points whose axes are associated with the n cells, wherein each point represents a respective reference set of cell measurements;

projecting the points along each axis, thereby creating a number n of (n−1)-dimensional projected spaces associated with the cells respectively; and

using the (n−1)-dimensional projected spaces for comparing the current set of cell measurements with the reference sets of cell measurements.

18. The method of claim 17 , further comprising:

determining whether the target base station is part of at least one of: a first list of candidate fake base stations or a second list of fake base stations;

in response to determining that the target base station is part of at least one of the first list or the second list, performing the first handover method;

in response to determining that the target base station is not part of the first and second lists performing a second handover method comprising at least: performing a handover of the user equipment to the target base station.

19. A system for handover of a user equipment to a target base station, the system comprising an apparatus and the user equipment, the apparatus being a base station serving the user equipment, the apparatus comprising:

at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus at least to perform:

providing reference sets of cell measurements, each reference set of cell measurements comprising cell measurements of a respective set of cells; and

in response to selecting the target base station for handover of the user equipment to the target base station performing a first handover method comprising at least:

comparing a current set of cell measurements of the user equipment with the reference sets of cell measurements for determining whether the target base station is a fake base station; and

performing a handover of the user equipment based on a determination that the target base station is not a fake base station-(BS5),

wherein the user equipment is configured to handover according to the first handover method to the target base station in response to the apparatus performing the handover, and

wherein the number of cell measurements being n, the apparatus being further caused to perform:

determining a n-dimensional space of points whose axes are associated with the n cells, wherein each point represents a respective reference set of cell measurements;

projecting the points along each axis, thereby creating a number n of (n−1)-dimensional projected spaces associated with the cells respectively; and

using the (n−1)-dimensional projected spaces for comparing the current set of cell measurements with the reference sets of cell measurements.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 23, 2025
From: PAPILLON, SERGE; FEKI, AFEF
To: NOKIA NETWORKS FRANCE
Reel/Frame 070917/0137 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 23, 2025
From: AWADA, AHMAD
To: NOKIA SOLUTIONS AND NETWORKS GMBH & CO. KG
Reel/Frame 070917/0150 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 23, 2025
From: NOKIA NETWORKS FRANCE
To: NOKIA SOLUTIONS AND NETWORKS OY
Reel/Frame 070917/0153 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 23, 2025
From: NOKIA SOLUTIONS AND NETWORKS GMBH & CO. KG
To: NOKIA SOLUTIONS AND NETWORKS OY
Reel/Frame 070917/0157 →
Priority Claims (1)
FI 20236290 · Nov 23, 2023 · national
Continuity (1)
Related Publication 20250175877A1 · May 29, 2025
References Cited (31)
US 9591454B2 · Julian et al. · 2017 [cited by applicant]
US 9867039B2 · Wang et al. · 2018 [cited by applicant]
US 11503472B2 · Miao · 2022 [cited by examiner]
US 20130130695A1 · Ryu et al. · 2013 [cited by applicant]
US 20170311170A1 · Jang · 2017 [cited by examiner]
US 20180070239A1 · Norrman et al. · 2018 [cited by applicant]
US 20200145859A1 · Nair · 2020 [cited by applicant]
US 20210153025A1 · Agarwal et al. · 2021 [cited by applicant]
US 20210333410A1 · Gum et al. · 2021 [cited by applicant]
US 20220312249A1 · Rege · 2022 [cited by examiner]
US 20220394477A1 · Tsiatsis et al. · 2022 [cited by applicant]
US 20220417819A1 · Cui · 2022 [cited by examiner]
US 20230095401A1 · Sivanesan et al. · 2023 [cited by applicant]
EP 4109949A1 · 2022 [cited by applicant]
WO WO2009156126A1 · 2009 [cited by examiner]
WO 2020257308A1 · 2020 [cited by applicant]
WO 2021094221A1 · 2021 [cited by applicant]
WO 2022207093A1 · 2022 [cited by applicant]
WO WO2023160339A1 · 2023 [cited by examiner]
“3GPP Groups”, 3GPP, Retrieved on Nov. 21, 2024, Webpage available at :https://www.3gpp.org/. [cited by applicant]
“3rd Generation Partnership Project; Technical Specification Group Services and System Aspects Study on 5G Security Enhancement against False Base Stations (FBS) (Release 18)”, 3GPP TR 33.809, V0.18.0, Feb. 2022, pp. 1-… [cited by applicant]
Karacay et al., “A Network-Based Positioning Method to Locate False Base Stations”, IEEE Access, vol. 09, Aug. 9, 2021, pp. 111368-111382. [cited by applicant]
“3rd Generation Partnership Project; Technical Specification Group Radio Access Network; Evolved Universal Terrestrial Radio Access (E-UTRA); Requirements for support of radio resource management (Release 18)”, 3GPP TS … [cited by applicant]
“3rd Generation Partnership Project; Technical Specification Group Radio Access Network; NR; Requirements for support of radio resource management (Release 18)”, 3GPP TS 38.133, V18.1.0, Mar. 2023, 5925 pages. [cited by applicant]
“Msc-generator”, Sourceforge, Retrieved on Nov. 21, 2024, Webpage available at :https://sourceforge.net/projects/msc-generator/. [cited by applicant]
“3rd Generation Partnership Project; Technical Specification Group Radio Access Network; NR; NR and NG-RAN Overall Description; Stage 2 (Release 17)”, 3GPP TS 38.300, V17.4.0, Mar. 2023, pp. 1-210. [cited by applicant]
M, “Detection, Prevention and Mitigation of Rogue Base Stations in 5g Networks”, Technical Disclosure Commons, Mar. 16, 2022, pp. 1-6. [cited by applicant]
Office action received for corresponding Finnish Patent Application No. 20236290, dated May 28, 2024, 9 pages. [cited by applicant]
“Protection against improper reselection to GERAN/UTRAN”, 3GPP TSG-RAN WG2 Meeting #124, R2-2312866, Agenda: 7.24.2, Vodafone, Oct. 13-17, 2023, 5 pages. [cited by applicant]
Office action received for corresponding Finnish Patent Application No. 20236290, dated Oct. 24, 2024, 8 pages. [cited by applicant]
Extended European Search Report received for corresponding European Patent Application No. 24212254.7, dated Apr. 29, 2025, 9 pages. [cited by applicant]