Radio access network node authentication using radio resource control signal messages
A radio access network node and a user equipment may be configured with a private key and a complementary public key, respectively, to be used to determine whether radio resource control signal connection establishment messages received at the user equipment are received from a legitimate node or from a false base station. The user equipment may request from a node that broadcast a connection establishment message an on demand digital signature based on the connection establishment message. In response to the request, the node may transmit, via an on demand system information message, an on demand digital signature generated based on the connection establishment message and the private key. The user equipment may determine a local digital signature based on the connection establishment message and the public key. The user equipment may perform a connection establishment action based on whether the local digital signature matches the on demand digital signature.
1 . A method, comprising:
facilitating, by a radio access network node comprising at least one processor, transmitting, to a user equipment, a connection establishment message comprising an on demand digital signature capability indication;
responsive to the transmitting of the connection establishment message, facilitating, by the radio access network node, receiving, from the user equipment, an on demand digital signature request comprising on demand digital signature information;
generating, by the radio access network node, an on demand digital signature based on the on demand digital signature information;
facilitating, by the radio access network node, transmitting, to the user equipment, the on demand digital signature; and
responsive to the transmitting of the on demand digital signature, facilitating, by the radio access network node, establishing, with the user equipment, a communication session,
wherein the on demand digital signature information comprises a message block indication that indicates that the on demand digital signature is to be based on at least one of a master information block or a system information block, and wherein the on demand digital signature is based on at least one of the master information block or the system information block.
2 . The method of claim 1 , wherein the on demand digital signature information comprises a random number based on a unique identifier corresponding to the user equipment.
3 . The method of claim 1 , wherein the connection establishment message is a radio resource control message.
4 . The method of claim 1 , wherein the connection establishment message is a master information block message.
5 . The method of claim 4 , wherein the on demand digital signature information comprises an indication indicative that the on demand digital signature is to be based on at least the master information block message.
6 . The method of claim 1 , wherein the connection establishment message is a system information block message.
7 . The method of claim 6 , wherein the on demand digital signature information comprises an indication indicative that the on demand digital signature is to be based on at least the system information block message.
8 . The method of claim 6 , wherein the system information block message is a system information block 1 message.
9 . The method of claim 1 , further comprising:
generating, by the radio access network node, a connection establishment message digest based on the connection establishment message; and
applying, by the radio access network node, a unique cryptographic key corresponding to the radio access network node to the connection establishment message digest to result in the on demand digital signature.
10 . The method of claim 1 , wherein the transmitting of the on demand digital signature comprises transmitting the on demand digital signature to the user equipment in a system information block message.
11 . The method of claim 1 , wherein the system information block is a system information block 22 .
12 . A radio access network node, comprising:
at least one processor configured to:
broadcast a minimum requirement message comprising an on demand digital signature capability indication;
responsive to the minimum requirement message being broadcast, receive, from the user equipment, an on demand digital signature request comprising on demand digital signature information that comprises a message block indication indicative of a message block to be used to generate the on demand digital signature, wherein the message block indication that indicates that the on demand digital signature is to be based on at least one of the master information block or the system information block;
generate an on demand digital signature based on the at least one of the master information block or the system information block;
transmit, to a user equipment, the on demand digital signature;
responsive to the on demand digital signature being transmitted to the user equipment, receive, from the user equipment, a connection establishment request message; and
responsive to the connection establishment request message being received, establish, with the user equipment, a communication session.
13 . The radio access network node of claim 12 , wherein the minimum requirement message comprises at least one of: a master information block or a system information block.
14 . The radio access network node of claim 12 , wherein the system information block is a first system information block, and wherein the on demand digital signature information comprises a message block indication that indicates that the on demand digital signature is to be based on one or more of the master information block, the first system information block, or a second information block different from the first system information block.
15 . The radio access network node of claim 14 , wherein the message block indication comprises a bitmap that excludes one or more bits being mapped to the master information block and the first system information block.
16 . The radio access network node of claim 12 , wherein the system information block is a system information block other than system information block 1 through system information block 21 .
17 . A non-transitory machine-readable medium, comprising executable instructions that, when executed by at least one processor of a radio access network node, facilitate performance of operations, comprising:
broadcasting a first radio resource control message comprising an on demand digital signature capability indication indicative of an on demand digital signature capability;
responsive to the broadcasting of the first radio resource control message, receiving, from a user equipment, an on demand digital signature request message;
responsive to the on demand digital signature request message, generating an on demand digital signature according to the on demand digital signature capability;
transmitting, to the user equipment, the on demand digital signature;
receiving, from the user equipment, a second radio resource control message comprising a connection request message; and
responsive to second radio resource control message, establishing, with the user equipment, a communication session,
wherein the on demand digital signature request message comprises a bit map indicative of on demand digital signature information to be used to generate the on demand digital signature.
18 . The non-transitory machine-readable medium of claim 17 , wherein the first radio resource control message comprises at least one of: a master information block or a system information block, and
wherein the bit map is indicative of at least one of the master information block or the system information block.
19 . The non-transitory machine-readable medium of claim 18 , wherein the system information block is a system information block higher than a system information block 21 .
20 . The non-transitory machine-readable medium of claim 17 , wherein the first radio resource control message comprises a system information block 1.