IP Library Granted Patent US 12,647,791
Granted Patent B2
US 12,647,791 · App. 18/018,897 · Granted Jun 2, 2026

Method and device for authenticating a primary station

Inventor: Oscar Garcia Morchon (Eindhoven, NL)
Assignee: Koninklijke Philips N.V.
H04W12/108H04L9/3247H04W12/06H04W12/122
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,647,791
App. No.
18/018,897
Granted
Jun 2, 2026
Kind
B2
Abstract

The present invention relates to a method for a secondary station to obtain a time reference in a cellular network in order to verify the freshness of received messages. The method comprises the steps of receiving a plurality of system information, SI, messages from a plurality of primary stations, said SI messages including each a respective time reference information related to the corresponding primary station, checking the validity of a received signature for each of the primary stations, checking a cell identifier for each of the primary stations with a valid signature, and ignoring time reference information from primary stations with a cell identifier being identical to another primary station and having an earlier value than the one from the other primary station, and deducing a local time reference from one or more of the time reference information originating from primary stations with a valid signature.

Claims (27)

1 . A method for a secondary station to obtain a time reference in a cellular network, the method comprising:

the secondary station at initial connection to the network sending a request for a time reference, said request being addressed to a Signature Generator, and wherein the request for time reference includes a randomly generated number used as a nonce;

receiving the time reference and the nonce, wherein the time reference and the nonce are signed with a nonce signature; and

using the nonce and nonce signature to check authenticity of received messages, and using the received time reference to configure a clock at the secondary station;

receiving, by the secondary station, a plurality of system information (SI) messages from a plurality of primary stations, said SI messages including each a respective time reference information related to the corresponding primary station;

checking the validity of a received signature for each of the primary stations;

checking a cell identifier for each of the primary stations with a valid signature, and ignoring time reference information from primary stations with a cell identifier being identical to another primary station and having an earlier value than the one from the other primary station; and

deducing a local time reference from one or more of the time reference information originating from primary stations with a valid signature.

2 . The method of claim 1 , wherein the time reference information is at least one of the following: a time offset representative of the difference between a clock value at the primary station and a clock value at a Signature Generator of the network, a clock value at the primary station, a clock value at the Signature Generator.

3 . The method of claim 1 , wherein the step of deducing a local time reference includes computing an average from a plurality of the time reference information originating from primary stations with a valid signature and without duplicate cell identifier with earlier time.

4 . The method of claim 1 , wherein the step of deducing a local time reference includes selecting the time reference information with the latest value originating from primary stations with a valid signature.

5 . The method of claim 1 , wherein the request is part of an Initial Radio Resource Communication, RRC, setup request message.

6 . The method of claim 1 , wherein the request is part of a Network Access Stratum (NAS) identity response message sent in response to a NAS identity request.

7 . The method of claim 1 , wherein the received signature is checked using at least one of the following algorithms: a Public Key Infrastructure (PKI) algorithm, a Boneh-Lynn-Shacham (BLS) signing algorithm, a Boneh-Gentry-Lynn-Shacham (BGLS) signing algorithm, an Elliptic Curve Digital Signature Algorithm (ECDSA), Falcon signing algorithm, Rainbow signing algorithm, a Great Multivariate Short Signature (GeMSS) algorithm.

8 . A secondary station adapted for communicating in a network, the secondary station comprising:

a transmitter configured to send at initial connection to the network a request for a time reference, said request being addressed to a Signature Generator, wherein the request for time reference includes a randomly generated number used as a nonce;

a hardware receiver adapted to receive the time reference and the nonce, wherein the time reference and the nonce are signed with a nonce signature,

a controller configured to use the nonce and nonce signature to check authenticity of received messages, and to use the received time reference to configure a clock at the secondary station;

wherein the hardware receiver is further adapted to receive a plurality of system information (SI) messages from a plurality of primary stations, said SI messages including each a respective time reference information related to the corresponding primary station;

wherein the controller is further configured to check the validity of a received signature for each of the primary stations, and to check a cell identifier at least for each of the primary stations with a valid signature, and ignore time reference information from primary stations with a cell identifier being identical to another primary station and having an earlier value than the one from the other primary station; and

wherein said controller is adapted to deduce a local time reference from one or more of the time reference information originating from primary stations with a valid signature.

9 . The secondary station of claim 8 , wherein the time reference information is at least one of the following: a time offset representative of the difference between a clock value at the primary station and a clock value at a Signature Generator of the network, a clock value at the primary station, a clock value at the Signature Generator.

10 . The secondary station of claim 8 , wherein deducing a local time reference comprises computing an average from a plurality of the time reference information originating from primary stations with a valid signature and without duplicate cell identifier with earlier time.

11 . The secondary station of claim 8 , wherein deducing a local time reference comprises selecting the time reference information with the latest value originating from primary stations with a valid signature.

12 . The secondary station of claim 8 , wherein the request is part of an Initial Radio Resource Communication, RRC, setup request message.

13 . The secondary station of claim 8 , wherein the request is part of a Network Access Stratum (NAS) identity response message sent in response to a NAS identity request.

14 . The secondary station of claim 8 , wherein the received signature is checked using at least one of the following algorithms: a Public Key Infrastructure (PKI) algorithm, a Boneh-Lynn-Shacham (BLS) signing algorithm, a Boneh-Gentry-Lynn-Shacham (BGLS) signing algorithm, an Elliptic Curve Digital Signature Algorithm (ECDSA), Falcon signing algorithm, Rainbow signing algorithm, a Great Multivariate Short Signature (GeMSS) algorithm.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 31, 2023
From: GARCIA MORCHON, OSCAR
To: KONINKLIJKE PHILIPS N.V.
Reel/Frame 062559/0312 →
Priority Claims (12)
EP 20189373 · Aug 4, 2020 · regional
EP 20199594 · Oct 1, 2020 · regional
EP 20201320 · Oct 12, 2020 · regional
EP 20201744 · Oct 14, 2020 · regional
EP 21150371 · Jan 6, 2021 · regional
EP 21150643 · Jan 8, 2021 · regional
EP 21150840 · Jan 11, 2021 · regional
EP 21151731 · Jan 15, 2021 · regional
EP 21162091 · Mar 11, 2021 · regional
EP 21172331 · May 5, 2021 · regional
EP 21176514 · May 28, 2021 · regional
EP 21178146 · Jun 8, 2021 · regional
Continuity (1)
Related Publication 20230308877A1 · Sep 28, 2023
References Cited (15)
US 9853949B1 · Stickle · 2017 [cited by applicant]
US 11310208B1 · Stickle · 2022 [cited by examiner]
US 20150304060A1 · Xiao · 2015 [cited by examiner]
US 20170295489A1 · Agiwal et al. · 2017 [cited by applicant]
US 20210051569A1 · Arjona · 2021 [cited by examiner]
US 20220303923A1 · Kai · 2022 [cited by examiner]
WO 2018140204A1 · 2018 [cited by applicant]
3rd Generation Partnership Project: Technical Specification Group Services and System Aspects Study of 5G Security Enhancement Against False Base Stations, No. 9.0 May 29, 2020 (Year: 2020). [cited by examiner]
3rd Generation Partnership Project: Technical Specification Group Services and System Aspects Study of 5G Security Enhancement Against False Base Stations No. 9.0 May 29, 2020. [cited by applicant]
Cablelabs et al Deligated Digital Signaling for Mitigating False Base Stations vol. SAWG3 May 21, 2020. [cited by applicant]
International Search Report and Written Opinion From PCT/EP2021/071708 Mailed Nov. 2, 2021. [cited by applicant]
Bonati et al “Steallte: Private 5G Cellular Connectivity as a Service With Full-Stack Wireless Steganography” IEE Conf. on Computer Communications (2021). [cited by applicant]
Giordani et al “A Tutorial On Beam Management for 3GPP NT at MM Wave Frequencies”. [cited by applicant]
Hussain et al “Insecure Connection Bootstrapping in Cellular Networks: the Root of All Evil” WISEC '19 May 15-19, 2019. [cited by applicant]
3GPP TR 33.809. Study on 5G Security enhancements against False Base Stations (FBS) (Sep. 2023). [cited by applicant]