Acquiring permanent identifier of user equipment by gateway in mobile communication system

Patent metadata

Field	Value
Publication number	US-10064048-B1
Application number	US-201815863154-A
Country	US
Kind code	B1
Filing date	Jan 5, 2018
Priority date	Jan 5, 2018
Publication date	Aug 28, 2018
Grant date	Aug 28, 2018

Abstract

A gateway (GW) acquires an International Mobile Subscriber Identity (IMSI) of a user equipment (UE) without requesting a mobile management entity (MME) of a core network (CN) to provide it. The GW detects arrival of a S1AP message for the UE. If the GW does not have the IMSI of the UE, and if a NAS payload of the S1AP message is ciphered, send to the UE a rejecting message indicating detaching the UE from the CN, causing the UE to request re-attaching to the CN in a S1AP message that is an Initial UE Message, which contains a temporary identifier of the UE. Then alter the Initial UE Message with a fabricated temporary identifier not recognizable by the MME and send the altered message to the MME, causing the MME to ask the UE to identify itself with the IMSI, which is read by the GW.

First claim

What is claimed is:

1. A method for acquiring a permanent identifier of a user equipment (UE) by a gateway (GW) in a mobile communication system, the system having a radio access network (RAN), a core network (CN) and the GW, the UE communicating control messages and data traffic with the CN through the RAN, message and data transmission between the RAN and the CN being made through the GW, the CN including a mobility management entity (MME) for managing mobility of the UE, the MME being configured to create a temporary identifier for replacing the permanent identifier in message and data transmission, the method performed by the GW comprising:
among the control messages arrived at the GW, identifying a first control message that requests the MME to attach the UE to the CN, wherein the first control message contains the temporary identifier for identifying the UE by the MME;
forming a second control message from the first control message by at least altering the temporary identifier contained in the first control message to a fabricated temporary identifier that prevents the MME from successfully identifying a known UE upon receipt of the second control message;
sending the second control message to the MME without relaying the first control message thereto, causing the MME to issue to the UE a third control message that requests the UE to provide the permanent identifier to the MME for identification;
detecting arrival of a fourth control message at the GW, wherein the fourth control message is prepared by the UE in response to receipt of the third control message and contains the permanent identifier; and
extracting the permanent identifier from the fourth control message received at the GW such that the GW acquires the permanent identifier without requesting the MME to provide the permanent identifier.

2. The method of claim 1 , further comprising:
triggering the UE to send the first control message to the MME when the UE already attaches to the CN, comprising:
among the control messages arrived at the GW, identifying a fifth control message that is sent from the UE and that includes a request for performing a mobility procedure;
blocking the fifth control message from further propagation outside the GW; and
sending to the UE a sixth control message in response to the fifth control message, wherein the sixth control message contains a rejection to the request and an indication of detaching the UE from the CN, causing the UE to issue the first control message to the MME for requesting re-attaching to the CN.

3. The method of claim 1 , wherein the GW is an offloading GW for offloading a selected portion of data traffic to a local server or a data network other than the CN.

4. The method of claim 1 , wherein the permanent identifier is an International Mobile Subscriber Identity (IMSI).

5. The method of claim 1 , wherein the temporary identifier is a collection of Globally Unique Temporary Identity (GUTI) and System Architecture Evolution (SAE)-Temporary Mobile Subscriber Identity (S-TMSI).

6. The method of claim 1 , wherein the first control message received at the GW is an Initial UE Message.

7. The method of claim 1 , further comprising:
collecting, from the control messages arrived at the GW, temporary identifiers already assigned by the MME; and
selecting the fabricated temporary identifier that forms the second control message to be a valid temporary identifier different from any of the already-assigned temporary identifiers.

8. The method of claim 1 , wherein the fabricated temporary identifier that forms the second control message is selected by the GW from a set of candidate temporary identifiers, the set of candidate temporary identifiers including one or more invalid temporary identifiers not recognizable by the MME.

9. The method of claim 2 , wherein:
the fifth control message is a TRACKING AREA UPDATE REQUEST transmitted as a first S1 Application Protocol (S1AP) message; and

the sixth control message is a second S1AP message containing a TRACKING AREA UPDATE REJECT that incorporates an Evolved Packet System (EPS) Mobility Management (EMM) cause #10 “implicitly detached”.

10. A gateway (GW) arranged to be between a radio access network (RAN) and a core network (CN), the RAN being arranged such that a user equipment (UE) communicating control messages and data traffic with the CN through the RAN, the CN including a mobility management entity (MME) for managing mobility of the UE, the MME being configured to create a temporary identifier for replacing a permanent identifier of the UE in message and data transmission, the GW comprising:
one or more transceivers for communicating with the RAN and the CN; and
one or more processors for processing the control messages arrived at the GW;

wherein the one or more processors are configured to execute a process for acquiring the permanent identifier, the acquiring process comprising:
among the control messages arrived at the GW, identifying a first control message that requests the MME to attach the UE to the CN, wherein the first control message contains the temporary identifier for identifying the UE by the MME;
forming a second control message from the first control message by at least altering the temporary identifier contained in the first control message to a fabricated temporary identifier that prevents the MME from successfully identifying a known UE upon receipt of the second control message;
configuring the one or more transceivers to send the second control message to the MME without relaying the first control message thereto, causing the MME to issue to the UE a third control message that requests the UE to provide the permanent identifier to the MME for UE identification;
detecting arrival of a fourth control message at the GW, wherein the fourth control message is prepared by the UE in response to receipt of the third control message and contains the permanent identifier; and
extracting the permanent identifier from the fourth control message received at the GW such that the GW acquires the permanent identifier without requesting the MME to provide the permanent identifier.

11. The GW of claim 10 , wherein the acquiring process further comprises:
triggering the UE to send the first control message to the MME when the UE already attaches to the CN, comprising:
among the control messages arrived at the GW, identifying a fifth control message that is sent from the UE and that includes a request for performing a mobility procedure;
configuring the one or more transceivers to block the fifth control message from further propagation outside the GW; and
configuring the one or more transceivers to send to the UE a sixth control message in response to the fifth control massage, wherein the sixth control message contains a rejection to the request and an indication of detaching the UE from the CN, causing the UE to issue the first control message to the MME for requesting re-attaching to the CN.

12. The GW of claim 10 , wherein:
the one or more transceivers are further used for communicating with a unit selected from a local server and a data network, the data network being other than the CN; and
the one or more processors are further configured to execute a process for offloading a selected portion of data traffic to the selected unit, the offloading process including configuring the one or more transceivers to relay the selected portion of data traffic between the RAN and the selected unit.

13. The GW of claim 10 , wherein the permanent identifier is an International Mobile Subscriber Identity (IMSI).

14. The GW of claim 10 , wherein th

Assignees

• Hong Kong Applied Science & Tech Research Inst Co Ltd

Inventors

• Mui Ka Ho
• TSANG Yau Yau Yolanda
• Wong Yee Simon

Classifications

• H04W8/26 Primary

  Network addressing or numbering for mobility support · CPC title

• H04W8/08

  Mobility data transfer · CPC title

• H04W80/12

  Application layer protocols, e.g. WAP [Wireless Application Protocol] · CPC title

• H04W88/16

  Gateway arrangements · CPC title

• H04W60/00

  Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration · CPC title