Methods, systems, and computer readable media for performing location and velocity check at security edge protection proxy (SEPP) using service communication proxy (SCP)

Patent metadata

Field	Value
Publication number	US-12532181-B2
Application number	US-202318135108-A
Country	US
Kind code	B2
Filing date	Apr 14, 2023
Priority date	Apr 14, 2023
Publication date	Jan 20, 2026
Grant date	Jan 20, 2026

Abstract

A method for performing a location and velocity check at a security edge protection proxy (SEPP) using a service communication proxy (SCP) includes receiving, at an SEPP, an SBI request message relating to a user equipment (UE). The method further includes querying, by the SEPP, a service communication proxy (SCP) to obtain information indicative of a last known update of the UE with the home network of the UE. The method further includes receiving, at the SEPP, a response from the SCP, the response including the information indicative of the last known update of the UE. The method further includes reading, by the SEPP and from the response, the information indicative of the last known update of the UE. The method further includes performing, by the SEPP and using the information indicative of the last known update of the UE, a location and velocity check for the UE. The method further includes performing a network security action based on results of the location and velocity check.

First claim

What is claimed is:

1 . A method for performing a location and velocity check at a security edge protection proxy (SEPP) using a service communication proxy (SCP), the method comprising:
receiving, at the SEPP, a service-based interface (SBI) request message relating to a user equipment (UE); querying, by the SEPP, the service communication proxy (SCP) to obtain information indicative of a last known update of the UE with a home network of the UE; receiving, at the SEPP, a response from the SCP, the response including the obtained information indicative of the last known update of the UE; reading, by the SEPP and from the response, the obtained information indicative of the last known update of the UE; performing, by the SEPP and using the obtained information indicative of the last known update of the UE, the location and velocity check for the UE, wherein performing the location and velocity check includes determining whether a distance between a previous network of the UE indicated by the information obtained from the SCP and a current network of the UE indicated by the SBI request message is greater than a distance that could have been traveled by the UE in light of a time difference between a time associated with the last known update information of the UE and the time of receipt of the SBI request message; and performing a network security action based on results of the location and velocity check.

2 . The method of claim 1 , wherein receiving the SBI request message includes receiving an NausfUE_Authentication_Authenticate request message.

3 . The method of claim 1 , wherein receiving an SBI request message includes receiving an Nudm_UECMRegistration_Request message.

4 . The method of claim 1 , wherein querying the SCP includes querying the SCP using an application programming interface provided by the SCP for obtaining the information indicative of the last known update.

5 . The method of claim 1 , wherein receiving the response including the information indicative of the last known update includes receiving the response including a serving network identifier and a time of the last known update.

6 . The method of claim 5 , wherein performing the location and velocity check includes determining that the serving network identifier indicates a non-home network of the UE and that the UE is a stationary device.

7 . The method of claim 6 , wherein performing the network security action includes blocking the SBI request message in response to determining that the serving network identifier indicates a non-home network of the UE and that the UE is a stationary device.

8 . The method of claim 1 , wherein performing the network security action includes blocking the SBI request message in response to determining that the previous network of the UE indicated by the information obtained from the SCP and the current network of the UE indicated by the SBI request message are separated by a distance could not have been traveled by the UE within the time difference.

9 . The method of claim 1 , wherein the SEPP comprises a home network SEPP of the UE.

10 . A system for performing a location and velocity check at a security edge protection proxy (SEPP) using a service communication proxy (SCP), the system comprising:
the SCP including an application programming interface (API) for providing access to last known update information for a user equipment (UE); and the SEPP for receiving a service-based interface (SBI) request message relating to the UE, querying the SCP to obtain the last known update information for the UE, receiving a response from the SCP, the response including information indicative of the last known update of the UE, the SEPP for reading, from the received response, the information indicative of the last known update of the UE, performing, using the information indicative of the last known update of the UE, the location and velocity check for the UE, wherein the SEPP is configured to perform the location and velocity check by determining whether a distance between i) a previous network of the UE indicated by the received response from the SCP and ii) a current network of the UE indicated by the SBI request message is greater than a distance that could have been traveled by the UE in light of a time difference between iii) a time associated with the last known update information of the UE and iv) a time of receipt of the SBI request message, and the SEPP for performing a network security action based on results of the location and velocity check.

11 . The system of claim 10 , wherein the SBI request message comprises an NausfUE_Authentication_Authenticate request message.

12 . The system of claim 10 , wherein the SBI request message comprises Nudm_UECM_RegistrationRequest message.

13 . The system of claim 10 , wherein the SEPP is configured to query the SCP using the API provided by the SCP for obtaining the information indicative of the last known update.

14 . The system of claim 10 , wherein the last known update information includes a serving network identifier and a time of a last known update of the UE.

15 . The system of claim 14 , wherein the SEPP is configured to perform the location and velocity check by determining that the serving network identifier indicates a non-home network of the UE and that the UE is a stationary device.

16 . The system of claim 15 , wherein the SEPP is configured to perform the network security action by blocking the SBI request message in response to determining that the serving network identifier indicates a non-home network of the UE and that the UE is a stationary device.

17 . The system of claim 10 , wherein the SEPP is configured to perform the network security action by blocking the SBI request message in response to determining that the previous network of the UE indicated by the information obtained from the SCP and a current network of the UE indicated by the SBI request message are separated by a distance could not have been traveled by the UE within the time difference.

18 . One or more non-transitory computer readable media having stored thereon executable instructions that when executed by a processor of a computer control the computer to perform steps comprising:
receiving, at a security edge protection proxy (SEPP), a service-based interface (SBI) request message relating to a user equipment (UE); querying, by the SEPP, a service communication proxy (SCP) to obtain information indicative of a last known update of the UE with a home network of the UE; receiving, at the SEPP, a response from the SCP, the response including the obtained information indicative of the last known update of the UE; reading, by the SEPP and from the response, the obtained information indicative of the last known update of the UE; performing, by the SEPP and using the obtained information indicative of the last known update of the UE, a location and velocity check for the UE, wherein performing the location and velocity check includes determining whether a distance between a previous network of the UE indicated by the information obtained from the SCP and a current network of the UE indicated by the SBI request message is greater than a distance that could have been traveled by the UE in light of a time difference between a time associated with the last known update information of the UE and the time of receipt of the SBI request message; and performing a network security action based on results of the location and velocity check.

Assignees

• Oracle Int Corp

Inventors

• Sharma Ashish Jyoti
• Rajput Jay
• Mohan Raj John Nirmal

Classifications

• H04W60/00

  Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04W12/63 Primary

  Location-dependent; Proximity-dependent · CPC title