US 10,477,400 B2 · Forbidden network list management

Abstract

Methods, systems, and devices for wireless communication are described. A user equipment (UE) may be configured to include procedures to mitigate denial of service (DoS) attack by a rogue base station when the initial non-access stratum (NAS) messages between the UE and a mobility management entity (MME) is unprotected. UE may maintain a temporary forbidden network list, which resides outside a subscriber identity module (SIM), and update a forbidden network list, which resides on the SIM, only under certain conditions. For example, a visited network, from which the UE receives a reject message, may be added to the forbidden network list on the SIM only when a counter associated with the visited network is equal to a maximum counter value, which is configured by the UE.

Claims32

Dependent claims

A method, by a user equipment (UE), for wireless communication, comprising:

receiving a message from a visited network;
determining that the visited network is in a first forbidden network list, wherein the first forbidden network list resides on the UE, outside a subscriber identity module (SIM);
determining a value of a counter associated with the visited network in response to the visited network being in the first forbidden network list;
incrementing the counter associated with the visited network in response to the visited network being in the first forbidden network;
in response to the value of the counter being equal to a maximum counter value:
deleting the visited network from the first forbidden network list;
and
adding the visited network to a second forbidden network list, wherein the second forbidden network list resides in the SIM;
and
deleting all entries in the first forbidden network list in response to the SIM being removed from the UE or the UE being powered off.

7 more elements

An apparatus for wireless communication, comprising:

a processor;
memory in electronic communication with the processor;
and
instructions stored in the memory and operable, when executed by the processor, to cause the apparatus to:
receive a message from a visited network;
determine that the visited network is in a first forbidden network list, wherein the first forbidden network list resides on a user equipment (UE), outside a subscriber identity module (SIM);
determine a value of a counter associated with the visited network in response to the visited network being in the first forbidden network list;
increment the counter associated with the visited network in response to the visited network being in the first forbidden network;
in response to the value of the counter being equal to a maximum counter value:
delete the visited network from the first forbidden network list;
and
add the visited network to a second forbidden network list, wherein the second forbidden network list resides in the SIM;
and
delete all entries in the first forbidden network list in response to the SIM being removed from the UE or the UE being powered off.

11 more elements

A non-transitory computer readable medium storing code for wireless communication, the code comprising instructions executable by a processor to:

receive a message from a visited network;
determine that the visited network is in a first forbidden network list, wherein the first forbidden network list resides on a user equipment (UE), outside a subscriber identity module (SIM);
determine a value of a counter associated with the visited network in response to the visited network being in the first forbidden network list;
increment the counter associated with the visited network in response to the visited network being in the first forbidden network;
in response to the value of the counter being equal to a maximum counter value:
delete the visited network from the first forbidden network list;
and
add the visited network to a second forbidden network list, wherein the second forbidden network list resides in the SIM;
and
delete all entries in the first forbidden network list in response to the SIM being removed from the UE or the UE being powered off.

7 more elements

Dependencies are inferred from the claim text.

Forbidden network list management

Life of this patent

Forbidden network list management

Life of this patent

Abstract

Claims32