# US 11,909,518 B2 · Method for securing a communication user equipment from a jamming attack

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,909,518 B2
- Document ID: US11909518B2
- Status: Granted
- Kind: B2
- Application number: 17/415,230
- Filed: 2019-12-13
- Published: 2022-03-03
- Granted: 2024-02-20
- Earliest claimed: 2018-12-18
- Assignees: Telit Cinterion Deutschland GmbH
- Applicants: Telit Cinterion Deutschland GmbH
- Inventors: Volker Breuer; Bernd Rohl
- Web page: https://patentgrep.com/patent/US11909518B2

## CPC

- H04K 3/226: {Selection of non-jammed channel for communication (spectrum sharing arrangements H04W16/14; selection of wireless resources by user or terminal H04W72/02)}
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- H04K 3/224: {with countermeasures at transmission and/or reception of the jammed signal, e.g. stopping operation of transmitter or receiver, nulling or enhancing transmitted power in direction of or at frequency of jammer}
- H04K 3/65: {using deceptive jamming or spoofing, e.g. transmission of false signals for premature triggering of RCIED, for forced connection or disconnection to/from a network or for generation of dummy target signal}
- H04W 12/122: Counter-measures against attacks; Protection against rogue devices
- H04K 2203/16: for telephony
- H04K: SECRET COMMUNICATION; JAMMING OF COMMUNICATION
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method for a user equipment operating in a cellular network having a plurality of base stations, the user equipment operating on at least one of the base stations, hereinafter the serving base station, for the case of a communication loss to its serving base station, whereby the conditions relating to the serving base station or the corresponding frequency fulfills the criteria concerning jamming. The method includes the steps of: scanning for accessible base stations of the cellular network, examining the at least one base station being identified through the scanning step, by means of signalling message, evaluating the response behavior of the at least one base station, wherein in consideration of the response behavior of at least one of said base station if said base station is rated as suspicious: indicating a jamming situation, otherwise camping on at least one of the base stations.

## Claims

### Claim 1

Method for a user equipment operating in a cellular network comprising a plurality of base stations, the user equipment operating on at least one of the base stations, hereinafter the serving base station for the case of a communication loss to its serving base station, whereby the conditions relating to the serving base station or the corresponding frequency fulfills the criteria concerning jamming, the method comprises the steps of:
scanning for accessible base stations of the cellular network,
examining the at least one base station identified through the scanning step, by means of signalling message,
evaluating the response behavior of said at least one base station,
wherein in consideration of the response behavior of at least one of said base station if said base station is rated as suspicious:
indicating a jamming situation,
otherwise camping on at least one of said base stations;
wherein rating the response behavior of a base station as suspicious comprises not answering on said signalling message.

### Claim 2 (depends on 1)

Method according to claim 1, wherein said base station is rated as suspicious in case of detecting a transmission of at least one of a barring indication or a restriction for operator use indication.

### Claim 3 (depends on 1)

Method according to claim 1, wherein said signalling message is a connection attempt, and rating the response behavior of a base station as suspicious comprises detecting of rejecting a plurality of connection attempts.

### Claim 4 (depends on 1)

Method according to claim 1, wherein the user equipment further maintains a base station list, and the method comprising the steps of:
storing in said base station list an indication relating to a base station in conjunction with a successful operation on said base station,
wherein the evaluated base station is not rated as suspicious when the base station list contains an indication relating to said base station.

### Claim 5 (depends on 4)

Method according to claim 4, wherein said step of storing indications in said base station list is triggered by an event determined by the user equipment of being momentary stationary.

### Claim 6 (depends on 1)

Method according to claim 1, wherein in case the jamming situation is indicated, terminating the communication with the jammed base station and the suspicious base station.

### Claim 7 (depends on 1)

Method according to claim 1, wherein in case a jamming situation is indicated for at least one first base station, and at least one second base station is identified not being rated as suspicious, camping on said second base station.

### Claim 8 (depends on 7)

Method according to claim 7, the cellular network comprising a network entity accessible by the user equipment when camping on said serving base station, further comprising the step of sending a jamming indication to said network entity communicatively connected to the cellular network.

### Claim 9

User equipment operating in a cellular network, said cellular network comprising a plurality of base stations, the user equipment being configured to operate on at least one of the base stations, hereinafter the serving base station, for the case of a communication loss to its serving base station, whereby the conditions relating to the serving base station or the corresponding frequency fulfills the criteria concerning jamming, the user equipment is configured to:
scan for accessible base stations of the cellular network,
examine the at least one base station being identified through the scanning step, by means of signalling message,
evaluate the response behavior of said at least one base station, wherein in consideration of the response behavior of at least one of said base station if said base station is rated as suspicious:
indicate a jamming situation,
otherwise camp on at least one of said base stations;
wherein rating the response behavior of a base station as suspicious comprises to detect not answering on said signalling message.

### Claim 10 (depends on 9)

User equipment according to claim 9, wherein the user equipment is further configured to rate said base station in case of detection of a transmission of at least one of a barring indication or a restriction for operator use indication.

### Claim 11 (depends on 9)

User equipment according to claim 9, wherein said signalling message is a connection attempt, and rating the response behavior of a base station as suspicious comprises to detect rejecting a plurality of connection attempts.

### Claim 12 (depends on 9)

User equipment according to claim 9, further configured to maintain a base station list, and the user equipment is further configured to:
store in said base station list an indication relating to a base station in conjunction with a successful operation on said base station,
wherein the evaluated base station is not rated as suspicious when the base station list contains an indication relating to said base station.

### Claim 13 (depends on 12)

User equipment according to claim 12, further configured to determine of being momentary stationary, wherein said storing of said indications in said base station list is triggered by said determination.
