# US 12,120,518 B2 · Cryptographic identification of false base stations > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,518 B2 - Document ID: US12120518B2 - Status: Granted - Kind: B2 - Application number: 17/559,039 - Filed: 2021-12-22 - Published: 2023-06-22 - Granted: 2024-10-15 - Earliest claimed: 2021-12-22 - Assignees: T-Mobile Innovations LLC - Applicants: T-Mobile Innovations LLC - Inventors: Gregory Schumacher; Marouane Balmakhtar; Geoffrey Todd Gibson - Web page: https://patentgrep.com/patent/US12120518B2 ## CPC - H04W 12/122: Counter-measures against attacks; Protection against rogue devices - H04W 12/03: Protecting confidentiality, e.g. by encryption - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 12/106: Packet or message integrity - H04W 12/61: Time-dependent - H04W 12/73: Access point logical identity - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods and systems for detecting false base stations are provided. A computing device transmits a request for a verification message to a base station. An encrypted verification message comprising a base station identifier and a signature encrypted using an encryption key associated with the base station is received by the computing device. The computing device decrypts the signature included in the encrypted verification message utilizing a decryption key associated with the computer system. Based on the decrypted signature, the computing device determines that the encryption key does not correspond to the decryption key. Based on determining that the encryption key does not correspond to the decryption key, the computing device stores the base station identifier in a data store in association with a false base station indicator. ## Claims ### Claim 1 A computer-implemented method for detecting false base stations, the computer-implemented method comprising: transmitting, by a computing device, a request for a verification message to a base station; receiving, by the computing device, an encrypted verification message from the base station, the encrypted verification message, comprising a base station identifier and a signature encrypted using an encryption key associated with the base station; decrypting, by the computing device, the signature included in the encrypted verification message utilizing a decryption key associated with the computing device; based on decrypting the signature, determining, by the computing device, that the encryption key does not correspond to the decryption key; and based on determining that the encryption key does not correspond to the decryption key, storing, by the computing device, the base station identifier in a data store, wherein the base station identifier is stored in association with a false base station indicator. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the encrypted verification message further comprises a nonce. ### Claim 3 (depends on 2) The computer-implemented method of claim 2, wherein the nonce is a timestamp. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein the signature is encrypted using asymmetric encryption. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, wherein the signature is encrypted using symmetric encryption. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein the request for the verification message is transmitted periodically. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, further comprising: receiving, by the computing device, a second encrypted verification message from a second base station, the second encrypted verification message comprising a second base station identifier and a second signature encrypted based on a second encryption key associated with the second base station; and determining that the second base station has been previously stored in the data store in association with the false base station indicator. ### Claim 8 A computer system comprising: one or more processors, and one or more computer storage media storing computer-useable instructions that, when used by the one or more processors, cause the one or more processors to: receive, by a false base station identification system, a base station certification request from a user computing device, wherein the base station certification request comprises at least a base station identifier, and a base station signature encrypted utilizing an encryption key; utilizing, by the false base station identification system, a decryption key associated with the false base station identification system, decrypt the base station signature; based on decrypting the base station signature, determine, by the false base station identification system, that a base station associated with the base station identifier is a false base station; and store, by the false base station identification system, the base station identifier, in association with a false base station indicator in a data store. ### Claim 9 (depends on 8) The computer system of claim 8, further comprising: transmit a notification to the user computing device, wherein the notification is configured to block the user computing device from receiving communications from the base station. ### Claim 10 (depends on 8) The computer system of claim 8, further comprising: transmit a notification to the user computing device, wherein the notification indicates that the base station is a false base station. ### Claim 11 (depends on 8) The computer system of claim 8, further comprising: determine that the base station identifier has been previously stored in the data store in association with the false base station indicator. ### Claim 12 (depends on 11) The computer system of claim 11, further comprising: remove the base station identifier from the data store. ### Claim 13 (depends on 8) The computer system of claim 8, wherein the base station certification request was received by the user computing device from the base station. ### Claim 14 (depends on 8) The computer system of claim 8, wherein the decryption key is retrieved from a database associated with the false base station identification system. ### Claim 15 (depends on 8) The computer system of claim 8, wherein the base station certification request further comprises a nonce. ### Claim 16 One or more non-transitory computer-readable media having computer-executable instructions embodied thereon that, when executed by a computing device, perform a method comprising: transmitting, by the computing device, a request for a verification message to a base station; receiving, by the computing device, an encrypted verification message from the base station, the encrypted verification message comprising at least a base station identifier and a signature encrypted using an encryption key associated with the base station; decrypting, by the computing device, the signature utilizing a decryption key associated with the computing device; based on decrypting the signature, determining, by the computing device, that the encryption key does correspond to the decryption key; and based on determining that the encryption key corresponds to the decryption key, storing, by the computing device, the base station in a data store, wherein the base station identifier is stored in association with a real base station indicator. ### Claim 17 (depends on 16) The one or more non-transitory computer-readable media of claim 16, wherein the decryption key is replaced with a new decryption key at a predetermined interval. ### Claim 18 (depends on 16) The one or more non-transitory computer-readable media of claim 16, wherein the encrypted verification message further comprises a nonce. ### Claim 19 (depends on 18) The one or more non-transitory computer-readable media of claim 18, wherein the nonce is a timestamp. ### Claim 20 (depends on 16) The one or more non-transitory computer-readable media of claim 16, wherein the encrypted verification message is encrypted using asymmetric encryption.