Signaling Attack Prevention Method and Apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorChengdong He
Life of this patent
Estimating the term…
Abstract
A signaling attack prevention method and apparatus, where the method includes receiving a general packet radio service (GPRS) Tunneling Protocol (GTP-C) message from a serving gateway (SGW), determining whether the GTP-C message is received from an eighth data interface (S8), determining whether a first characteristic parameter of the GTP-C message is valid when the GTP-C message is received from the S8 interface, where the first characteristic parameter includes at least one of an international mobile subscriber identity (IMSI) of a user, or an identifier of a message source end of the GTP-C message, and discarding the GTP-C message or returning, to the SGW, a GTP-C response message carrying an error code cause value when the first characteristic parameter of the GTP-C message is invalid.
Claims20
A signaling attack prevention method, comprising:
- receiving a general packet radio service (GPRS) Tunneling Protocol (GTP-C) message from a serving gateway (SGW);
- determining whether the GTP-C message is received from an eighth data interface (S8);
- determining whether a first characteristic parameter of the GTP-C message is valid when the GTP-C message is received from the S8, wherein the first characteristic parameter comprises at least one of an international mobile subscriber identity (IMSI) of a user or an identifier of a message source end of the GTP-C message;
- and
- discarding the GTP-C message or returning, to the SGW, a GTP-C response message carrying an error code cause value when the first characteristic parameter of the GTP-C message is invalid.
A signaling attack prevention apparatus, comprising:
- a receiver configured to receive a general packet radio service (GPRS) Tunneling Protocol (GTP-C) message from a serving gateway (SGW);
- a processor coupled to the receiver and configured to:
- determine whether the GTP-C message is received from an eighth data interface (S8);
- determine whether a first characteristic parameter of the GTP-C message is valid when the GTP-C message is received from the S8, wherein the first characteristic parameter comprises at least one of an international mobile subscriber identity (IMSI) of a user or an identifier of a message source end of the GTP-C message;
- and
- discard the GTP-C message or return, to the SGW, a GTP-C response message carrying an error code cause value when the first characteristic parameter of the GTP-C message is invalid.
Dependencies are inferred from the claim text.