Network node and method for detecting false base stations

• US 10,200,869 B2
• Filed: 10/27/2017
• Issued: 02/05/2019
• Est. Priority Date: 12/19/2014
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Norrman, Karl, Centonza, Angelo, Mowler, Marc
• Primary Examiner(s): Urban, Edward F
• Assistant Examiner(s): Justus, Ralph H
• Application Number:
  US15/795,570
• Publication Number:
  US 20180070239A1
• Time in Patent Office: 466 Days
• Field of Search: 455 6711
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 24/10 Scheduling measurement reports ; Arrangements for measurement reports

Abstract

A method performed by a network node, for detecting a false base station in a communications network. The network node operates in the communication network and is adapted to serve a network device via a serving Radio Access, RA, node. The network node sends a message to a network device, which message comprises configuration data configuring the network device to perform measurements in order to collect information transmitted by network nodes in a surrounding area of the network device. The network node further receives a message comprising measurement reports from the network device according to the configuration. The network node further provides an indication that a false base station is present when a difference between the received information in the measurement report and a predetermined target information is detected.

Claims

1. A method performed by a network node for detecting a false base station in a communications network, which network node operates in the communication network and wherein the network node is adapted to serve a network device via a serving radio access node, the method comprising:

sending a message to a network device, which message comprises configuration data configuring the network device to collect information transmitted by network nodes in a surrounding area of the network device;

receiving, from the network device, a message comprising a physical cell identifier (PCI) that the network device determined from synchronization signals received by the network device, wherein the synchronization signals were transmitted by a second base station neighboring the first base station;

determining whether the second base station is a false base station based on the PCI received from the network device; and

providing an indication that a false base station is present in response to determining that the second base station is a false base station.

2. The method of claim 1, further comprising:

sending a second message to the network device configuring the network device to collect a secondary information.

3. The method of claim 2, wherein the secondary information is a System Information Block.

4. The method of claim 2, wherein the comparison comprises verifying that a given cell identifier and Cell Global Identity in the secondary information are assigned to the same Tracking Area Code or Location Area Code as in the secondary target information.

5. The method of claim 2, wherein the network node configures the network device to perform measurements based on a Minimization to Drive Test function.

6. The method of claim 1, wherein the information transmitted by the network nodes comprises physical cell identifiers, carrier frequencies and pilot signal strengths.

7. The method of claim 1, wherein the information is collected from frequencies and radio technologies not used when the network node and network device communicate themselves.

8. The method of claim 1, further comprising comparing information received from the UE regarded the second base station'"'"'s pilot signal strength to target information relating to pilot signal strength of base stations neighboring the first base station.

9. The method of claim 1, wherein the first base station receives PCI information from a plurality of plurality of network devices, the indication that the second base station is a false base station being provided only the PCI for the second base station reported by the network device is corroborated by the plurality of network devices.

10. The method of claim 1, wherein the network node configures the network device to perform measurements using an Automatic Neighbor Relation function.

11. The method of claim 1, wherein the configuration is triggered by an event, which event is a handover or a detection of a pilot signaling strength exceeding a threshold value.

12. The method of claim 1, wherein determining whether the second base station is a false base station based on the PCI received from the network device comprises:

determining whether the PCI received from the network device is included in a list of PCIs maintained by the network node.

13. The method of claim 12, wherein determining whether the second base station is a false base station based on the PCI received from the network device comprises:

instructing the network device to obtain secondary information as a result of determining that the PCI received from the network device is not included in the list of PCIs maintained by the network node.

14. The method of claim 13, wherein

the secondary information comprises one or more of:

a Cell Global Identity (CGI), a Location Area Code (LAC), and a Tracking Area Code (TAC), and

the network node determines whether the second base station is a false base station based on the secondary information.

15. A network node for performing a method for detecting a false base station in a communications network, which network node operates in the communication network and wherein the network node is adapted to serve a network device via a serving radio access node, wherein the network node is configured to:

send a message to a network device, which message comprises configuration data for configuring the network device to collect information transmitted by network nodes in a surrounding area of the network device,

receive, from the network device, a message comprising a physical cell identifier (PCI) that the network device determined from synchronization signals received by the network device, wherein the synchronization signals were transmitted by a second base station neighboring the first base station,

determine whether the second base station is a false base station based on the PCI received from the network device; and

provide an indication that a false base station is present in response to determining that the second base station is a false base station.