Secured paging

Methods, systems, and devices for wireless communication are described. A user equipment (UE) may receive a paging message that includes a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source, e.g., a mobility management entity (MME) of the core network. The UE may determine whether the paging message is received from the trusted source or an untrusted source based on the secured UE identifier. The UE may transmit a connection request message based on the determination that the paging message is received from a trusted source.

BACKGROUND

The following relates generally to wireless communication, and more specifically to secured paging.

Wireless communications systems may support an as-needed connection between the UE and a base station. For example, a UE may initially connect to a base station upon entering a coverage area and then transition to an idle mode with no active connection until there is information to communicate. When the network (e.g., a mobility management entity (MME) of the core network) has information to communicate to the UE, a paging message is transmitted to the UE via the base station. The UE responds to the paging message by transmitting a connection request to establish an active connection to receive the information.

Conventional paging procedures, however, may not provide adequate security measures for the UE. The paging messages transmitted over the medium to the UE may include the UE's identity, e.g., an international mobile subscriber identity (IMSI), for routing purposes, for example. The UE receives the paging message, confirms the UE's identity is correct, and responds by transmitting the connection request message. A malicious attacker, however, may intercept the paging message transmission and decode the UE's identity, and use this information to transmit multiple paging messages to the UE. As the false paging messages include the correct UE identity, the UE may respond by transmitting multiple connection request message. This may congest the medium for the UE and base station as well as waste vital resources, e.g., deplete battery power, of the UE.

SUMMARY

The described features generally relate to improved methods, systems, devices, and/or apparatuses that support secured paging. Broadly, the described techniques provide for sending the paging message to a UE in a secured manner where the UE can confirm that the paging message is from a trusted source before responding with a connection request message. For example, the UE may receive a paging message that includes a secured UE identifier that is calculated based on a security configuration negotiated between the UE and the trusted source. The UE may use the secured UE identifier to confirm that the paging message is received from the trusted source and, if so, respond by transmitting a connection request message to establish a connection. When the UE determines the paging message is not received from a trusted source, the UE may ignore the paging message.

A method of wireless communication is described. The method may include receiving, at a UE, a first paging message comprising a secured UE identifier calculated based at least in part on a security configuration negotiated between the UE and a trusted source, determining whether the first paging message is received from the trusted source or an untrusted source based at least in part on the secured UE identifier and transmitting a connection request message based at least in part on the determination that the first paging message is received from a trusted source.

An apparatus for wireless communication is described. The apparatus may include means for receiving, at a UE, a first paging message comprising a secured UE identifier calculated based at least in part on a security configuration negotiated between the UE and a trusted source, means for determining whether the first paging message is received from the trusted source or an untrusted source based at least in part on the secured UE identifier and means for transmitting a connection request message based at least in part on the determination that the first paging message is received from a trusted source.

A further apparatus is described. The apparatus may include a processor, memory in electronic communication with the processor, and instructions stored in the memory. The instructions may be operable to cause the processor to receive, at a UE, a first paging message comprising a secured UE identifier calculated based at least in part on a security configuration negotiated between the UE and a trusted source, determine whether the first paging message is received from the trusted source or an untrusted source based at least in part on the secured UE identifier and transmit a connection request message based at least in part on the determination that the first paging message is received from a trusted source.

A non-transitory computer readable medium for wireless communication is described. The non-transitory computer-readable medium may include instructions to cause a processor to receive, at a UE, a first paging message comprising a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source, determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier and transmit a connection request message based on the determination that the first paging message is received from a trusted source.

Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for refraining from transmitting the connection request message based on a determination that the first paging message is received from the untrusted source.

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the determining the first paging message is received from the trusted source comprises: determining that the first paging message includes the secured UE identifier.

Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for calculating one or more expected secured UE identifiers based on the security configuration. Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for determining that the first paging message includes the secured UE identifier that matches at least one of the one or more expected secured UE identifiers.

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the security configuration comprises a security key. In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the security key comprises a key access security management entity (Kasme).

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the security configuration comprises a sequence number. In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the secured UE identifier comprises at least a portion of the sequence number.

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the sequence number comprises at least a portion of a downlink (DL) non-access stratum (NAS) count value. In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the determining the first paging message is received from the trusted source comprises: determining a UE sequence number for the first paging message. Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for determining that the UE sequence number has not been previously used.

Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for refraining from transmitting the connection request message based on a determination that the UE sequence number has been previously used.

Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for transmitting a support indicator to the trusted source, the support indicator providing an indication that the UE supports the use of the secured UE identifier in a paging procedure.

Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for receiving, from the trusted source, a confirmation that the trusted source supports the use of the secured UE identifier in the paging procedure. In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the confirmation comprises a format indicator associated with the secured UE identifier.

A method of wireless communication is described. The method may include determining a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source, transmitting a first paging message to the UE, the first paging message comprising the secured UE identifier and establishing a connection with the UE.

An apparatus for wireless communication is described. The apparatus may include means for determining a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source, means for transmitting a first paging message to the UE, the first paging message comprising the secured UE identifier and means for establishing a connection with the UE.

A further apparatus is described. The apparatus may include a processor, memory in electronic communication with the processor, and instructions stored in the memory. The instructions may be operable to cause the processor to determine a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source, transmit a first paging message to the UE, the first paging message comprising the secured UE identifier and establish a connection with the UE.

A non-transitory computer readable medium for wireless communication is described. The non-transitory computer-readable medium may include instructions to cause a processor to determine a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source, transmit a first paging message to the UE, the first paging message comprising the secured UE identifier and establish a connection with the UE.

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the security configuration comprises a security key. In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the security key comprises a key access security management entity (Kasme).

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the security configuration comprises a sequence number. In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the secured UE identifier comprises at least a portion of the sequence number.

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the sequence number is based on a DL non-access stratum (NAS) count value. Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for receiving a support indicator from the UE, the support indicator providing an indication that the UE supports the use of the secured UE identifier in a paging procedure.

Some examples of the method, apparatus, or non-transitory computer-readable medium described above may further include processes, features, means, or instructions for transmitting, to the UE, a confirmation that the trusted source supports the use of the secured UE identifier in the paging procedure.

In some examples of the method, apparatus, or non-transitory computer-readable medium described above, the confirmation comprises a format indicator associated with the secured UE identifier.

DETAILED DESCRIPTION

Conventional paging procedures are unsecured and include the user equipment (UE) identity in the paging message. This exposes the UE identity to interception and use by a malicious attacker. The attacker may read the UE identity from the paging message and use this to send repeated paging messages to the UE. The UE, unaware that the paging message is from an attacker, confirms the UE identity is correct and responds with a connection request message. Each false paging message and resultant connection request message consumes over-the-air resources of the network and causes added power usage at the UE. This impact may be more pronounced in UEs with limited battery power and/or that are unable to be recharged, e.g., machine-type devices, wearable internet connected devices, etc., that are designed to operate for extended periods of time without a replacement battery.

Aspects of the disclosure are initially described in the context of a wireless communication system. Broadly, a secured paging procedure is described that uses a secured UE identifier that is calculated by a network entity and the UE to confirm that the paging message is from a trusted source. Once the UE calculates and confirms the secured UE identifier, a connection request message is transmitted. The UE may initially indicate that it supports secured paging in an attach request, location area update request message, etc., and negotiate a security configuration between the UE and the trusted source (e.g., a mobility management entity (MME) of a core network). The secured UE identifier may be based on the security configuration and may include a secured identifier associated with the UE and/or a sequence number. Aspects of the secured UE identifier may be calculated based on a security context between the UE and the trusted source. Aspects of the disclosure are further illustrated by and described with reference to apparatus diagrams, system diagrams, and flowcharts that relate to secured paging.

FIG. 1illustrates an example of a wireless communications system100in accordance with various aspects of the present disclosure. The wireless communications system100includes base stations105, UEs115, and a core network130. In some examples, the wireless communications system100may be a Long Term Evolution (LTE)/LTE-Advanced (LTE-A) network. Wireless communications system100supports secured paging procedures where the UE115receives a paging message with a secured UE identifier, uses the secured UE identifier to confirm the paging message is from a trusted source, and transmits a connection request message if the paging message is from a trusted source.

Base stations105may wirelessly communicate with UEs115via one or more base station antennas. Each base station105may provide communication coverage for a respective geographic coverage area110. Communication links125shown in wireless communications system100may include uplink (UL) transmissions from a UE115to a base station105, or downlink (DL) transmissions, from a base station105to a UE115. UEs115may be dispersed throughout the wireless communications system100, and each UE115may be stationary or mobile. A UE115may also be referred to as a mobile station, a subscriber station, a remote unit, a wireless device, an access terminal (AT), a wearable device, a handset, a user agent, a client, or like terminology. A UE115may also be a cellular phone, a wireless modem, a handheld device, a personal computer, a tablet, a personal electronic device, an machine type communication (MTC) device, etc.

A base station105may be connected by an S1 interface to the core network130. The core network130may be an evolved packet core (EPC), which may include at least one mobility management entity (MME), at least one serving gateway (S-GW), and at least one PDN gateway (P-GW). The MME may be the control node that processes the signaling between the UE115and the EPC. The MME may manage mobility for UEs115and may be responsible for initiating paging and authentication of the UEs115. All user internet protocol (IP) packets may be transferred through the S-GW, which itself may be connected to the P-GW. The P-GW may provide IP address allocation as well as other functions. The P-GW may be connected to the network operators IP services. The operators IP services may include the Internet, the Intranet, an IP Multimedia Subsystem (IMS), and a Packet-Switched (PS) Streaming Service (PSS).

A UE115generally connects to a base station105upon entering the coverage area110of the base station105, e.g., upon initially powering on, when moving between coverage areas110, etc. The UE115attaches and negotiates a security configuration with the MME. The MME may be considered a trusted source from the UE perspective, as compared to a malicious attacker (e.g., untrusted source) that sends false paging messages. During the negotiations, the UE the trusted source may negotiate the security configuration that includes a secured UE identifier. The secured UE identifier may be based, in some aspects, on a security context shared between the UE115and the MME. The UE115may enter an idle mode and periodically wake up to receive paging messages. If the S-GW receives data for the UE115, it may notify the MME, which may send a paging message to every base station105within an area known as a tracking area for transmission to the UE115. The paging message may include the secured UE identifier that is calculated between the UE115and the MME. Each base station105within the tracking area may send the paging message with the secured UE identifier.

The UE115receives the paging message that includes the secure UE identifier. The UE115may, in some cases, have pre-calculated an expected secured UE identifier based on the security configuration. As the UE115and the MME negotiated the security configuration, the secured UE identifier from the MME will match the expected secured UE identifier calculated by the UE115. Thus, the UE115may confirm that the expected secured UE identifier matches the secured UE identifier included in the paging message. This confirmation may provide a determination for the UE115that the paging message is from a trusted source (e.g., the MME). The UE115may then transmit a connection request message.

FIG. 2illustrates an example of a process flow200for secured paging in accordance with various aspects of the present disclosure. Process flow200may include base station105-a, a UE115-a, and a MME130-a, which may be examples of the corresponding devices described with reference toFIG. 1. Process flow200may implement aspects of wireless communications system100ofFIG. 1.

The UE115-aand the MME130-amay negotiate a security configuration during the attach procedure. Broadly, the negotiation to establish the security configuration may provide for NAS layer security (e.g., ciphering and integrity protection) to be completed prior to paging. This may ensure that the UE115-aand the MME130-aeach share the same security context, e.g., key access security management entity (Kasme) which may be associated with a security key shared by the UE115-aand the MME130-a. Additionally, the UE115-aand MME130-amay support the negotiation of the use of the secured paging procedures. For example, the UE115-amay provide an indication in attach request message (e.g., first UL non access stratum (NAS) message) that it supports secured paging procedures. The MME130-amay respond with a confirmation that it supports secured paging, e.g., in the attach accept message.

The secured UE identifier may be based on the negotiated security configuration. The secured UE identifier may include a secured paging identity for the UE115-a. In some cases, the secured UE identifier may also include a sequence number that is x bits long. Each of the UE115-aand the MME130-amay maintain a DL NAS counter that uses a 24 bit internal representation. The sequence number may be based on the DL NAS counter value, e.g., at least a portion of the bits of the DL NAS Count value. The value of x (e.g., the number of bits in the sequence number) may be negotiated between the UE115-aand the MME130-a. As the DL NAS counter value is incremented at each DL transmission to the UE115-a, the sequence number will also change for each incremented DL NAS count value. Moreover, as the DL NAS counter value increments, the sequence number included in the secured UE identifier may not be reused for the UE115-a. The UE115-amay use DL NAS count counter variable in combination with the security key as an input to precalculate an expected secured UE identifier and to decipher the secured UE identifier received in the paging message. The NAS count value may be constructed using an x-bit sequence number (e.g., the x least significant bits), that is concatenated with a NAS overflow counter. Although the described negotiation is provide during an attach procedure inFIG. 2, it is to be understood that the UE115-aand the MME130-amay negotiate the security configuration during other procedures, e.g., a tracking area update message, etc.

The exact format for the secured UE identifier may be based on the processing load for the UE115-a, the risk of de-synchronization between the UE115-aand the MME130-a, an amount of privacy desired, etc. In some cases, an example secured UE identifier format may include one or more of the following: x least significant bits of the DL NAS counter value; the secured UE identity (e.g., an identity that is hidden) that may be a function of Kasme, a secured temporary mobile subscriber identifier (S-TMSI),24-ymost significant bits of the DL NAS counter value (e.g., when y is equal to 24, the secured UE identity may be constant, when y is zero, the media access control (MAC) may be excluded); and the MAC of the paging message, which may be a function of Kasme, S-TMSI, DL NAS counter value, etc.

In one non-limiting example, a secured UE identifier may have a format of: x=y=4, where the length of the secured UE identity is 20 bits, and the length of the MAC element is 16 bits. This example format may leverage a current paging length to provide the described secured paging procedures. This may provide for the same secured UE identity to be used, e.g., 16 times for paging and provide for a low chance of a random collision forcing the UE115-ato perform additional processing. Also, the example format may provide for a small chance (e.g, 1 in 65,536) of forging a paging message to the UE115-a.

At220, the UE115-amay enter an idle mode where it does not have an active connection. The UE115-amay periodically wake up and monitor the medium to receive paging messages, for example. At225the MME130-amay determine that has information to communicate to the UE115-aand therefore may initiate a paging procedure. At230, the UE115-amay precalculate an expected secured UE identifier. The pre-calculation may be performed using the security configuration described above, e.g., using the UE secured identifier format attributes described above. In some examples, the UE115-amay calculate more than one expected secured UE identifier, e.g., two or more, when a least significant bit of the DL NAS count value is indicated for use in the sequence number. The UE115-amay precalculate the expected secured UE identifier(s) prior to transitioning to the idle mode, in some examples.

At235, the MME130-amay transmit a secured paging message to the base station105-a. The paging message may be addressed to UE115-aand therefore at240, the base station105-amay transmit the paging message to the UE115-a. The paging message may include the secured identifier based on the negotiated security configuration. The paging message may include a paging container that includes the secured UE identifier. The paging container may be an information string that includes a paging record list and an associated paging record.

A non-limiting example paging record list may include an entry such as:“PagingRecordList::=SEQUENCE (SIZE (1.maxPageRec)) OF PagingRecord.”

A non-limiting example paging record may also include an entry such as:“PagingRecord::=SEQUENCE {SecuredPagingUE-Identity, ue_sequence_num BIT STRING (SIZE (x)), cn-Domain ENUMERATED {ps, cs},}.”

The SecuredPagingUE-Identity may include the secured UE identity. The ue_sequence_num bit string may include a sequence number of size of x.

At245, the UE115-amay compare the secured UE identifier included in the paging message to the pre-calculated expected secured UE identifier. For example, the UE115-amay compare the secured UE identifier to the expected secured UE identifier calculated based on the x-bit sequence number. If the comparison results in a match, at250the UE115-amay determine that the paging message is received from a trusted source. Accordingly and at255, the UE115-amay transmit a connection request message to the base station105-ato establish an active connection to be used to communicate information.

FIG. 3illustrates an example of a process flow300for secured paging in accordance with various aspects of the present disclosure. Process flow300may include base station105-b, a UE115-b, and a MME130-b, which may be examples of the corresponding devices described with reference toFIGS. 1 and/or 2. Process flow300may implement aspects of wireless communications system100ofFIG. 1. Generally, process flow300illustrates an example of secured paging in the situation where a paging loss due to poor radio conditions, for example, is experienced. In the description regarding process flow300, the UE115-band the MME130-bmay have already negotiated the security configuration used to calculate the secured UE identifier, e.g., during an attach procedure, in conjunction with a tracking area update procedure, etc.

At305, the MME130-bmay determine that it has information to communicate to the UE115-b, e.g., data to downlink to the UE115-b, and therefore initiate the paging procedure. At310, the UE115-bmay precalculate the expected secured UE identifier, as described with reference to process flow200. It is to be understood that the UE115-bmay precalculate the expected secured UE identifier prior to step305and, for example, prior to entering an idle mode. At315, the MME130-bmay transmit a paging message to the base station105-bthat is addressed to UE115-b. At320, the base station105-btransmits the paging message to the UE115-b. The paging message may include the secured UE identifier that is determined based on the pre-negotiated security configuration between the UE115-band the MME130-b(e.g., a trusted source from the UE115-bperspective). For example, the paging message may include the paging container that includes the paging record list and associated paging record. The format for the secured UE identifier may be selected in accordance with the description of process flow200.

At325, the UE115-bmay experience a paging loss. The paging loss may result in the paging message not being received at the UE115-band/or not being decodable by the UE115-b. Therefore, from the UE115-bperspective, the paging message may not have been received. At330, the MME130-bmay determine that the UE115-bhas experienced the paging loss based on expiration of a timer. For example, the MME130-bmay initiate a timer (e.g., a T3413 timer) upon transmitting the paging message. When the timer has expired without receiving a connection being established with the UE115-b, the MME130-bmay determine that the paging loss has occurred.

Therefore, at335the MME130-bmay increment the secured UE identifier. Incrementing the secured UE identifier may include incrementing the DL NAS counter value, e.g., based on the downlink paging message being transmitted to the UE115-b. As the secured UE identifier may be based on the DL NAS counter value, in some examples, this may result in the secured UE identifier also being incremented. At340, the MME130-bmay transmit a second paging message to the UE115-bvia the base station105-bat345. The second paging message may include the incremented secured UE identifier.

At350, the UE115-bmay compare the secured UE identifier included in the paging message (e.g., the incremented secured UE identifier) to a pre-calculated expected secured UE identifier. For example, the UE115-bmay compare the secured UE identifier to the expected secured UE identifier calculated based on the x-bit sequence number. As previously discussed, the UE115-bmay have pre-calculated more than one expected secured UE identifiers. The UE115-bmay compare the received secured UE identifier to each of the expected secured UE identifiers to determine if there is a match.

In some aspects, the UE115-bmay determine whether the received secured UE identifier has been previously used, e.g., the sequence number has been previously used. If the secured UE identifier has been previously used, the UE115-bmay determine that the paging message has been received from an untrusted source, e.g., not from MME130-b. If, however, the comparison results in a match, at355the UE115-bmay determine that the paging message is received from a trusted source. Accordingly and at360, the UE115-bmay transmit a connection request message to the base station105-bto establish an active connection to be used to communicate information.

FIG. 4illustrates an example of a process flow400for secured paging in accordance with various aspects of the present disclosure. Process flow400may include base station105-c, a UE115-c, and a MME130-c, which may be examples of the corresponding devices described with reference toFIGS. 1, 2, and/or3. Process flow400may implement aspects of wireless communications system100ofFIG. 1. Generally, process flow400illustrates an example of secured paging in the situation where a random access channel (RACH) connection procedure fails between the UE115-cand the base station105-c. In the description regarding process flow400, the UE115-cand the MME130-cmay have already negotiated the security configuration used to calculate the secured UE identifier, e.g., during an attach procedure, in conjunction with a tracking area update procedure, etc.

At405, the MME130-cmay determine that it has information to communicate to the UE115-c, e.g., data to downlink to the UE115-c, and therefore initiate the paging procedure. The UE115-cmay pre-calculated the expected secured UE identifier, as described with reference to process flows200and/or300. At410, the MME130-cmay transmit a paging message to the base station105-cthat is addressed to UE115-c. At415, the base station105-ctransmits the paging message to the UE115-c. The paging message may include the secured UE identifier that is determined based on the pre-negotiated security configuration between the UE115-cand the MME130-c(e.g., a trusted source from the UE115-cperspective). For example, the paging message may include the paging container that includes the paging record list and associated paging record. The format for the secured UE identifier may be selected in accordance with the description of process flow200.

The UE115-cmay receive the paging message and respond at420by transmitting a connection request message to the base station105-c. The connection request message may generally initiate an active connection between the UE115-cand the base station105-c, e.g., a radio resource control (RRC) connection. The connection request may include a RACH connection procedure and may fail due to poor radio conditions, interference, etc. Therefore, the RACH failure may result in the UE115-cbeing unable to establish a connection to the base station105-cand the MME130-cto receive the downlink information.

At430, the MME130-cmay determine that the UE115-chas experienced the RACH failure based on expiration of a timer. For example, the MME130-cmay initiate a timer (e.g., a T3413 timer) upon transmitting the paging message. When the timer has expired without a connection being established with the UE115-c, the MME130-cmay determine that the RACH failure has occurred.

Therefore, at435the MME130-cmay increment the secured UE identifier. Incrementing the secured UE identifier may include incrementing the DL NAS counter value, e.g., based on the downlink paging message being transmitted to the UE115-c. As the secured UE identifier may be based on the DL NAS counter value, in some examples, this may result in the secured UE identifier also being changed. At440, the MME130-cmay transmit a second paging message to the UE115-cvia the base station105-cat445. The second paging message may include the changed secured UE identifier.

At450, the UE115-cmay compare the secured UE identifier included in the paging message (e.g., the changed secured UE identifier) to a pre-calculated expected secured UE identifier. For example, the UE115-cmay compare the secured UE identifier to the expected secured UE identifier calculated based on the x-bit sequence number. As previously discussed, the UE115-cmay have pre-calculated more than one expected secured UE identifiers. The UE115-cmay compare the received secured UE identifier to each of the expected secured UE identifiers to determine if there is a match.

In some aspects, the UE115-cmay determine whether the received secured UE identifier has been previously used, e.g., the sequence number has been previously used. If the secured UE identifier has been previously used, the UE115-cmay determine that the paging message has been received from an untrusted source, e.g., not from MIME130-c. If, however, the comparison results in a match, at455the UE115-cmay determine that the paging message is received from a trusted source. Accordingly and at460, the UE115-cmay transmit a connection request message to the base station105-cto establish an active connection to be used to communicate information.

FIG. 5shows a block diagram of a wireless device500that supports secured paging in accordance with various aspects of the present disclosure. Wireless device500may be an example of aspects of a UE115described with reference toFIGS. 1 through 4. Wireless device500may include receiver505, secured paging manager510, and transmitter515. Wireless device500may also include a processor. Each of these components may be in communication with each other.

The receiver505may receive information such as packets, user data, or control information associated with various information channels (e.g., control channels, data channels, and information related to secured paging, etc.). Information may be passed on to other components of the device500. The receiver505may be an example of aspects of the transceiver825described with reference toFIG. 8.

The secured paging manager510may receive, at the device500(e.g., a UE115), a first paging message including a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source, determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier, and transmit a connection request message based on the determination that the first paging message is received from a trusted source. The secured paging manager510may also be an example of aspects of the secured paging manager805described with reference toFIG. 8.

The transmitter515may transmit signals received from other components of wireless device500. In some examples, the transmitter515may be collocated with a receiver in a transceiver. For example, the transmitter515may be an example of aspects of the transceiver825described with reference toFIG. 8. The transmitter515may include a single antenna, or it may include a plurality of antennas.

FIG. 6shows a block diagram of a wireless device600that supports secured paging in accordance with various aspects of the present disclosure. Wireless device600may be an example of aspects of a wireless device500or a UE115described with reference toFIGS. 1 through 5. Wireless device600may include receiver605, secured paging manager610and transmitter630. Wireless device600may also include a processor. Each of these components may be in communication with each other.

The receiver605may receive information which may be passed on to other components of the device600. The receiver605may also perform the functions described with reference to the receiver505ofFIG. 5. The receiver605may be an example of aspects of the transceiver825described with reference toFIG. 8.

The secured paging manager610may be an example of aspects of secured paging manager510described with reference toFIG. 5. The secured paging manager610may include paging component615, connection request component620and source identification component625. The secured paging manager610may be an example of aspects of the secured paging manager805described with reference toFIG. 8.

The paging component615may receive, at the device600(e.g., a UE115), a first paging message including a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source. In some cases, the security configuration includes a security key. In some cases, the security key includes a key access security management entity (Kasme). In some cases, the determining the first paging message is received from the trusted source includes: determining a UE sequence number for the first paging message.

The connection request component620may refrain from transmitting the connection request message based on a determination that the UE sequence number has been previously used, transmit a connection request message based on the determination that the first paging message is received from a trusted source, and refrain from transmitting the connection request message based on a determination that the first paging message is received from the untrusted source.

The source identification component625may determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier. In some cases, the determining the first paging message is received from the trusted source includes: determining that the first paging message includes the secured UE identifier.

The transmitter630may transmit signals received from other components of wireless device600. In some examples, the transmitter630may be collocated with a receiver in a transceiver. For example, the transmitter630may be an example of aspects of the transceiver825described with reference toFIG. 8. The transmitter630may utilize a single antenna, or it may utilize a plurality of antennas.

FIG. 7shows a block diagram of a secured paging manager700which may be an example of the corresponding component of wireless device500or wireless device600. That is, secured paging manager700may be an example of aspects of secured paging manager510or secured paging manager610described with reference toFIGS. 5 and 6, respectively. The secured paging manager700may also be an example of aspects of the secured paging manager805described with reference toFIG. 8.

The secured paging manager700may include UE identifier component705, paging component710, UE sequence number component715, connection request component720, UE identifier support component725and source identification component730. Each of these components may communicate, directly or indirectly, with one another (e.g., via one or more buses).

The UE identifier component705may calculate one or more expected secured UE identifiers based on the security configuration, and determine that the first paging message includes the secured UE identifier that matches at least one of the one or more expected secured UE identifiers. In some cases, the security configuration includes a sequence number. In some cases, the secured UE identifier includes at least a portion of the sequence number. In some cases, the sequence number includes at least a portion of a DL non-access stratum (NAS) count value.

The paging component710may receive a first paging message including a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source. The UE sequence number component715may determine that the UE sequence number has not been previously used.

The connection request component720may refrain from transmitting the connection request message based on a determination that the UE sequence number has been previously used, transmit a connection request message based on the determination that the first paging message is received from a trusted source, and refrain from transmitting the connection request message based on a determination that the first paging message is received from the untrusted source.

The UE identifier support component725may transmit a support indicator to the trusted source, the support indicator providing an indication that the UE115supports the use of the secured UE identifier in a paging procedure, and receive, from the trusted source, a confirmation that the trusted source supports the use of the secured UE identifier in the paging procedure. In some cases, the confirmation includes a format indicator associated with the secured UE identifier.

The source identification component730may determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier. In some cases, the determining the first paging message is received from the trusted source includes: determining that the first paging message includes the secured UE identifier.

FIG. 8shows a diagram of a system800including a device that supports secured paging in accordance with various aspects of the present disclosure. For example, system800may include UE115-d, which may be an example of a wireless device500, a wireless device600, or a UE115as described with reference toFIGS. 1 through 7.

UE115-dmay also include secured paging manager805, memory810, processor820, transceiver825, antenna830and SIM835. Each of these modules may communicate, directly or indirectly, with one another (e.g., via one or more buses). The secured paging manager805may be an example of a secured paging manager as described with reference toFIGS. 5 through 7.

The memory810may include random access memory (RAM) and read only memory (ROM). The memory810may store computer-readable, computer-executable software including instructions that, when executed, cause the processor to perform various functions described herein (e.g., secured paging, etc.). In some cases, the software815may not be directly executable by the processor but may cause a computer (e.g., when compiled and executed) to perform functions described herein. The processor820may include an intelligent hardware device, (e.g., a central processing unit (CPU), a microcontroller, an application specific integrated circuit (ASIC), etc.)

The transceiver825may communicate bi-directionally, via one or more antennas, wired, or wireless links, with one or more networks, as described above. For example, the transceiver825may communicate bi-directionally with a base station105or a UE115. The transceiver825may also include a modem to modulate the packets and provide the modulated packets to the antennas for transmission, and to demodulate packets received from the antennas. In some cases, the wireless device may include a single antenna830. However, in some cases the device may have more than one antenna830, which may be capable of concurrently transmitting or receiving multiple wireless transmissions.

The SIM835may be an integrated circuit (IC) that securely stores the international mobile subscriber identity (IMSI) and the related key used to identify and authenticate UE115-das described above. SIM835may also contain a unique serial number (e.g., an IC card identification (ID) (ICCID)), security authentication and ciphering information, temporary information related to the local network, a list of the services, a personal ID number (PIN), and a personal unblocking code (PUK) for PIN unlocking. In some cases, SIM835may be a circuit embedded in a removable plastic card.

FIG. 9shows a block diagram of a wireless device900that supports secured paging in accordance with various aspects of the present disclosure. Wireless device900may be an example of aspects of an core network130(also referred to as MME130) described with reference toFIGS. 1 through 4. Wireless device900may include receiver905, network secured paging manager910and transmitter915. Wireless device900may also include a processor. Each of these components may be in communication with each other.

The receiver905may receive information such as packets, user data, or control information associated with various information channels (e.g., control channels, data channels, and information related to secured paging, etc.). Information may be passed on to other components of the device. The receiver905may be an example of aspects of the transceiver1225described with reference toFIG. 12.

The network secured paging manager910may determine a secured UE identifier calculated based on a security configuration negotiated between the UE and a wireless device900(e.g., a trusted source), transmit a first paging message to the UE, the first paging message including the secured UE identifier, and establish a connection with the UE. The network secured paging manager910may also be an example of aspects of the network secured paging manager1205described with reference toFIG. 12.

The transmitter915may transmit signals received from other components of wireless device900. In some examples, the transmitter915may be collocated with a receiver in a transceiver. For example, the transmitter915may be an example of aspects of the transceiver1225described with reference toFIG. 12. The transmitter915may include a single antenna, or it may include a plurality of antennas.

FIG. 10shows a block diagram of a wireless device1000that supports secured paging in accordance with various aspects of the present disclosure. Wireless device1000may be an example of aspects of a wireless device900or an MME130described with reference toFIGS. 1 through 4 and 9. Wireless device1000may include receiver1005, network secured paging manager1010and transmitter1030. Wireless device1000may also include a processor. Each of these components may be in communication with each other.

The receiver1005may receive information which may be passed on to other components of the device. The receiver1005may also perform the functions described with reference to the receiver905ofFIG. 9. The receiver1005may be an example of aspects of the transceiver1225described with reference toFIG. 12.

The network secured paging manager1010may be an example of aspects of network secured paging manager910described with reference toFIG. 9. The network secured paging manager1010may include UE identifier component1015, paging component1020and connection component1025. The network secured paging manager1010may be an example of aspects of the network secured paging manager1205described with reference toFIG. 12.

The UE identifier component1015may determine a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source. In some cases, the security configuration includes a security key. In some cases, the security key includes a key access security management entity (Kasme). In some cases, the security configuration includes a sequence number. In some cases, the secured UE identifier includes at least a portion of the sequence number. In some cases, the sequence number is based on a DL non-access stratum (NAS) count value.

The paging component1020may transmit a first paging message to the UE115, the first paging message including the secured UE identifier. The connection component1025may establish a connection with the UE.

The transmitter1030may transmit signals received from other components of wireless device1000. In some examples, the transmitter1030may be collocated with a receiver in a transceiver. For example, the transmitter1030may be an example of aspects of the transceiver1225described with reference toFIG. 12. The transmitter1030may utilize a single antenna, or it may utilize a plurality of antennas.

FIG. 11shows a block diagram of a network secured paging manager1100which may be an example of the corresponding component of wireless device900or wireless device1000. That is, network secured paging manager1100may be an example of aspects of network secured paging manager910or network secured paging manager1010described with reference toFIGS. 9 and 10, respectively. The network secured paging manager1100may also be an example of aspects of the network secured paging manager1205described with reference toFIG. 12.

The network secured paging manager1100may include UE identifier component1105, UE identifier support component1110, support confirmation component1115, connection component1120and paging component1125. Each of these components may communicate, directly or indirectly, with one another (e.g., via one or more buses).

The UE identifier component1105may determine a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source. The UE identifier support component1110may receive a support indicator from the UE, the support indicator providing an indication that the UE supports the use of the secured UE identifier in a paging procedure.

The support confirmation component1115may transmit, to the UE115, a confirmation that the trusted source supports the use of the secured UE identifier in the paging procedure. In some cases, the confirmation includes a format indicator associated with the secured UE identifier.

The connection component1120may establish a connection with the UE115. The paging component1125may transmit a first paging message to the UE115, the first paging message including the secured UE identifier.

FIG. 12shows a diagram of a system1200including a device that supports secured paging in accordance with various aspects of the present disclosure. For example, system1200may include MME130-d, which may be an example of a wireless device900, a wireless device1000, or a MME130as described with reference toFIGS. 1 through 4 and 9 through 11.

MME130-dmay also include network secured paging manager1205, memory1210, processor1220, transceiver1225and key generator1230. Each of these components may communicate, directly or indirectly, with one another (e.g., via one or more buses). The network secured paging manager1205may be an example of a network secured paging manager as described with reference toFIGS. 9 through 11.

The memory1210may include RAM and ROM. The memory1210may store computer-readable, computer-executable software including instructions that, when executed, cause the processor to perform various functions described herein (e.g., secured paging, etc.). In some cases, the software1215may not be directly executable by the processor but may cause a computer (e.g., when compiled and executed) to perform functions described herein.

The processor1220may include an intelligent hardware device, (e.g., a CPU, a microcontroller, an ASIC, etc.) The transceiver1225may communicate bi-directionally, via one or more antennas, wired, or wireless links, with one or more networks, as described above. For example, the transceiver1225may communicate bi-directionally with a base station105, another MME130, and/or a UE115. The transceiver1225may also include a modem to modulate the packets and provide the modulated packets to the antennas for transmission, and to demodulate packets received from the antennas.

The key generator1230may generate one or more security keys (e.g., the Kasme) as described herein.

FIG. 13shows a flowchart illustrating a method1300for secured paging in accordance with various aspects of the present disclosure. The operations of method1300may be implemented by a device such as a UE115or its components as described with reference toFIGS. 1 through 4 and 8and/or a wireless device described with reference toFIGS. 5 through 7. For example, the operations of method1300may be performed by the secured paging manager as described herein. In some examples, the UE115may execute a set of codes to control the functional elements of the device to perform the functions described below. Additionally or alternatively, the UE115may perform aspects the functions described below using special-purpose hardware.

At block1305, the UE115may receive a first paging message including a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1305may be performed by the paging component as described with reference toFIGS. 6 and 7.

At block1310, the UE115may determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1310may be performed by the source identification component as described with reference toFIGS. 6 and 7.

At block1315, the UE115may transmit a connection request message based on the determination that the first paging message is received from a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1315may be performed by the connection request component as described with reference toFIGS. 6 and 7.

FIG. 14shows a flowchart illustrating a method1400for secured paging in accordance with various aspects of the present disclosure. The operations of method1400may be implemented by a device such as a UE115or its components as described with reference toFIGS. 1 through 4 and 8and/or a wireless device described with reference toFIGS. 5 through 7. For example, the operations of method1400may be performed by the secured paging manager as described herein. In some examples, the UE115may execute a set of codes to control the functional elements of the device to perform the functions described below. Additionally or alternatively, the UE115may perform aspects the functions described below using special-purpose hardware.

At block1405, the UE115may receive a first paging message including a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1405may be performed by the paging component as described with reference toFIGS. 6 and 7.

At block1410, the UE115may determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1410may be performed by the source identification component as described with reference toFIGS. 6 and 7.

At block1415, the UE115may refrain from transmitting the connection request message based on a determination that the first paging message is received from the untrusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1415may be performed by the connection request component as described with reference toFIGS. 6 and 7.

At block1420, the UE115may transmit a connection request message based on the determination that the first paging message is received from a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1420may be performed by the connection request component as described with reference toFIGS. 6 and 7.

FIG. 15shows a flowchart illustrating a method1500for secured paging in accordance with various aspects of the present disclosure. The operations of method1500may be implemented by a device such as a UE115or its components as described with reference toFIGS. 1 through 4 and 8and/or a wireless device described with reference toFIGS. 5 through 7. For example, the operations of method1500may be performed by the secured paging manager as described herein. In some examples, the UE115may execute a set of codes to control the functional elements of the device to perform the functions described below. Additionally or alternatively, the UE115may perform aspects the functions described below using special-purpose hardware.

At block1505, the UE115may receive a first paging message including a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1505may be performed by the paging component as described with reference toFIGS. 6 and 7.

At block1510, the UE115may calculate one or more expected secured UE identifiers based on the security configuration as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1510may be performed by the UE identifier component as described with reference toFIGS. 6 and 7.

At block1515, the UE115may determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier as described above with reference toFIGS. 2 through 4. In some cases, the determining the first paging message is received from the trusted source includes: determining that the first paging message includes the secured UE identifier. In certain examples, the operations of block1515may be performed by the source identification component as described with reference toFIGS. 6 and 7.

At block1520, the UE115may transmit a connection request message based on the determination that the first paging message is received from a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1520may be performed by the connection request component as described with reference toFIGS. 6 and 7.

At block1525, the UE115may determine that the first paging message includes the secured UE identifier that matches at least one of the one or more expected secured UE identifiers as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1525may be performed by the UE identifier component as described with reference toFIGS. 6 and 7.

FIG. 16shows a flowchart illustrating a method1600for secured paging in accordance with various aspects of the present disclosure. The operations of method1600may be implemented by a device such as a UE115or its components as described with reference toFIGS. 1 through 4 and 8and/or a wireless device described with reference toFIGS. 5 through 7. For example, the operations of method1600may be performed by the secured paging manager as described herein. In some examples, the UE115may execute a set of codes to control the functional elements of the device to perform the functions described below. Additionally or alternatively, the UE115may perform aspects the functions described below using special-purpose hardware.

At block1605, the UE115may transmit a support indicator to the trusted source, the support indicator providing an indication that the UE supports the use of the secured UE identifier in a paging procedure as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1605may be performed by the UE identifier support component as described with reference toFIGS. 6 and 7.

At block1610, the UE115may receive, from the trusted source, a confirmation that the trusted source supports the use of the secured UE identifier in the paging procedure as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1610may be performed by the UE identifier support component as described with reference toFIGS. 6 and 7.

At block1615, the UE115may receive a first paging message including a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1615may be performed by the paging component as described with reference toFIGS. 6 and 7.

At block1620, the UE115may determine whether the first paging message is received from the trusted source or an untrusted source based on the secured UE identifier as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1620may be performed by the source identification component as described with reference toFIGS. 6 and 7.

At block1625, the UE115may transmit a connection request message based on the determination that the first paging message is received from a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1625may be performed by the connection request component as described with reference toFIGS. 6 and 7.

FIG. 17shows a flowchart illustrating a method1700for secured paging in accordance with various aspects of the present disclosure. The operations of method1700may be implemented by a device such as an MME130or its components as described with reference toFIGS. 1 through 4 and 12and/or by a wireless device described with reference toFIGS. 9 through 11. For example, the operations of method1700may be performed by the network secured paging manager as described herein. In some examples, the MME130may execute a set of codes to control the functional elements of the device to perform the functions described below. Additionally or alternatively, the MME130may perform aspects the functions described below using special-purpose hardware.

At block1705, the MME130may determine a secured UE identifier calculated based on a security configuration negotiated between the UE115and a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1705may be performed by the UE identifier component as described with reference toFIGS. 10 and 11.

At block1710, the MME130may transmit a first paging message to the UE115, the first paging message including the secured UE identifier as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1710may be performed by the paging component as described with reference toFIGS. 10 and 11.

At block1715, the MME130may establish a connection with the UE as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1715may be performed by the connection component as described with reference toFIGS. 10 and 11.

FIG. 18shows a flowchart illustrating a method1800for secured paging in accordance with various aspects of the present disclosure. The operations of method1800may be implemented by a device such as an MME130or its components as described with reference toFIGS. 1 through 4 and 12and/or by a wireless device described with reference toFIGS. 9 through 11. For example, the operations of method1800may be performed by the network secured paging manager as described herein. In some examples, the MME130may execute a set of codes to control the functional elements of the device to perform the functions described below. Additionally or alternatively, the MME130may perform aspects the functions described below using special-purpose hardware.

At block1805, the MME130may receive a support indicator from the UE115, the support indicator providing an indication that the UE115supports the use of the secured UE identifier in a paging procedure as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1805may be performed by the UE identifier support component as described with reference toFIGS. 10 and 11.

At block1810, the MME130may transmit, to the UE115, a confirmation that the trusted source supports the use of the secured UE identifier in the paging procedure as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1810may be performed by the support confirmation component as described with reference toFIGS. 10 and 11.

At block1815, the MME130may determine a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1815may be performed by the UE identifier component as described with reference toFIGS. 10 and 11.

At block1820, the MME130may transmit a first paging message to the UE115, the first paging message including the secured UE identifier as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1820may be performed by the paging component as described with reference toFIGS. 10 and 11.

At block1825, the MME130may establish a connection with the UE115as described above with reference toFIGS. 2 through 4. In certain examples, the operations of block1825may be performed by the connection component as described with reference toFIGS. 10 and 11.

It should be noted that these methods describe possible implementation, and that the operations and the steps may be rearranged or otherwise modified such that other implementations are possible. In some examples, aspects from two or more of the methods may be combined. For example, aspects of each of the methods may include steps or aspects of the other methods, or other steps or techniques described herein. Thus, aspects of the disclosure may provide for secured paging.

Base stations may include or may be referred to by those skilled in the art as a base transceiver station, a radio base station, an access point (AP), a radio transceiver, a NodeB, eNodeB (eNB), Home NodeB, a Home eNodeB, or some other suitable terminology. The geographic coverage area for a base station may be divided into sectors making up only a portion of the coverage area. The wireless communications system or systems described herein may include base stations of different types (e.g., macro or small cell base stations). The UEs described herein may be able to communicate with various types of base stations and network equipment including macro eNBs, small cell eNBs, relay base stations, and the like. There may be overlapping geographic coverage areas for different technologies. In some cases, different coverage areas may be associated with different communication technologies. In some cases, the coverage area for one communication technology may overlap with the coverage area associated with another technology. Different technologies may be associated with the same base station, or with different base stations.

The DL transmissions described herein may also be called forward link transmissions while the UL transmissions may also be called reverse link transmissions. Each communication link described herein including, for example, wireless communications system100ofFIG. 1may include one or more carriers, where each carrier may be a signal made up of multiple sub-carriers (e.g., waveform signals of different frequencies). Each modulated signal may be sent on a different sub-carrier and may carry control information (e.g., reference signals, control channels, etc.), overhead information, user data, etc. The communication links described herein (e.g., communication links125ofFIG. 1) may transmit bidirectional communications using frequency division duplex (FDD) (e.g., using paired spectrum resources) or time division duplex (TDD) operation (e.g., using unpaired spectrum resources). Frame structures may be defined for FDD (e.g., frame structure type 1) and TDD (e.g., frame structure type 2).

Thus, aspects of the disclosure may provide for secured paging. It should be noted that these methods describe possible implementations, and that the operations and the steps may be rearranged or otherwise modified such that other implementations are possible. In some examples, aspects from two or more of the methods may be combined.

The various illustrative blocks and modules described in connection with the disclosure herein may be implemented or performed with a general-purpose processor, a digital signal processor (DSP), an ASIC, an field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. A general-purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices (e.g., a combination of a DSP and a microprocessor, multiple microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration). Thus, the functions described herein may be performed by one or more other processing units (or cores), on at least one IC. In various examples, different types of ICs may be used (e.g., Structured/Platform ASICs, an FPGA, or another semi-custom IC), which may be programmed in any manner known in the art. The functions of each unit may also be implemented, in whole or in part, with instructions embodied in a memory, formatted to be executed by one or more general or application-specific processors.