CA2409863C - Method for setting up a connection between a terminal and a serving mobile radio network, mobile radio network and terminal therefor - Google Patents
Method for setting up a connection between a terminal and a serving mobile radio network, mobile radio network and terminal therefor Download PDFInfo
- Publication number
- CA2409863C CA2409863C CA2409863A CA2409863A CA2409863C CA 2409863 C CA2409863 C CA 2409863C CA 2409863 A CA2409863 A CA 2409863A CA 2409863 A CA2409863 A CA 2409863A CA 2409863 C CA2409863 C CA 2409863C
- Authority
- CA
- Canada
- Prior art keywords
- terminal
- mobile radio
- radio network
- encryption
- connection
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/03—Protecting confidentiality, e.g. by encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/12—Detection or prevention of fraud
- H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
- H04W12/122—Counter-measures against attacks; Protection against rogue devices
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/02—Terminal devices
Abstract
According to the inventive method, a message is transmitted from an operating mobile radio network (NW2) to a terminal (MS1a) that identifies coding techniques (UEA-NW) supported by the operating mobile radio network in order to establish a connection between the terminal (MS l a) that supports a number (UEA-MS) of coding techniques and the operating mobile radio network (NW2). The terminal selects, if available, a coding technique (UEA) that is supported by the terminal and the operating mobile radio network (NW2), and the connection is operated using the coding technique selected by the terminal. If no coding technique is available that is supported by the terminal and the operating mobile radio network, the connection is operated uncoded only upon prior authorization.
Description
Description Method for setting up a connection between a terminal and a serving mobile radio network, mobile radio network and terminal therefor The invention relates to a method for setting up a connection between a terminal and a serving mobile radio network, particularly a packet-type mobile radio network such as, for example, a GPRS or UMTS-PO
network, and a mobile radio network and a terminal which, in particular, are suitable for being used with such a method.
DE 198 12 215 Al discloses a method for preventing monitoring at the radio interface of a mobile radio network, a mobile station exhibiting an operating mode, which can be switched on by the subscriber, in which a connection is aborted if the received identification permits the connections with unencrypted information.
In unencrypted connections in mobile radio systems and, in particular, in packet-type mobile radio systems such as, for example, GPRS or UMTS-PO, there is a possibility of so-called "hijacking" attacks in which an intruder infiltrates his own file or data packets into someone else's connection and thus becomes a parasite on radio resources which are paid by regular users. Possibilities of such attacks exist, for example, when a regular user accesses data services such as, for example, those of an Internet provider or announcement services which frequently charge high tariffs. An attacker who successfully infiltrates such a connection can also access the services and possibly even continue the access when the regular user believes that the connection is already terminated, and the regular user is then charged with the due fees for this. If the usage fees are not calculated from the AMENDED SHEET
- la -duration of a connection but from the number of files transferred, the attacker can mix his file in with a file of the user. A possibility which is extremely dangerous for a user is that of attacks on on-line payment traffic. An attacker could succeed in triggering disadvantageous payment processes unnoticed AMENDED SHEET
network, and a mobile radio network and a terminal which, in particular, are suitable for being used with such a method.
DE 198 12 215 Al discloses a method for preventing monitoring at the radio interface of a mobile radio network, a mobile station exhibiting an operating mode, which can be switched on by the subscriber, in which a connection is aborted if the received identification permits the connections with unencrypted information.
In unencrypted connections in mobile radio systems and, in particular, in packet-type mobile radio systems such as, for example, GPRS or UMTS-PO, there is a possibility of so-called "hijacking" attacks in which an intruder infiltrates his own file or data packets into someone else's connection and thus becomes a parasite on radio resources which are paid by regular users. Possibilities of such attacks exist, for example, when a regular user accesses data services such as, for example, those of an Internet provider or announcement services which frequently charge high tariffs. An attacker who successfully infiltrates such a connection can also access the services and possibly even continue the access when the regular user believes that the connection is already terminated, and the regular user is then charged with the due fees for this. If the usage fees are not calculated from the AMENDED SHEET
- la -duration of a connection but from the number of files transferred, the attacker can mix his file in with a file of the user. A possibility which is extremely dangerous for a user is that of attacks on on-line payment traffic. An attacker could succeed in triggering disadvantageous payment processes unnoticed AMENDED SHEET
by a user. An effective countermeasure against such misuse is the use of encryption techniques.
As a protection, the familiar GSM network provides the terminal and the network with the possibility of setting up an encrypted connection and selecting an encryption technique supported by both ends during the setting up of the connection.
In the familiar GSM network, the terminal informs the base station of the encryption techniques supported by the terminal, and the base station selects from these encryption techniques one which is supported also by the base station itself for preparing an encrypted connection in an early phase of the setting up of the connection even before the authentication (authentication and key agreement between terminal and base station). The designation of this encryption technique is transmitted back to the terminal and the transmission begins by using the encryption mechanism thus specified.
However, this negotiation about an encryption technique is not secure if active attacks on the interface are taken into consideration; the network is not able to check whether the information about the encryption techniques supported by the terminal which is received by it has actually been sent by the terminal and the terminal is also not sure that the network has received the correct information.
This approach normally used in the GSM network is also applied in the UMTS system. In this system, techniques for integrity protection are additionally used which enable a receiver to recognize whether the data received by him actually come from an assumed transmitter or whether they have been corrupted by a third party.
As a protection, the familiar GSM network provides the terminal and the network with the possibility of setting up an encrypted connection and selecting an encryption technique supported by both ends during the setting up of the connection.
In the familiar GSM network, the terminal informs the base station of the encryption techniques supported by the terminal, and the base station selects from these encryption techniques one which is supported also by the base station itself for preparing an encrypted connection in an early phase of the setting up of the connection even before the authentication (authentication and key agreement between terminal and base station). The designation of this encryption technique is transmitted back to the terminal and the transmission begins by using the encryption mechanism thus specified.
However, this negotiation about an encryption technique is not secure if active attacks on the interface are taken into consideration; the network is not able to check whether the information about the encryption techniques supported by the terminal which is received by it has actually been sent by the terminal and the terminal is also not sure that the network has received the correct information.
This approach normally used in the GSM network is also applied in the UMTS system. In this system, techniques for integrity protection are additionally used which enable a receiver to recognize whether the data received by him actually come from an assumed transmitter or whether they have been corrupted by a third party.
When a connection is set up in the UMTS system, both the encryption and the integrity protection techniques supported by the terminal are statically stored in it and are transmitted to the serving mobile radio network in an early phase of the connection setup. The serving mobile radio network selects an encryption technique and an integrity protection technique which is also supported by itself, starts the integrity protection and sends designations of the selected techniques to the terminal. Together with the selected encryption and integrity protection technique, the network reports the techniques received by it back to the terminal. When it receives this information, the terminal checks the completeness of the received message and compares the encryption and integrity protection techniques transmitted to the network with those reported back from there in order to detect by this means a possible corruption of the messages exchanged. When the terminal has acknowledged the reception, the encryption can begin. If the network does not select an encryption technique but the "unencrypted" mode of operation, the terminal can reject the connection.
Such a procedure is unproblematic as long as the terminal is located within the area of its home network because it can be ensured here that the terminal and the network have at least one common encryption mode and cases where a connection intended by the user of the device cannot be encrypted do not occur. It is, therefore, obvious and has already been proposed as a standard to use terminals which reject unencrypted connections right away. If all users are equipped with such terminals, it will scarcely be possible for an intruder to take control of an existing connection and to infiltrate his own data into it in such a manner that they can trigger intended reactions in the network.
Such a procedure is unproblematic as long as the terminal is located within the area of its home network because it can be ensured here that the terminal and the network have at least one common encryption mode and cases where a connection intended by the user of the device cannot be encrypted do not occur. It is, therefore, obvious and has already been proposed as a standard to use terminals which reject unencrypted connections right away. If all users are equipped with such terminals, it will scarcely be possible for an intruder to take control of an existing connection and to infiltrate his own data into it in such a manner that they can trigger intended reactions in the network.
A critical disadvantage of this approach is, however, that it raises problems in its application when the serving mobile radio network is not also the home network of the terminal. This is because the use of encryption techniques in mobile radio is not permissible in all countries and, moreover, these techniques are partly subject to export restrictions so that they cannot be used in some countries where they would possibly be permissible in accordance with the national law because the export to these countries is subject to sanctions.
Thus, terminals which only allow encrypted connections could not be used in a large number of countries and would, therefore, be unattractive for the users.
Although it would be conceivable that a terminal offers to the serving network not only the supported encryption techniques but also the option to operate a connection unencrypted during the connection setup.
Although this would possibly extend the geographic area where the devices can be used but it would be at the cost of security. This is because in this case the desired protection would no longer be effective since an attacker would have the possibility of pretending to the terminal that he is the base station of the serving network and instruct the terminal to leave the connection unencrypted.
It is the object of the invention to specify a method for setting up connections and a terminal and mobile radio network suitable for this purpose which, on the one hand, provide a high degree of security against "hijacking" attacks but, on the other hand, can also be used in countries in which encryption cannot be used and which, at the same time, are not complicated for the users to use.
Thus, terminals which only allow encrypted connections could not be used in a large number of countries and would, therefore, be unattractive for the users.
Although it would be conceivable that a terminal offers to the serving network not only the supported encryption techniques but also the option to operate a connection unencrypted during the connection setup.
Although this would possibly extend the geographic area where the devices can be used but it would be at the cost of security. This is because in this case the desired protection would no longer be effective since an attacker would have the possibility of pretending to the terminal that he is the base station of the serving network and instruct the terminal to leave the connection unencrypted.
It is the object of the invention to specify a method for setting up connections and a terminal and mobile radio network suitable for this purpose which, on the one hand, provide a high degree of security against "hijacking" attacks but, on the other hand, can also be used in countries in which encryption cannot be used and which, at the same time, are not complicated for the users to use.
According to one aspect of the present invention, there is provided a method for setting up a connection between a terminal which supports a set of encryption techniques, and a serving mobile radio network, comprising: a) transmitting of a message from the serving mobile radio network to the terminal, which designates one or more encryption techniques supported by the serving mobile radio network; b) if one or more encryption techniques are supported by the terminal and by the serving mobile radio network: i) transmitting an encryption administration information item from a home network of the terminal to the terminal; ii) if the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, providing the user of the terminal a choice of whether to set up the connection unencrypted or abort the connection attempt; and iii) if the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary: the terminal selecting an encryption technique supported by the serving mobile radio network; and operating the connection by using the encryption technique selected by the terminal; and c) if no encryption technique is supported by the terminal and by the serving mobile radio network, operating the connection unencrypted after authorization.
According to another aspect of the present invention, there is provided a terminal which supports a set of encryption techniques technique, comprising a control unit for selecting an encryption techniques which is supported by the terminal and by a serving mobile radio network, wherein the terminal including: a hardware communications interface; and a display device; wherein, the hardware communications interface is configured to receive a message is transmitted from the serving mobile radio network to the terminal, which designates the encryption techniques supported by the serving mobile radio network, if any; wherein the hardware communications interface is configured to receive an encryption administration information item transmitted from a home network of the terminal to the terminal, and determine whether the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary; wherein in response to determining that the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, the terminal is - 5a -configured to display to a user via the display device a choice of whether to set up the connection unencrypted or abort the connection attempt; wherein in response to determining that the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary, the terminal is configured to select an encryption technique which is supported by the terminal and by the serving mobile radio network, if any, such that the connection is operated by using the encryption technique selected by the terminal; and wherein, if no encryption technique is supported by the terminal and by the serving mobile radio network is provided, the terminal is configured to operate the connection unencrypted after authorization.
According to still another aspect of the present invention, there is provided a mobile radio network configured to follow an instruction by a terminal which designates an encryption technique to be used for a connection between the terminal and the mobile radio network, the mobile radio network including:
a home network of the terminal; and a serving mobile radio network communicatively coupled to the home network; wherein, a message is transmitted from the serving mobile radio network to the terminal, which designates the encryption techniques supported by the serving mobile radio network, if any;
wherein an encryption administration information item is transmitted from the home network of the terminal to the terminal; wherein the terminal is configured to determine whether the encryption administration item indicates that unencrypted connections to the serving mobile radio network are necessary; wherein in response to determining that the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, a user of the terminal is provided a choice of whether to set up the connection unencrypted or abort the connection attempt; and wherein in response to determining that the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary: an encryption technique supported by the serving mobile radio network is selected by the terminal; and the connection is operated by using the encryption technique selected by the terminal; and wherein, if no encryption technique is supported by the terminal and by the serving mobile radio network, the connection is operated unencrypted after authorization.
- 5b -By shifting the responsibility for selecting the encryption method to be used for a connection to the terminal in accordance with the invention, an attacker can no longer influence this selection and, in particular, he cannot produce an unencrypted connection if this has not been expressly authorized.
The authorization can be granted by the user of the terminal, for example in advance by operating the terminal in an operating mode in which it also receives unencrypted calls or in the individual case by operating the terminal in an operating mode in which, every time a connection to be set up cannot be encrypted, the terminal requests the authorization for setting up this connection from the user. The authorization can also be granted by the home network of the terminal as will still be explained in greater detail later.
If the serving mobile radio network provides an integrity protection, for example in the case of an UMTS network, it is desirable, in order to protect against attacks, if the integrity protection is activated before the message about the encryption techniques supported by the serving mobile radio network is transmitted to the terminal. The terminal can thus detect whether the message has been corrupted- or comes from an unauthorized source and ignore it, if necessary.
In order to be able to set up an integrity protection, it is desirable if the terminal reports integrity protection techniques supported by it to the serving mobile radio network and the serving mobile radio network selects one among the integrity protection techniques supported by itself and the terminal and transmits a message about the selected integrity protection technique to the terminal. This message can be suitably a part of the message to the terminal which contains the encryption techniques supported by the serving mobile radio network.
In a preferred embodiment of the method, an encryption administration information item which informs the terminal whether unencrypted connections with the serving mobile radio network have been authorized by the home network is transmitted by the home network to the terminal for setting up a connection. As explained above, this authorization may be necessary, e.g. due to the situation of the national law at the location of the serving mobile radio network or export restrictions.
If the serving mobile radio network permits an encrypted connection, encryption should be used; in principle, however, it is not impossible that a connection has to be established unencrypted even if the serving mobile radio network supports encryption, for reasons which are not within the scope of the present invention and have not been mentioned in the description following.
In this embodiment of the method, the readiness of a terminal to accept unencrypted connections is essentially subject to the control of the home network.
This makes it possible to ensure the highest degree of transmission security; negligence by the user cannot lead to connections remaining unencrypted at locations where there is no technical or legal necessity for this.
Transmitting the encryption administration information item from the home network of the terminal ensures that the content of this information is relevant.
The encryption administration information item is transmitted in a simple manner via the serving network.
During the transmission via the serving network it must ensured that a corruption of the encryption administration information item by the serving network or an encryption administration information item from an attacker which has been corrupted by an attacker can be recognized. For this purpose, it is possible to provide a check of its truth content at the mobile terminal. This check can be performed implicitly by sending the encryption administration information item with its own encryption from the home network or by protecting the information item with an integrity mechanism. If this encryption administration information item is not comprehensible to the serving mobile radio network (encryption) or is protected by a message authentication code (integrity mechanism), the serving mobile radio network is not able to manipulate it but must transmit it transparently and a manipulated base station used for a hijacking attack is also not able to generate an encryption administration information item which is accepted or accepted as genuine by the terminal.
Whenever the encryption administration information item specifies the necessity or permissibility of an unencrypted connection, the user of the terminal is advantageously given the choice of whether the connection is to be set up unencrypted or the connection attempt is to be aborted. This ensures that, in cases of doubt, the user is always aware of the risk of unauthorized access to his connection and possibility of monitoring and can thus decide from individual case to individual case whether this risk is tolerable or whether a more secure type of transmission should be selected.
To keep the terminal as simple to operate as possible, it can also be provided that, if it is necessary, i.e.
if the encryption administration information item supplied by the home network specifies that the serving network does not support encryption, an unencrypted connection is established without further check back.
In this case, it is appropriate to inform the user that the connection is unencrypted by means of a display on the terminal of the user.
The terminal can be advantageously switched between at least two of three operating modes which correspond to the abovementioned alternative procedures for the case of a lacking encryption capability.
Less signaling complexity during the setting-up of a connection can be achieved under these circumstances by the terminal reporting integrity protection techniques supported by it to the serving mobile radio network, and the serving mobile radio network selecting one among the integrity protection techniques supported by itself and the terminal and informing the terminal of this, before the encryption administration information item is transmitted or the encryption technique is selected.
A terminal suitable for carrying out the method comprises, among other things, a control unit which is capable of selecting one among the encryption techniques supported by the terminal and by the serving mobile radio network, and a serving mobile radio network must be capable of following an instruction, as sent by the terminal, to use a selected encryption technique.
In the text which follows, exemplary embodiments are explained in greater detail with reference to the drawing, in which:
Figure 1 diagrammatically shows the structure of a mobile radio network in which a terminal is located, the home network of which differs from the mobile radio network, Figure 2 shows the sequence of a connection set-up between the terminal and the mobile radio network from Figure 1; and Figure 3 shows a modification of the signaling sequence shown in Figure 2.
Figure 1 illustrates the structure of a mobile radio communications system in which the present invention can be applied. The figure shows two mobile radio networks NW1 and NW2, the designations of the components of the first network in each case containing the number 1 and those of the second network containing the number 2.
Each network NW1, NW2 comprises a full-coverage arrangement of geographic cells Cia, Clb, ..., C2a, C2b, ..., which in each case correspond to the range of the radio signal from base stations BSla, BSlb, ..., BS2a, BS2b, ... which communicate with mobile terminals staying in the respective cells. These networks NW1, NW2 can be, e.g. UMTS mobile radio networks.
In each case, a number of base stations BSla, BSlb, ...
and BS2a, BS2b, ... are allocated to one base station controller BSC1, BSC2 and the base station controllers BSC1, BSC2 are in each case connected to a mobile switching center MSC1, MSC2 via intermediate stages, not shown. The mobile switching centers switch connections between mobile terminals when both are located in cells which are in each case allocated to the same mobile switching center.
Each mobile terminal is allocated to a so-called home network which is normally the mobile radio network of an operator with whom the user of the terminal has concluded a usage contract. So-called roaming agreements between the network operators enable the users to operate their terminals also in other mobile radio networks and the home network. A mobile radio network via which a mobile terminal is handling its communication at a given time is called the serving network; it can differ from the home network.
To explain the present invention, in particular, a mobile terminal MSla is considered which, as can be seen from its number 1, has the first mobile radio network NW1 as home network but is staying in cell C2a of the second mobile radio network NW2. Connections of this terminal MSla to other terminals within the area of the serving second network NW2, as for example to the terminal MS2a, are handled with the second network NW2 being involved alone, connections to terminals within the area of the home network NW1 such as, for example, to the terminal MSlb or to terminals of a third mobile radio network or of a landline network such as, for example, the terminal UE1, are switched via a landline network area called CN for core network in this case.
Figure 2 shows the sequence of the signaling between terminal MSla and a base station of the serving network NW2 and the home network NW1 when a connection to the terminal MSla is to be set up. The reason for this can be that the user of the terminal MSla wishes to establish a connection or that a third party is attempting to reach him. As an example, it is assumed that the networks NW1, NW2 are UMTS networks.
- jl -The terminal MS1a begins to set up the connection to the serving mobile radio network NW2 with a message about the set UIA-MS of the integrity protection techniques supported by it (stage a).
The serving mobile radio network NW2 interrogates the home network NW1 of the terminal MS1a for an encryption administration information item which contains information, authorized by the operator of the home network NW1, about whether and possibly which encryption techniques UEA are available in the area of the serving mobile radio network NW2 (stage a) . In the case of UMTS, this encryption administration information item is a part of the so-called quintet, and, in particular it is a part of the so-called authentication token (AUTN).
This is followed by a stage b of authentication.
In an authentication, one party in each case sends to the other one an authentication request which contains a number from which the other party calculates a response by means of a predetermined algorithm and a key known only to him. The requesting party compares the received response with an expected value: if the two match, he knows that the other party is really the person he pretends to be.
In UMTS, the network also sends an authentication signal (AUTN) which contains a sequence number SQN, a management field AMF and a message authentication code MAC. This signal allows the network to be authenticated by the terminal. The management field AMF contains the encryption administration information item supplied by the home network NW1. This information item is integrity protected by the message authentication code so that the serving network is not able to change this information item and, therefore, must transmit it transparently (stage b).
- IZ -Since a wrong base station BS3 which does not belong to the mobile radio network NW2 and which could possibly be used for hijacking attacks on the connection of the terminal MS1a does not obtain such an encryption administration information item AMF from the home network NW1, it is not easily able to present a forged authentication information item AUTN to the terminal MSla in such a manner that it will be accepted by the terminal MS1a and the latter, therefore, initiates an unencrypted connection.
Instead of an integrity protection, an encryption of the encryption administration information item AMF
which does not need to be known to the serving mobile radio network NW2 could also be used by the home network NW1.
However, such a protection is not mandatory. It is also conceivable that the protection against attacks is left in the hands of the user to a certain extent in that, whenever an encryption administration information item AMF received by the terminal MS1a states that an unencrypted connection is necessary, a display on the terminal MSla draws the user's attention to this. If such a display appears when the terminal MSla is located in a country in which the possibility for encryption exists, it can be concluded from this that the terminal MSla is subject to an attack and that it is advisable to abort the connection set-up.
During the authentication procedure, the serving mobile radio network NW2 selects one (UIA) from the set UIA-MS
and the set UIA-NW of the integrity protection techniques supported by it and activates it (stage c).
A message about the selected integrity protection technique UIA is then transmitted to the terminal MSla under integrity protection already in existence (stage d). This message suitably also contains the designations of the integrity protection techniques UIA-MS previously reported to the serving mobile radio network NW2 by the terminal MSla so that the terminal MS1a can find out whether these designations have been correctly received by the serving mobile radio network NW2, and the designations of the encryption techniques UEA-NW supported by the serving mobile radio network NW2.
The terminal MSla then selects an encryption technique UEA which is supported both by it and by the serving mobile radio network NW2 (stage e) and reports it back to the network NW2 (stage f) . From this time on, the encrypted transmission can begin (stage g).
If the encryption administration information item AUTN
is genuine and specifies that an unencrypted connection is permitted and the serving network NW2 does not provide any encryption techniques which are also supported by the terminal MS, there are various possibilities of continuing. The first and simplest one is to abort the connection set up under these conditions. Naturally, this very effectively protects the user against fraudulent attacks or against being monitored but, at the same time, it also means that the terminal cannot be used in a country where there is no possibility of encryption. For this reason, this possibility is only useful as a first one of at least two operating modes of the terminal and the second operating mode should allow an unencrypted connection to be set up.
Since the first operating mode offers the greatest possible measure of security to the user, however, it is appropriate that the terminal MS1a assumes this operating mode whenever the user has not expressly selected another one or that it automatically returns into this mode whenever it has been switched off or when it receives an encryption administration information item AUTN which specifies the possibility of an encryption, for instance because the terminal has returned from the region of a network without encryption capability into a network with encryption capability.
In the second operating mode, the setting up of an unencrypted connection is permitted. A first variant allows an unencrypted connection to be set up without intermediate interruption of the setting-up process. So that the user knows that he is using an unencrypted connection and is thus taking a certain security risk also in this operating mode, the terminal MSla is provided with a display which advises the user of the operating mode set. This display can be, for example, a flashing of the keypad display panel, or of parts thereof, usually provided in mobile terminals, a luminous element provided especially for this purpose or also a ringing signal which can be varied as a function of the operating mode set.
In a second variant of the second operating mode, it is provided that in every individual case, a connection with a serving network without encryption capability is set up only if this is expressly authorized by the user. This can be done, for example, in that in the second operating mode, a key of the terminal which is actuated by the user to receive a call or to establish a connection to an opposite party for his part in the first operating mode, only causes the display panel of the terminal to display a note that the user is about to establish an unsecure connection, and that the terminal requests a declaration of agreement by the user by again pressing the same key or, even more reliable, of another key, and only establishes the connection after such pressing of a key.
Using the method described above, the home network can ensure in a simple and effective manner that its users = - r5 -apply encryption reliably in all foreign networks accessible to them due to roaming agreements and offering the possibility of encryption and, at the same time, can also provide them with the freedom of using also the networks of those countries which do not permit encryption.
For the same reasons, described above, for which it is advantageous if it is the terminal and not the serving mobile radio network which decides about the encryption technique to be used, it is also appropriate, according to an embodiment of the method developed further, if the terminal decides about the type of integrity protection. The sequence of signaling in this method is shown in Figure 3. The first stages of the method up to and including the setting up of the integrity protection selected by the serving mobile radio network NW2 is the same as described above with reference to Figure 2.
The message transmitted to the terminal MS1a in stage d', which contains the encryption techniques UIA-NW
supported by the serving mobile radio network NW2, additionally also contains here designations of the integrity protection techniques supported by the serving mobile radio network NW2. After having received this message, the terminal MS1a also selects, in addition to the encryption technique UEA to be used, an integrity protection technique UTA' (stage e') which is supported by the network and the terminal and then sends an instruction to the serving mobile radio network NW2 to use both selections UEA, UTA' in the following procedure (stage f').
This method additionally also provides the terminal with control over the integrity protection technique used during the subsequent communication (stage g) and it is thus possible always to use among the available - ib -techniques the one which promises the greatest possible measure of security from the point of view of the user.
According to another aspect of the present invention, there is provided a terminal which supports a set of encryption techniques technique, comprising a control unit for selecting an encryption techniques which is supported by the terminal and by a serving mobile radio network, wherein the terminal including: a hardware communications interface; and a display device; wherein, the hardware communications interface is configured to receive a message is transmitted from the serving mobile radio network to the terminal, which designates the encryption techniques supported by the serving mobile radio network, if any; wherein the hardware communications interface is configured to receive an encryption administration information item transmitted from a home network of the terminal to the terminal, and determine whether the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary; wherein in response to determining that the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, the terminal is - 5a -configured to display to a user via the display device a choice of whether to set up the connection unencrypted or abort the connection attempt; wherein in response to determining that the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary, the terminal is configured to select an encryption technique which is supported by the terminal and by the serving mobile radio network, if any, such that the connection is operated by using the encryption technique selected by the terminal; and wherein, if no encryption technique is supported by the terminal and by the serving mobile radio network is provided, the terminal is configured to operate the connection unencrypted after authorization.
According to still another aspect of the present invention, there is provided a mobile radio network configured to follow an instruction by a terminal which designates an encryption technique to be used for a connection between the terminal and the mobile radio network, the mobile radio network including:
a home network of the terminal; and a serving mobile radio network communicatively coupled to the home network; wherein, a message is transmitted from the serving mobile radio network to the terminal, which designates the encryption techniques supported by the serving mobile radio network, if any;
wherein an encryption administration information item is transmitted from the home network of the terminal to the terminal; wherein the terminal is configured to determine whether the encryption administration item indicates that unencrypted connections to the serving mobile radio network are necessary; wherein in response to determining that the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, a user of the terminal is provided a choice of whether to set up the connection unencrypted or abort the connection attempt; and wherein in response to determining that the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary: an encryption technique supported by the serving mobile radio network is selected by the terminal; and the connection is operated by using the encryption technique selected by the terminal; and wherein, if no encryption technique is supported by the terminal and by the serving mobile radio network, the connection is operated unencrypted after authorization.
- 5b -By shifting the responsibility for selecting the encryption method to be used for a connection to the terminal in accordance with the invention, an attacker can no longer influence this selection and, in particular, he cannot produce an unencrypted connection if this has not been expressly authorized.
The authorization can be granted by the user of the terminal, for example in advance by operating the terminal in an operating mode in which it also receives unencrypted calls or in the individual case by operating the terminal in an operating mode in which, every time a connection to be set up cannot be encrypted, the terminal requests the authorization for setting up this connection from the user. The authorization can also be granted by the home network of the terminal as will still be explained in greater detail later.
If the serving mobile radio network provides an integrity protection, for example in the case of an UMTS network, it is desirable, in order to protect against attacks, if the integrity protection is activated before the message about the encryption techniques supported by the serving mobile radio network is transmitted to the terminal. The terminal can thus detect whether the message has been corrupted- or comes from an unauthorized source and ignore it, if necessary.
In order to be able to set up an integrity protection, it is desirable if the terminal reports integrity protection techniques supported by it to the serving mobile radio network and the serving mobile radio network selects one among the integrity protection techniques supported by itself and the terminal and transmits a message about the selected integrity protection technique to the terminal. This message can be suitably a part of the message to the terminal which contains the encryption techniques supported by the serving mobile radio network.
In a preferred embodiment of the method, an encryption administration information item which informs the terminal whether unencrypted connections with the serving mobile radio network have been authorized by the home network is transmitted by the home network to the terminal for setting up a connection. As explained above, this authorization may be necessary, e.g. due to the situation of the national law at the location of the serving mobile radio network or export restrictions.
If the serving mobile radio network permits an encrypted connection, encryption should be used; in principle, however, it is not impossible that a connection has to be established unencrypted even if the serving mobile radio network supports encryption, for reasons which are not within the scope of the present invention and have not been mentioned in the description following.
In this embodiment of the method, the readiness of a terminal to accept unencrypted connections is essentially subject to the control of the home network.
This makes it possible to ensure the highest degree of transmission security; negligence by the user cannot lead to connections remaining unencrypted at locations where there is no technical or legal necessity for this.
Transmitting the encryption administration information item from the home network of the terminal ensures that the content of this information is relevant.
The encryption administration information item is transmitted in a simple manner via the serving network.
During the transmission via the serving network it must ensured that a corruption of the encryption administration information item by the serving network or an encryption administration information item from an attacker which has been corrupted by an attacker can be recognized. For this purpose, it is possible to provide a check of its truth content at the mobile terminal. This check can be performed implicitly by sending the encryption administration information item with its own encryption from the home network or by protecting the information item with an integrity mechanism. If this encryption administration information item is not comprehensible to the serving mobile radio network (encryption) or is protected by a message authentication code (integrity mechanism), the serving mobile radio network is not able to manipulate it but must transmit it transparently and a manipulated base station used for a hijacking attack is also not able to generate an encryption administration information item which is accepted or accepted as genuine by the terminal.
Whenever the encryption administration information item specifies the necessity or permissibility of an unencrypted connection, the user of the terminal is advantageously given the choice of whether the connection is to be set up unencrypted or the connection attempt is to be aborted. This ensures that, in cases of doubt, the user is always aware of the risk of unauthorized access to his connection and possibility of monitoring and can thus decide from individual case to individual case whether this risk is tolerable or whether a more secure type of transmission should be selected.
To keep the terminal as simple to operate as possible, it can also be provided that, if it is necessary, i.e.
if the encryption administration information item supplied by the home network specifies that the serving network does not support encryption, an unencrypted connection is established without further check back.
In this case, it is appropriate to inform the user that the connection is unencrypted by means of a display on the terminal of the user.
The terminal can be advantageously switched between at least two of three operating modes which correspond to the abovementioned alternative procedures for the case of a lacking encryption capability.
Less signaling complexity during the setting-up of a connection can be achieved under these circumstances by the terminal reporting integrity protection techniques supported by it to the serving mobile radio network, and the serving mobile radio network selecting one among the integrity protection techniques supported by itself and the terminal and informing the terminal of this, before the encryption administration information item is transmitted or the encryption technique is selected.
A terminal suitable for carrying out the method comprises, among other things, a control unit which is capable of selecting one among the encryption techniques supported by the terminal and by the serving mobile radio network, and a serving mobile radio network must be capable of following an instruction, as sent by the terminal, to use a selected encryption technique.
In the text which follows, exemplary embodiments are explained in greater detail with reference to the drawing, in which:
Figure 1 diagrammatically shows the structure of a mobile radio network in which a terminal is located, the home network of which differs from the mobile radio network, Figure 2 shows the sequence of a connection set-up between the terminal and the mobile radio network from Figure 1; and Figure 3 shows a modification of the signaling sequence shown in Figure 2.
Figure 1 illustrates the structure of a mobile radio communications system in which the present invention can be applied. The figure shows two mobile radio networks NW1 and NW2, the designations of the components of the first network in each case containing the number 1 and those of the second network containing the number 2.
Each network NW1, NW2 comprises a full-coverage arrangement of geographic cells Cia, Clb, ..., C2a, C2b, ..., which in each case correspond to the range of the radio signal from base stations BSla, BSlb, ..., BS2a, BS2b, ... which communicate with mobile terminals staying in the respective cells. These networks NW1, NW2 can be, e.g. UMTS mobile radio networks.
In each case, a number of base stations BSla, BSlb, ...
and BS2a, BS2b, ... are allocated to one base station controller BSC1, BSC2 and the base station controllers BSC1, BSC2 are in each case connected to a mobile switching center MSC1, MSC2 via intermediate stages, not shown. The mobile switching centers switch connections between mobile terminals when both are located in cells which are in each case allocated to the same mobile switching center.
Each mobile terminal is allocated to a so-called home network which is normally the mobile radio network of an operator with whom the user of the terminal has concluded a usage contract. So-called roaming agreements between the network operators enable the users to operate their terminals also in other mobile radio networks and the home network. A mobile radio network via which a mobile terminal is handling its communication at a given time is called the serving network; it can differ from the home network.
To explain the present invention, in particular, a mobile terminal MSla is considered which, as can be seen from its number 1, has the first mobile radio network NW1 as home network but is staying in cell C2a of the second mobile radio network NW2. Connections of this terminal MSla to other terminals within the area of the serving second network NW2, as for example to the terminal MS2a, are handled with the second network NW2 being involved alone, connections to terminals within the area of the home network NW1 such as, for example, to the terminal MSlb or to terminals of a third mobile radio network or of a landline network such as, for example, the terminal UE1, are switched via a landline network area called CN for core network in this case.
Figure 2 shows the sequence of the signaling between terminal MSla and a base station of the serving network NW2 and the home network NW1 when a connection to the terminal MSla is to be set up. The reason for this can be that the user of the terminal MSla wishes to establish a connection or that a third party is attempting to reach him. As an example, it is assumed that the networks NW1, NW2 are UMTS networks.
- jl -The terminal MS1a begins to set up the connection to the serving mobile radio network NW2 with a message about the set UIA-MS of the integrity protection techniques supported by it (stage a).
The serving mobile radio network NW2 interrogates the home network NW1 of the terminal MS1a for an encryption administration information item which contains information, authorized by the operator of the home network NW1, about whether and possibly which encryption techniques UEA are available in the area of the serving mobile radio network NW2 (stage a) . In the case of UMTS, this encryption administration information item is a part of the so-called quintet, and, in particular it is a part of the so-called authentication token (AUTN).
This is followed by a stage b of authentication.
In an authentication, one party in each case sends to the other one an authentication request which contains a number from which the other party calculates a response by means of a predetermined algorithm and a key known only to him. The requesting party compares the received response with an expected value: if the two match, he knows that the other party is really the person he pretends to be.
In UMTS, the network also sends an authentication signal (AUTN) which contains a sequence number SQN, a management field AMF and a message authentication code MAC. This signal allows the network to be authenticated by the terminal. The management field AMF contains the encryption administration information item supplied by the home network NW1. This information item is integrity protected by the message authentication code so that the serving network is not able to change this information item and, therefore, must transmit it transparently (stage b).
- IZ -Since a wrong base station BS3 which does not belong to the mobile radio network NW2 and which could possibly be used for hijacking attacks on the connection of the terminal MS1a does not obtain such an encryption administration information item AMF from the home network NW1, it is not easily able to present a forged authentication information item AUTN to the terminal MSla in such a manner that it will be accepted by the terminal MS1a and the latter, therefore, initiates an unencrypted connection.
Instead of an integrity protection, an encryption of the encryption administration information item AMF
which does not need to be known to the serving mobile radio network NW2 could also be used by the home network NW1.
However, such a protection is not mandatory. It is also conceivable that the protection against attacks is left in the hands of the user to a certain extent in that, whenever an encryption administration information item AMF received by the terminal MS1a states that an unencrypted connection is necessary, a display on the terminal MSla draws the user's attention to this. If such a display appears when the terminal MSla is located in a country in which the possibility for encryption exists, it can be concluded from this that the terminal MSla is subject to an attack and that it is advisable to abort the connection set-up.
During the authentication procedure, the serving mobile radio network NW2 selects one (UIA) from the set UIA-MS
and the set UIA-NW of the integrity protection techniques supported by it and activates it (stage c).
A message about the selected integrity protection technique UIA is then transmitted to the terminal MSla under integrity protection already in existence (stage d). This message suitably also contains the designations of the integrity protection techniques UIA-MS previously reported to the serving mobile radio network NW2 by the terminal MSla so that the terminal MS1a can find out whether these designations have been correctly received by the serving mobile radio network NW2, and the designations of the encryption techniques UEA-NW supported by the serving mobile radio network NW2.
The terminal MSla then selects an encryption technique UEA which is supported both by it and by the serving mobile radio network NW2 (stage e) and reports it back to the network NW2 (stage f) . From this time on, the encrypted transmission can begin (stage g).
If the encryption administration information item AUTN
is genuine and specifies that an unencrypted connection is permitted and the serving network NW2 does not provide any encryption techniques which are also supported by the terminal MS, there are various possibilities of continuing. The first and simplest one is to abort the connection set up under these conditions. Naturally, this very effectively protects the user against fraudulent attacks or against being monitored but, at the same time, it also means that the terminal cannot be used in a country where there is no possibility of encryption. For this reason, this possibility is only useful as a first one of at least two operating modes of the terminal and the second operating mode should allow an unencrypted connection to be set up.
Since the first operating mode offers the greatest possible measure of security to the user, however, it is appropriate that the terminal MS1a assumes this operating mode whenever the user has not expressly selected another one or that it automatically returns into this mode whenever it has been switched off or when it receives an encryption administration information item AUTN which specifies the possibility of an encryption, for instance because the terminal has returned from the region of a network without encryption capability into a network with encryption capability.
In the second operating mode, the setting up of an unencrypted connection is permitted. A first variant allows an unencrypted connection to be set up without intermediate interruption of the setting-up process. So that the user knows that he is using an unencrypted connection and is thus taking a certain security risk also in this operating mode, the terminal MSla is provided with a display which advises the user of the operating mode set. This display can be, for example, a flashing of the keypad display panel, or of parts thereof, usually provided in mobile terminals, a luminous element provided especially for this purpose or also a ringing signal which can be varied as a function of the operating mode set.
In a second variant of the second operating mode, it is provided that in every individual case, a connection with a serving network without encryption capability is set up only if this is expressly authorized by the user. This can be done, for example, in that in the second operating mode, a key of the terminal which is actuated by the user to receive a call or to establish a connection to an opposite party for his part in the first operating mode, only causes the display panel of the terminal to display a note that the user is about to establish an unsecure connection, and that the terminal requests a declaration of agreement by the user by again pressing the same key or, even more reliable, of another key, and only establishes the connection after such pressing of a key.
Using the method described above, the home network can ensure in a simple and effective manner that its users = - r5 -apply encryption reliably in all foreign networks accessible to them due to roaming agreements and offering the possibility of encryption and, at the same time, can also provide them with the freedom of using also the networks of those countries which do not permit encryption.
For the same reasons, described above, for which it is advantageous if it is the terminal and not the serving mobile radio network which decides about the encryption technique to be used, it is also appropriate, according to an embodiment of the method developed further, if the terminal decides about the type of integrity protection. The sequence of signaling in this method is shown in Figure 3. The first stages of the method up to and including the setting up of the integrity protection selected by the serving mobile radio network NW2 is the same as described above with reference to Figure 2.
The message transmitted to the terminal MS1a in stage d', which contains the encryption techniques UIA-NW
supported by the serving mobile radio network NW2, additionally also contains here designations of the integrity protection techniques supported by the serving mobile radio network NW2. After having received this message, the terminal MS1a also selects, in addition to the encryption technique UEA to be used, an integrity protection technique UTA' (stage e') which is supported by the network and the terminal and then sends an instruction to the serving mobile radio network NW2 to use both selections UEA, UTA' in the following procedure (stage f').
This method additionally also provides the terminal with control over the integrity protection technique used during the subsequent communication (stage g) and it is thus possible always to use among the available - ib -techniques the one which promises the greatest possible measure of security from the point of view of the user.
Claims (20)
1. A method for setting up a connection between a terminal which supports a set of encryption techniques, and a serving mobile radio network, comprising:
a) transmitting of a message from the serving mobile radio network to the terminal, which designates one or more encryption techniques supported by the serving mobile radio network;
b) if one or more encryption techniques are supported by the terminal and by the serving mobile radio network:
i) transmitting an encryption administration information item from a home network of the terminal to the terminal;
ii) if the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, providing the user of the terminal a choice of whether to set up the connection unencrypted or abort the connection attempt; and iii) if the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary:
- the terminal selecting an encryption technique supported by the serving mobile radio network; and - operating the connection by using the encryption technique selected by the terminal; and c) if no encryption technique is supported by the terminal and by the serving mobile radio network, operating the connection unencrypted after authorization.
a) transmitting of a message from the serving mobile radio network to the terminal, which designates one or more encryption techniques supported by the serving mobile radio network;
b) if one or more encryption techniques are supported by the terminal and by the serving mobile radio network:
i) transmitting an encryption administration information item from a home network of the terminal to the terminal;
ii) if the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, providing the user of the terminal a choice of whether to set up the connection unencrypted or abort the connection attempt; and iii) if the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary:
- the terminal selecting an encryption technique supported by the serving mobile radio network; and - operating the connection by using the encryption technique selected by the terminal; and c) if no encryption technique is supported by the terminal and by the serving mobile radio network, operating the connection unencrypted after authorization.
2. The method as claimed in claim 1, characterized in that the message in step a) is transmitted with integrity protection.
3. The method as claimed in claim 1 or 2, characterized in that the terminal (MS1a) reports integrity protection techniques (UIA-MS) supported by it to the serving mobile radio network (NW2) and the serving mobile radio network (NW2) selects one among the integrity protection techniques (UIA-NW; UIA-MS) supported by itself and by the terminal (MS1a) and transmits a message about the selected integrity protection technique (UIA) to the terminal (MS1a).
4. The method as claimed in claim 3, characterized in that the message in step a) contains the information about the integrity protection technique (UIA) selected by the serving mobile radio network (NW2).
5. The method as claimed in any one of claims 1 to 4, characterized in that the serving mobile radio network (NW2) reports integrity protection techniques (UIA-NW) supported by it to the terminal (MS1a) and the terminal (MS1a) selects one (UIA') among the integrity protection techniques supported by itself and the serving mobile radio network (NW2), the connection being operated under the integrity protection technique selected by the terminal.
6. The method as claimed in claim 5, characterized in that the message in step a) contains the report of the integrity protection techniques (UIA-NW) supported by the serving mobile radio network (NW2).
7. The method as claimed in any one of claims 1 to 6, characterized in that in the case where the encryption administration information item (AMF) specifies that an unencrypted connection is necessary, the truth of this statement is checked at the terminal (MS1a).
8. The method as claimed in any one of claims 1 to 7, characterized in that in the case where the encryption administration information item (AMF) specifies that an unencrypted connection is necessary, the connection is set up unencrypted.
9. The method as claimed in claim 8, characterized in that a display of the terminal is operated in order to inform the user that the connection is unencrypted.
10. The method as claimed in any one of claims 1 to 9, characterized in that in step d), the encryption administration information item (AMF) is transmitted to the terminal (MS1a) via the serving network (NW2) and under integrity protection.
11. The method as claimed in any one of claims 1 to 10, characterized in that in step d), the encryption administration information item (AMF) is transmitted to the terminal (MS1a) via the serving network (NW2) and on an authenticated signaling channel.
12. A terminal which supports a set of encryption techniques technique, comprising a control unit for selecting an encryption techniques which is supported by the terminal and by a serving mobile radio network, wherein the terminal including: a hardware communications interface; and a display device; wherein, the hardware communications interface is configured to receive a message is transmitted from the serving mobile radio network to the terminal, which designates the encryption techniques supported by the serving mobile radio network, if any; wherein the hardware communications interface is configured to receive an encryption administration information item transmitted from a home network of the terminal to the terminal, and determine whether the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary; wherein in response to determining that the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, the terminal is configured to display to a user via the display device a choice of whether to set up the connection unencrypted or abort the connection attempt; wherein in response to determining that the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary, the terminal is configured to select an encryption technique which is supported by the terminal and by the serving mobile radio network, if any, such that the connection is operated by using the encryption technique selected by the terminal; and wherein, if no encryption technique is supported by the terminal and by the serving mobile radio network is provided, the terminal is configured to operate the connection unencrypted after authorization.
13. The terminal as claimed in claim 12, wherein the control unit selects an integrity protection technique which is supported by the terminal and by the serving mobile radio network.
14. The terminal as claimed in claim 12, wherein the control unit allows an unencrypted connection between the terminal and the serving mobile radio network when an encryption administration information item specifies that the serving mobile radio network does not support an encryption technique.
15. The terminal as claimed in claim 12, wherein the terminal exhibits an encryption display which indicates to a user whether the serving mobile radio network (NW2) supports an encryption technique.
16. The terminal as claimed in claim 15, wherein the terminal is set up for receiving the encryption administration information item during the.
setting-up of a connection by the serving mobile radio network.
setting-up of a connection by the serving mobile radio network.
17. The terminal as claimed in claim 15, wherein that the control unit is switched by a user between at least two of the following operating modes: a first operating mode in which a connection is set up with a serving mobile radio network which does not support encryption and an encryption indication is operated in order to inform a user that the connection is unencrypted; a second operating mode in which the attempt to set up a connection is aborted if the serving mobile radio network does not support an encryption technique; and a third operating mode in which, if the serving mobile radio network does not support an encryption technique, the attempt to set up a connection is interrupted and a user input is requested which determines whether the attempt is to be aborted or to be continued.
18. A mobile radio network configured to follow an instruction by a terminal which designates an encryption technique to be used for a connection between the terminal and the mobile radio network, the mobile radio network including: a home network of the terminal; and a serving mobile radio network communicatively coupled to the home network; wherein, a message is transmitted from the serving mobile radio network to the terminal, which designates the encryption techniques supported by the serving mobile radio network, if any;
wherein an encryption administration information item is transmitted from the home network of the terminal to the terminal; wherein the terminal is configured to determine whether the encryption administration item indicates that unencrypted connections to the serving mobile radio network are necessary; wherein in response to determining that the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, a user of the terminal is provided a choice of whether to set up the connection unencrypted or abort the connection attempt; and wherein in response to determining that the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary: an encryption technique supported by the serving mobile radio network is selected by the terminal; and the connection is operated by using the encryption technique selected by the terminal; and wherein, if no encryption technique is supported by the terminal and by the serving mobile radio network, the connection is operated unencrypted after authorization.
wherein an encryption administration information item is transmitted from the home network of the terminal to the terminal; wherein the terminal is configured to determine whether the encryption administration item indicates that unencrypted connections to the serving mobile radio network are necessary; wherein in response to determining that the encryption administration information item indicates that unencrypted connections to the serving mobile radio network are necessary, a user of the terminal is provided a choice of whether to set up the connection unencrypted or abort the connection attempt; and wherein in response to determining that the encryption administration information item does not indicate that unencrypted connections to the serving mobile radio network are necessary: an encryption technique supported by the serving mobile radio network is selected by the terminal; and the connection is operated by using the encryption technique selected by the terminal; and wherein, if no encryption technique is supported by the terminal and by the serving mobile radio network, the connection is operated unencrypted after authorization.
19. The mobile radio network as claimed in claim 18, wherein the network follows an instruction by the terminal, which designates an integrity protection technique to be used for a connection between the terminal and the mobile radio network.
20. The mobile radio network as claimed in claim 18, wherein the network forwards a message that a connection is to be set up between the network and the terminal to a home network of the terminal which differs from the mobile radio network and to forward an encryption administration information item from the home network to the terminal, which includes information about the encryption techniques supported by the mobile radio network.
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| DE10025271.0 | 2000-05-22 | ||
| DE10025271A DE10025271A1 (en) | 2000-05-22 | 2000-05-22 | Method for establishing a connection between a terminal and a serving cellular network, cellular network and terminal therefor |
| PCT/DE2001/001298 WO2001091494A1 (en) | 2000-05-22 | 2001-04-03 | Method for establishing a connection between a terminal and an operating mobile radio network, mobile radio network and terminal used in such a method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CA2409863A1 CA2409863A1 (en) | 2002-11-20 |
| CA2409863C true CA2409863C (en) | 2011-09-27 |
Family
ID=7643097
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CA2409863A Expired - Fee Related CA2409863C (en) | 2000-05-22 | 2001-04-03 | Method for setting up a connection between a terminal and a serving mobile radio network, mobile radio network and terminal therefor |
Country Status (8)
| Country | Link |
|---|---|
| US (1) | US7620183B2 (en) |
| EP (1) | EP1285549B1 (en) |
| JP (1) | JP2003534744A (en) |
| KR (1) | KR100778558B1 (en) |
| CN (1) | CN1268150C (en) |
| CA (1) | CA2409863C (en) |
| DE (1) | DE10025271A1 (en) |
| WO (1) | WO2001091494A1 (en) |
Families Citing this family (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| DE19955096B4 (en) * | 1999-11-16 | 2009-10-01 | Siemens Ag | A method of authenticating a radio communication network to a mobile station and a radio communication network and a mobile station |
| EP1444844A1 (en) * | 2001-09-25 | 2004-08-11 | Nokia Corporation | Adapting security parameters of services provided for a user terminal in a communication network and correspondingly secured data communication |
| CN1172469C (en) * | 2001-12-13 | 2004-10-20 | 华为技术有限公司 | Method for realizing secrete communication by autonomously selecting enciphered algorithm |
| JP4065850B2 (en) | 2002-01-24 | 2008-03-26 | シーメンス アクチエンゲゼルシヤフト | Protecting data traffic in a mobile network environment |
| KR100956823B1 (en) * | 2003-02-11 | 2010-05-11 | 엘지전자 주식회사 | Method of processing a security mode message in a mobile communication system |
| AU2003242524A1 (en) * | 2003-04-25 | 2004-11-23 | Telefonaktiebolaget L M Ericsson (Publ) | An arrangement and a method relating to secure communication |
| EP1810541B1 (en) * | 2004-11-02 | 2014-04-16 | Apple Inc. | Systems and methods for use with orthogonal frequency division multiplexing |
| US7596143B2 (en) * | 2004-12-16 | 2009-09-29 | Alcatel-Lucent Usa Inc. | Method and apparatus for handling potentially corrupt frames |
| US20080014990A1 (en) * | 2005-07-25 | 2008-01-17 | Pixtel Media Technology (P) Ltd. | Method of locating a mobile communication system for providing anti theft and data protection during successive boot-up procedure |
| JP2007235353A (en) * | 2006-02-28 | 2007-09-13 | Fujitsu Ltd | Mobile radio terminal and radio control system |
| US8347090B2 (en) * | 2006-10-16 | 2013-01-01 | Nokia Corporation | Encryption of identifiers in a communication system |
| US20080155645A1 (en) * | 2006-12-22 | 2008-06-26 | Hutnik Stephen M | Network-implemented method using client's geographic location to determine protection suite |
| US20090019170A1 (en) * | 2007-07-09 | 2009-01-15 | Felix Immanuel Wyss | System and method for secure communication configuration |
| EP2235911A4 (en) * | 2008-01-22 | 2012-08-08 | Ericsson Telefon Ab L M | Security policy distribution to communication terminals |
| US20130185372A1 (en) * | 2012-01-16 | 2013-07-18 | Alcatel-Lucent Usa Inc. | Management of user equipment security status for public warning system |
| WO2016074694A1 (en) * | 2014-11-10 | 2016-05-19 | Nokia Solutions And Networks Oy | Enforcing the use of specific encryption algorithms |
Family Cites Families (19)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US4555805A (en) * | 1980-03-14 | 1985-11-26 | Harris Corporation | Secure mobile telephone system |
| US4920567A (en) * | 1986-07-03 | 1990-04-24 | Motorola, Inc. | Secure telephone terminal |
| US5371794A (en) * | 1993-11-02 | 1994-12-06 | Sun Microsystems, Inc. | Method and apparatus for privacy and authentication in wireless networks |
| JPH0983509A (en) * | 1995-09-13 | 1997-03-28 | Hitachi Ltd | Cipher communication method and its device |
| JP3196618B2 (en) * | 1995-11-24 | 2001-08-06 | 株式会社日立製作所 | Personal computer and communication system using the same |
| FI101670B1 (en) * | 1995-12-15 | 1998-07-31 | Nokia Mobile Phones Ltd | A method for communicating concealment of data transfer between a mobile station network and a mobile station |
| JP3050843B2 (en) * | 1997-02-28 | 2000-06-12 | 松下電器産業株式会社 | An information device that selects and uses multiple encryption technology use protocols for copyright protection of digital works |
| WO1998041435A1 (en) * | 1997-03-19 | 1998-09-24 | Hitachi, Ltd. | Method and system for controlling train by radio |
| FR2763769B1 (en) * | 1997-05-21 | 1999-07-23 | Alsthom Cge Alcatel | METHOD FOR ALLOWING DIRECT ENCRYPTED COMMUNICATION BETWEEN TWO RADIO NETWORK TERMINALS AND CORRESPONDING STATION AND TERMINAL ARRANGEMENTS |
| FI104666B (en) * | 1997-11-10 | 2000-04-14 | Nokia Networks Oy | Secure handshake protocol |
| DE19812215A1 (en) * | 1998-03-19 | 1999-09-23 | Siemens Ag | Controlling link related security functions |
| DE19840742B4 (en) * | 1998-09-07 | 2006-04-20 | T-Mobile Deutschland Gmbh | Method for increasing the security of authentication methods in digital mobile radio systems |
| US6889328B1 (en) * | 1999-05-28 | 2005-05-03 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for secure communication |
| US6763112B1 (en) * | 1999-09-28 | 2004-07-13 | Nokia Networks Oy | Security procedure in universal mobile telephone service |
| US7131006B1 (en) * | 1999-11-15 | 2006-10-31 | Verizon Laboratories Inc. | Cryptographic techniques for a communications network |
| GB2356530B (en) * | 1999-11-18 | 2004-04-07 | Vodafone Ltd | User authentication in a mobile communications network |
| FI109639B (en) * | 1999-12-22 | 2002-09-13 | Nokia Corp | A method for transmitting an encryption number in a communication system and a communication system |
| US7149896B1 (en) * | 2000-05-05 | 2006-12-12 | Microsoft Corporation | Methods and systems for providing security for accessing networks, methods and systems for providing security for accessing the internet |
| US6671507B1 (en) * | 2000-06-16 | 2003-12-30 | Siemens Aktiengesellschaft | Authentication method for inter-system handover between at least two radio communications systems |
-
2000
- 2000-05-22 DE DE10025271A patent/DE10025271A1/en not_active Withdrawn
-
2001
- 2001-04-03 US US10/296,318 patent/US7620183B2/en not_active Expired - Fee Related
- 2001-04-03 JP JP2001586949A patent/JP2003534744A/en active Pending
- 2001-04-03 CN CNB018099971A patent/CN1268150C/en not_active Expired - Fee Related
- 2001-04-03 WO PCT/DE2001/001298 patent/WO2001091494A1/en active Application Filing
- 2001-04-03 CA CA2409863A patent/CA2409863C/en not_active Expired - Fee Related
- 2001-04-03 KR KR1020027015705A patent/KR100778558B1/en not_active IP Right Cessation
- 2001-04-03 EP EP01935951.2A patent/EP1285549B1/en not_active Expired - Lifetime
Also Published As
| Publication number | Publication date |
|---|---|
| CA2409863A1 (en) | 2002-11-20 |
| CN1430857A (en) | 2003-07-16 |
| DE10025271A1 (en) | 2001-11-29 |
| US20040185829A1 (en) | 2004-09-23 |
| JP2003534744A (en) | 2003-11-18 |
| KR20030003747A (en) | 2003-01-10 |
| US7620183B2 (en) | 2009-11-17 |
| EP1285549B1 (en) | 2016-08-17 |
| CN1268150C (en) | 2006-08-02 |
| WO2001091494A1 (en) | 2001-11-29 |
| KR100778558B1 (en) | 2007-11-22 |
| EP1285549A1 (en) | 2003-02-26 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CA2409863C (en) | Method for setting up a connection between a terminal and a serving mobile radio network, mobile radio network and terminal therefor | |
| KR101170191B1 (en) | Improved subscriber authentication for unlicensed mobile access signaling | |
| EP1210838B1 (en) | A security procedure in universal mobile telephone service | |
| US7574193B2 (en) | Emergency call support for mobile communications | |
| AU725877B2 (en) | Call set-up process | |
| EP2932676B1 (en) | Authenticating public land mobile networks to mobile stations | |
| US9031557B2 (en) | Method and apparatus for steering of roaming | |
| US20040162998A1 (en) | Service authentication in a communication system | |
| EP1074166B1 (en) | Management of authentication and encryption user information in digital user terminals | |
| US20010044295A1 (en) | Communication control apparatus and radio communications system | |
| EP1305967B1 (en) | Control of unciphered user traffic | |
| CN107872793B (en) | Base station identification method, terminal and server | |
| WO2007071275A1 (en) | Subscriber authentication in mobile communication networks using unlicensed access networks | |
| KR100915043B1 (en) | Mobile radio network, method for operating a terminal device in such a network and terminal device with integrated electronic circuit arrangements for storing parameters that identify the terminal device | |
| WO1999037113A1 (en) | Method for authentication of a mobile subscriber in a telecommunication network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| EEER | Examination request | ||
| MKLA | Lapsed |
Effective date: 20180403 |