WO2001035691A1 - Base transceiver station automatic encryption handling - Google Patents

Base transceiver station automatic encryption handling Download PDF

Info

Publication number
WO2001035691A1
WO2001035691A1 PCT/SE2000/002044 SE0002044W WO0135691A1 WO 2001035691 A1 WO2001035691 A1 WO 2001035691A1 SE 0002044 W SE0002044 W SE 0002044W WO 0135691 A1 WO0135691 A1 WO 0135691A1
Authority
WO
WIPO (PCT)
Prior art keywords
encryption algorithm
code
base transceiver
encryption
transceiver station
Prior art date
Application number
PCT/SE2000/002044
Other languages
French (fr)
Inventor
Mikael Rosenhed
Original Assignee
Telefonaktiebolaget L M Ericsson (Publ)
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Telefonaktiebolaget L M Ericsson (Publ) filed Critical Telefonaktiebolaget L M Ericsson (Publ)
Priority to DE60030579T priority Critical patent/DE60030579T2/en
Priority to AU13179/01A priority patent/AU1317901A/en
Priority to EP00975079A priority patent/EP1228657B1/en
Publication of WO2001035691A1 publication Critical patent/WO2001035691A1/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03Protecting confidentiality, e.g. by encryption
    • H04W12/033Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic

Definitions

  • the present invention relates to a system and method for automatically selecting an encryption algorithm to comply with the requirements of a particular geographic jurisdiction, and more particularly to a system and method for selecting one of a plurality of encryption algorithms to implement on a Base Transceiver Station (BTS) based on the GSM Mobile Country Code parameter in the network's operating system software.
  • BTS Base Transceiver Station
  • Public cellular communication networks are commonly employed to provide voice and data communication to a plurality of subscribers drawn from the general population.
  • analog cellular radiotelephone systems such as AMPS, ETACS, NMT-450, and NMT-900
  • Digital cellular radiotelephone systems such as IS- 136 and IS-95 in North America, the Personal Digital Cellular (PDC) system in Japan and the pan-European GSM system have been introduced.
  • Security and particularly securing the communication channel between a remote terminal and a base station, is an issue common to all cellular networks, regardless of the channel access technique.
  • Cellular communication systems employ security mechanisms to avoid cellular telephone fraud and to secure signaling and conversations from interception.
  • the present invention relates to mechanisms for securing the communication channel between a remote terminal and a base station. While the present invention will be explained primarily with reference to GSM networks, principles of the present invention are fully applicable to networks that employ alternate channel access techniques, e.g., CDMA networks.
  • PLMN Public Land Mobile Network
  • GSM Global System for Mobile communications
  • MSC Mobile Switching Center
  • the MSC/VLR area 12 includes a plurality of Location Areas (LA) 18, which are defined as that part of a given MSC VLR area 12 in which a remote terminal 20 may move freely without having to send update location information to the MSC/VLR area 12 that controls LA 18.
  • LA Location Areas
  • Each Location Area 12 is divided into a number of cells 22.
  • Remote terminal 20 is the physical equipment, e.g., a car phone or other portable phone, used by mobile subscribers to communicate with the cellular network 10, each other and users outside the subscribed network, both wireline and wireless.
  • the MSC 14 is in communication with at least one Base Station Controller (BSC) 23, which, in turn, is in contact with at least one Base Transceiver Station
  • BSC Base Station Controller
  • BTS Base Station System
  • BSS Base Station System
  • HLR Home Location Register
  • IMSI International Mobile Subscriber Identity
  • the VLR 16 is a database containing information about all of the remote terminals 20 currently located within the MSC/VLR area 12. If a remote terminal 20 roams into a new MSC/VLR area 12, the VLR 16 connected to that MSC 14 will request data about that remote terminal 20 from the HLR database 26, and will inform the HLR 26 of the current location of the remote terminal 20. Accordingly, if a call is placed from the remote terminal 20, the local VLR 16 will have the information necessary to identify and authenticate remote terminal 20 without launching an inquiry to the HLR 26. In this manner, the VLR and HLR databases 16 and 26, respectively, contain various subscriber information associated with a given remote terminal 20. Various security features of GSM networks are detailed in GSM
  • Security in GSM consists of the following aspects: subscriber identity authentication, subscriber identity confidentiality, signaling data confidentiality, and user data confidentiality.
  • the present invention is primarily concerned with securing user data confidentiality, and particularly concerned with encryption algorithms for encrypting data transmitted across an air interface between a BTS and a remote terminal.
  • GSM networks encipher, i.e., encrypt, voice and data transmitted on the communication channel between a remote terminal and a BTS.
  • Voice and data communications between a remote terminal and the network are encrypted through use of an encryption algorithm, referred to in GSM as A5.
  • Encrypted communication is initiated by an encryption mode request command from the GSM network. Upon receipt of this command, the mobile station begins encryption and decryption of data using the A5 encryption algorithm and an encryption key (Kc).
  • GSM offers two different A5 encryption algorithms: A5/1 and A5/2, which is a weaker version of the A5/1 algorithm.
  • A5/1 and A5/2 are weaker versions of the A5/1 algorithm.
  • Many countries consider encryption technology a matter of national security, and regulate the importation and exportation of encryption technology. Some governments forbid network operators from encrypting signals transmitted within their jurisdiction. Other governments permit a weak form of encryption (e.g., A5/2), but prohibit a strong form of encryption (e.g., A5/1). Many governments require communication equipment providers and network operators to certify, under penalty of law, that their equipment complies with the requirements.
  • a cellular GSM network embodying the invention includes a BTS connected to a BSC, which is connected to a MSC.
  • the BTS is adapted to implement one of at least two different encryption algorithms.
  • the BSC is adapted to include an encryption algorithm database containing Mobile Country Codes (MCC) and associated codes corresponding to the allowable encryption algorithm for the country represented by the MCC.
  • MCC Mobile Country Codes
  • a processor associated with the BSC extracts the MCC for the country in which the BSC resides from the GSM System Information 3 or GSM System Information 4 data residing in memory on the BSC.
  • the BSC searches the encryption algorithm database for a record having an MCC that matches the MCC obtained from the GSM System Information. If a match is found, then the BSC obtains a code representing the encryption algorithm from the database. This code is transmitted to the BTS, which selects an encryption algorithm based on the value of this code.
  • the encryption algorithm database may be stored in a memory associated with other network elements, for example the MSC or the BTS.
  • a processor associated with the network element that maintains the encryption algorithm database obtains the MCC from the GSM System Information and retrieves an encryption algorithm code from the database. The code is then transmitted to the BTS, which selects an encryption algorithm based on the value of the code.
  • the invention provides a method, in a cellular communication system, for automatic selection of an encryption algorithm for use in a base transceiver station.
  • the method comprises the steps of extracting, from network information, a region code representative of the geographic jurisdiction in which the base transceiver station resides, searching an encryption algorithm database for a code matching the region code, and, if a match is found, then applying an encryption algorithm associated with the region code in the encryption database.
  • the invention provides a method, in a cellular communication network that operates in accordance with GSM standards, for automatic selection of an encryption algorithm for use in one or more base transceiver stations located in a cell.
  • the method comprises the step of receiving a signal indicating that the base transceiver station is being initialized, and, in response to the signal, retrieving a mobile country code from system information stored in a memory associated with the base station controller, retrieving, from a database stored in a memory associated with the base station controller, an encryption algorithm selection code associated with the mobile country code, and transmitting the encryption algorithm selection code to at least one base transceiver station in the cell.
  • the method includes the step of selecting an encryption algorithm corresponding to the encryption algorithm selection code for use with communication from the base transceiver station.
  • the invention provides a method, in a cellular communication network that operates in accordance with GSM standards, for automatic selection of an encryption algorithm for use in one or more base transceiver stations located in a cell.
  • the method comprises the steps of receiving a signal indicating that the base transceiver station is being initialized, and in response to the signal, retrieving a mobile country code from system information stored in a memory associated with the mobile services switching center, retrieving, from a database stored in a memory associated with the mobile services switching center, an encryption algorithm selection code associated with the mobile country code, and transmitting the encryption algorithm selection code to at least one base transceiver station in the cell.
  • the method comprises selecting an encryption algorithm corresponding to the encryption algorithm selection code for use with communication from the base transceiver station.
  • the invention comprises a network node for use in a cellular communication network.
  • the base station comprises a communication module, a processor, a memory module, operatively associated with the processor, operating software, residing in the memory module, comprising a code that indicates the country in which the base station controller resides, and an encryption algorithm database stored in the memory module, the encryption algorithm database including country codes and associated codes indicating authorized encryption algorithms.
  • the invention comprises a cellular communication network.
  • the network comprises a network node which comprises a memory module for storing operating software, the operating software including a code indicating the country in which the base station controller resides, and an encryption algorithm database including country codes and associated codes indicating authorized encryption algorithms, and a processor for retrieving the country code from the operating system software, searching the encryption algorithm database for an encryption algorithm code associated with the country code, and transmitting a signal representative of the encryption algorithm code to the base transceiver station.
  • the network further comprises a base transceiver station including an encryption module adapted to select one of at least two different encryption algorithms in response to the signal received from the base station controller.
  • Fig. 1 is a block diagram of a conventional cellular communication system such as may be employed in practicing the system and method of the present invention
  • Fig. 2 is a block diagram of a base transceiver station in accordance with aspects of the present invention.
  • Fig. 3 is a flow chart illustrating a method of operating a network in accordance with aspects of the present invention
  • Fig. 4 is a schematic depiction of a tabular database comprising codes representative of geographic regions and codes indicating authorized encryption schemes in the geographic region;
  • Fig. 5 is a flow chart illustrating a method of operating a network in accordance with an alternate embodiment of the present invention.
  • Fig. 6 is a flow chart illustrating a method of operating a network in accordance with an alternate embodiment of the present invention.
  • the present invention provides a modified network architecture and method of operation to enable a network, such as the network depicted in Fig. 1 , to select automatically an encryption algorithm authorized for use in the geographic region in which the network resides, or to avoid encryption where it is prohibited.
  • a conventional BTS may be modified to enable at least two different encryption algorithms.
  • BTS 200 includes an interface 210 for communicating with a BSC or other network element, a processor 220, an encryption module 230, and a transceiver 240.
  • Encryption module 230 is adapted to support at least two different encryption algorithms (e.g., A5/1 and A5/2) and to include a processor 220 having logic instructions adapted to select one of the encryption algorithms (or no encryption), based on a signal received from a BSC.
  • the functions of processor 220 and the encryption module 230 may be implemented on an Application Specific Integrated Circuit (ASIC) or may be implemented in logic instructions (e.g., software) operating on a general purpose processor.
  • Transceiver 240 may be of conventional design.
  • a cellular network includes at least one MSC 302 connected to at least one BSC 304, which is in turn connected to at least one BTS 306.
  • BTS 306 transmits a signal to BSC 304 indicating that BTS 306 is being initialized or restarted.
  • a processor associated with BSC 304 retrieves the MCC for the country in which the BSC 304 resides from the GSM System Information 3 or GSM System Information 4 resident in a memory associated with BSC 304 (step 314).
  • a processor associated with BSC 304 searches an encryption algorithm database stored in a memory associated with BSC 304 for a record having an MCC that matches the MCC retrieved from the GSM System Information (step 318). If a matching record is found, then BSC 304 transmits a code that indicates which of the encryption algorithms implemented on BTS 306 is authorized in the country corresponding to the MCC (step 322).
  • BTS 306 receives the code from the BSC 304, and at step 330, BTS 306 selects an encryption algorithm that corresponds to the code, which may be no encryption. The BTS may then implement the selected encryption algorithm in a conventional manner. If, at step 318, no matching record is found, then BSC 304 may transmit to BTS 306 a code indicating that the encryption algorithm database did not include a record for the MCC extracted from the GSM System Information in the BSC. If BTS 306 receives this message, it will select a default encryption setting, which may be no encryption. It will be appreciated that a GSM cell may include a plurality of BTSs, and that the BSC may transmits the encryption algorithm code to more than one BTS.
  • Fig. 4 is an abstract representation of an encryption algorithm database 400 in accordance with the present invention.
  • Database 400 may generally be represented as a tabular database having M columns and N rows.
  • database 400 includes a first column 410 for storing MCCs, a second column 412 for storing a binary code that indicates whether the MCC allows A5/1 encryption, and a third column for storing a binary code that indicates whether the MCC allows A5/2 encryption. Assuming a '1' represents an affirmative indicator and a '0' represents a negative indicator, database 400 indicates that Sweden and
  • database 400 is not critical to the invention, provided that database relates an encryption algorithm code to an MCC in an effective manner.
  • database 400 may be of numerous alternate embodiments.
  • database 400 may be limited to a 2 x ⁇ database by assigning a specific code the encryption algorithm permitted in the country represented by the MCC, and associating the specific code with the MCC in database 400.
  • database 400 is stored in a permanent memory (e.g., hard-coded) associated with BSC 304 and write-protected to prevent the network operator from altering its contents.
  • a permanent memory e.g., hard-coded
  • Various data processing security measures e.g., cyclical redundance checks, data encryption
  • a BTS in Great Britain is being initialized (or restarted).
  • the BTS signals the BSC that it is intializing, and the BSC retrieves the MCC from its GSM System Information 3 (or 4) to retrieve the encryption algorithm code from the encryption algorithm database, which indicates that Great Britain authorizes A5/1 encryption.
  • the BSC transmits the encryption algorithm code to the BTS.
  • the processor in the BTS receives the code and selects the A5/1 encryption algorithm in the encryption module.
  • BTS then uses the A5/1 algorithm for all encrypted communications.
  • a BTS initialized in France would select the A5/2 algorithm and a BTS initialized in the hypothetical country represented by "xx" would not implement an encryption algorithm.
  • the present invention provides a modified network architecture and method of operation that enables the network to select automatically the encryption algorithm that is authorized for use in a designated geographic region.
  • the network can use the MCC parameter to select the encryption algorithm.
  • Linking the encryption algorithm to the MCC is advantageous for several reasons.
  • the MCC is a defined variable in GSM operating system software, so implementing the invention does not require modifications to a GSM operating system.
  • network operators have compelling reasons not to manipulate the GSM MCC in an attempt to use an unauthorized encryption scheme.
  • GSM network operators are contractually bound not to modify certain GSM operating system parameters, one being the MCC.
  • modification of the MCC parameter would cause network malfunction when the network operator's subscribers roam because the MCC is used in Location Area Identity (LAI) information which is used in the location updating procedure.
  • LAI Location Area Identity
  • modifying the MCC may cause errors throughout the network.
  • MCCs which are assigned by the Consultative Committee on International and Circuity (CCITT), are encoded to be unique parameters. Changing or duplicating an MCC can cause system errors.
  • modification of the MCC parameter would be detectable, at least by the network malfunction that would result.
  • Fig. 5 is a schematic depiction of a method of operating a network in accordance with the invention in which the encryption algorithm database 400 resides in a memory associated with an MSC.
  • a cellular network includes at least one MSC 502 connected to at least one BSC 504, which is in turn connected to at least one BTS 506.
  • BTS 506 transmits a signal to MSC 502 indicating that BTS 506 is being initialized or restarted.
  • a processor associated with MSC 502 retrieves the MCC for the country in which the MSC 502 resides from the GSM System Information 3 or GSM System Information 4 resident in a memory associated with MSC 502 (step 614).
  • a processor associated with MSC 502 searches an encryption algorithm database stored in a memory associated with MSC 502 for a record having an MCC that matches the MCC retrieved from the GSM System Information (step 518). If a matching record is found, then MSC 502 transmits to BTS 506 (usually via BSC 504) a code that indicates which of the encryption algorithms implemented on BTS 506 is authorized in the country corresponding to the MCC (step 522).
  • BTS 506 receives the code from the BSC 504 and, at step 530, BTS 506 selects an encryption algorithm that corresponds to the code, which may be no encryption. BTS 506 may then implement the selected encryption algorithm in a conventional manner. If, at step 518, no matching record is found, then MSC 502 may transmit to BTS 506 a code indicating that the encryption algorithm database did not include a record for the MCC extracted from the GSM System Information. If BTS 506 receives this message, it will select a default encryption setting, which may be no encryption. It will be appreciated that a GSM cell may include a plurality of BTSs, and that the MSC may transmits the encryption algorithm code to more than one BTS.
  • Fig. 6 is a schematic depiction of a method of operating a network in accordance with the invention in which the encryption algorithm database 400 resides in a memory associated with a BTS. Locating the encryption algorithm database 400 in a memory associated with a BTS reduces the number of messaging communications required between the BTS and the BSC (or MSC), but may require additional messaging between BTSs in cells with multiple BTSs.
  • a BTS 606 is initialized or restarted (step 610) a processor associated with
  • BTS 606 retrieves the MCC for the country in which the BTS 606 resides from the GSM System Information 3 or GSM System Information 4 resident in a memory associated with BTS 606 (step 514).
  • a processor associated with BTS 606 searches an encryption algorithm database (e.g., database 400) stored in a memory associated with BTS 606 for a record having an MCC that matches the MCC retrieved from the GSM System Information (step 618). If all BTSs in the cell are being initialized (or restarted) then BTS 606 may be required to transmit the encryption code to other BTSs in the cell.
  • an encryption algorithm database e.g., database 400
  • BTS 606 transmits to other BTSs (usually via BSC 604 or by a broadcast over a radio link, or by a dedicated wireline link, a code that indicates which of the encryption algorithms implemented on BTS 606 is authorized in the country conesponding to the MCC (step 622).
  • GSM System Information 3 and GSM System Information 4 are distributed only to a single BTS in a cell, i.e., the BTS that controls the Broadcast Control Channel (BCCH) for the cell. It will be appreciated that future GSM networks may transmit GSM System Information to multiple BTSs in a cell.
  • BTS 606 selects an encryption algorithm that corresponds to the code.
  • BTS 606 may then implement the selected encryption algorithm in a conventional manner. If, at step 618, no matching record is found, then BTS 606 may transmit to other BTSs in the cell a code indicating that the encryption algorithm database did not include a record for the MCC extracted from the GSM System Information. If a BTS 606 receives this message, it will select a default encryption algorithm, which may be no encryption.
  • the present invention provides a network architecture and method by which a network equipment provider can use a single hardware and software variant that automatically selects one of multiple encryption algorithms to comply with relevant governmental restrictions on encryption technology. This facilitates the efficient use of manufacturing, inventory, distribution, and training resources.

Abstract

A system and method for automatically selecting an encryption, or ciphering, algorithm in a cellular communication network is disclosed. A cellular communication network includes a Base Transceiver Station (BTS) connected to a Base Station Controller (BSC), which is connected to a Mobile services Switching Center (MSC). The BTS is adapted to implement one of at least two different encryption algorithms. The BSC includes a tubular database containing Mobile Country Codes (MCCs) and associated codes corresponding to the allowable encryption algorithm for the MCC. When the BTS is initialized, the BSC's processor retrieves from the tubular database the encryption algorithm code that corresponds to the country in which the BTS resides. This code is transmitted to the BTS, which selects an encryption algorithm based on the value of this code.

Description

BASE TRANSCEIVER STATION AUTOMATIC ENCRYPTION HANDLING
BACKGROUND The present invention relates to a system and method for automatically selecting an encryption algorithm to comply with the requirements of a particular geographic jurisdiction, and more particularly to a system and method for selecting one of a plurality of encryption algorithms to implement on a Base Transceiver Station (BTS) based on the GSM Mobile Country Code parameter in the network's operating system software.
Public cellular communication networks (public land mobile networks) are commonly employed to provide voice and data communication to a plurality of subscribers drawn from the general population. For example, analog cellular radiotelephone systems, such as AMPS, ETACS, NMT-450, and NMT-900, have been deployed successfully throughout the world. Digital cellular radiotelephone systems such as IS- 136 and IS-95 in North America, the Personal Digital Cellular (PDC) system in Japan and the pan-European GSM system have been introduced. Some of these systems, and others, are described, for example, in the book titled Cellular Radio Systems by Balston, et al., published by Artech House, Norwood, Mass., 1993.
Security, and particularly securing the communication channel between a remote terminal and a base station, is an issue common to all cellular networks, regardless of the channel access technique. Cellular communication systems employ security mechanisms to avoid cellular telephone fraud and to secure signaling and conversations from interception. The present invention relates to mechanisms for securing the communication channel between a remote terminal and a base station. While the present invention will be explained primarily with reference to GSM networks, principles of the present invention are fully applicable to networks that employ alternate channel access techniques, e.g., CDMA networks.
Referring to Fig. 1, there is illustrated a Public Land Mobile Network (PLMN), such as cellular network 10, in accordance with a GSM architecture. Cellular network 10 includes at least one, and preferably a plurality of areas 12, each with a Mobile Switching Center (MSC) 14 and an integrated Visitor Location
Register (VLR) 16 therein. The MSC/VLR area 12, in turn, include a plurality of Location Areas (LA) 18, which are defined as that part of a given MSC VLR area 12 in which a remote terminal 20 may move freely without having to send update location information to the MSC/VLR area 12 that controls LA 18. Each Location Area 12 is divided into a number of cells 22. Remote terminal 20 is the physical equipment, e.g., a car phone or other portable phone, used by mobile subscribers to communicate with the cellular network 10, each other and users outside the subscribed network, both wireline and wireless.
The MSC 14 is in communication with at least one Base Station Controller (BSC) 23, which, in turn, is in contact with at least one Base Transceiver Station
(BTS) 24, which is the physical equipment, illustrated for simplicity as a radio tower, that provides radio coverage to the geographical area of the cell 22. It will be understood that the BSC 23 may be connected to several BTSs 24 and may be implemented as a stand-alone node or as integrated with the MSC 14. The BSC 23 and BTS 24 components are generally referred to as a Base Station System (BSS)
25.
Cellular network 10 includes a Home Location Register (HLR) 26, which is a database maintaining subscriber information, e.g., user profiles, current location information, International Mobile Subscriber Identity (IMSI) numbers, and other administrative information. The HLR 26 may be co-located with a given MSC 14, an integral part of the MSC 14 or service multiple MSCs 14.
The VLR 16 is a database containing information about all of the remote terminals 20 currently located within the MSC/VLR area 12. If a remote terminal 20 roams into a new MSC/VLR area 12, the VLR 16 connected to that MSC 14 will request data about that remote terminal 20 from the HLR database 26, and will inform the HLR 26 of the current location of the remote terminal 20. Accordingly, if a call is placed from the remote terminal 20, the local VLR 16 will have the information necessary to identify and authenticate remote terminal 20 without launching an inquiry to the HLR 26. In this manner, the VLR and HLR databases 16 and 26, respectively, contain various subscriber information associated with a given remote terminal 20. Various security features of GSM networks are detailed in GSM
Recommendations 02.09, "Security Aspects," 02.17, "Subscriber Identity Modules," 03.20, "Security Related Network Functions," and 03.21, "Security Related Algorithms". Security in GSM consists of the following aspects: subscriber identity authentication, subscriber identity confidentiality, signaling data confidentiality, and user data confidentiality. The present invention is primarily concerned with securing user data confidentiality, and particularly concerned with encryption algorithms for encrypting data transmitted across an air interface between a BTS and a remote terminal.
GSM networks encipher, i.e., encrypt, voice and data transmitted on the communication channel between a remote terminal and a BTS. Voice and data communications between a remote terminal and the network are encrypted through use of an encryption algorithm, referred to in GSM as A5. Encrypted communication is initiated by an encryption mode request command from the GSM network. Upon receipt of this command, the mobile station begins encryption and decryption of data using the A5 encryption algorithm and an encryption key (Kc).
Presently, GSM offers two different A5 encryption algorithms: A5/1 and A5/2, which is a weaker version of the A5/1 algorithm. Many countries consider encryption technology a matter of national security, and regulate the importation and exportation of encryption technology. Some governments forbid network operators from encrypting signals transmitted within their jurisdiction. Other governments permit a weak form of encryption (e.g., A5/2), but prohibit a strong form of encryption (e.g., A5/1). Many governments require communication equipment providers and network operators to certify, under penalty of law, that their equipment complies with the requirements.
Accommodating the various governmental restrictions on encryption technology raises technical issues for cellular network equipment providers and network operators. Equipment providers can produce different product configurations to comply with various different encryption restrictions imposed by different governments. However, this is an inefficient use of design, manufacturing, distribution, and training resources.
Accordingly, there is a need for network systems and methods that comply with the encryption restrictions of various different governments. To promote efficient use of resources, there is a need for network systems capable of implementing one of two or more different encryption algorithms, and automatically selecting one of the encryption algorithms, to comply with a governmental restriction.
SUMMARY The present invention addresses these and other needs by providing a network architecture and method of operation that enables the network to determine automatically which encryption algorithm is authorized in a particular geographic region, and to implement the authorized encryption algorithm when the BTS is intialized. In an exemplary embodiment, a cellular GSM network embodying the invention includes a BTS connected to a BSC, which is connected to a MSC. The BTS is adapted to implement one of at least two different encryption algorithms. The BSC is adapted to include an encryption algorithm database containing Mobile Country Codes (MCC) and associated codes corresponding to the allowable encryption algorithm for the country represented by the MCC. When a BTS is initialized (or restarted), a processor associated with the BSC extracts the MCC for the country in which the BSC resides from the GSM System Information 3 or GSM System Information 4 data residing in memory on the BSC. The BSC then searches the encryption algorithm database for a record having an MCC that matches the MCC obtained from the GSM System Information. If a match is found, then the BSC obtains a code representing the encryption algorithm from the database. This code is transmitted to the BTS, which selects an encryption algorithm based on the value of this code.
In alternate embodiments, the encryption algorithm database may be stored in a memory associated with other network elements, for example the MSC or the BTS. A processor associated with the network element that maintains the encryption algorithm database obtains the MCC from the GSM System Information and retrieves an encryption algorithm code from the database. The code is then transmitted to the BTS, which selects an encryption algorithm based on the value of the code. In one aspect, the invention provides a method, in a cellular communication system, for automatic selection of an encryption algorithm for use in a base transceiver station. The method comprises the steps of extracting, from network information, a region code representative of the geographic jurisdiction in which the base transceiver station resides, searching an encryption algorithm database for a code matching the region code, and, if a match is found, then applying an encryption algorithm associated with the region code in the encryption database. In another aspect, the invention provides a method, in a cellular communication network that operates in accordance with GSM standards, for automatic selection of an encryption algorithm for use in one or more base transceiver stations located in a cell. At a base station controller, the method comprises the step of receiving a signal indicating that the base transceiver station is being initialized, and, in response to the signal, retrieving a mobile country code from system information stored in a memory associated with the base station controller, retrieving, from a database stored in a memory associated with the base station controller, an encryption algorithm selection code associated with the mobile country code, and transmitting the encryption algorithm selection code to at least one base transceiver station in the cell. At the base transceiver station, the method includes the step of selecting an encryption algorithm corresponding to the encryption algorithm selection code for use with communication from the base transceiver station.
In another aspect, the invention provides a method, in a cellular communication network that operates in accordance with GSM standards, for automatic selection of an encryption algorithm for use in one or more base transceiver stations located in a cell. At a mobile services switching center, the method comprises the steps of receiving a signal indicating that the base transceiver station is being initialized, and in response to the signal, retrieving a mobile country code from system information stored in a memory associated with the mobile services switching center, retrieving, from a database stored in a memory associated with the mobile services switching center, an encryption algorithm selection code associated with the mobile country code, and transmitting the encryption algorithm selection code to at least one base transceiver station in the cell. At the base transceiver station, the method comprises selecting an encryption algorithm corresponding to the encryption algorithm selection code for use with communication from the base transceiver station. According to a further aspect, the invention comprises a network node for use in a cellular communication network. The base station comprises a communication module, a processor, a memory module, operatively associated with the processor, operating software, residing in the memory module, comprising a code that indicates the country in which the base station controller resides, and an encryption algorithm database stored in the memory module, the encryption algorithm database including country codes and associated codes indicating authorized encryption algorithms.
According to a further aspect, the invention comprises a cellular communication network. The network comprises a network node which comprises a memory module for storing operating software, the operating software including a code indicating the country in which the base station controller resides, and an encryption algorithm database including country codes and associated codes indicating authorized encryption algorithms, and a processor for retrieving the country code from the operating system software, searching the encryption algorithm database for an encryption algorithm code associated with the country code, and transmitting a signal representative of the encryption algorithm code to the base transceiver station. The network further comprises a base transceiver station including an encryption module adapted to select one of at least two different encryption algorithms in response to the signal received from the base station controller.
BRIEF DESCRIPTION OF THE DRAWINGS
Fig. 1 is a block diagram of a conventional cellular communication system such as may be employed in practicing the system and method of the present invention;
Fig. 2 is a block diagram of a base transceiver station in accordance with aspects of the present invention;
Fig. 3 is a flow chart illustrating a method of operating a network in accordance with aspects of the present invention;
Fig. 4 is a schematic depiction of a tabular database comprising codes representative of geographic regions and codes indicating authorized encryption schemes in the geographic region;
Fig. 5 is a flow chart illustrating a method of operating a network in accordance with an alternate embodiment of the present invention; and
Fig. 6 is a flow chart illustrating a method of operating a network in accordance with an alternate embodiment of the present invention.
DETAILED DESCRIPTION
The present invention will now be described more fully hereinafter with reference to the accompanying drawings, in which preferred embodiments of the invention are shown. This invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. The present invention provides a modified network architecture and method of operation to enable a network, such as the network depicted in Fig. 1 , to select automatically an encryption algorithm authorized for use in the geographic region in which the network resides, or to avoid encryption where it is prohibited. In one aspect, in accordance with the present invention a conventional BTS may be modified to enable at least two different encryption algorithms. Referring to Fig. 2, a schematic illustration of an exemplary BTS 200 depicts portions of BTS 200 relevant to the present invention. In relevant part, BTS 200 includes an interface 210 for communicating with a BSC or other network element, a processor 220, an encryption module 230, and a transceiver 240.
Encryption module 230 is adapted to support at least two different encryption algorithms (e.g., A5/1 and A5/2) and to include a processor 220 having logic instructions adapted to select one of the encryption algorithms (or no encryption), based on a signal received from a BSC. The functions of processor 220 and the encryption module 230 may be implemented on an Application Specific Integrated Circuit (ASIC) or may be implemented in logic instructions (e.g., software) operating on a general purpose processor. Transceiver 240 may be of conventional design.
Referring to Fig. 3, a method of operating a cellular network in accordance with the invention is described. Referring to Fig. 3, a cellular network includes at least one MSC 302 connected to at least one BSC 304, which is in turn connected to at least one BTS 306. At step 310, BTS 306 transmits a signal to BSC 304 indicating that BTS 306 is being initialized or restarted. In response to the signal from BTS 306, a processor associated with BSC 304 retrieves the MCC for the country in which the BSC 304 resides from the GSM System Information 3 or GSM System Information 4 resident in a memory associated with BSC 304 (step 314). A processor associated with BSC 304 then searches an encryption algorithm database stored in a memory associated with BSC 304 for a record having an MCC that matches the MCC retrieved from the GSM System Information (step 318). If a matching record is found, then BSC 304 transmits a code that indicates which of the encryption algorithms implemented on BTS 306 is authorized in the country corresponding to the MCC (step 322).
At step 326, BTS 306 receives the code from the BSC 304, and at step 330, BTS 306 selects an encryption algorithm that corresponds to the code, which may be no encryption. The BTS may then implement the selected encryption algorithm in a conventional manner. If, at step 318, no matching record is found, then BSC 304 may transmit to BTS 306 a code indicating that the encryption algorithm database did not include a record for the MCC extracted from the GSM System Information in the BSC. If BTS 306 receives this message, it will select a default encryption setting, which may be no encryption. It will be appreciated that a GSM cell may include a plurality of BTSs, and that the BSC may transmits the encryption algorithm code to more than one BTS.
Fig. 4 is an abstract representation of an encryption algorithm database 400 in accordance with the present invention. Database 400 may generally be represented as a tabular database having M columns and N rows. In the illustrated embodiment, database 400 includes a first column 410 for storing MCCs, a second column 412 for storing a binary code that indicates whether the MCC allows A5/1 encryption, and a third column for storing a binary code that indicates whether the MCC allows A5/2 encryption. Assuming a '1' represents an affirmative indicator and a '0' represents a negative indicator, database 400 indicates that Sweden and
Great Britain permit A5/1 encryption, while France and Spain permit A5/2 encryption. It will be appreciated that certain countries may prohibit all forms of encryption, as indicated by country "xx".
The particular format of database 400 is not critical to the invention, provided that database relates an encryption algorithm code to an MCC in an effective manner. One of ordinary skill in the data processing arts will appreciate that database 400 may be of numerous alternate embodiments. For example, database 400 may be limited to a 2 x Ν database by assigning a specific code the encryption algorithm permitted in the country represented by the MCC, and associating the specific code with the MCC in database 400.
Preferably, database 400 is stored in a permanent memory (e.g., hard-coded) associated with BSC 304 and write-protected to prevent the network operator from altering its contents. Various data processing security measures (e.g., cyclical redundance checks, data encryption) may be implemented to ensure that database 400 is not manipulated by the network operator.
Referring to Fig. 2 through Fig. 4, assume by way of example that a BTS in Great Britain is being initialized (or restarted). The BTS signals the BSC that it is intializing, and the BSC retrieves the MCC from its GSM System Information 3 (or 4) to retrieve the encryption algorithm code from the encryption algorithm database, which indicates that Great Britain authorizes A5/1 encryption. The BSC transmits the encryption algorithm code to the BTS. The processor in the BTS receives the code and selects the A5/1 encryption algorithm in the encryption module. BTS then uses the A5/1 algorithm for all encrypted communications. By contrast, a BTS initialized in France would select the A5/2 algorithm and a BTS initialized in the hypothetical country represented by "xx" would not implement an encryption algorithm. Thus, the present invention provides a modified network architecture and method of operation that enables the network to select automatically the encryption algorithm that is authorized for use in a designated geographic region. In a GSM network, the network can use the MCC parameter to select the encryption algorithm. Linking the encryption algorithm to the MCC is advantageous for several reasons. The MCC is a defined variable in GSM operating system software, so implementing the invention does not require modifications to a GSM operating system. Also, network operators have compelling reasons not to manipulate the GSM MCC in an attempt to use an unauthorized encryption scheme. First, GSM network operators are contractually bound not to modify certain GSM operating system parameters, one being the MCC. Second, modification of the MCC parameter would cause network malfunction when the network operator's subscribers roam because the MCC is used in Location Area Identity (LAI) information which is used in the location updating procedure. Third, modifying the MCC may cause errors throughout the network. MCCs, which are assigned by the Consultative Committee on International and Telegraphy (CCITT), are encoded to be unique parameters. Changing or duplicating an MCC can cause system errors. Fourth, modification of the MCC parameter would be detectable, at least by the network malfunction that would result.
In the embodiment described in connection with Fig. 3, the encryption algorithm database 400 is stored in a memory associated with a BSC. It will be appreciated that the encryption algorithm database 400 could be stored in a different network device, with appropriate messaging between the network devices. By way of example, Fig. 5 is a schematic depiction of a method of operating a network in accordance with the invention in which the encryption algorithm database 400 resides in a memory associated with an MSC. Referring to Fig. 5, a cellular network includes at least one MSC 502 connected to at least one BSC 504, which is in turn connected to at least one BTS 506. At step 510, BTS 506 transmits a signal to MSC 502 indicating that BTS 506 is being initialized or restarted. In response to the signal from BTS 506, a processor associated with MSC 502 retrieves the MCC for the country in which the MSC 502 resides from the GSM System Information 3 or GSM System Information 4 resident in a memory associated with MSC 502 (step 614). A processor associated with MSC 502 then searches an encryption algorithm database stored in a memory associated with MSC 502 for a record having an MCC that matches the MCC retrieved from the GSM System Information (step 518). If a matching record is found, then MSC 502 transmits to BTS 506 (usually via BSC 504) a code that indicates which of the encryption algorithms implemented on BTS 506 is authorized in the country corresponding to the MCC (step 522).
At step 526, BTS 506 receives the code from the BSC 504 and, at step 530, BTS 506 selects an encryption algorithm that corresponds to the code, which may be no encryption. BTS 506 may then implement the selected encryption algorithm in a conventional manner. If, at step 518, no matching record is found, then MSC 502 may transmit to BTS 506 a code indicating that the encryption algorithm database did not include a record for the MCC extracted from the GSM System Information. If BTS 506 receives this message, it will select a default encryption setting, which may be no encryption. It will be appreciated that a GSM cell may include a plurality of BTSs, and that the MSC may transmits the encryption algorithm code to more than one BTS.
Fig. 6 is a schematic depiction of a method of operating a network in accordance with the invention in which the encryption algorithm database 400 resides in a memory associated with a BTS. Locating the encryption algorithm database 400 in a memory associated with a BTS reduces the number of messaging communications required between the BTS and the BSC (or MSC), but may require additional messaging between BTSs in cells with multiple BTSs. Referring to Fig. 6, when a BTS 606 is initialized or restarted (step 610) a processor associated with
BTS 606 retrieves the MCC for the country in which the BTS 606 resides from the GSM System Information 3 or GSM System Information 4 resident in a memory associated with BTS 606 (step 514). A processor associated with BTS 606 then searches an encryption algorithm database (e.g., database 400) stored in a memory associated with BTS 606 for a record having an MCC that matches the MCC retrieved from the GSM System Information (step 618). If all BTSs in the cell are being initialized (or restarted) then BTS 606 may be required to transmit the encryption code to other BTSs in the cell. Thus, if a matching record is found, then BTS 606 transmits to other BTSs (usually via BSC 604 or by a broadcast over a radio link, or by a dedicated wireline link, a code that indicates which of the encryption algorithms implemented on BTS 606 is authorized in the country conesponding to the MCC (step 622). In existing GSM communication networks, GSM System Information 3 and GSM System Information 4 are distributed only to a single BTS in a cell, i.e., the BTS that controls the Broadcast Control Channel (BCCH) for the cell. It will be appreciated that future GSM networks may transmit GSM System Information to multiple BTSs in a cell. At step 630, BTS 606 selects an encryption algorithm that corresponds to the code. BTS 606 may then implement the selected encryption algorithm in a conventional manner. If, at step 618, no matching record is found, then BTS 606 may transmit to other BTSs in the cell a code indicating that the encryption algorithm database did not include a record for the MCC extracted from the GSM System Information. If a BTS 606 receives this message, it will select a default encryption algorithm, which may be no encryption.
The present invention provides a network architecture and method by which a network equipment provider can use a single hardware and software variant that automatically selects one of multiple encryption algorithms to comply with relevant governmental restrictions on encryption technology. This facilitates the efficient use of manufacturing, inventory, distribution, and training resources.
The present invention is described above with reference to particular embodiments, and it will be readily apparent to those skilled in the art that it is possible to embody the invention in forms other than those described above. The particular embodiments described above are merely illustrative and should not be considered restrictive in any way. The scope of the invention is determined by the following claims, and all variations and equivalents that fall within the range of the claims are intended to be embraced therein.

Claims

What is claimed is:
1. A method, in a cellular communication system, for automatic selection of an encryption algorithm for use in a base transceiver station, comprising the steps of: extracting, from network information, a region code representative of the geographic jurisdiction in which the base transceiver station resides; searching an encryption algorithm database for a code matching the region code; and if a match is found, then applying an encryption algorithm associated with the region code in the encryption database.
2. A method according to claim 1, wherein the step of extracting, from network information, a region code representative of the geographic jurisdiction in which the base transceiver station resides comprises: retrieving the region code from system information stored in a memory module.
3. A method according to claim 1, wherein: the network information is stored in a memory associated with a first network element and the encryption algorithm database is stored in a second network element.
4. A method according to claim 1, further comprising the step of: encrypting information using the selected encryption algorithm.
5. A method, in a cellular communication network for automatic selection of an encryption algorithm for use in one or more base transceiver stations located in a cell, comprising the steps of: receiving, at a base station controller, a signal indicating that the base transceiver station is being initialized; in response to the signal, retrieving a mobile country code from system information stored in a memory associated with the base station controller; retrieving, from a database stored in a memory associated with the base station controller, an encryption algorithm selection code associated with the mobile country code; transmitting the encryption algorithm selection code to at least one base transceiver station in the cell; selecting, at the base transceiver station, an encryption algorithm corresponding to the encryption algorithm selection code for use when communicating between the base transceiver station and a remote terminal.
6. A method according to claim 5, further comprising the step of: encrypting information using the selected encryption algorithm.
7. A method, in a cellular communication network that operates in accordance with GSM standards, for automatic selection of an encryption algorithm for use in one or more base transceiver stations located in a cell, comprising the steps of: receiving, at a mobile services switching center, a signal indicating that the base transceiver station is being initialized; in response to the signal, retrieving a mobile country code from system information stored in a memory associated with the mobile services switching center; retrieving, from a database stored in a memory associated with the mobile services switching center, an encryption algorithm selection code associated with the mobile country code; transmitting the encryption algorithm selection code to at least one base transceiver station in the cell; selecting, at the base transceiver station, an encryption algorithm conesponding to the encryption algorithm selection code for use when communicating between the base transceiver station and a remote terminal.
8. A method according to claim 7, wherein the step of transmitting the encryption algorithm to at least one base transceiver station comprises: transmitting the encryption algorithm from a mobile services switching center to a base station controller; and transmitting the encryption algorithm from a base station controller to a base transceiver station.
9. A method according to claim 7, further comprising the step of: encrypting information using the selected encryption algorithm.
10. A network node for use in a cellular communication network, comprising: a communication interface; a processor; a memory module, operatively associated with the processor; operating software, residing in the memory module, comprising a code that indicates the country in which the base station controller resides; and an encryption algorithm database stored in the memory module, the encryption algorithm database including codes representative of specific geographic regions and encryption algorithm codes indicating encryption algorithms authorized in the geographic region.
11. A network node according to claim 10, wherein: the network node comprises a base transceiver station.
12. A network node according to claim 10, wherein: the network node comprises a base station controller.
13. A network node according to claim 10, wherein: the network node comprises a mobile services switching center.
14. A cellular communication network, comprising: a network node comprising a memory module for storing operating software, the operating software including a code indicating the country in which the base station controller resides, and an encryption algorithm database including country codes and associated codes indicating authorized encryption algorithms, and a processor for retrieving the country code from the operating system software, searching the encryption algorithm database for an encryption algorithm code associated with the country code, and transmitting a signal representative of the encryption algorithm code to the base transceiver station; and a base transceiver station including an encryption module adapted to select one of at least two different encryption algorithms in response to the signal received from the base station controller.
15. A cellular communication network according to claim 14, wherein: the network node comprises a base transceiver station.
16. A cellular communication network according to claim 14, wherein: the network node comprises a base station controller.
17. A cellular communication network according to claim 14, wherein: the network node comprises a mobile services switching center.
PCT/SE2000/002044 1999-11-12 2000-10-20 Base transceiver station automatic encryption handling WO2001035691A1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
DE60030579T DE60030579T2 (en) 1999-11-12 2000-10-20 AUTOMATIC ENCRYPTION HANDLING FOR A TRANSMITTER / RECEIVER BASE STATION
AU13179/01A AU1317901A (en) 1999-11-12 2000-10-20 Base transceiver station automatic encryption handling
EP00975079A EP1228657B1 (en) 1999-11-12 2000-10-20 Base transceiver station automatic encryption handling

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US09/439,162 1999-11-12
US09/439,162 US7113600B1 (en) 1999-11-12 1999-11-12 Base transceiver station automatic encryption handling

Publications (1)

Publication Number Publication Date
WO2001035691A1 true WO2001035691A1 (en) 2001-05-17

Family

ID=23743563

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/SE2000/002044 WO2001035691A1 (en) 1999-11-12 2000-10-20 Base transceiver station automatic encryption handling

Country Status (9)

Country Link
US (1) US7113600B1 (en)
EP (1) EP1228657B1 (en)
CN (1) CN1180652C (en)
AT (1) ATE339070T1 (en)
AU (1) AU1317901A (en)
DE (1) DE60030579T2 (en)
ES (1) ES2272330T3 (en)
WO (1) WO2001035691A1 (en)
ZA (1) ZA200203442B (en)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2003034688A1 (en) * 2001-10-17 2003-04-24 Telefonaktiebolaget Lm Ericsson (Publ) Security in communication networks
WO2004019549A1 (en) 2002-08-26 2004-03-04 Huawei Technologies Co., Ltd. Method of negotiating the encryption algorithms
EP1455474A1 (en) * 2001-12-13 2004-09-08 Huawei Technologies Co., Ltd. A method of selecting encrypting arithmetic for realizing communication of secrecy
EP1458198A1 (en) * 2001-12-21 2004-09-15 Huawei Technologies Co., Ltd. A method for determining encryption algorithm of secret communication based on mobile country codes
KR100821183B1 (en) 2006-10-31 2008-04-14 주식회사 케이티프리텔 Method and apparatus for controlling the security mode in rnc(radio network controller)
CN100442881C (en) * 2005-03-31 2008-12-10 华为技术有限公司 Method for realizing information encryption transmission in wireless communication system

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7539313B1 (en) * 2000-09-13 2009-05-26 Nortel Networks Limited System and method for key management across geographic domains
FI111423B (en) * 2000-11-28 2003-07-15 Nokia Corp A system for securing post-handover communications
IL155671A (en) * 2003-04-30 2004-12-15 Elad Barkan Cryptanalysis method and system
JP4606055B2 (en) * 2004-04-21 2011-01-05 株式会社バッファロー Encryption key setting system, access point, and encryption key setting method
US8156548B2 (en) * 2004-05-20 2012-04-10 Future Internet Security Ip Pty Ltd. Identification and authentication system and method
TWI261447B (en) * 2004-08-30 2006-09-01 Rdc Semiconductor Co Ltd Security system for data processing
US8504846B2 (en) * 2007-05-25 2013-08-06 Samsung Electronics Co., Ltd. Method and apparatus for secure storing of private data on user devices in telecommunications networks
CN103874060B (en) * 2012-12-13 2019-04-30 深圳市中兴微电子技术有限公司 The method for encryption/decryption and device of data
CN106130733B (en) * 2016-06-23 2018-02-13 北京海泰方圆科技股份有限公司 Update the methods, devices and systems of configuration
US20230090934A1 (en) * 2021-09-10 2023-03-23 At&T Intellectual Property I, L.P. Compliance with lawful intercept regulations for roaming mobile devices

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1999009765A1 (en) * 1997-08-19 1999-02-25 Ericsson Inc. System and method for selective restriction of ciphering
WO1999026420A2 (en) * 1997-11-04 1999-05-27 Nokia Netwokrks Oy Method of setting encryption for a connection in a radio system

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4549308A (en) * 1982-07-12 1985-10-22 At&T Bell Laboratories Secure mobile radio telephony
US5812955A (en) * 1993-11-04 1998-09-22 Ericsson Inc. Base station which relays cellular verification signals via a telephone wire network to verify a cellular radio telephone
US5471532A (en) * 1994-02-15 1995-11-28 Motorola, Inc. Method of rekeying roaming communication units
US5481610A (en) 1994-02-28 1996-01-02 Ericsson Inc. Digital radio transceiver with encrypted key storage
JP3301222B2 (en) * 1994-06-28 2002-07-15 ソニー株式会社 Portable telephone device
US5852665A (en) 1995-04-13 1998-12-22 Fortress U & T Ltd. Internationally regulated system for one to one cryptographic communications with national sovereignty without key escrow
US5703950A (en) 1995-06-30 1997-12-30 Intermec Corporation Method and apparatus for controlling country specific frequency allocation
US5778075A (en) 1996-08-30 1998-07-07 Telefonaktiebolaget, L.M. Ericsson Methods and systems for mobile terminal assisted handover in an private radio communications network
US5966657A (en) 1997-07-24 1999-10-12 Telefonaktiebolaget L M Ericsson (Publ) Method and system for radio frequency measurement and automatic frequency planning in a cellular radio system

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1999009765A1 (en) * 1997-08-19 1999-02-25 Ericsson Inc. System and method for selective restriction of ciphering
WO1999026420A2 (en) * 1997-11-04 1999-05-27 Nokia Netwokrks Oy Method of setting encryption for a connection in a radio system

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2003034688A1 (en) * 2001-10-17 2003-04-24 Telefonaktiebolaget Lm Ericsson (Publ) Security in communication networks
US7343497B2 (en) 2001-10-17 2008-03-11 Telefonaktiebolaget Lm Ericsson (Publ) Security in communication networks
ES2281998A1 (en) * 2001-10-17 2007-10-01 Telefonaktiebolaget Lm Ericsson (Publ) Security in communication networks
EP1455474A4 (en) * 2001-12-13 2006-05-24 Huawei Tech Co Ltd A method of selecting encrypting arithmetic for realizing communication of secrecy
EP1455474A1 (en) * 2001-12-13 2004-09-08 Huawei Technologies Co., Ltd. A method of selecting encrypting arithmetic for realizing communication of secrecy
US7474751B2 (en) 2001-12-13 2009-01-06 Huawei Technologies Co., Ltd. Method of selecting encrypting arithmetric for realizing communication of secrecy
EP1458198A4 (en) * 2001-12-21 2005-12-21 Huawei Tech Co Ltd A method for determining encryption algorithm of secret communication based on mobile country codes
EP1458198A1 (en) * 2001-12-21 2004-09-15 Huawei Technologies Co., Ltd. A method for determining encryption algorithm of secret communication based on mobile country codes
US7362866B2 (en) 2001-12-21 2008-04-22 Huawei Technologies, Co., Ltd. Method for determining encryption algorithm of secret communication based on mobile country codes
EP1536591A1 (en) * 2002-08-26 2005-06-01 Huawei Technologies Co., Ltd. Method of negotiating the encryption algorithms
EP1536591A4 (en) * 2002-08-26 2006-05-24 Huawei Tech Co Ltd Method of negotiating the encryption algorithms
WO2004019549A1 (en) 2002-08-26 2004-03-04 Huawei Technologies Co., Ltd. Method of negotiating the encryption algorithms
CN100442881C (en) * 2005-03-31 2008-12-10 华为技术有限公司 Method for realizing information encryption transmission in wireless communication system
KR100821183B1 (en) 2006-10-31 2008-04-14 주식회사 케이티프리텔 Method and apparatus for controlling the security mode in rnc(radio network controller)

Also Published As

Publication number Publication date
ES2272330T3 (en) 2007-05-01
DE60030579T2 (en) 2007-05-16
AU1317901A (en) 2001-06-06
US7113600B1 (en) 2006-09-26
EP1228657A1 (en) 2002-08-07
EP1228657B1 (en) 2006-09-06
ZA200203442B (en) 2003-09-23
CN1423913A (en) 2003-06-11
ATE339070T1 (en) 2006-09-15
CN1180652C (en) 2004-12-15
DE60030579D1 (en) 2006-10-19

Similar Documents

Publication Publication Date Title
US7113600B1 (en) Base transceiver station automatic encryption handling
CA2320981C (en) Change of service profile of mobile subscriber
US7646737B2 (en) Multimode wireless device system provision validation and acquisition method and apparatus
US5675628A (en) Method and apparatus for enabling roaming of subscriber among plural mobile radio systems, using mobile equipment accepting removable subscriber identity module
US6161012A (en) Short code dialling
US6714799B1 (en) Method and system for using SIM card in CDMA service area
US6134438A (en) Local control enhancement in a telecommunications system
Willassen Forensics and the GSM mobile telephone system
US8346214B2 (en) Self provisioning of wireless terminals in wireless networks
US6606491B1 (en) Subscriber validation method in cellular communication system
US20020142805A1 (en) Method and apparatus for anonymous network access in the absence of a mobile subscriber identity module
US7362866B2 (en) Method for determining encryption algorithm of secret communication based on mobile country codes
US20060246949A1 (en) Self provisioning of wireless terminals in wireless networks
WO1999004583A1 (en) Encrypted broadcast messages in a cellular communications system
CA2265698A1 (en) Preventing misuse of a copied subscriber identity in a mobile communication system
GB2322998A (en) Method of Interconnecting Communication Networks
US11564086B2 (en) Secure mobile-terminated message transfer
EP0886979B1 (en) Short code dialling
US7062256B2 (en) Network supported new feature notification and trial
WO2013174388A1 (en) A method and system for dynamically allocating subscriber identification
KR101537392B1 (en) Minimizing the signaling traffic for home base stations
US20050197100A1 (en) Method of checking access rights in a mobile radio system
EP1672943A1 (en) Mobile telephony program product, method and card
WO2000030389A1 (en) Method and apparatus to provide roaming after activation without over the air programming
KR20040003853A (en) Method for Furnishing User Information of Illegal Mobile Equipment

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 2000975079

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 00818318X

Country of ref document: CN

WWP Wipo information: published in national office

Ref document number: 2000975079

Country of ref document: EP

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

NENP Non-entry into the national phase

Ref country code: JP

WWG Wipo information: grant in national office

Ref document number: 2000975079

Country of ref document: EP