WO2002067486A2 - Method and apparatus for storing and distributing encryption keys - Google Patents
Method and apparatus for storing and distributing encryption keys Download PDFInfo
- Publication number
- WO2002067486A2 WO2002067486A2 PCT/US2002/001479 US0201479W WO02067486A2 WO 2002067486 A2 WO2002067486 A2 WO 2002067486A2 US 0201479 W US0201479 W US 0201479W WO 02067486 A2 WO02067486 A2 WO 02067486A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- key
- zone
- mobile station
- encryption key
- site
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0894—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
- H04W12/0431—Key distribution or pre-distribution; Key agreement
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
- H04W84/04—Large scale networks; Deep hierarchical networks
- H04W84/08—Trunked mobile radio systems
Definitions
- This invention relates to encrypted communications, including but not limited to air interface communication within secure communication systems.
- Encrypted voice and data systems are well known. Many of these systems provide secure communication between two or more users by sharing one piece of information between the users, which permits only those users knowing it to properly decrypt the message. This piece of information is known as the encryption key variable, or key for short. Loading this key into the actual encryption device in the secure communication unit is a basic requirement that allows secure communication to occur. To retain security over a long period of time, the keys are changed periodically, typically weekly or monthly.
- Encryption is known to be performed on an end-to-end basis within a communication system, i.e., encrypting a message at the originating communication unit (also known as a mobile station), passing it transparently (i.e., without decryption) through any number of channels and/or pieces of infrastructure to the end user's communication unit, which decrypts the message.
- a communication system i.e., encrypting a message at the originating communication unit (also known as a mobile station), passing it transparently (i.e., without decryption) through any number of channels and/or pieces of infrastructure to the end user's communication unit, which decrypts the message.
- the Terrestrial Trunked Radio (TETRA) communication standard is presently utilized in Europe (hereinafter TETRA Standard), with potential for expansion elsewhere.
- the TETRA Standard calls for air interface, also known as air traffic or over-the-air, encryption. Air interface encryption protects information on the air interface between the infrastructure and the mobile subscriber.
- the TETRA standard calls for an authentication center, also known as a key management facility or key management center, to generate, distribute, and authenticate encryption keys and users.
- the TETRA standard does not, however, specify how to implement an authentication center, nor how to generate, distribute, and authenticate key material to system devices or mobile stations for information traversing through the infrastructure or SwMI (Switching and Management Infrastructure), as it is referred to in the TETRA Standard.
- the TETRA standard fails to provide definition to minimize burden to call processing and bandwidth, provide encryption and authentication in a manner tolerant to equipment faults, support wide-area communications, and to store keys for all communication units without undue storage burden at local sites.
- FIG. 1 is a block diagram of a secure communication system in accordance with the invention.
- FIG. 2 is a block diagram showing key distribution pools in accordance with the invention.
- FIG. 3 and FIG. 4 are block diagrams showing key storage within a communication system in accordance with the invention.
- FIG. 5 is a diagram showing key storage and authentication information distribution within a communication system in accordance with the invention.
- FIG. 6 is a diagram showing authentication information storage and authentication decision making within a communication system in accordance with the invention.
- FIG.7 is a diagram showing authentication of a mobile station by an authentication center in accordance with the TETRA Standard.
- FIG.8 is a diagram showing authentication of an authentication center by a mobile station in accordance with the TETRA Standard.
- FIG. 9 is a diagram showing key storage ⁇ and authentication information distribution between a communication system and a mobile station in accordance with the invention.
- FIG. 10 is a diagram showing a key pull within a communication system in accordance with the invention.
- FIG. 11 is a diagram showing a key push within a communication system in accordance with the invention.
- FIG. 12 is a diagram showing distribution of a static cipher key to a base station within a communication system in accordance with the invention.
- FIG. 13 is a diagram showing distribution of a static cipher key to a mobile station within a communication system in accordance with the invention.
- FIG. 14 is a diagram showing distribution of a common cipher key to a mobile station and a base station within a communication system in accordance with the invention.
- FIG. 15 is a diagram showing distribution of a group cipher key to a base station within a communication system in accordance with the invention.
- FIG. 16 is a diagram showing distribution of a group cipher key to a mobile station within a communication system in accordance with the invention.
- FIG. 17 is a flowchart showing a method of key persistence at a site in a communication system in accordance with the invention.
- System devices are .divided into groups or pools and encryption keys are defined to provid ⁇ jsecure transfer of key material among the system devices.
- FIG. 1 A block diagram of a secure communication system that is comprised of a plurality of zones is shown in FIG. 1.
- the secure communication system is comprised of a plurality of system devices that comprise the infrastructure of the system.
- a Key Management Facility (KMF) 101 transfers security data, such as session authentication information and encryption keys, to a User Configuration Server (UCS) 103, that forwards the information and data to the appropriate zone based on configuration data within the UCS 103.
- KMF Key Management Facility
- UCS User Configuration Server
- Communications for a first zone are provided by a plurality of system devices including a Zone Manager (ZM) 105, a Zone Controller 107 that includes a Home Location Register (HLR) 109 and a Visited (also known as a Visitor or Visitors') Location Register (VLR) 111, an air traffic router (ATR) 113, and a plurality of base stations (BSs) 115 and 117 located at a plurality of communication sites within the first zone.
- ZM Zone Manager
- HLR Home Location Register
- VLR Visited (also known as a Visitor or Visitors') Location Register
- ATR air traffic router
- BSs base stations
- Communications for a second zone are provided by a plurality of system devices including a ZM 119, a ZC 121 that includes an HLR 123 and a VLR 125, an ATR 127, and a plurality of BSs 129 and 131 located at a plurality of communication sites within the second zone.
- the BSs 115, 117, 129, and 131 communicate with a plurality of mobile stations (see FIG. 4).
- the ZCs 107 and 121 communicate via a network 133, such as a local area network or a wide area network such as an IP (internet protocol) network. Only two zones and their associated system devices are shown for the sake of simplicity, although any number of zones may be successfully incorporated in the secure communication system.
- the KMF 101 is a secure entity that stores the authentication key (K) for each mobile station (MS) or communication unit, such as a portable or mobile two-way radio, Direct Mode Operation (DMO) gateway, receiver, scanner, or transmitter (for example, see devices 401, 403, and 405 in FIG. 4).
- the KMF 101 provides a random seed (RS) and associated session authentication keys (KS and KS') for each mobile station associated with the secure communication system.
- the KMF 101 also imports/generates various air interface keys, such as Static Cipher Key (SCK), Group Cipher Key (GCK), and Common Cipher Key (CCK), for distribution in the system.
- SCK Static Cipher Key
- GCK Group Cipher Key
- CCK Common Cipher Key
- the KMF 101 functions as the authentication center (AuC), as referred to in the TETRA communication standard, in the system.
- AuC authentication center
- there is one KMF server per system although there may be one or more KMF
- the UCS 103 is a single point of entry for configuration data in the system.
- the UCS 103 stores and distributes session authentication information, such as RS, KS, and KS', to the appropriate home zone in the system.
- the UCS 103 functions as a non- real time distribution point for session authentication information in the system.
- the ZM 105 or 119 is a management database for a zone.
- the ZM 105 or 119 stores session authentication information, such as RS, KS, and KS', for the zone managed by the particular ZM 105 or 119.
- the ZM functions as a non-real time storage facility for authentication information in the zone.
- the ZC 107 or 121 performs real time authentication for the mobile stations in its zone.
- the ZC uses the session authentication information, such as RS, KS, and KS', to perform the real-time authentication.
- the HLR 109 or 123 stores session authentication information for each MS that has the HLR 109 or 123 as its home.
- the X(LR 111 or 125 stores session authentication information for each MS visiting the VLR's 111 or 125 zone.
- the ZC 107 or 121 performs real-time distribution of its home mobile stations' session authentication information when the MS roams outside its home zone.
- an HLR 109 or 123 and VLR 111 or 125 are part of each zone controller and perform on behalf of the same zone for which the zone controller is associated.
- the HLR 109 or 123 and VLR 111 or 125 may be part of other system devices or may be stand alone devices.
- the derived cipher key (DCK) is generated during authentication.
- the ZC 107 or 121 generates and distributes the DCK for the MS to the BSs 115, 117, 129, and 131 that require the DCK for secure communications.
- the ATR 113 or 127 is the conduit used by the KMF 101 to send rekey messages or key updates to an MS, such as SCK and GCK.
- the KMF 101 sends key updates for mobile stations to the home zone ATR 113 or 127 for dissemination. All rekey acknowledgments (ACKs), whether infrastructure or MS originated, pass through the ATR 113 or 127 to the KMF 101.
- ACKs rekey acknowledgments
- Each BS 115, 117, 129, and 131 receives and transmits authentication messages over the air interface.
- Each BS 115, 117, 129, and 131 acts as a transmitter for its associated ZC 107 or 121 and as a receiver for the MS in the system.
- the BS 115, 117, 129, or 131 uses DCK for air interface encryption with the MS.
- the BSs 115, 117, 129, and 131 are responsible for sending key material to the MSs 401, 403, 405, and 407. The result of some of these operations (SCK, GCK) is sent back to the KMF 101.
- each base site is comprised substantially of one or more base stations, the terms base site (or site) and base station are used interchangeably herein, both sharing the acronym BS.
- a TETRA site Controller connects all the base stations at a site, stores key material, and distributes key material to the base stations as needed, thereby making keys available to all base stations at a site.
- the TSC actually provides storage for the base station for key material. Because key storage and distribution and other key-related functions may be performed by a base site, base station, or TSC, these terms are considered interchangeable for the purposes of this document.
- the Mobile Station authenticates the system and/or is authenticated by the system using a challenge-response protocol.
- Each MS has its own key, K, for use during authentication.
- K For use during authentication.
- Each MS is assigned to one HLR, which typically remains the same.
- Each MS is also associated with only one VLR in the zone in which the MS is presently located. An MS is not registered on a system until the MS is active and has passed authentication.
- FIG. 2 is a block diagram showing key distribution pools.
- KEK key encryption key
- FIG. 2 shows a system for using KEKs that is more secure than a single system-wide key, yet not as burdensome as a different KEK for each system device.
- KEKs Two types are assigned to confidentially distribute key material (such as air interface keys, session authentication information, data utilized to generate encryption keys, and other key-related material) to the system devices of the infrastructure of a system: intrakeys and interkeys.
- key material such as air interface keys, session authentication information, data utilized to generate encryption keys, and other key-related material
- intrakeys and interkeys Two types of KEKs are assigned to confidentially distribute key material (such as air interface keys, session authentication information, data utilized to generate encryption keys, and other key-related material) to the system devices of the infrastructure of a system: intrakeys and interkeys.
- KEKs are 80 bits in the preferred embodiment.
- the first type of KEK is an intrakey, also referred to as an intrapool key or intra-zone key, KEK Z .
- the system devices are divided into pools or groups 201, 203, 205, and 207.
- Eacr ⁇ pool s assigned its own unique intrakey, KEK Z .
- each pool of devices corresponds to a zone in the communication system, and each pool has a mutually exclusive collection of system devices, i.e., each system device only belongs to one pool.
- the first pool 201 utilizes KEK 21 to encrypt key material, such as encryption keys and/or session authentication information, for transfer within the first pool (or zone in the preferred embodiment) and comprises the first zone controller ZC1 107 and its associated BSs 115, 117, and 211.
- the second pool 203 utilizes KEK Z2 to encrypt key material for transfer within the second pool (or zone in the preferred embodiment) and comprises the second zone controller ZC2 121 and its associated BSs 129, 131, and 213.
- the third pool 205 utilizes KEK Z3 to encrypt key material for transfer within the third pool (or zone in the preferred embodiment) and comprises the third zone controller ZC3 223 and its associated BSs 225, 227, and 229.
- the fourth pool 207 utilizes KEK Z4 to encrypt key material for transfer within the fourth pool (or zone in the preferred embodiment) and comprises the fourth zone controller ZC4 215 and its associated BSs 217, 219, and 221.
- the intrakey is used by a zone controller to distribute key material to base sites/base stations within its zone.
- KEK Z is also used by the KMF 101 to distribute SCK.
- the second type of KEK is an interkey, KEK M , also referred to as an interpool key or inter-zone key.
- the interkey is used to encrypt key material sent between pools or zones in the preferred embodiment, or within a certain group 209 of system devices, particularly from the KMF 101.
- the interkey is used by the KMF 101 to distribute GCK and individual authentication information to the infrastructure.
- the interkey is stored in one system device in each zone, in each zone controller 107 and 121, and is also stored in the KMF 101.
- the connections shown between the KMF 101 and the zone controllers 107, 121, 215,. and 223 are virtual connections in the preferred embodiment, in that other devices, such as the UCS 103 and ZMs 105 and 119, are physically located between the KMF 101 and zone controllers 107, 121, 215, and 223.
- the UCS 103 and ZMs 105 and 119 pass encrypted key information in a transparent manner between the KMF 101 and zone controllers 107, 121, 215, and 223, i.e., the UCS 103 and ZMs 105 and 119 do not decrypt or encrypt the information, thus no storage of a KEK is required at the UCS 103 and ZMs 105 and 119, although key material may be stored in encrypted form at the UCS 103 and ZMs 105 and 119.
- a message is encrypted by one of an intrakey and an interkey, typically using TA31 (decrypted using TA32), based on a system device to which the message is forwarded.
- the interkey is used when the message is intended for a system device in a zone other than the zone containing the sending device.
- the intrakey is used.
- the KMF 101 encrypts key material, such as SCK, CCK, SAI, and GCK, with either the interkey or intrakey
- the KMF 101 uses TA31.
- key material is distributed from the HLR to a VLR and then to the base sites within the zone of the VLR.
- the key material is encrypted by KEK M and passed transparently from HLR to VLR.
- the target VLR decrypts the key material using its KEK M and re-encrypts it with the KEK z of the zone for distribution to sites within the zone.
- Each system device that contains an infrastructure KEK has its own unique infrastructure or protection key, KI, in the preferred embodiment.
- the protection key is only utilized to decrypt/encrypt KEKs sent by the KMF 101 to the infrastructure system devices.
- the KI is only able to be loaded by a key variable loader and is not able to be updated with an OTAR (over-the-air rekey) operation.
- the KEKs may also be manually provided with a Key Variable Loader.
- KI is 128 bits long in the preferred embodiment.
- KEK M is only stored by the zone controllers 107 and 121 and the KMF 101.
- the intrakey KEK z is held only by the KMF 101, base stations/sites, and zone controller 107 and 121 within each zone.
- Each zone has a unique KEK z .
- Each system device has its own KI.
- the KMF 101 need only maintain one interkey plus one intrakey for each pool or zone in the system. If a KEK Z is compromised, the affect and response is localized to that zone, rather than the whole system, and KI remains intact to redistribute a new KEK Z to that zone.
- KEK M is stored only at the KMF 101 and the HLR 109 and 123 and VLR 111 and 125 in each zone, which devices are typically more physically protected from an attack. If KEK M is compromised, the KMF 101 changes
- a Static Cipher Key SCK
- CCK Common Cipher Key
- GCK Group Cipher Key
- DCK Derived Cipher Key
- MGCK Modified Group Cipher Key
- Three basic types of keys are used between the system devices: an Infrastructure Key (KI) also known as a protection key, an inter-zone or inter-pool key encryption key also known as an interkey (KEK M ), and.an intra-zone or intra-pool key encryption key also known as an intrakey ('KEK Z ).
- KI Infrastructure Key
- KEK M inter-zone or inter-pool key encryption key
- 'KEK Z intra-zone or intra-pool key encryption key also known as an intrakey
- the Static Cipher Key is the most basic of the air interface keys and is used to encrypt inbound (MS to infrastructure) and outbound (infrastructure to MS) information when authentication and/or dynamic air interface encryption is not available. Thus, the generation and distribution of this key has no relation to authentication.
- the Derived Cipher Key is a session key derived within the authentication procedure.
- the DCK changes each time an authentication is performed with the MS and the infrastructure, also called the SwMI in the TETRA Standard.
- the DCK is used for inbound traffic encryption.
- the DCK is also used for outbound individually addressed traffic to the MS.
- DCK is used when using dynamic air interface encryption operating in TETRA Standard security class 3.
- This Common Cipher Key is a group key in the sense that multiple MSs have the same CCK. Unlike the GCK, however, the CCK has no relation to a particular talkgroup (TG).
- the CCK is geographically specific, i.e., the CCK serves all units within a given location area.
- the location area as defined in the TETRA standard may be as small as a site or a big as an entire system. Each unit within a location area uses the same CCK.
- Group communications in the outbound direction use CCK when there is no GCK/MGCK available for that group call.
- CCK is used for the encryption of outbound group traffic and identities only. Inbound identities are encrypted with CCK when DCK is in use.
- the Group Cipher Key (GCK) is used to encrypt outbound talkgroup calls.
- a GCK is defined for each talkgroup in the system.
- the GCK is only indirectly used for the encryption of traffic information; the modified group cipher key (MGCK), which is a derivative of the GCK, is directly used for traffic encryption.
- GCK is never used for the actual encryption, of traffic as it is considered a long term key.
- the Modified Group Cipher Key (MGCK) is used to encrypt outbound talkgroup call traffic.
- MGCK is formed by the combination of GCK and CCK.
- Each GCK has a corresponding MGCK defined in for a location area.
- Each infrastructure element has an infrastructure or protection key, KI, that is used as the encryption key for any infrastructure key encryption key updates.
- KI is similar in function to the authentication key, K, in a mobile station.
- K authentication key
- KI is updated only by a provisioning device such as a key variable loader.
- infrastructure key encryption key (KEK) updates cannot be performed without this key.
- Each zone controller has an interkey, KEK M , also referred to as an inter-zone or inter-pool key, which is used to encrypt all key traffic passed between the KMF and each zone.
- KEK M is also used by the zone controller to pass GCK, CCK, and DCK, as well as session authentication information, between zones.
- one KEK M is present in the KMF and each of the zone controllers in each system.
- Each zone has its own intrakey, KEK Z , also referred to as an intra-zone or intra-pool key.
- the intrakey is used to encrypt all key traffic within the zone, between the zone controller and each of the sites within the zones.
- Each base site and zone controller has the same KEK Z in a zone.
- the KMF stores the KEK Z for each zone in the system.
- a method of the present invention establishes an expected lifetime, or rekey interval, for an encryption key.
- Table 2 shows example rekey intervals for each key stored in the secure communication system.
- a number of storage locations for " each djype of system device within a communication system is determined. For example, one KMF 101, one UCS 103, one ZM 105 or 119 per zone, one zone controller 107 or 121 per zone, one HLR 109 or 123 per zone, one VLR 111 or 125 per zone, and a number of sites and corresponding base stations per site depending on the coverage requirements for each zone. Based on the expected lifetime for each encryption key and the number of storage locations for each system device, a type of system device is assigned to store each encryption key, and the encryption keys are stored at the system device of the assigned type.
- derived cipher keys are stored at base stations and in the HLR/VLR, common cipher keys are stored at base stations, modified group cipher keys are stored at base stations, and group cipher keys that are stored at HLRs and VLRs.
- Table 2 shows the target (user) of each key and the rekey interval, i.e., time between changes or updates of the specific key in a preferred embodiment.
- the MGCK which is a combination of CCK and GCK, is updated whenever CCK is changes and whenever GCK is changed.
- Table 2 may be changed by the KMF operator.
- KVL Key Variable Loader
- the key loader has a hardware based encryption device for the securing of keys stored within the device.
- the KVL may obtain keys directly from the KMF acting as a store and forward agent in order to disseminate the key encryption keys to the various devices.
- KVL is a very secure way to provide keys
- a method of key management is needed to store and distribute the KEKs and other key material to system devices such as zone controllers and base sites.
- the KMF 101 is responsible for the generation, key distribution, and tracking of most of the air interface keys (not DCK or MGCK) in the system.
- the base sites 115 and 117 and each zone controller 107 serve as a proxy to the KMF 101 for key distribution.
- the KMF 101 distributes key material to the zones through the UCS 103, ZMs 105 and 119, and/or ATRs 113 and 127 depending on the key being distributed.
- the KMF 101 processes acknowledgement information from the ATR 113 and 127 to maintain currency of the system devices and MSs 401, 403, 405, and 407.
- FIG. 3 and FIG. 4 show key material storage within the communication system.
- the KMF 101 stores a protection key and associated KEK(s) for each system device.
- the KMF 101 stores a protection (infrastructure) key, an interkey, and an intrakey for each zone controller.
- the first zone controller 107 is associated with the keys KI ZCi , KEK M , and KEK Z1 .
- The stores these keys encrypted by a hardware key and the first zone controller 107 stores KI ZC ⁇ and the encrypted KEK M and KEK Z1 .
- the KMF 101 stores a protection key and intrakey, both protected by a hardware key, for each BS.
- the KMF 101 and the first BS 115 both store the protection key KI BSI and the intrakey KEK Zi .
- the KMF 101 stores keys encrypted/protected by a hardware key.
- the KMF 101 Prior to distribution of a KEK in the preferred embodiment, the KMF 101 encrypts KEKs with the protection key, KI, and the use of encryption algorithms TA41 and TA51, similar to that shown in FIG. 10 titled “Distribution of SCK to an individual by an authentication centre” and its associated text in the Terrestrial Trunked Radio (TETRA); Voice plus Data (V+D); Part 7: Security, EN 300 392-7 V2.1.1, 2000-12 (herein referred to as "TETRA Standard”), which is incorporated in its entirety herein by reference.
- the KMF 101 stores an encryption process 301 that combines RSO and the appropriate KEK, KEKN, and KEK-VN utilizing encryption algorithms TA41 303 and TA51 305, yielding SKEK, which is a sealed version of the KEK.
- RSO, SKEK, KEKN, and KEK-VN are forwarded to the target system device.
- Curly brackets ⁇ followed by a key name indicate that the material within the curly brackets was created using TA41 and TA51 and the key name after the brackets.
- KEK Z1 is intended to be transferred to the first zone controller 107 and BS1 115.
- KEK Z1 , KEK Z ⁇ -VN, and KEK Z1 N, and KI B s ⁇ are combined utilizing encryption algorithms TA41 and TA51, yielding SKEK Z1 .
- Key material RSO, SKEK Z1 , KEK Z ⁇ -VN, and KEK Z1 N are forwarded transparently through ZMl 105 to BS1 115, which combines this key rnaterialj.with KI B s ⁇ using TA41 and TA52, yielding KEK Z ⁇ , which is stored at BS1 115.
- an unencrypted acknowledgment of successful receipt of each key is returned to the KMF 101 via the ATR 113.
- FIG. 4 A block diagram showing key storage within a communication system is shown in FIG. 4.
- session authentication information includes a random seed, RS, and two session keys, KS for authentication of an MS and KS' for authentication of the infrastructure, for each mobile station 401, 403, and 405 (only three are shown due to space constraints, although numerous MSs are part of the system).
- the session authentication information (SAI) is used to generate a derived cipher key (DCK) for each MS 401.
- SAI session authentication information
- DCK derived cipher key
- the KMF 101 stores an Individual TETRA Subscriber Identity (ITSI), TETRA Equipment Identity (TEI), and an MS authentication key ("MS key") that is unique to and stored within each MS 401, 403, and 405.
- ITSI Individual TETRA Subscriber Identity
- TEI TETRA Equipment Identity
- MS key an MS authentication key
- the air interface keys and the MS keys are stored in hardware encrypted fashion using a hardware key K H within the KMF 101.
- the DVI-XL algorithm available from Motorola, Inc., is used to encrypt the keys for storage in the KMF 101 in the preferred embodiment.
- Square brackets [] followed by a key name indicate that the material within the square brackets is encrypted by that key.
- the KMF 101 generates session authentication information for each MS
- the UCS 103 stores the ITSI, TEI, and ID of the HLR associated with each MS, as well as the SAI.
- KS and KS' are stored encrypted by the interkey (as received from the KMF 101) at the UCS 103 for fast and easy transport, a . ⁇ d RS is stored unencrypted.
- the UCS 103 is a transparent device in the preferred embodiment, thus it performs no encryption or decryption functions.
- the KMF 101 receives configuration information from the UCS 103.
- configuration information examples include Individual TETRA Subscriber Identity (ITSI), Group TETRA Subscriber Identity (GTSI), home zone, and zone managers.
- the KMF uses a table lookup, such as a DNS (Domain Name Server) lookup table, to obtain the ATR 113 and 127 addresses.
- DNS Domain Name Server
- the UCS 103 forwards the appropriate SAI to each ZM 105 in non-real time, based on the HLR ID associated with each MS 401.
- the ZM 105 like the UCS 103, is a transparent device and performs no encryption or decryption functions.
- the ZM 105 stores, for each MS having the HLR 109 as its home location, an ITSI, TEI, and SAI.
- KS and KS' are stored encrypted by the interkey (as received from the UCS 103) at the ZM 105 or 119 for fast and easy transport, and RS is stored unencrypted.
- the ZM 105 forwards the SAI to the HLR 109 in non-real time.
- the HLR 109 stores an ITSI and the SAI for each MS 401, 403, and 405.
- KS and KS' are stored encrypted by the interkey (as received from the ZM 103) at the HLR 109, and RS is stored unencrypted.
- RS, KS, and KS' are stored unencrypted at the VLR 111 for faster authentication.
- KS and KS' may be stored unencrypted at the HLR 109 for faster authentication.
- a new DCK for the MS 401 is generated by the VLR 111 at the zone controller 107 from the SAI in real time, after any encrypted SAI is decrypted due to transfer of the SAI from the HLR 109.
- the ITSI, SAI, .and previous DCK associated with that MS 401 are forwarded to the VLR " 111 jn real time before the new DCK is created.
- the ITSI, SAI, and new DCK are forwarded to the HLR 109 in real time for storage.
- the ITSI, SAI, and DCK comes from the HLR for the MS 401, thus this information may come from a different zone if the MS 401 does not use the HLR 109 for its home.
- SAI/DCK comes from a different zone, that zone decrypts/encrypts the information, as necessary, with the interkey for transport to the appropriate zone, which also provides appropriate decryption/encryption within the zone.
- DCK is stored encrypted by the intrakey KEK Z for the zone in which it is stored, for easy and fast transport to the local BS 115 or 117.
- each DCK is stored encrypted by KEK Z ⁇ .
- KS and KS' are always encrypted with the interkey KEK M , for fast and easy transport during the authentication process, even when transfer is within the same zone.
- the BS 115 communicating with the MS 401 receives, from ZC1 107 in real time, the MS's 401 DCK, encrypted by the intrakey KEK Z1 .
- the BS 115 stores the ITSI and DCK unencrypted for immediate use while the MS 401 is at the coverage area of the BS 115. See FIG. 17 and its associated text for information regarding key persistence at each site.
- Each MS 401, 403, and 405 stores its own ITSI, TEI, and DCK in unencrypted form, and K is stored in scrambled or encrypted form.
- Each MS 401, 403, and 405 stores its own ITSI, TEI, and DCK in unencrypted form, and K is stored in scrambled or encrypted form.
- MS 401, 403, and 405 also stores in unencrypted form relevant CCKs,
- GCKs GCKs, MGCKs, and SCKs as they are received. These keys may be stored encrypted in the infrastructure in an alternative embodiment.
- the zone controller 107 is responsible for the real time distribution of keys and mobility management thereof. It maintains keys that may need to be distributed in a real-time manner necessary when roaming, for example.
- the group cipher key is an element in each talkgroup record and is kept in the talkgroup HLR.
- the corrymon cipher key is a zone or site specific key and is maintained in the zone controller as well.
- the ZC is responsible for the creation of the MGCK (based upon the GCK and CCK) and the distribution to the sites.
- the zone controller 107 is not transparent with respect to the encryption of key material.
- the ZC 107 maintains a protection key, KI, and two infrastructure key encryption keys, interkey KEK M and intrakey KEK Z , for the distribution of key material.
- KI is used to seal (encrypt) KEK M and KEK Z when they are sent from the KMF 101.
- Most key information is encrypted by the KMF 101 with the interkey, KEK M .
- the zone controller 107 decrypts the key material using KEK M and re-encrypts the same information using KEK Z when sending the information to a site within the zone.
- the zone controller 107 has the TETRA algorithms used for the encryption/decryption of infrastructure keys (such as TA41 and TA52 and TA31 and TA32), as described herein.
- the zone controller sends ACKs from infrastructure re-keying operations to the KMF 101 via the ATR 113.
- a ZC 107 or HLR 109 receives a key update
- the device first decrypts key update and checks for corruption by verifying the integrity of the data and sends the result of this operation to the KMF 101 via the ATR 113 in the form of an ACK.
- the site is one endpoint for air interface encryption. Audio on the air interface between the BS 115 and MS 401 is encrypted. Audio within the infrastructure is not encrypted. Outbound traffic is encrypted with algorithms using MGCK, CCK, and SCK, or DCK for individual calls. All inbound traffic is encrypted with algorithms using DCK or SCK.
- the site maintains the traffic algorithms and key storage for SCK, CCK, and MGCK, as well as DCK. Because the base site has traffic key storage, the base site is not transparent with respect to the encryption of key material. All key material distributed to the base site. is encrypted by the intrakey,
- the base site maintains a projection key, KI, and an interkey, KEK Z .
- the base sites have the TETRA algorithms used for the encryption/decryption of infrastructure keys (such as TA41 and TA52 and TA31 and TA32), as described herein.
- the MS is the other endpoint point for air interface encryption.
- Outbound traffic is encrypted with algorithms using MGCK, CCK, and SCK, or the DCK if individually addressed. All inbound traffic is encrypted with algorithms using DCK or SCK, and identities may be encrypted with SCK or CCK.
- the MS maintains the traffic algorithms and key storage for SCK, CCK, GCK, and MGCK as well DCK.
- the following figures provides examples of the role of the zone controller 107 or 121 in some of its key generation, key distribution, and authentication functions, as well as the base site/base station and MS operations in the key generation, key distribution, and authentication processes.
- Session authentication information (RS, KS, and KS') is needed to facilitate real-time authentication of the MS 401 by the ZC 107 and realtime authentication of the system by the MS, as well as mutual authentication.
- Triggers for the transfer of SAI may be a manual initiation by the KMF operator, an automatic fraud trigger from the system, or a periodic changing of the SAI by the KMF 101.
- FIG. 5 shows the transfer of SAI for two mobile stations, ITSI1 401 and
- the KMF 101 encrypts at least a part of the SAI (e.g., KS and KS') with the interkey KEK M for the system, and forwards ITSI, ITSI2, RS, and KS and KS' encrypted by KEK M to the UCS 103.
- the UCS 103 stores a copy and forwards it to the home ZM 105 or 119 for each ITSI. Dashed lines within a system device indicate transparent passage of information througl the system device.
- the ZM 105 or 119 also stores a copy and forward it to its ZC 107 or 121, in particular, the HLR 107 or 123.
- the ZC 107 or 121 stores KS and KS' encrypted along with RS in the HLR 107 or 123. Once the HLR 109 or 123 receives the SAI, an unencrypted acknowledgement (ACK) is sent, when decryption using KEK M fails, back to the KMF 101 via the ATR 113 or 127 from the zone in which the HLR 109 or 123 resides. If a VLR 111 for the MS 403 exists, such as ITSI2, the ZC 121 sends KS and KS' encrypted with the interkey KEK M to the VLR 111. Coordination between a previous authentication session information and a new authentication session information is not needed. The HLR 109 or 123 only needs one copy of SAI per ITSI registered. The UCS 103 and ZM 105 or 119 store copies of authentication session information to provide recovery from system maintenance or failures.
- the authentication system provides a fault tolerant system that allows for quick fault recovery as well. If the KMF 101, UCS 103, and/or ZMs 105 and 119 fail or are separated from the rest of the system, full authentication may still be performed without interruption on a real-time basis with the session authentication information, for example for MS2 403, stored at the HLR 123 and VLR 111. A failure at any of these devices 101, 103, 105, and 119 is not catastrophic, in that the data stored may be downloaded from any of the other devices that stores the information.
- the SAI may be immediately downloaded from the ZM 105 at the zone.
- FIG. 6 A diagram showing authentication information storage and authentication decision making within a communication system is shown in FIG. 6.
- Four mobile stations are shown within a system where three mobile stations 401, 403, and 405 use HLR1 109 of the first zone controller 107, one mobile station 407 uses HLR2 123 of the second zone controller 121, two mobile stations 401 and 403 use VLR1 111, and two mobile stations 405 and 407 use VLR2 125.
- Storage of SAI is shown throughout the system devices.
- base station decisions whether or not to authenticate a mobile at a particular trigger. For example, power-up messages, whether encrypted or not, require authentication. Any message sent in the clear (i.e., unencrypted) requires authentication.
- Encrypted roam messages may be implicitly authenticated, i.e., the challenge and response mechanism may be bypassed if the encrypted roam message is successfully decrypted by the BS 131.
- Power-up messages, roam messages, location updates, and other types of messages are considered requests to communicate within the communication system.
- the BS 115, 117, 129, or 131 sends a request to authenticate the MS to the infrastructure (to a zone controller in the preferred embodiment).
- the infrastructure device to which authentication requests are sent becomes unavailable, e.g., the device fails, is down for maintenance, or the communication link to the device is not operable
- the BS stores authentication requests during the time period when the infrastructure device is not available.
- the infrastructure device becomes available e.g., the device is returned to service after a failure or maintenance or when the communication link comes up, the BS forwards the stored authentication requests to the infrastructure device.
- a first MS 401 sends a clear (unencrypted) power-up message to the first BS 115.
- authentication of the MS 401 in this situation is required. Because the MS 401 uses HLR 109 in the zone where the BS 115 is located, the session authentication information SAI1 for the MS 401 is forwarded from the HLR 109 to the VLR 111 at the zone for completion of the authentication process.
- the second MS 403 roams from BS1 115 to BS2 117 and sends a clear
- the MS 403 uses the HLR 109 in the zone where the BS 115 is located, and because the MS 403 roamed from a site serviced by the same VLR as the new site, the session authentication information SAI2 for the MS 403 is already located in the VLR 111 at the zone for completion of the authentication process.
- the third MS 405 sends an encrypted power-up message to the third BS 129.
- authentication of the MS 405 in this situation is required. Because the MS 405 uses the HLR 123 in the zone where the BS 129 is located, the session authentication information SAI3 for the MS 405 is forwarded from the HLR 123 to the VLR 125 at the zone for completion of the authentication process.
- the fourth MS 407 roams from BS2 117 to BS4 131 and sends an encrypted roam message to the fourth BS 131.
- (full) authentication of the MS 403 in this situation is not required. Instead, the MS 407 is implicitly authenticated, i.e., the challenge and response mechanism is bypassed if the encrypted roam message is successfully decrypted by the BS 131. Because the MS 407 uses the HLR 109 in the zone other than the zone where the BS 131 is located, the encryption key (and if necessary, the session authentication information SAI4) for the MS 407 must be forwarded from that HLR 109 to the VLR 125 where the MS 407 has roamed for completion of the authentication process. Typically, at least a part of the SAI is encrypted by the interkey prior to transfer to another zone. If implicit authentication fails, full authentication of the MS 407 is then performed.
- FIG. 7 A diagram showing the challenge-and-response process to authenticate a mobile station by an authentication center in accordance with the TETRA Standard is shown in FIG. 7.
- an authentication center 701 such as a KMF 101
- the output of the TA11 process 703 is KS, which is input with RAND1 (a random number) to the encryption algorithm TA12, as defined in the TETRA Standard.
- the TA12 process 705 outputs XRESl, an expected response, and DCKl, a derived cipher key for the mobile.
- RAND1 and RS are provided to the MS 707.
- the MS 707 goes through a similar process, by combining its mobile authentication key, K, with RS received from the AuC 701 utilizing the TA11 process 703.
- the TA11 process 703 outputs KS, which is input with RAND1 to the TA12 process 705.
- the TA12 process 705 in the MS 707 outputs RES1, a response to the challenge, and DCKl, the derived cipher key for the mobile.
- the MS 707 forwards RES1 to the AuC 701. If XRESl and RES1 match, the AuC 701 sends an authentication pass message to the MS 707, and communication over the air interface with the newly created DCKl may commence.
- FIG. 8 A diagram showing the challenge-and-response process to authenticate an authentication center by a mobile station in accordance with the TETRA Standard is shown in FIG. 8.
- an MS 707 When authenticating an AuC 701, such as a KMF 101, an MS 707 combines the mobile authentication key, K, with RS utilizing the encryption algorithm TA21, as defined in the TETRA Standard.
- the TA21 process 801 outputs KS', which is input with RAND2 (a random number) to the encryption algorithm TA22, as defined in the TETRA Standard.
- the TA22 process 803 outputs XRES2, an expected response, and DCK2, a derived cipher key for the mobile 707.
- RAND2 is provided to the AuC 701.
- the AuC 701 goes through ⁇ similar process, by combining the mobile authentication key, K, for the MS 707 with RS utilizing the TA21 process 801.
- the TA21 process 801 of the AuC 701 outputs KS', which is input with RAND2 to the TA22 process 803.
- the output of the TA22 process 803 in the AuC 701 is RES2, a response to the challenge, and DCKl, the derived cipher key for the mobile.
- the AuC 701 forwards RES and RS to the MS 707.
- the MS 707 sends an authentication pass message to the AuC 701, and communication over the air interface with the newly created DCKl may commence. If XRES and RES do not match, the MS 707 sends an authentication fail message to the AuC 701, and communication over the air interface with the newly created DCKl does not take place.
- FIG. 9 shows an implementation of the authentication process of the TETRA Standard including how various system devices within the infrastructure perform within the authentication process.
- FIG. 9 shows how the ZC 107, including the HLR 109 and VLR 111, and BS 115 act as proxies, or authentication agents, for the KMF 101 in the authentication process.
- KS and KS' encrypted by the interkey, and RS are passed along from the KMF 101 to the UCS 103, to the first ZM 105, and to the
- HLR 109 of the first zone controller 107 HLR 109 of the first zone controller 107.
- the VLR 111 After the BS 115 sends a request for authentication of the MS 401 to the ZC 107, the VLR 111 generates RAND1 and uses KS and RAND1 with the TA12 process to generate XRESl and DCKl, in accord with FIG.7 herein, and forwards RAND1 and RS to the BS 115, which forwards RAND1 and RS over the air to the MS 401.
- the MS 401 combines its own K and RS with the TA11 process to generate KS, then combines RAND1 and KS in accord with FIG. 7 herein, yielding RESl and DCKl, and forwards RESl to the BS 115, which forwards RESl to theqVLR 111 at the ZC 107.
- the VLR 111 compares RESl and XRESl, and the result is Rl.
- RESl and XRESl match, DCKl and the SAI for the MS 401 are stored in the VLR 111 and HLR 109 and DCKl (encrypted by the interkey).
- DCKl is encrypted with the intrakey for the first zone prior to being sent to the BS 115.
- Rl is forwarded to the BS 115 in acknowledgment that authentication passed, and the BS 115 stores DCKl and sends Rl to the MS 401 indicating authentication has passed.
- the VLR 111 discards the newly created DCKl without storing or forwarding to the BS 115 and forwards Rl, a negative acknowledgment of the authentication process, to the BS 115, and the BS 115 sends Rl to the MS 401 indicating authentication has failed.
- the MS 403 sends
- the MS 403 combines RS and its own K with process TA21, yielding KS', which is then combined with RAND2 in the TA22 process in accord with FIG. 8 herein, yielding XRES2 and DCK2.
- the MS 403 compares RES2 and XRES2.
- the MS 403 sends message R2 to the BS 129 in acknowledgment that authentication passed, the BS 129 sends R2 to the ZC 121, and the VLR 125 causes DCK2 and the SAI for the mobile 403 to be stored in the VLR 125 and the HLR 123 for the MS 403 and forwards DCK2 to the BS 129, which stores DCK2.
- DCK2 is encrypted with the intrakey for the second zone prior to being sent to the BS 129.
- the MS 403 sends message R2 to the BS 129 indicating that authentication failed, the BS 129 sends R2 to the ZC 121, and the VLR 125 discards the newly created DCK2 without sending it to the BS 129.
- the VLR 111 obtains the SAI from the HLR for the MS 401 or 403.
- the SAI is simply passed within the ZC 107 to the VLR 111.
- the zone for the home HLR is determined from a home zone mapping table that maps ITSI to its Home Zone, and the SAI is forwarded to the ZC 107 to the VLR 111.
- the key material when the key material is forwarded from the HLR for the MS 401 or 403 to the VLR 111, at least some of the SAI, in particular KS and KS', are encrypted with the interkey.
- DCK is transferred within a zone, DCK is encrypted with KEK Z .
- zone where authentication takes place is not the home zone for the MS 401 or 403, updated SAI and DCK information will be inter key encrypted, at least in part, and forwarded to the appropriate VLR.
- keys are passed between devices that require a different encryption key, one device receives a message, decrypts it with one key, and re-encrypts the result with another key for the next device.
- FIG. 10 shows MSI 401 switching from site 1 to site 2 within zone 1 and MS2 403 roaming from zone 2 to zone 1.
- KS, KS', and DCK are stored encrypted at the HLR, and DCK is sfcpred encrypted at the HLR and VLR in the preferred embodiment, they are shown unencrypted in FIG. 10 for the sake of simplicity.
- the pull procedure is initiated by the BS 117 when it recognizes that it does not have the DCK for the MS 401 that has sent an encrypted message, for example, a DCK-encrypted location update message.
- the BS 117 may optionally forward an acknowledgment of receipt of the encrypted message to the mobile station 401.
- the identity, ITSIl, of the MS 401 is encrypted with CCK, so the BS 117 is able to determine which MS has sent the message, even though it does not have DCKl for the MS 401.
- the BS 117 requests the DCKl from the ZC 107.
- the ZC 107 determines if it needs to request DCKl from a different zone.
- the ZC 107 sends DCKl to the BS 117 encrypted with the intrakey KEK Zi .
- the BS 117 uses DCKl to decrypt the location update message for MSI 401, and any subsequent message(s) from the MS 401, and forwards the location update to the ZC 107.
- the VLR 111 for the MS 401 is not updated with the MS location until the MS implicitly authenticates or performs a full authentication. Receipt of a properly decrypted location update message is considered an implicit authentication, at which time the VLR 111 would be updated.
- MS2 403 has roamed from zone 2 to zone 1.
- the pull procedure is initiated by the BS 115 when it recognizes that it does not have the DCK for the MS 403 that has sent an encrypted message, for example, a DCK- encrypted location update message.
- the BS 115 may optionally forward an acknowledgment of receipt of the encrypted message to the mobile station 403.
- the identity, ITSI2, of the MS 403 is encrypted with CCK, so the BS 115 is able to determine which MS has sent the message, even though it does not have DCK2 for the MS 403.
- the BS 115 requests the DCK2 from the ZC 107.
- the ZC 107 determines if it needs to request DCK2 from a different zone, which is required in this case, because MS2 403 is roaming from a different zone, zone 2, and the HLR 123 for the MS 403 is in zone 2.
- the ZC 107 determines which zone has the needed key material and sends a request to that target zone for the key material.
- DCK2 is found in the HLR 123 for zone 2, which is the target zone, and DCK2 is sent to the ZC 107 from that zone's HLR 123 after being encrypted with interkey, KEK M .
- the ZC 107 sends DCK2 to the BS 115 encrypted with the intrakey KEK Z ⁇ .
- the BS 115 uses DCK2 to decrypt the location update message for MS2 403, and any subsequent message(s) from the MS 403, and forwards the location update to the ZC 107.
- RS, KS, KS' are requested at a later time from the HLR 123 so that a full authentication may be performed as necessary.
- the VLR 111 for the MS 403 is not updated with the MS location until the MS implicitly authenticates or performs a full authentication. Receipt of a properly decrypted location update message is considered an implicit authentication, at which time the VLR 111 would be updated.
- the process is the same as described above with respect to the DCK, except that the VLR 111 obtains the GCK, combines it with a CCK, as described below in FIG. 15 and its associated text, and forwards the resultant MGCK, encrypted with the intrakey KEK Z ⁇ , to the BS 115 or 117.
- a diagram illustrating a key push within a communication system is shown in FIG. 11. The key push procedure is used to forward a key, such as the DCK or GCK/MGCK, to a forwarding site when an MS switches sites from its current site to the forwarding site.
- FIG. 11 shows an example of a transfer of DCK2 between zones and a transfer of DCKl within a zone.
- the MS initiates the procedure.
- KS, KS', and DCK are stored encrypted at the HLR, and DCK is stored encrypted at the HLR and VLR " in th ⁇ , preferred embodiment, they are shown unencrypted in FIG. 11 for the sake of simplicity.
- MSI 401 begins the process of roaming from BS1 115, having Location Area Identification 1 (LAID1), at site 1 to BS2 117, having Location Area Identification 2 (LAID2) at site 2 at zone 1.
- the MS 401 sends to BS1 115 a message indicating that MSI will roam to site 2. In the preferred embodiment, this message is an OTAR Prepare message.
- the BS 115 relays this message to the ZC 107.
- the ZC 107 determines if the DCK needs to be transferred to another zone or not by determining whether or not the site to which the MS 401 is roaming is in its zone or not. In this example, site 2 is also serviced by the ZC 107, thus there is no need to transfer the DCK to another zone.
- the ZC 107 responds to the BS 115 with a use short delay message.
- the BS 115 holds off the MS 401 from switching to site 2 by a delay equivalent to the short delay, which delay approximates the time it will take to forward DCK to the next site from the VLR 111 in the same zone.
- the short delay is less than 50 ms.
- the MS 401 waits for an ok from the BS 115 before operating at the new site, e.g., roaming, switching sites, or communicating, and the BS 115 sends the ok after the short delay period expires.
- the VLR 111 at ZC1 107 encrypts DCKl with the intrakey and forwards it to BS2 117 at site 2, where the MS 401 and BS2 117 will be able to exchange encrypted messages using DCKl.
- the VLR 111 for the MS 401 is not updated with the MS location until the MS 401 implicitly authenticates or performs a full authentication.
- MS2 403 begins the process of roaming from BS3 129, having Location
- the MS 403 sends to BS3 129 a message indicating that MS2 will roam to site 1. In the preferred embodiment, this message is,an OTAR Prepare message.
- the BS 129 relays this message to the ZC #21.
- the ZC 121 determines if the DCK needs to be transferred to another zone or not by determining whether or not the site to which the MS 401 is roaming is in its zone or not. In this example, site 1 is not serviced by the ZC 121, thus there is a need to transfer the DCK to another zone. Because the DCK is transferred to another zone, the ZC 121 responds to the BS 129 with a use long delay message.
- the BS 129 holds off the MS 403 from switching to site 1 by a delay equivalent to the long delay, which delay approximates the time it will take to forward DCK from the VLR 111 to the site in the next zone.
- the long delay is greater than or equal to 50 ms.
- the VLR 125 at ZC1 121 encrypts DCK2 with the interkey and forwards it to ZC1 107, which decrypts it with the interkey, encrypts it with the intrakey KEK Zi , and forwards the result to BS1 115 at site 1, where the MS 403 and BS2 115 will be able to exchange encrypted messages using DCK2.
- the VLR 111 for the MS 403 is not updated with the MS location until the MS 403 implicitly authenticates or performs a full authentication, at which time the VLR 125 for MS2 in ZC2 121 is eliminated.
- FIG. 12 is a diagram showing distribution of a static cipher key to a BS within a communication system.
- the SCK is a system wide voice traffic key that is used to encrypt voice, data, ESI (encrypted short identity), and signaling traffic when authentication is not available.
- SCKs are identified by SCKN and SCK-VN, and are stored in the KMF 101 encrypted by a hardware key and in the ZMs 105 and 119 encrypted by TA31. In the preferred embodiment, there may be up to 32 distinct SCKs in the entire system.
- Each BS stores one SCK, identified by SCK number (SCKN), each of which has an SCK version number (SCK-VN), although SCK may have multiple versions that are or were used in the system.
- SCKN has a version number SCK-VN, and in the preferred embodiment, two version numbers, i.e., two keys, are stored for each SCKN.
- the MS must be able to store 32 SCKs for one SCK-VN, in addition to 32 SCKs for another SCK- VN.
- the 31 additional SCKs in the MS are defined for direct operation between mobile stations.
- a new SCK replaces the oldest SCK-VN.
- the SCK may be provided to BSs and mobile stations in several ways, including via a Key Variable Loader (KVL), via computer software such as RSS Software available from Motorola, Inc., and via OTAR (Over-the-Air Rekeying) via the home zone ATR of the MS.
- KVL Key Variable Loader
- RSS Software available from Motorola, Inc.
- OTAR Over-the-Air Rekeying
- FIG. 12 A process to transfer an SCK to each BS in the system is shown in FIG. 12.
- the KMF 101 determines that an SCK update is due, the KMF 101 generates a new SCK.
- the KMF 101 uses the BS to home ZC map from the UCS 103 and a table lookup based on the zone to obtain the address for the ATR in the zone.
- the KMF 101 encrypts the SCK with the intrakey, KEK Z , for the zone in which the BS is located, and sends the encrypted key to the ZM for that BS.
- the ZM stores a copy and forwards it to the intended BS.
- An unencrypted ACK is sent from the BS to the ZC and to the KMF 101 via the ATR in the zone where the BS resides.
- ACK represents that the SCK was received correctly in the BS.
- a specific example of an SCK transfer to BS1 115 includes a transfer of site information, including an BS to home zone controller map, from the UCS 103 to the KMF 101.
- the KMF 101 uses the map to determine that BS1 115 is located in zone 1.
- the KMF 101 generates the SCK and encrypts it with the intrakey, KEK Zi , for zone 1 where BS1 is located.
- the KMF 101 forwards the encrypted SCK to the ZM 105 for zone 1.
- ZMl 105 stores a copy of the encrypted SCK and-forwards it to BS1 115 via a wireline link.
- BS1 115 decrypts the encrypted SCK using KEK Zi and stores the SCK unencrypted.
- BS1 115 sends an unencrypted ACK to the KMF 101 via ZC1 107 and the ATR 113 in zone 1. Transfers of SCK to BS3 and BS4 are similarly performed.
- FIG. 13 A diagram showing distribution of a static cipher key to a mobile station within a communication system is shown in FIG. 13.
- the KMF 101 determines that an SCK update for an MS 401 is due, the KMF 101 generates a new SCK key material for the MS 401 according to FIG. 10 titled "Distribution of SCK to an individual by an authentication center" and its associated text in the TETRA Standard.
- the SCK generation process yields the key material SSCK (a sealed SCK), SCKN (SCK number), SCK-VN (SCK version number), and RSO (the random seed used in the process).
- the KMF 101 uses the ITSI to home ZC map from the UCS 103 and a table lookup based on the zone to obtain the address of the ATR for the home zone.
- the home zone for MSI 401 is zone 2.
- the KMF 101 forwards SSCK, SCKN, SCK-VN, and RSO to the ATR 127 of the home zone (2) for the MS 401. If the MS 401 is not on the system, the ATR 127 sends a NACK back to the KMF 101. If the MS 401 is on the system, the SCK is delivered to the MS 401 via the zone in which the MS 401 is currently located.
- the SCK key material e.g., SSCK, SCKN, SCK-VN, and RSO
- the SCK key material may optionally be encrypted for transfer among system devices.
- the home zone controller 121 of zone 2 determines which zone the MS 401 is currently located in (zone 1 in FIG. 12) by looking it up in the HLR 123 of zone 2.
- ZC2 121 forwards SSCK, SCKN, SCK-VN, and RSO to the zone controller 107 of the zone where the MS 401 is presently located.
- ZC1 107 forwards SSCK, SCKN, SCK-VN, and RSO to the BS 115 where the MS 401 is located.
- the BS 115 decrypts the SSCK, SCK-VN, and RSO with the intrakey, KEK Zi , and forwards the result to the MS 401.
- An unencrypted ACK is sent from the MS 401 to the BS 115 to the ZC 107 and to the KMF 101 via the ATR 113 in the zone where the BS 115 resides.
- the ACK represents that the SCK was received and unsealed correctly in the MS (the unsealing process is described in the TETRA Standard).
- the VLR of the home zone controller 121 forwards SSCK, SCKN, SCK-VN, and RSO to the BS 129 where the MS 401 is located (not shown but assumed for this example).
- the BS 129 forwards SSCK, SCKN, SCK-VN, and RSO to the MS 401.
- An unencrypted ACK is sent from the MS 401 to the BS 129 to the ZC 121 and to the KMF 101 via the ATR 127 in the zone where the BS 115 resides.
- the ACK represents that the SCK was received and unsealed correctly in the MS (the unsealing process is described in the TETRA Standard).
- FIG. 14 is a diagram showing distribution of a common cipher key to a mobile station and a BS within a communication system.
- the CCK is a location area based traffic key that is used to encrypt voice, data, and signaling within a location area (LA) and is only used for outbound communications.
- the CCK is meant for use with the encryption of group call traffic in the TETRA Standard.
- the CCK is also used to encrypt the subscriber identity creating the encrypted short identity (ESI).
- Group call traffic within the LA uses the CCK when there is no GCK available or it is disabled.
- a location area may be a small as a site, thus there could be as many as CCKs as sites in the system. It is possible for more than one location area to have the same
- CCK is identified by CCK-ID (e.g., CCK1, CCK2, and so forth) and
- CCK-IDs are in the ZC and the BS to enable a gradual rekeying of the MS in the system. While one CCK is in use r the next one is distributed to the MS. In the preferred embodiment, each st ⁇ e maintains a CCK for each site adjacent to the site for seamless handoffs between sites and to facilitate consistent mobility management. When an adjacent CCK is given to an MS, the latest two CCKs are transferred to the MS. A new CCK replaces the oldest CCK-ID. Long term storage of CCKs occurs in the ZMs 105 and 119.
- the TETRA Standard supports several methods to provision CCK over-the-air, and the same request/provide methodology used for each of the air interface keys, and also allows key request upon registration and cell change by the mobile station.
- the CCK to BS procedure illustrated in FIG. 14 is used to transfer a CCK from the KMF 101 to a BS (site) 115.
- the KMF 101 determines that it is time for the CCK of a BS 115 to be updated and generates appropriate CCK(s).
- each BS is a Location Area (LA) and has its own Location Area Identification (LAID).
- FIG. 14 shows the transfer of CCK1 and CCK2 to zone 1 and the transfer of CCK3 to zone 2.
- the CCKs are encrypted with the intrakey, KEK Z , for the zone where the LA is located.
- the UCS 103 provides a site-to-zone map and an ZM-to-zone map to the KMF 101.
- the KMF 101 uses these maps to send the keys directly to the appropriate ZM 105 or 119, which stores CCK and forwards CCK to the zone controller 107 or 121.
- the UCS 103 obtains the site parameters from the ZMs 105 and 119 to create the adjacent site list that is sent to the KMF 101 and forwarded the ZMs 105 and 119 to be forwarded to the zone controllers 107 and 121 for use. If an adjacent site is in a different zone, the key is transferred between the involved ZCs.
- the ZC encrypts the CCK with the interkey, KEK M , for transfer between zone controllers.
- the zone controllers 107 and 121 send the adjacent site CCKs to the appropriate sites.
- each site on the adjacent site list will have the CCKs for sites adjacent to that site.
- the adjacent CCKs are used so that the MS may request the CCK for the adjacent site before the MS switches sites.
- the BS 115 may also forward
- CCKs are encrypted with DCK for the particular MS 401 prior to transmitting the encrypted CCK to the MS 401.
- ACKs are sent by the BS to ZC and are returned to the KMF 101 via the ATR (where the BS resides). Because the KMF 101 is unaware of adjacency, it does not need ACKs from adjacent distributions of CCK. Because the KMF 101 tracks which BS is given a CCK, the BS tracks the currency of the CCKs, i.e., which MS has a CCK for a given Location Area, and forwards ACKs once the CCK is current.
- the zone controller will create four MGCKs using the latest two CCK-IDs and the latest two GCK-VNs and distribute them accordingly (see FIG. 15 and FIG. 16).
- the CCK is a zone specific parameter so there is no need to go through the UCS 103.
- the KMF 101 sends the CCK information directly to the appropriate zone manager 105 or 119, which is different than the re- keying methodology of other air interface keys.
- the UCS 103 obtains the site information from the zone managers 105 or 119 to create the adjacent site list.
- GCK 15 is a diagram showing distribution of a group cipher key to a BS within a communication system.
- GCK is identified by GTSI (Group TETRA Subscriber ID as referred to in the TETRA standard) and GCK-VN.
- GCKN is logically equivalent to GTSI from a key management perspective.
- Long term storage of GCK occurs in the UCS and ZM.
- MGCK which is a combination of GCK and CCK, is identified by GTSI (or GCKN), CCK-ID (with LAID), and GCK-VN.
- GTSI MGCKs per talkgroup
- MGCKs are not stored in a ZC 107 or 121, but are created by a ZC 107 or 121 and sent to the BS 115, provided that an MS affiliated with that GTSI is at the site of the BS ' llS ⁇ which does not receive the GCK because it is a long-term key.
- GCK-VN is sent along with GCK and MGCK for identification purposes.
- the procedure to update a GCK for a talkgroup record has two parts.
- the first part includes updating the actual GCK in the for the talkgroup, the second part includes generating the resultant MGCK as a result of the update and distributing the MGCK to the sites.
- the procedure of FIG. 15 transfers a GCK from the KMF 101 to the talkgroup HLR in the zone controller at the home zone for the talkgroup.
- the KMF 101 determines that it is time for the GCK to be updated, the KMF 101 generates a GCK for each talkgroup and maintains a GTSI- GCK table.
- the GCKs are stored hardware encrypted at the KMF 101.
- the KMF 101 does not know which ZC has the HLR for the GTSI, so the KMF 101 sends the GCK encrypted with the interkey, KEK M , to the UCS 103.
- the UCS 103 stores the key material and forwards it to the home ZM 105 or 119 for the talkgroup (GTSI) associated with the GCK.
- the ZM 105 or 119 forwards the key material to its ZC 107 or 121, which stores the key material in the group HLR for GTSI encrypted by KEK M .
- the ZC 107 verifies that the key material can be decrypted correctly and sends an ACK back to the KMF 101 via the ATR 113 where the group HLR 109 for GTSI resides.
- the ACK reflects that the HLR 109 contains a correct encrypted copy of the GCK.
- the ZC 107 decrypts the key material with KEK M and re-encrypts it with the intrakey, KEK Z , for storage in the VLR 111. Any other VLRs, such as VLR2 125, outside of the home zone associated with the GTSI will have GCK encrypted with KEK M forwarded to them.
- FIG. 15 shows both the inter-zone and intra-zone cases.
- MGCK is a combination of GCK and CCK generated by a ZC using the TA71 algorithm 1501, 1503, or 1505, when GCK changes or CCK changes, the MGCK must also change accordingly.
- the four MGCKs are sent to all sites having a talkgroup affiliation matching the GTSI for GCK. Because the latest 2 CCK-IDs and latest 2 GCK-VNs are stored, four versions of the MGCK need to be sent to the BS.
- MGCK when sending MGCK to a site, it needs to be encrypted using the intrakey, KEK Z
- the GCK is obtained from the VLR talkgroup record and decrypted with the intrakey, KEK Z , and combined with CCK to create MGCK.
- the resultant MGCK is encrypted using the intrakey, KEK Z , and sent to the appropriate sites.
- Transfer of an MGCK to a BS may be triggered by a number of events.
- Examples of triggers include a mobile station associated with the GCK for the MGCK residing at the BS when the either the GCK or CCK is generated; a mobile station arriving at the BS when no previous talkgroup affiliation at that BS had occurred; and a mobile station changing talkgroup affiliation, while residing at the BS, to a talkgroup not previously associated with the BS.
- FIG. 16 A diagram showing distribution of a group cipher key to a mobile station within a communication system is shown in FIG. 16.
- the KMF 101 determines that an GCK update for an MS 401 is due, the KMF 101 generates a new GCK key material for the MS 401 according to FIG. 8 titled "Distribution of a group cipher key to an individual" and its associated text in the TETRA Standard.
- the GCK generation process yields the key material SGCK (a sealed GCK), GCKN (GCK Number), GCK- VN (GCK version number), and RSO (the random seed used in the process).
- the KMF 101 uses the ITSI to home ZC map from the UCS 103 and a table lookup based on the zone to obtain the address of the ATR for the home zone.
- the home zone for MSI 401 is zone 2.
- the KMF 101 forwards SGCK, GCKN, GCK-VN, and RSO to the ATR 127 of the home zone (2) for the MS 401. If the MS 401 is not on the system, the ATR 127 sends a NACK back to the KMF 101. If the MS 401 is on the system, the GCK is delivered to the MS 401 via the zone in which the MS 401 ⁇ currently located.
- the GCK key material e.g., SGCK, GCKN, GCK- VN, and RSO
- the GCK key material may optionally be encrypted for transfer among system devices.
- the home zone controller 121 of zone 2 determines which zone the MS 401 is currently located in (zone 1 in FIG. 16) by looking it up in the HLR 123 of zone 2.
- ZC2 121 forwards SGCK, GCKN, GCK-VN, and RSO to the zone controller 107 of the zone where the MS 401 is presently located.
- ZC1 107 forwards SGCK, GCKN, GCK-VN, and RSO to the BS 115 where the MS 401 is located.
- the BS 115 forwards SGCK, GCKN, GCK-VN, and RSO the MS 401.
- An unencrypted ACK is sent from the MS 401 to the BS 115 to the ZC 107 and to the KMF 101 via the ATR 113 in the zone where the BS 115 resides.
- the ACK represents that the GCK was received and unsealed correctly in the MS (the unsealing process is described in the TETRA Standard).
- the home zone controller 121 forwards SGCK, GCKN, GCK-VN, and RSO to the BS 129 where the MS 401 is located (not shown but assumed for this example).
- the BS 129 forwards SGCK, GCKN, GCK-VN, and RSO to the MS 401.
- ACK is sent from the MS 401 to the BS 129 to the ZC 121 and to the KMF
- the ACK represents that the GCK was received and unsealed correctly in the MS (the unsealing process is described in the TETRA Standard).
- FIG. 17 is a flowchart showing a method of key persistence at a site in a communication system in accordance with the invention.
- Key persistence refers to the time a key remains stored at any system device or MS. If an air interface traffic key is deleted from a site when the MS leaves the site, and the key is removed too quickly, the MS may return to the site requiring the key to be set up again. If the MS is traveling between zone borders or site boundaries for a period of time, the key material for the MS may need to be constantly set up if the key material is deleted from a site too quickly after the MS leaves the site. If the key material is left at a site for too long, duplicate keys may be set up, creating ambiguity and the likelihood of authentication failures, particularly for implicit authentication.
- the persistence time is based on an expected average authentication rate in the communication system, and preferably the persistence time is less than the expected average authentication rate in the communication system.
- the expected average authentication rate is based on an average number of times a mobile station authenticates within a time period.
- step 1701 when a MS arrives at a site, key(s) and/or key material associated with the MS 401 are stored at the site. If at step 1703 it is determined that the mobile has left the site, a persistence timer is set at step 1705, unless it had already been set or reset, in which case the process simply continues with step 1709. When the timer expires at step 1707, the process continues with step 1709 where the key(s) and/or key material associated with the mobile 401 are deleted from the site, and the process ends.
- Step 1709 may also be reached (not shown) if a system device, such as a zone controller, directs the site to delete certain key(s) and/or key material for any reason.
- the zone controller typically determines when the mobile leaves a site based on HLR and VLR updates.
Abstract
Description
Claims
Priority Applications (6)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DK02720815T DK1362444T3 (en) | 2001-02-16 | 2002-01-18 | Method for storing and distributing encryption nails |
AU2002251789A AU2002251789A1 (en) | 2001-02-16 | 2002-01-18 | Method and apparatus for storing and distributing encryption keys |
EP02720815A EP1362444B1 (en) | 2001-02-16 | 2002-01-18 | Method for storing and distributing encryption keys |
DE60218289T DE60218289T2 (en) | 2001-02-16 | 2002-01-18 | METHOD FOR STORING AND DISTRIBUTING ENCRYPTION KEYS |
IL15704902A IL157049A0 (en) | 2001-02-16 | 2002-01-18 | Method and apparatus for storing and distributing encryption keys |
IL157049A IL157049A (en) | 2001-02-16 | 2003-07-22 | Method and apparatus for storing and distributing encryption keys |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/785,849 | 2001-02-16 | ||
US09/785,849 US7266687B2 (en) | 2001-02-16 | 2001-02-16 | Method and apparatus for storing and distributing encryption keys |
Publications (2)
Publication Number | Publication Date |
---|---|
WO2002067486A2 true WO2002067486A2 (en) | 2002-08-29 |
WO2002067486A3 WO2002067486A3 (en) | 2002-10-24 |
Family
ID=25136810
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2002/001479 WO2002067486A2 (en) | 2001-02-16 | 2002-01-18 | Method and apparatus for storing and distributing encryption keys |
Country Status (10)
Country | Link |
---|---|
US (6) | US7266687B2 (en) |
EP (6) | EP1777870B1 (en) |
AT (2) | ATE551794T1 (en) |
AU (1) | AU2002251789A1 (en) |
DE (1) | DE60218289T2 (en) |
DK (1) | DK1362444T3 (en) |
ES (1) | ES2280528T3 (en) |
IL (2) | IL157049A0 (en) |
PT (1) | PT1362444E (en) |
WO (1) | WO2002067486A2 (en) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1492377A2 (en) | 2003-06-27 | 2004-12-29 | Motorola Inc. | Communication system communication unit and method for performing encrypted communication |
US20080002829A1 (en) * | 2006-06-27 | 2008-01-03 | Nokia Corporation | Identifiers in a communication system |
EP1638355A3 (en) * | 2004-09-15 | 2008-02-20 | Motorola, Inc. | A communication system and method of call group management therefor |
WO2008122906A1 (en) * | 2007-04-05 | 2008-10-16 | Koninklijke Philips Electronics N.V. | Wireless sensor network key distribution |
WO2015166099A1 (en) * | 2014-05-02 | 2015-11-05 | Koninklijke Kpn N.V. | Method and system for providing security from a radio access network |
Families Citing this family (55)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7539313B1 (en) * | 2000-09-13 | 2009-05-26 | Nortel Networks Limited | System and method for key management across geographic domains |
US7266687B2 (en) * | 2001-02-16 | 2007-09-04 | Motorola, Inc. | Method and apparatus for storing and distributing encryption keys |
US8077679B2 (en) | 2001-03-28 | 2011-12-13 | Qualcomm Incorporated | Method and apparatus for providing protocol options in a wireless communication system |
US9100457B2 (en) | 2001-03-28 | 2015-08-04 | Qualcomm Incorporated | Method and apparatus for transmission framing in a wireless communication system |
US7693508B2 (en) * | 2001-03-28 | 2010-04-06 | Qualcomm Incorporated | Method and apparatus for broadcast signaling in a wireless communication system |
US8121296B2 (en) | 2001-03-28 | 2012-02-21 | Qualcomm Incorporated | Method and apparatus for security in a data processing system |
US7352868B2 (en) * | 2001-10-09 | 2008-04-01 | Philip Hawkes | Method and apparatus for security in a data processing system |
US7649829B2 (en) | 2001-10-12 | 2010-01-19 | Qualcomm Incorporated | Method and system for reduction of decoding complexity in a communication system |
US7221764B2 (en) * | 2002-02-14 | 2007-05-22 | Agere Systems Inc. | Security key distribution using key rollover strategies for wireless networks |
US7194619B2 (en) * | 2002-03-26 | 2007-03-20 | International Business Machines Corporation | Remotely booting devices in a dense server environment without manually installing authentication parameters on the devices to be booted |
JP2004007567A (en) * | 2002-04-17 | 2004-01-08 | Toshiba Corp | Communications system, communications method, and communications program |
US7590844B1 (en) * | 2002-04-26 | 2009-09-15 | Mcafee, Inc. | Decryption system and method for network analyzers and security programs |
US7599655B2 (en) | 2003-01-02 | 2009-10-06 | Qualcomm Incorporated | Method and apparatus for broadcast services in a communication system |
US8098818B2 (en) | 2003-07-07 | 2012-01-17 | Qualcomm Incorporated | Secure registration for a multicast-broadcast-multimedia system (MBMS) |
US8718279B2 (en) | 2003-07-08 | 2014-05-06 | Qualcomm Incorporated | Apparatus and method for a secure broadcast system |
US8724803B2 (en) | 2003-09-02 | 2014-05-13 | Qualcomm Incorporated | Method and apparatus for providing authenticated challenges for broadcast-multicast communications in a communication system |
US7461248B2 (en) * | 2004-01-23 | 2008-12-02 | Nokia Corporation | Authentication and authorization in heterogeneous networks |
JP4554968B2 (en) * | 2004-03-26 | 2010-09-29 | 株式会社日立製作所 | Wireless communication terminal device in ad hoc network |
JP3761557B2 (en) * | 2004-04-08 | 2006-03-29 | 株式会社日立製作所 | Key distribution method and system for encrypted communication |
KR100704678B1 (en) * | 2005-06-10 | 2007-04-06 | 한국전자통신연구원 | Method for managing group traffic encryption key in wireless portable internet system |
JP4823717B2 (en) * | 2006-02-28 | 2011-11-24 | 株式会社日立製作所 | Encryption communication system, terminal state management server, encryption communication method, and terminal state management method |
US8073444B2 (en) * | 2006-03-17 | 2011-12-06 | Camiant, Inc. | Distributed policy services for mobile and nomadic networking |
US8856511B2 (en) * | 2006-12-14 | 2014-10-07 | Blackberry Limited | System and method for wiping and disabling a removed device |
US8059819B2 (en) * | 2007-01-17 | 2011-11-15 | Panasonic Electric Works Co., Ltd. | Systems and methods for distributing updates for a key at a maximum rekey rate |
US8588420B2 (en) | 2007-01-18 | 2013-11-19 | Panasonic Corporation | Systems and methods for determining a time delay for sending a key update request |
US8705738B2 (en) * | 2007-09-28 | 2014-04-22 | Cisco Technology, Inc. | Selective security termination in next generation mobile networks |
CN101400059B (en) * | 2007-09-28 | 2010-12-08 | 华为技术有限公司 | Cipher key updating method and device under active state |
US8856003B2 (en) | 2008-04-30 | 2014-10-07 | Motorola Solutions, Inc. | Method for dual channel monitoring on a radio device |
CN101616408B (en) * | 2008-06-23 | 2012-04-18 | 华为技术有限公司 | Key derivation method, key derivation device and system |
US8281388B1 (en) * | 2008-06-27 | 2012-10-02 | Symantec Corporation | Hardware secured portable storage |
JP4881922B2 (en) * | 2008-07-31 | 2012-02-22 | キヤノン株式会社 | COMMUNICATION DEVICE, IMAGE INPUT DEVICE, IMAGE OUTPUT DEVICE, WIRELESS COMMUNICATION CIRCUIT, COMMUNICATION DEVICE CONTROL METHOD, PROGRAM |
US8401195B2 (en) * | 2008-09-22 | 2013-03-19 | Motorola Solutions, Inc. | Method of automatically populating a list of managed secure communications group members |
US8887310B2 (en) * | 2009-11-19 | 2014-11-11 | Motorola Mobility Llc | Secure consumer programming device |
US9450928B2 (en) * | 2010-06-10 | 2016-09-20 | Gemalto Sa | Secure registration of group of clients using single registration procedure |
WO2013056737A1 (en) * | 2011-10-19 | 2013-04-25 | Technische Universität Dortmund | Access method and communication system for accessing a protected communication service |
US8897452B2 (en) * | 2011-10-27 | 2014-11-25 | Architecture Technology, Inc. | Network having multicast security and method therefore |
EP2786292B1 (en) * | 2011-11-28 | 2016-06-08 | Porticor Ltd. | Methods and devices for securing keys for a non-secured, distributed environment with applications to virtualization and cloud-computing security and management |
US8738052B2 (en) * | 2011-12-19 | 2014-05-27 | Motorola Solutions, Inc. | Method and apparatus for updating and using updated group aliases and incident IDs |
JP5981761B2 (en) * | 2012-05-01 | 2016-08-31 | キヤノン株式会社 | Communication device, control method, program |
US10333882B2 (en) | 2013-08-28 | 2019-06-25 | The Nielsen Company (Us), Llc | Methods and apparatus to estimate demographics of users employing social media |
US10341194B2 (en) | 2015-10-05 | 2019-07-02 | Fugue, Inc. | System and method for building, optimizing, and enforcing infrastructure on a cloud based computing environment |
WO2018017609A1 (en) * | 2016-07-18 | 2018-01-25 | Fugue, Inc. | Secure asynchronous communications |
AT519476B1 (en) * | 2017-04-05 | 2018-07-15 | Ait Austrian Inst Tech Gmbh | Method for creating and distributing cryptographic keys |
US11917070B2 (en) | 2018-02-17 | 2024-02-27 | Carrier Corporation | Method and system for managing a multiplicity of credentials |
US11290436B2 (en) * | 2018-09-21 | 2022-03-29 | Cisco Technology, Inc. | Mechanism for encryption key distribution in computer networks |
US10984115B2 (en) | 2018-12-04 | 2021-04-20 | Bank Of America Corporation | System for triple format preserving encryption |
CN109462875B (en) * | 2019-01-16 | 2020-10-27 | 展讯通信(上海)有限公司 | Wireless roaming method, access point device and mobile station |
US11405215B2 (en) | 2020-02-26 | 2022-08-02 | International Business Machines Corporation | Generation of a secure key exchange authentication response in a computing environment |
US11489821B2 (en) | 2020-02-26 | 2022-11-01 | International Business Machines Corporation | Processing a request to initiate a secure data transfer in a computing environment |
US11310036B2 (en) | 2020-02-26 | 2022-04-19 | International Business Machines Corporation | Generation of a secure key exchange authentication request in a computing environment |
US11502834B2 (en) * | 2020-02-26 | 2022-11-15 | International Business Machines Corporation | Refreshing keys in a computing environment that provides secure data transfer |
US11652616B2 (en) | 2020-02-26 | 2023-05-16 | International Business Machines Corporation | Initializing a local key manager for providing secure data transfer in a computing environment |
US11546137B2 (en) | 2020-02-26 | 2023-01-03 | International Business Machines Corporation | Generation of a request to initiate a secure data transfer in a computing environment |
US11184160B2 (en) | 2020-02-26 | 2021-11-23 | International Business Machines Corporation | Channel key loading in a computing environment |
WO2024043877A1 (en) * | 2022-08-23 | 2024-02-29 | Hitachi Vantara Llc | Encryption key management across multiple computing devices |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5794139A (en) * | 1994-08-29 | 1998-08-11 | Sony Corporation | Automatic generation of private authentication key for wireless communication systems |
US5812955A (en) * | 1993-11-04 | 1998-09-22 | Ericsson Inc. | Base station which relays cellular verification signals via a telephone wire network to verify a cellular radio telephone |
US5850444A (en) * | 1996-09-09 | 1998-12-15 | Telefonaktienbolaget L/M Ericsson (Publ) | Method and apparatus for encrypting radio traffic in a telecommunications network |
US5889861A (en) * | 1995-01-12 | 1999-03-30 | Kokusai Denshin Denwa Co., Ltd | Identity confidentiality method in radio communication system |
Family Cites Families (46)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US1895A (en) * | 1840-12-10 | Machine foe cutting bound tenons and for cutting ob tubning otheb | ||
US4841433A (en) * | 1986-11-26 | 1989-06-20 | American Telephone And Telegraph Company, At&T Bell Laboratories | Method and apparatus for accessing data from data attribute tables |
GB8704920D0 (en) * | 1987-03-03 | 1987-04-08 | Hewlett Packard Co | Secure messaging system |
US5085629A (en) * | 1988-10-06 | 1992-02-04 | Medical Engineering Corporation | Biodegradable stent |
US5164988A (en) | 1991-10-31 | 1992-11-17 | International Business Machines Corporation | Method to establish and enforce a network cryptographic security policy in a public key cryptosystem |
US5329573A (en) * | 1991-11-27 | 1994-07-12 | At&T Bell Laboratories | Arrangement for obtaining authentication key parameters in a cellular mobile telecommunications switching network |
US5199072A (en) | 1992-02-03 | 1993-03-30 | Motorola, Inc. | Method and apparatus for restricting access within a wireless local area network |
US5317064A (en) * | 1992-12-11 | 1994-05-31 | E. I. Du Pont De Nemours And Company | Manufacture of polylactide stereocomplexes |
EP0658021B1 (en) | 1993-12-08 | 2001-03-28 | International Business Machines Corporation | A method and system for key distribution and authentication in a data communication network |
US5465300A (en) | 1993-12-27 | 1995-11-07 | Motorola, Inc. | Secure communication setup method |
FR2718312B1 (en) * | 1994-03-29 | 1996-06-07 | Rola Nevoux | Method for the combined authentication of a telecommunications terminal and a user module. |
GB9514285D0 (en) * | 1995-07-13 | 1995-09-13 | Univ Nottingham | Polymeric lamellar substrate particles for drug delivery |
RU2227379C2 (en) * | 1995-10-10 | 2004-04-20 | Квэлкомм Инкорпорейтед | Method and system for service programming with aid of radio signals |
US5776161A (en) * | 1995-10-16 | 1998-07-07 | Instent, Inc. | Medical stents, apparatus and method for making same |
US5732350A (en) * | 1995-12-06 | 1998-03-24 | Motorola, Inc. | Method for mobile station location registration with dynamic cell grouping for radiotelephone systems |
FI102235B1 (en) | 1996-01-24 | 1998-10-30 | Nokia Telecommunications Oy | Management of authentication keys in a mobile communication system |
NL1002379C2 (en) | 1996-02-19 | 1997-08-20 | Sallmetall Bv | Printable foil. |
JPH10112883A (en) | 1996-10-07 | 1998-04-28 | Hitachi Ltd | Radio communication exchange system, exchange, public key management device, mobile terminal and mobile terminal recognizing method |
US6108424A (en) * | 1997-01-09 | 2000-08-22 | U.S. Philips Corporation | Mobile radio telephone station comprising a protection system for at least one authentication number and method of protecting an authentication number |
US6026298A (en) | 1997-01-11 | 2000-02-15 | Compaq Computer Corporation | Method and apparatus for providing switch capability mediation in a mobile telephone system |
US5850445A (en) * | 1997-01-31 | 1998-12-15 | Synacom Technology, Inc. | Authentication key management system and method |
FI106605B (en) * | 1997-04-16 | 2001-02-28 | Nokia Networks Oy | authentication method |
US6245103B1 (en) * | 1997-08-01 | 2001-06-12 | Schneider (Usa) Inc | Bioabsorbable self-expanding stent |
USH1895H (en) * | 1997-09-26 | 2000-10-03 | Dsc/Celcore, Inc. | Application provider and method for communication |
US6223035B1 (en) | 1997-09-30 | 2001-04-24 | Motorola, Inc. | Method and apparatus for providing a subscriber record for packet data registration of a mobile station |
US7070607B2 (en) * | 1998-01-27 | 2006-07-04 | The Regents Of The University Of California | Bioabsorbable polymeric implants and a method of using the same to create occlusions |
GB2340344A (en) | 1998-07-29 | 2000-02-16 | Nokia Mobile Phones Ltd | Bilateral Data Transfer Verification for Programming a Cellular Phone |
IL126472A0 (en) | 1998-10-07 | 1999-08-17 | Nds Ltd | Secure communications system |
US6537284B1 (en) * | 1998-10-29 | 2003-03-25 | Kanji Inoue | Device for guiding an appliance |
JP2000181803A (en) | 1998-12-18 | 2000-06-30 | Fujitsu Ltd | Electronic data keeping device with key management function and method therefor |
US6418130B1 (en) | 1999-01-08 | 2002-07-09 | Telefonaktiebolaget L M Ericsson (Publ) | Reuse of security associations for improving hand-over performance |
CN1346562A (en) | 1999-02-10 | 2002-04-24 | 艾利森电话股份有限公司 | Utilization of gratuitous address resolution protocol for mobility support |
US6889328B1 (en) | 1999-05-28 | 2005-05-03 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for secure communication |
GB9922847D0 (en) | 1999-09-27 | 1999-11-24 | Simoco Int Ltd | Radio communications |
AU7854100A (en) | 1999-10-05 | 2001-05-10 | Nortel Networks Limited | Key exchange for network architecture |
JP3570311B2 (en) * | 1999-10-07 | 2004-09-29 | 日本電気株式会社 | Wireless LAN encryption key update system and update method thereof |
US6477387B1 (en) * | 1999-10-08 | 2002-11-05 | Motorola, Inc. | Method and apparatus for automatically grouping communication units in a communication system |
US6312458B1 (en) * | 2000-01-19 | 2001-11-06 | Scimed Life Systems, Inc. | Tubular structure/stent/stent securement member |
US6575888B2 (en) * | 2000-01-25 | 2003-06-10 | Biosurface Engineering Technologies, Inc. | Bioabsorbable brachytherapy device |
US6920559B1 (en) | 2000-04-28 | 2005-07-19 | 3Com Corporation | Using a key lease in a secondary authentication protocol after a primary authentication protocol has been performed |
US6876747B1 (en) * | 2000-09-29 | 2005-04-05 | Nokia Networks Oy | Method and system for security mobility between different cellular systems |
US7123719B2 (en) * | 2001-02-16 | 2006-10-17 | Motorola, Inc. | Method and apparatus for providing authentication in a communication system |
US7266687B2 (en) * | 2001-02-16 | 2007-09-04 | Motorola, Inc. | Method and apparatus for storing and distributing encryption keys |
US6607548B2 (en) * | 2001-05-17 | 2003-08-19 | Inion Ltd. | Resorbable polymer compositions |
WO2004016199A1 (en) * | 2002-08-15 | 2004-02-26 | Gmp Cardiac Care, Inc. | Stent-graft with rails |
US7182647B2 (en) | 2004-11-24 | 2007-02-27 | Cooper Technologies Company | Visible break assembly including a window to view a power connection |
-
2001
- 2001-02-16 US US09/785,849 patent/US7266687B2/en not_active Expired - Lifetime
-
2002
- 2002-01-18 ES ES02720815T patent/ES2280528T3/en not_active Expired - Lifetime
- 2002-01-18 EP EP06026909.9A patent/EP1777870B1/en not_active Expired - Lifetime
- 2002-01-18 AU AU2002251789A patent/AU2002251789A1/en not_active Abandoned
- 2002-01-18 PT PT02720815T patent/PT1362444E/en unknown
- 2002-01-18 AT AT06026913T patent/ATE551794T1/en active
- 2002-01-18 WO PCT/US2002/001479 patent/WO2002067486A2/en active IP Right Grant
- 2002-01-18 IL IL15704902A patent/IL157049A0/en unknown
- 2002-01-18 EP EP06026911A patent/EP1775876A3/en not_active Withdrawn
- 2002-01-18 EP EP06026912.3A patent/EP1775877B1/en not_active Expired - Lifetime
- 2002-01-18 DE DE60218289T patent/DE60218289T2/en not_active Expired - Lifetime
- 2002-01-18 EP EP06026913A patent/EP1775878B1/en not_active Expired - Lifetime
- 2002-01-18 DK DK02720815T patent/DK1362444T3/en active
- 2002-01-18 AT AT02720815T patent/ATE354898T1/en active
- 2002-01-18 EP EP06026910.7A patent/EP1775905B1/en not_active Expired - Lifetime
- 2002-01-18 EP EP02720815A patent/EP1362444B1/en not_active Expired - Lifetime
-
2003
- 2003-07-22 IL IL157049A patent/IL157049A/en active IP Right Grant
-
2007
- 2007-07-23 US US11/781,340 patent/US8817989B2/en active Active
- 2007-07-23 US US11/781,489 patent/US8964987B2/en active Active
- 2007-07-23 US US11/781,310 patent/US7840009B2/en not_active Expired - Lifetime
- 2007-07-23 US US11/781,323 patent/US7707419B2/en not_active Expired - Lifetime
- 2007-07-23 US US11/781,360 patent/US20080013736A1/en not_active Abandoned
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5812955A (en) * | 1993-11-04 | 1998-09-22 | Ericsson Inc. | Base station which relays cellular verification signals via a telephone wire network to verify a cellular radio telephone |
US5794139A (en) * | 1994-08-29 | 1998-08-11 | Sony Corporation | Automatic generation of private authentication key for wireless communication systems |
US5889861A (en) * | 1995-01-12 | 1999-03-30 | Kokusai Denshin Denwa Co., Ltd | Identity confidentiality method in radio communication system |
US5850444A (en) * | 1996-09-09 | 1998-12-15 | Telefonaktienbolaget L/M Ericsson (Publ) | Method and apparatus for encrypting radio traffic in a telecommunications network |
Non-Patent Citations (1)
Title |
---|
See also references of EP1362444A2 * |
Cited By (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1492377A2 (en) | 2003-06-27 | 2004-12-29 | Motorola Inc. | Communication system communication unit and method for performing encrypted communication |
EP1492377A3 (en) * | 2003-06-27 | 2010-08-25 | Motorola Inc. | Communication system communication unit and method for performing encrypted communication |
EP1638355A3 (en) * | 2004-09-15 | 2008-02-20 | Motorola, Inc. | A communication system and method of call group management therefor |
US20080002829A1 (en) * | 2006-06-27 | 2008-01-03 | Nokia Corporation | Identifiers in a communication system |
US9344881B2 (en) | 2006-06-27 | 2016-05-17 | Vringo Infrastrct Inc. | Identifiers in a communication system |
WO2008122906A1 (en) * | 2007-04-05 | 2008-10-16 | Koninklijke Philips Electronics N.V. | Wireless sensor network key distribution |
CN101652956B (en) * | 2007-04-05 | 2013-08-21 | 皇家飞利浦电子股份有限公司 | Wireless sensor network key distribution |
US8705744B2 (en) | 2007-04-05 | 2014-04-22 | Koninklijke Philips N.V. | Wireless sensor network key distribution |
WO2015166099A1 (en) * | 2014-05-02 | 2015-11-05 | Koninklijke Kpn N.V. | Method and system for providing security from a radio access network |
JP2017520203A (en) * | 2014-05-02 | 2017-07-20 | コニンクリーケ・ケイピーエヌ・ナムローゼ・フェンノートシャップ | A method and system for providing security from a wireless access network. |
US10299119B2 (en) | 2014-05-02 | 2019-05-21 | Koninklijke Kpn N.V. | Method and system for providing security from a radio access network |
US10958631B2 (en) | 2014-05-02 | 2021-03-23 | Koninklijke Kpn N.V. | Method and system for providing security from a radio access network |
Also Published As
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP1742411B1 (en) | Method and apparatus for providing authentication in a mobile communication system | |
EP1777870B1 (en) | Method and apparatus for storing and distributing encryption keys | |
US20020120844A1 (en) | Authentication and distribution of keys in mobile IP network | |
US20050198506A1 (en) | Dynamic key generation and exchange for mobile devices | |
CN101356759A (en) | Token-based distributed generation of security keying material | |
AU2003295466A1 (en) | 802.11using a compressed reassociation exchange to facilitate fast handoff | |
CN101330438B (en) | Safe communication method and system between nodes |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated states |
Kind code of ref document: A2 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PH PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A2 Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
AK | Designated states |
Kind code of ref document: A3 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PH PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A3 Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
DFPE | Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101) | ||
WWE | Wipo information: entry into national phase |
Ref document number: 157049 Country of ref document: IL |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2002720815 Country of ref document: EP |
|
WWP | Wipo information: published in national office |
Ref document number: 2002720815 Country of ref document: EP |
|
REG | Reference to national code |
Ref country code: DE Ref legal event code: 8642 |
|
NENP | Non-entry into the national phase |
Ref country code: JP |
|
WWW | Wipo information: withdrawn in national office |
Country of ref document: JP |
|
WWG | Wipo information: grant in national office |
Ref document number: 2002720815 Country of ref document: EP |