Integrity check in a communication system

• US 10,187,794 B2
• Filed: 06/11/2014
• Issued: 01/22/2019
• Est. Priority Date: 02/22/2000
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Vialen, Jukka, Niemi, Valtteri
• Primary Examiner(s): Pezzlo, John
• Application Number:
  US14/302,218
• Publication Number:
  US 20140323091A1
• Time in Patent Office: 1,686 Days
• Field of Search: 370252, 370278, 370282, 370386
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers

Abstract

A method of communication between a first node and a second node for a system where a plurality of different channels is provided between said first and second node. The method comprises the step of calculating an integrity output. The integrity output is calculated from a plurality of values, some of said values being the same for said different channels. At least one of said values is arranged to comprise information relating to the identity of said channel, each channel having a different identity. After the integrity output has been calculated, Information relating to the integrity output is transmitted from one of said nodes to the other.

Claims

1. A method comprising:

calculating, by at least one processor, an integrity output for a channel, the calculating based at least in part on a plurality of values, at least one of the plurality of values comprising information including an identity of the channel from a plurality of channels, each of the plurality of channels having a different identity, and at least one of the plurality of input values being identical for the plurality of channels; and

communicating, by a first wireless communication network node and over the channel based on the calculated integrity output, with a second wireless communication network node, wherein the first wireless communication network node includes the at least one processor.

2. The method according to claim 1, further comprising:

combining the identity of the channel with at least one other input value,

wherein the identity of the channel is combined with one or more of;

a fresh value, a count value, and integrity key, a direction value, and a message value.

3. The method according to claim 1, further comprising:

combining the identity of the channel with at least one other input value,

wherein the combined information comprises a first part allocated to the identity of the bearer and a second part allocated to at least one other input value.

4. The method according to claim 1, wherein the identity is a radio bearer identity.

5. An apparatus comprising:

at least one processor; and

at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least;

calculate an integrity output for a channel, the calculation based at least in part on a plurality of input values, wherein at least one of the plurality of input values comprising information including an identity of the channel from a plurality of channels, wherein each of the plurality of channels have a different identity, and wherein at least one of the plurality of input values is identical for the plurality of channels; and

communicate, over the channel based on the calculated integrity output, with a second wireless communication network node.

6. The apparatus according to claim 5, wherein the apparatus is further configured to at least:

combine the identity of the channel with at least one other input value,

wherein the identity of the channel is combined with one or more of;

a fresh value, a count value, and integrity key, a direction value, and a message value.

7. The apparatus according to claim 5, wherein the apparatus is further configured to at least:

combine the identity of the channel with at least one other input value,

wherein the combined information comprises a first part allocated to the identity of the bearer and a second part allocated to at least one other input value.

8. The apparatus according to claim 5, wherein the identity is a radio bearer identity.

9. A computer program embedded on a non-transitory computer readable medium, the non-transitory computer readable medium configured to control a processor to perform operations comprising:

calculating an integrity output for a channel, the calculating based at least in part on a plurality of input values, at least one of the plurality of input values comprising information including an identity of the channel from a plurality of channels, each of the plurality of channels having a different identity, at least one of the plurality of input values being identical for the plurality of channels; and

communicating, by a first wireless communication network node and over the channel based on the calculated integrity output, with a second wireless communication network node.

10. The computer program embedded on computer readable medium according to claim 9, further comprising:

combining the identity of the channel with at least one other input value,

wherein the identity of the channel is combined with one or more of;

a fresh value, a count value, and integrity key, a direction value, and a message value.

11. The computer program embedded on computer readable medium according to claim 9, further comprising:

combining the identity of the channel with at least one other input value, wherein the combined information comprises a first part allocated to the identity of the bearer and a second part allocated to at least one other input value.

12. The computer program embedded on computer readable medium according to claim 9, wherein the identity is a radio bearer identity.