Method and apparatus for providing broadcast channel encryption to enhance cellular network security

• US 10,368,239 B2
• Filed: 08/28/2017
• Issued: 07/30/2019
• Est. Priority Date: 11/20/2013
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Jover, Roger Piqueras
• Primary Examiner(s): Shaifer Harriman, Dant B
• Application Number:
  US15/688,816
• Publication Number:
  US 20180007548A1
• Time in Patent Office: 701 Days
• Field of Search: 380270
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04K 2203/16 for telephony
• CPC Class Codes: H04K 3/22 including jamming detection and monitoring
• CPC Class Codes: H04K 3/25 based on characteristics of target signal or of transmission as countermeasure against surveillance H04K3/827, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04K 3/42 characterized by the control of the jamming frequency or wavelength
• CPC Class Codes: H04K 3/45 characterized by including monitoring of the target or target signal, e.g. in reactive jammers or follower jammers for example by means of an alternation of jamming phases and monitoring phases, called "look-through mode"
• CPC Class Codes: H04K 3/65 using deceptive jamming or spoofing, e.g. transmission of false signals for premature triggering of RCIED, for forced connection or disconnection to/from a network or for generation of dummy target signal
• CPC Class Codes: H04K 3/827 using characteristics of target signal or of transmission as countermeasure against jamming H04K3/25, e.g. using direct sequence spread spectrum or fast frequency hopping spread spectrum techniques H04B1/69
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud

Abstract

A method, computer-readable storage device and apparatus for encrypting a broadcast message of a base station are disclosed. For example, the method selects an encryption key for the broadcast message and encrypts the broadcast message using the encryption key to create an encrypted broadcast message. The method then transmits an identifier of the encryption key and transmits the encrypted broadcast message over a broadcast channel. A method for decrypting a broadcast message that is encrypted is also disclosed.

Claims

1. A method for encrypting a broadcast message of a base station, the method comprising:

detecting, by a processor of the base station, a communication impairment at the base station, wherein the communication impairment pertains to a communication between the base station and an endpoint device;

selecting, by the processor of the base station, in response to the detecting the communication impairment, an encryption key for the broadcast message;

encrypting, by the processor of the base station, the broadcast message using the encryption key to create an encrypted broadcast message;

transmitting, by the processor of the base station, an identifier of the encryption key;

transmitting, by the processor of the base station, the encrypted broadcast message over a control channel via a first resource block, wherein the broadcast message includes information identifying that the control channel is to be reassigned from the first resource block to a second resource block; and

reassigning, by the processor of the base station, the control channel of the base station from the first resource block to the second resource block.

2. The method of claim 1, wherein the base station comprises one of:

a NodeB or an eNodeB.

3. The method of claim 1, wherein the identifier of the encryption key is transmitted unencrypted.

4. The method of claim 1, wherein the identifier of the encryption key is transmitted over the control channel.

5. The method of claim 1, wherein the control channel comprises a long term evolution control channel.

6. The method of claim 1, wherein the broadcast message comprises a master information block.

7. The method of claim 1, wherein the broadcast message comprises a system information block.

8. The method of claim 1, wherein the control channel comprises a plurality of orthogonal frequency division multiple access physical resource blocks, wherein the plurality of orthogonal frequency division multiple access physical resource blocks comprises the first resource block and the second resource block.

9. The method of claim 1, wherein the encryption key comprises a spreading sequence.

10. The method of claim 9, wherein the encrypting the broadcast message using the encryption key to create an encrypted broadcast message comprises spreading the broadcast message over a frequency band using the encryption key.

11. A computer-readable storage device storing instructions which, when executed by a processor of a base station, cause the processor to perform operations for encrypting a broadcast message of the base station, the operations comprising:

detecting a communication impairment at the base station, wherein the communication impairment pertains to a communication between the base station and an endpoint device;

selecting, in response to the detecting the communication impairment, an encryption key for the broadcast message;

encrypting the broadcast message using the encryption key to create an encrypted broadcast message;

transmitting an identifier of the encryption key;

transmitting the encrypted broadcast message over a control channel via a first resource block, wherein the broadcast message includes information identifying that the control channel is to be reassigned from the first resource block to a second resource block; and

reassigning the control channel of the base station from the first resource block to the second resource block.

12. The computer-readable storage device of claim 11, wherein the control channel comprises a plurality of orthogonal frequency division multiple access physical resource blocks, wherein the plurality of orthogonal frequency division multiple access physical resource blocks comprises the first resource block and the second resource block.

16. The computer-readable storage device of claim 11, wherein the base station comprises one of:

a NodeB or an eNodeB.

17. The computer-readable storage device of claim 11, wherein the identifier of the encryption key is transmitted unencrypted.

18. The computer-readable storage device of claim 11, wherein the identifier of the encryption key is transmitted over the control channel.

19. The computer-readable storage device of claim 11, wherein the control channel comprises a long term evolution control channel.

20. The computer-readable storage device of claim 11, wherein the broadcast message comprises a master information block.

13. A method for decrypting a broadcast message of a base station that is encrypted, the method comprising:

receiving, by a processor of an endpoint device, an identifier of an encryption key for the broadcast message;

receiving, by the processor, the broadcast message that is encrypted, wherein the broadcast message is encrypted with the encryption key, wherein the broadcast message that is encrypted is received over a control channel from the base station via a first resource block, wherein the broadcast message includes information identifying that a reassigning of the control channel to a second resource block is to be performed, the information identifying the reassigning that is to be performed in response to detection of a communication impairment at the base station, wherein the communication impairment pertains to a communication between the base station and the endpoint device;

retrieving, by the processor, the encryption key using the identifier of the encryption key;

decrypting, by the processor, the broadcast message that is encrypted using the encryption key;

retrieving, by the processor from the broadcast message, the information identifying that the control channel is to be reassigned to the second resource block; and

accessing, by the processor, control information from the control channel via the second resource block.

14. The method of claim 13, wherein the endpoint device stores a plurality of encryption keys, wherein the encryption key for the broadcast message is selected from one of the plurality of encryption keys.

15. The method of claim 14, wherein the plurality of encryption keys is not accessible from a user space of the endpoint device.