Method and apparatus for security in a data processing system

• US 20030070092A1
• Filed: 10/09/2001
• Published: 04/10/2003
• Est. Priority Date: 10/09/2001
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Leung, Nikolai K. N., Rose, Gregory G., Hawkes, Philip
• Granted Patent: US 7,352,868 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services

Abstract

Method and apparatus for secure transmissions. Each user is provided a registration key. A long-time updated broadcast key is encrypted using the registration key and provided periodically to a user. A short-time updated key is encrypted using the broadcast key. The short-time key is available with each broadcast message, wherein sufficient information to calculate the short-time key is provided in an Internet protocol header preceding the broadcast content. Broadcasts are then encrypted using the short-time key, wherein the user decrypts the broadcast message using the short-time key.

Claims

1. A method for secure transmissions, the method comprising:

determining a short term key for a message for transmission, the short term key having a short term key identifier;

determining an access key for the message, the access key having an access key identifier;

encrypting the message with the access key;

forming an Internet protocol header comprising the short term key identifier; and

transmitting the encrypted message with the Internet protocol header.

2. The method as in claim 1, wherein the short term key identifier comprises the access key identifier.

3. The method as in claim 2, wherein short term key identifier further comprises a security parameter index value.

4. The method as in claim 3, wherein the security parameter index value is a random number.

5. The method as in claim 1, wherein the short term key is calculated as a function of the short term key identifier and the access key.

6. The method as in claim 5, wherein the short term key identifier is calculated by encrypting the short term key identifier with the access key.

7. The method as in claim 1, wherein the Internet protocol header is part of an ESP header.

8. The method as in claim 7, wherein the Internet protocol header further comprises a second random number, the second random number having a random number identifier.

9. The method as in claim 8, wherein the short term key identifier comprises the access key identifier and the random number identifier.

10. The method as in claim 9, wherein short term key identifier further comprises a security parameter index value.

11. The method as in claim 10, wherein the security parameter index value is a random number.

12. The method as in claim 8, wherein the short term key is calculated as a function of the short term key identifier, the second random number, and the access key.

13. The method as in claim 12, wherein the short term key identifier is calculated by encrypting the short term key identifier and the second random number with the access key.

14. A method for secure reception of a transmission, the method comprising:

receiving a short term key identifier specific to a transmission, the short term key identifier corresponding to a short term key;

determining an access key based on the short term key identifier;

encrypting the short term key identifier with the access key to recover the short term key; and

decrypting the transmission using the short term key.

15. The method as in claim 14, further comprising:

storing the short term key identifier and short term key in a memory storage unit.

16. The method as in claim 14, wherein the short term key identifier is comprised of a random number and an access key identifier associated with the access key.

17. The method as in claim 14, wherein encrypting the short term key identifier further comprises encrypting the short term key identifier and a random number with the access key to recover the short term key.

19. The infrastructure element as in claim 15, wherein the user identification unit further comprises a second memory storage unit for storing a plurality of access keys and access key identifiers.

20. The infrastructure element as in claim 15, wherein the memory storage unit is a secure memory storage unit.

18. In a wireless communication system supporting a broadcast service option, an infrastructure element comprising:

a receive circuitry;

a user identification unit, operative to recover a short-time key for decrypting a broadcast message, comprising;

processing unit operative to decrypt key information; and

a mobile equipment unit adapted to apply the short-time key for decrypting the broadcast message, comprising;

memory storage unit for storing a plurality of short term keys and short term key identifiers.

21. An infrastructure element for a wireless communication system, comprising:

means for receiving a short term key identifier specific to a transmission, the short term key identifier corresponding to a short term key;

means for determining an access key based on the short term key identifier;

means for encrypting the short term key identifier with the access key to recover the short term key; and

means for decrypting the transmission using the short term key.

22. A digital signal storage device, comprising:

first set of instructions for receiving a short term key identifier specific to a transmission, the short term key identifier corresponding to a short term key;

second set of instructions for determining an access key based on the short term key identifier;

third set of instructions for encrypting the short term key identifier with the access key to recover the short term key; and

fourth set of instructions for decrypting the transmission using the short term key.

23. A communication signal transmitted on a carrier wave, comprising:

a first portion corresponding to a short term key identifier, the short term key identifier having a corresponding short term key; and

a second portion corresponding to a transmission payload encrypted using the short term key.

24. The communication signal as in claim 23, wherein the short term key identifier comprises:

a random number portion; and

an access key identifier corresponding to an access key.