Method and apparatus for granting access by a portable phone to multimedia services

• US 20030159067A1
• Filed: 02/21/2002
• Published: 08/21/2003
• Est. Priority Date: 02/21/2002
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Stirbu, Vlad Alexandru
• Application Number:
  US10/082,534
• Publication Number:
  US 20030159067A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/147 Signalling methods or messages providing extensions to protocols defined by standardisation
• CPC Class Codes: H04W 12/043 using a trusted network node as an anchor
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 74/00 Wireless channel access

Abstract

An enhanced IMS AKA (21) that allows a UE to register with IMS for all multimedia applications to which it is subscribed. Some of the message content of some of the IMS AKA messages (22) per TS 3GPP 33.203 v 1.0.0 is augmented, and in particular, the message content of CM2 is augmented to include a list of all services to which the UE is subscribed along with either information that allows establishing SAs for each service or information that could be used as keying material or other input for other security mechanisms specific to each service.

Claims

1. A method for registering a UE with an IMS so as to allow the UE to access, over a digital communication system, an IM service to which the UE is subscribed, the method including a step in which an S-CSCF of the IMS sends an AV request message (CM1) to an HSS, the method characterized in that it includes a step in which in response to the AV request message (CM1), the HSS provides (31) in a AV request response message (CM2) a field indicating a list of substantially all services to which the UE is subscribed along with either information that allows establishing SAs for each such service or information that could be used as keying material or other input for other security mechanisms specific to each service.

2. The method as in claim 1, further characterized in that in responding to the AV request response message (CM2), the S-CSCF of the IMS adds (32) the information included in the AV request response message (CM2) to an authorization challenge message (SM4) and forwards it to an I-CSCF of the IMS.

3. The method as in claim 2, further characterized in that when the I-CSCF receives the authorization challenge message (SM4), it forwards (33) it as a forwarded authorization challenge message (SM5) to a P-CSCF of the IMS, which parses (34) the forwarded authorization challenge message (SM5), generates SPD entries and corresponding SAs for both P-CSCF and UE, inserts its SPD entries in its SPD and corresponding SAs into its SADB, and provides in an updated authorization challenge message (SM6) for the UE the SPD entries and corresponding SAs.

4. The method as in claim 3, further characterized in that after receiving the updated authorization challenge message (SM6), the UE inserts (35) the SPD entries into its SPD and inserts the corresponding SAs into its SADB.

5. The method as in claim 4, further characterized in that a register is kept for all services to allocate numbers used to derive keys for each service or part of a service.

6. The method as in claim 5, further characterized in that the keys are an integrity key and a cipher key and are derived by applying a practically uni-directional mapping to an argument including the number allocated to the respective service or part of a service by the register being kept.

11. A digital communication system having an IMS, characterized in that the IMS is operative according to the method of claim 1.

7. A method for registering a UE with an IMS so as to allow the UE to access, over a digital communication system, an IM service to which the UE is subscribed, the method including a step in which a P-CSCF of the IMS communicates to the UE an authorization challenge message (SM6), characterized in that the authorization challenge message (SM6) includes at least one SPD entry and a corresponding SA derived by the P-CSCF from information provided to the P-CSCF indicating substantially all services to which the UE is subscribed along with either information that allows establishing SAs for each such service or information that could be used as keying material or other input for other security mechanisms specific to each service, and the UE inserts (35) the at least one SPD entry into its SPD and the corresponding SA into its SADB, so that for a predetermined time any traffic between the UE and the P-CSCF is secure for the substantially all services to which the UE is subscribed.

8. The method as in claim 7, further characterized in that a register is kept for all services to allocate numbers used to derive keys for each service or part of a service.

9. The method as in claim 8, further characterized in that the keys are an integrity key and a cipher key and are derived by applying a practically uni-directional mapping to an argument including the number allocated to the respective service or part of a service by the register being kept.

10. A UE, characterized in that it is operative according to the method of claim 7.