Securing binding update using address based keys

• US 20030211842A1
• Filed: 02/11/2003
• Published: 11/13/2003
• Est. Priority Date: 02/19/2002
• Status: Abandoned Application

• Current Assignee: DOCOMO Communications Laboratories USA, Inc.
• Original Assignee: DOCOMO Communications Laboratories USA, Inc.
• Inventors: Yin, Yiqun Lisa, Desai, Anand, Kempf, James, Gentry, Craig B., Silverberg, Alice, Okazaki, Satomi
• Application Number:
  US10/364,289
• Publication Number:
  US 20030211842A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04M 1/68 Circuit arrangements for preventing eavesdropping
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 12/108 Source integrity
• CPC Class Codes: H04W 8/06 Registration at serving network Location Register, VLR or user mobility server
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

A system and method are disclosed for securing binding updates in a wireless telecommunications system. A public key is generating using a home address value of the mobile host. Thereafter, a home agent, such as a router, generates a private key using public cryptographic parameters, that corresponds to the mobile host and the public key. The correspondent node uses the public key to encrypt a shared key and sends the shared key to the mobile host. The mobile host decrypts the shared key using the private key and uses the shared key to sign the binding update. Thereafter, the correspondent node utilizes the shared key to verify the authenticity of the binding update.

Claims

1. A method of securing binding updates in a wireless telecommunications system, the method comprising:

generating a public key using a publicly known identifier;

generating a private key using the public key; and

utilizing the public key and the private key to secure binding updates.

2. The method of claim 1 wherein a home agent generates the public key.

3. The method of claim 1 wherein a home agent generates the private key.

4. The method of claim 3 wherein the home agent provides the private key to the mobile host.

5. The method of claim 4 further including a correspondent node connectable with a mobile host, wherein the public key, a shared key and a public parameter are used to secure binding updates between the mobile host and the correspondent node.

6. The method of claim 5 wherein the correspondent node encrypts the shared key with the public key and the public parameter.

7. The method of claim 5 wherein the mobile host uses the shared key to sign the binding update and sends a signed binding update to the correspondent node.

8. The method of claim 5 wherein the home agent provides the public parameters to the correspondent node.

9. The method of claim 1 wherein the public key is generated using a home address value of the mobile host.

10. A system for securing binding updates in a wireless telecommunications system, comprising:

a mobile host connectable to the telecommunications system;

a correspondent node connectable with the mobile host, wherein a public key and a private key are used to secure binding updates between the mobile host and the correspondent node.

11. The system of claim 10 further including a home agent connectable with the mobile host and correspondent node.

12. The system of claim 11 wherein the home agent generates the private key and a public parameter.

13. The system of claim 10 wherein the public key is generated using a home address value of the mobile host.

14. The system of claim 11 wherein the home agent generates the private key.

15. The system of claim 11 wherein the home agent provides the private key and public parameters to the mobile host.

16. The system of claim 15 wherein a correspondent node encrypts a shared key with the public key and public parameters.

17. The system of claim 16 wherein the mobile host uses the shared key to sign the binding update and sends a signed binding update to the correspondent node.

18. The system of claim 16 wherein the mobile host provides the public parameters to the correspondent node.

19. A mobile node for use in a wireless telecommunications system, comprising:

an interface capable of connecting the mobile node to a home agent and a corresponding node, wherein a public key and a private key are used to secure binding updates between the mobile node and the correspondent node.

20. The mobile node of claim 19 wherein the home agent generates the private key and a public parameter.

21. The mobile node of claim 19 wherein the public key is generated using a home address value of the mobile node.

22. The mobile node of claim 19 wherein the home agent generates the private key.

23. The mobile node of claim 19 wherein the home agent provides the private key and public parameters to the mobile node.

24. The mobile node of claim 23 wherein the correspondent node encrypts a shared key with the public key and public parameters.

25. The mobile node of claim 24 wherein the mobile node uses the shared key to sign the binding update and sends a signed binding update to the correspondent node.

26. The mobile node of claim 24 wherein the interface is used to provide the public parameters to the correspondent node.