Security method for broadcasting service in a mobile communication system

• US 20040228360A1
• Filed: 05/13/2004
• Published: 11/18/2004
• Est. Priority Date: 05/13/2003
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Song, Jun-Hyuk, Kim, Dae-Gyun, Jung, Jung-Soo, Bae, Beom-Sik, Lim, Nae-Hyun
• Application Number:
  US10/844,808
• Publication Number:
  US 20040228360A1
• Time in Patent Office: Days
• US Class Current: 370/432
• CPC Class Codes: H04L 2209/046 of operations, operands or results of the operations
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00

Abstract

Disclosed is a method for receiving an encrypted broadcasting service by an access terminal in a mobile communication system including an access node for providing a broadcasting service to the access terminal over a radio channel and a packet data service node for connecting the access node to a broadcasting server via a packet data network. The method includes receiving a mask parameter message including a mask value for reception of a desired broadcasting service, from the access node; receiving a broadcasting service packet including a masked seed and a broadcast security packet, from the access node over a radio broadcast channel; calculating a particular seed using the masked seed value and the mask value, and generating an encryption key using the calculated seed and a previously received broadcast access key; and decrypting the broadcast security packet using the encryption key.

Claims

1. A method for receiving an broadcasting service by an access terminal in a mobile communication system including an access node for providing a broadcasting service to the access terminal over a radio channel and a packet data service node for connecting the access node to a broadcasting server via a packet data network, the method comprising the steps of:

receiving a mask parameter message from the access node, the mask parameter message including a mask value for reception of a desired broadcasting service;

receiving a broadcasting service packet from the access node over a radio broadcast channel, the broadcasting service packet including a masked seed and a broadcast security packet;

calculating a particular seed using the masked seed value and the mask value;

generating an encryption key using the calculated seed and a previously received broadcast access key; and

decrypting the broadcast security packet using the encryption key.

2. The method of claim 1, wherein the mask parameter is received over a predetermined control channel.

3. The method of claim 1, wherein the mask parameter is received over a traffic channel uniquely assigned to a particular user.

4. The method of claim 1, wherein the step of calculating a particular seed further comprises the step of calculating the particular seed by performing an exclusive OR (XOR) operation on the received masked seed value and the received mask value.

5. The method of claim 1, wherein the encryption key is generated using a key obtained by combining the previously received broadcast access key with the particular seed and a timestamp value.

6. The method of claim 1, wherein the mask parameter message includes a mask field indicating the mask value, a sequence field indicating a sequence number corresponding to the mask value, an information field indicating whether a next mask value is included therein, and a next mask field indicating the next mask value, wherein the next mask field is included therein if a value of the information field and a sequence number of the next mask value is equal to a value determined by adding 1 to a value indicated by the sequence field.

7. The method of claim 1, wherein the mask parameter message includes a sequence field indicating a sequence number, a mask count field indicating the number of mask fields included therein, and at least one mask field sequentially including at least one mask value according to a value of the mask count field, wherein a sequence number indicated by the sequence field corresponds to a sequence number of a first mask value among the at least one mask value.

8. The method of claim 6, wherein the broadcasting service packet includes a sequence number corresponding to a mask value for the masked seed, the mask value being valid for a current period,.

9. The method of claim 7, wherein the broadcasting service packet includes a sequence number corresponding to a mask value for the masked seed, the mask value being valid for a current period,.

10. The method of claim 1, wherein the mask parameter message is received in response to a registration message transmitted to the access node to request a desired broadcasting service.

11. The method of claim 1, further comprising the steps of:

receiving a broadcasting service packet including a next broadcast security packet without a masked seed from the access node over the radio broadcast channel; and

decrypting the next broadcast security packet using the encryption key generated with the received mask value.

12. The method of claim 1, further comprising the steps of:

if a mask value necessary for decrypting the broadcast security packet is not normally received,

transmitting to the access node a registration message including a request field being set to a value for requesting a mask value; and

receiving a mask parameter message including a valid mask value in response to the registration message.

13. The method of claim 1, further comprising the step of receiving a broadcast overhead message from the access node, the broadcast overhead message including broadcasting service parameters and an information field indicating use/non-use of a mask value in an initialization procedure for the broadcasting service.

14. The method of claim 1, wherein the mask parameter message including a message identifier (ID) field for identifying a message type, a broadcasting service ID for identifying a broadcasting service, a field indicating a length of a broadcasting service ID field, a broadcasting service ID count field indicating the number of broadcasting service IDs, a same mask field for a previous broadcasting service ID using the same mask as a mask applied to a broadcast traffic identified by a previous broadcasting service ID, a mask sequence number field indicating a sequence number corresponding to the mask value, a mask count field, and mask information.

15. The method of claim 1, wherein the mask parameter message includes a message ID field for identifying a message type, a common mask indicator field, and same mask information for a previous broadcasting service, wherein if the same mask information for the previous broadcasting service is 1, the mask parameter message includes a common mask sequence number field, a common mask count field, and a common mask information field, wherein if the same mask information for the previous broadcasting service is 0, the mask parameter message includes a broadcasting service ID length field, a broadcasting service count field, a broadcasting service ID field, a mask sequence number field, and a mask count information field.

16. The method of claim 11, wherein the registration message includes a message ID field, a broadcasting service ID field, a field indicating a length of the broadcasting service ID field, a broadcasting service count field, and a mask request field indicting whether a mask is requested by an access terminal.

17. The method of claim 12, wherein the overhead message includes a message ID field, a broadcasting service ID field, a field indicting a length of the broadcasting service ID field, a broadcasting service count field, and a mask used field indicating whether a masked random seed is provided.

18. A method for providing an broadcasting service by an access node in a mobile communication system including the access node for providing a broadcasting service to an access terminal over a radio channel and a packet data service node for connecting the access node to a broadcasting server via a packet data network, the method comprising the steps of:

if a broadcasting service is requested by the access terminal,

receiving a broadcast access key (BAK) for the requested broadcasting service from the broadcasting server, and

transmitting the received broadcast access key to the access terminal;

transmitting a mask parameter message including a mask value for the requested broadcasting service to the access terminal;

generating a broadcast security packet by encrypting broadcast data requested by the access terminal using an encryption key generated with a seed for the broadcasting service and a timestamp value; and

masking the seed using the mask value, and transmitting a broadcasting service packet including the masked seed and the broadcast security packet to the access terminal over a radio broadcast channel.

19. The method of claim 18, wherein the step of masking the seed using the mask value comprises the step of performing an exclusive OR (XOR) operation on the seed and the mask value.

20. The method of claim 18, wherein the step of transmitting the mask parameter message further comprises the steps of:

performing user authentication on the access terminal; and

transmitting the mask parameter message including the mask value if the user authentication is successful.

21. The method of claim 18, wherein the mask parameter message includes a mask field indicating the mask value, a sequence field indicating a sequence number corresponding to the mask value, an information field indicating whether a next mask value is included therein, and a next mask field indicating a next mask value, wherein the next mask field is included in the mask parameter message if a value of the information field and a sequence number of the next mask value is equal to a value determined by adding 1 to a value indicated by the sequence field.

22. The method of claim 18, wherein the mask parameter message includes a sequence field indicating a sequence number, a mask count field indicating the number of mask fields included therein, and at least one mask field sequentially including at least one mask value according to a value of the mask count field, wherein a sequence number indicated by the sequence field corresponds to a sequence number of a first mask value among the at least one mask value.

23. The method of claim 21, wherein the broadcasting service packet includes a sequence number for the masked seed, the sequence number corresponding to a mask value valid for a current period.

24. The method of claim 22, wherein the broadcasting service packet includes a sequence number corresponding to a mask value for the masked seed, the sequence number being valid for a current period.

25. The method of claim 18, wherein the mask parameter message is transmitted in response to a registration message received from the access terminal to request a desired broadcasting service.

26. The method of claim 18, further comprising the step of transmitting a next broadcasting service packet including a next broadcast security packet after transmitting the broadcasting service packet including the masked seed, the next broadcasting service packet not including the masked seed, wherein the next broadcast security packet is encrypted using the encryption key generated with the seed.

27. The method of claim 18, further comprising the step of receiving a registration message from the access terminal, the registration message including a request field being set to a value for requesting a mask value, and transmitting a mask parameter message including a valid mask value to the access terminal in response to the registration message.

28. The method of claim 18, further comprising the step of transmitting to the access terminal a broadcast overhead message including broadcasting service parameters and an information field indicating use/non-use of a mask value in an initialization procedure for the broadcasting service.

29. The method of claim 18, wherein the mask parameter message includes a message ID field for identifying a message type, a broadcasting service ID field for identifying a broadcasting service, a field indicating a length of a broadcasting service ID field, a broadcasting service ID count field indicating the number of broadcasting service IDs, a same mask field for a previous broadcasting service ID using the same mask as a mask applied to broadcast traffic identified by a previous broadcasting service ID, a mask sequence number field indicating a sequence number corresponding to the mask value, a mask count field, and a mask information field.

30. The method of claim 18, wherein the mask parameter message includes a message ID field for identifying a message type, a common mask indicator field, and same mask information for a previous broadcasting service, wherein if the same mask information for the previous broadcasting service is 1, the mask parameter message includes a common mask sequence number field, a common mask count field, and a common mask information field, wherein if the same mask information for the previous broadcasting service is 0, the mask parameter message includes a field indicating a length of a broadcasting service ID field, a broadcasting service count field, a broadcasting service ID field, a mask sequence number field, and a mask count information field.

31. The method of claim 22, wherein the registration message includes a message ID field, a broadcasting service ID field, a field indicating a length of the broadcasting service ID field, a broadcasting service count field, and a mask request field indicting whether a mask is requested by an access terminal.

32. The method of claim 28, wherein the overhead message includes a message ID field, a broadcasting service ID field, a field indicting a length of the broadcasting service ID field, a broadcasting service count field, and a mask used field indicating whether a masked random seed is provided.