Adapting securityparameters of services provided for a user terminal in a communication network and correspondingly secured data communication

• US 20040250069A1
• Filed: 03/11/2004
• Published: 12/09/2004
• Est. Priority Date: 09/25/2001
• Status: Abandoned Application

• Current Assignee: Nokia Solutions and Networks US LLC (Nokia Corporation)
• Original Assignee: Nokia Solutions and Networks US LLC (Nokia Corporation)
• Inventors: Kosamo, Rauno
• Application Number:
  US10/489,330
• Publication Number:
  US 20040250069A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The present invention relates to a method for adapting security parameters of services provided for a user terminal in a communication network, the method comprising the steps of: initiating (S10), from the user terminal, an adaptation procedure towards the network, informing (S11) in response thereto, by said network, said user terminal of security parameters available for the services provided for said user terminal, selecting (S12), at said user terminal, at least one security parameter per service, and storing (S14) said selected security parameters per service per user in the network. Also, the present invention concerns a method for communicating data via a communication network to/from a user terminal having subscribed to said network, said method comprising the steps of: requesting (S20) a call to be established for said user terminal, retrieving (S21) security parameters from a subscriber database entity (HSS) of said network for said requested call, informing (S22) a security parameter processing entity (BS) of said network about the retrieved security parameters for said user terminal, and activating (S23) security processings for data communicated to/from said user terminal as defined by said security parameters per service for said user terminal at said security parameter processing unit.

Claims

1-6. -6. (Cancelled).

7. A method for adapting security parameters of services provided for a user terminal in a communication network, the method comprises the steps of:

initiating, from the user terminal, an adaptation procedure towards the network,

information in response thereto, by said network, said user terminal of security parameters available for the services provided for said user terminal,

selecting, by the user at said user terminal, at least one security parameter per service, and

storing said selected security parameters per service per user in a subscriber database entity of the network.

8. A method according to claim 7, wherein said security parameters define a level of data encryption to be applied by said network to data transmitted to/from said user terminal.

9. A method according to claim 7, wherein said selecting is a forced selection dependent on a respective service.

10. A method for communicating data via a communication network to/from a user terminal having subscribed to said network, said method comprising the steps of:

requesting a call to be established for said user terminal,

retrieving user selected security parameters from a subscriber database entity of said network for said requested call,

informing a security parameter processing entity of said network about the retrieved security parameters for said user terminal, and

activating security processing for data communicated to/from said user terminal as defined by said security parameters per service for said user terminal at said security parameter processing unit.

11. A method according to claim 10, wherein said security parameter processing entity is an access node of said communication network.

12. A method according to claim 10, wherein said activated security processing represented respective data encryption processings, the encryption level of which is defined by said security parameters.