System and method for providing variable security level in a wireless communication system

• US 20070140494A1
• Filed: 09/30/2005
• Published: 06/21/2007
• Est. Priority Date: 01/10/2005
• Status: Active Grant

• Current Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Original Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Inventors: Shin, Sung-Hyuk, Reznik, Alexander, Zhang, Guodong, Tsai, Yingming, Kumoluyi, Akinlolu, Chitrapu, Prabhakar
• Granted Patent: US 7,636,842 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

A system and method for providing variable security levels in a wireless communication network. The present invention optimizes the often conflicting demands of highly secure wireless communications and high speed wireless communications. According to a preferred embodiment of the present invention, various security sensors are scanned to determine the likely presence of an intruder within a predetermined trust zone. If an intruder is likely present, the security level is changed to the highest setting, and consequently a lower data rate, while the intruder is identified. If the identified intruder is in fact a trusted node, the security level is returned to a lower setting. If the identified intruder is not a trusted node, the security level is maintained at an elevated state while the intruder is within the trust zone.

Claims

1. A method for providing variable level security in a wireless communication system, the method comprising:

a. establishing a first security level for trusted devices operating within a trust zone of the wireless communication system;

b. scanning the trust zone to detect the presence of intruders; and

c. establishing a second security level when an intruder is detected, wherein the second security level is higher than the first security level.

2. The method of claim 1 wherein the wireless communication system utilizes symmetric key cryptography, and wherein step (c) includes increasing the bit length of the encryption key.

3. The method of claim 2 wherein the key length is increased from 64 to 128 bits.

4. The method of claim 1 wherein the wireless communication system utilizes asymmetric key cryptography, and wherein step (c) includes increasing the frequency at which the public key is changed.

5. The method of claim 1 wherein step (c) comprises lowering the security level when the detected intruder is a trusted device.

6. The method of claim 1 wherein step (c) comprises maintaining an elevated network security level when the identified intruder is not a trusted device.

7. The method of claim 1 wherein step (c) comprises terminating all communications across the wireless communication system.

8. The method of claim 1 wherein step (b) comprises scanning the trust zone with at least one of the following sensors:

infra-red sensors, video monitoring sensors, photo-electric sensors, motion detecting sensors, and audio sensors.

9. The method of claim 1 wherein step (b) further comprises scanning the trust zone with at least one of the following traditional RF sensors:

antennas, and smart antennas.

10. The method of claim 1 wherein step (b) further comprises analyzing the channel impulse response.

11. The method of claim 1 wherein step (b) further comprises analyzing at least one of spatial, frequency, and temporal channel impulse response.

12. The method of claim 1 wherein step (c) comprises restricting unencrypted communication.

13. The method of claim 1 wherein the wireless communication system utilizes beam steering antennas, and wherein step (c) comprises beam steering to create a null area in the geographic location of the intruder.

14. A method for providing variable level security in a wireless communication system, the method comprising:

a. establishing a first security level for trusted devices operating within a trust zone of the wireless communication system;

b. scanning the trust zone to detect the presence of intruders;

c. detecting the presence of an intruder;

d. establishing a second security level when an intruder is detected, wherein the second security level is higher than the first security level;

e. identifying the detected intruder;

f. determining whether the detected intruder is trusted or not trusted; and

g. establishing a third security level based on the determination of whether the detected intruder is trusted or not trusted.

15. The method of claim 14 wherein the wireless communication system utilizes symmetric key cryptography, and wherein steps (d) and (g) include changing the bit length of the encryption key.

16. The method of claim 14 wherein the wireless communication system utilizes asymmetric key cryptography, and wherein step (d) and (g) include changing the frequency at which the public key is changed.

17. The method of claim 14 wherein the second security level is higher than the first security level.

18. The method of claim 14 wherein step (g) further comprises maintaining an elevated network security level when the identified intruder is not a trusted device.

19. The method of claim 14 wherein step (d) comprises terminating all communications across the wireless communication system.

20. The method of claim 14 wherein step (g) comprises terminating all communications across the wireless communication system when the identified intruder is not a trusted device.

21. The method of claim 14 wherein step (b) further comprises scanning the trust zone with at least one of the following sensors:

infra-red sensors, video monitoring sensors, photo-electric sensors, motion detecting sensors, and audio sensors.

22. The method of claim 14 wherein step (b) further comprises scanning the trust zone with at least one of the following traditional RF sensors:

antennas, and smart antennas.

23. The method of claim 14 wherein step (b) further comprises analyzing the channel impulse response.

24. The method of claim 14 wherein step (b) further comprises analyzing at least one of the spatial, frequency, and temporal channel impulse response.

25. The method of claim 14 wherein step (e) further comprises referencing a database of trusted users.

26. The method of claim 14 wherein step (d) comprises restricting unencrypted communication.

27. The method of claim 14 wherein step (g) comprises restricting unencrypted communication.

28. The method of claim 14 wherein the wireless communication system utilizes a beam steering antenna, and wherein step (d) comprises beam steering to create a null area in the geographic location of the intruder.

29. The method of claim 14 wherein the wireless communication system utilizes a beam steering antenna, and wherein step (g) comprises beam steering to create a null area in the geographic location of the intruder.

30. A wireless communication system for providing variable level security, the system comprising;

a. at least one node including;

i. an intruder detector configured to detect intruders within a trust zone;

ii. an intruder identifier configured to identify detected intruders and determine whether the identified intruder is trusted or not trusted; and

iii. a security level controller configured to adjust the security level based on said determination; and

b. at least one security sensor configured to detect intruders and notify the intruder detector of the at least one node when an intruder is detected.

31. The wireless communication system of claim 30 wherein the security level controller is configured to raise the security level when an intruder is detected within the trust zone.

32. The wireless communication system of claim 30 wherein the security level controller is configured to maintain an elevated security level when an identified intruder is determined to be not trusted.

33. The wireless communication system of claim 30 wherein the security level controller is configured to lower the security level when an identified intruder is determined to be trusted.

34. The wireless communication system of claim 30 wherein the security level controller is configured to terminate all unencrypted communications when an intruder is detected within the trust zone.

35. The wireless communication system of claim 30 wherein the security level controller is configured to terminate all unencrypted communications when an identified intruder is determined to be not trusted.

36. The wireless communication system of claim 30 wherein the node is an access point.

37. The wireless communication system of claim 30 wherein the node is a wireless transmit/receive unit (WTRU).

38. A wireless node for providing variable level security comprising:

a. an intruder detector configured to detect intruders within a trust zone;

b. an intruder identifier configured to identify detected intruders and determine whether the identified intruder is trusted or not trusted; and

c. a security level controller configured to adjust the security level based on said determination.

39. The wireless node of claim 38 wherein the node is an access point.

40. The wireless node of claim 38 wherein the node is a wireless transmit/receive unit (WTRU).

41. The wireless node of claim 38 wherein the components are incorporated into an integrated circuit (IC).

42. The wireless node of claim 38 wherein the components are configured in a circuit comprising a multitude of interconnecting components.

43. The wireless node of claim 38 wherein the security level controller is configured to raise the security level when an intruder is detected within the trust zone.

44. The wireless node of claim 38 wherein the security level controller is configured to maintain an elevated security level when an identified intruder is determined to be not trusted.

45. The wireless node of claim 38 wherein the security level controller is configured to lower the security level when an identified intruder is determined to be trusted.

46. The wireless node of claim 38 wherein the security level controller is configured to terminate all unencrypted communications when an intruder is detected within the trust zone.

47. The wireless node of claim 38 wherein the security level controller is configured to terminate all unencrypted communications when an identified intruder is determined to be not trusted.

48. An integrated for providing:

a. an intruder detector configured to detect intruders within a trust zone;

b. an intruder identifier configured to identify detected intruders and determine whether the identified intruder is trusted or not trusted; and

c. a security level controller configured to adjust the security level based on said determination.