Secure communication system

• US 20070201424A1
• Filed: 02/26/2007
• Published: 08/30/2007
• Est. Priority Date: 09/29/2004
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Kobayashi, Kazunari, Kumagai, Tomonori, Tomita, Tetsuo
• Application Number:
  US11/710,511
• Publication Number:
  US 20070201424A1
• Time in Patent Office: Days
• US Class Current: 370/349
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A reception part receives RLC-PDU from an RLC processing part to extract information to be used for determining whether security is required. This information is sent to a security management part, which determines whether security is required. Data outputted from the reception part is stored into a data buffer via a data management part. The data, which is regarded by the security management part as requiring security, is read by the data management part from the data buffer, then encrypted by a security calculation part, and then stored back into the data buffer again. Concealed or non-concealed data is read from the data buffer and sent to an FP processing part via a transmission part.

Claims

1. A secure communication system for concealing a communication between a wireless network control device that can terminate a wireless protocol, and a mobile device that can also terminate a wireless protocol and communicates with a base station by transmitting/receiving a radio wave, comprising:

a determination unit for determining whether or not to require a security process for transmitted/received data; and

a partial encryption unit for restricting a data range to be concealed of the data according to a determination made by said determination unit, and for encrypting only the restricted range of the dada.

2. The secure communication system according to claim 1, wherein

the restricted data range is some frames among a plurality of frames configuring the data.

3. The secure communication system according to claim 1, wherein

the restricted data range is a portion of a frame configuring the data.

4. The secure communication system according to claim 1, wherein

the restricted data range is a portion of some frames among a plurality of frames configuring the data.

5. The secure communication system according to claim 1, the secure communication system being a secure communication between a wireless network control device and a mobile device, which is stipulated by 3rd-Generation Partnership Project (3GPP).

6. The secure communication system according to claim 5, wherein the security process is executed for RLC-PDU only if a sequence number within an RLC header is a multiple of a certain integer.

7. The secure communication system according to claim 5, wherein the security process is executed for RLC-PDU only if a sequence number within an RLC header is a predetermined number.

8. The secure communication system according to claim 5, wherein

the security process is executed for RLC-PDU only if the RLC-PDU corresponds to the beginning of RLC-SDU.

9. The secure communication system according to claim 5, wherein

the security process is executed for RLC-PDU only if the RLC-PDU corresponds to the last RLC-PDU of RLC-SDU.

10. The secure communication system according to claim 5, wherein

the security process is executed for RLC-PDU only if Polling bit within an RLC header is set to a value with which acknowledge is requested to a reception side.

11. The secure communication system according to claim 5, wherein the security process is executed only for Length Indicator within RLC-PDU.

12. The secure communication system according to claim 5, wherein the security process is executed only for a valid data portion within RLC-PDU.

13. The secure communication system according to claim 5, wherein the security process is executed only for a predetermined number of bits from the beginning of a payload within RLC-PDU.

14. The secure communication system according to claim 5, wherein the security process is executed for RLC-PDU stored within an Iub-FP frame only if CFN within an Iub-FP header is a multiple of a certain integer.

15. The secure communication system according to claim 5, wherein the security process is executed for RLC-PDU stored within an Iub-FP frame only if CFN within an Iub-FP header is a predetermined number.

16. The secure communication system according to claim 1, wherein

a method for deciding a data range to be concealed is changed during a communication.

17. The secure communication system according to claim 1, wherein

a parameter for deciding a data range to be concealed is changed during a communication.

18. A secure communication method for concealing a communication between a wireless network control device that can terminate a wireless protocol, and a mobile device that can also terminate a wireless protocol and communicates with a base station by transmitting/receiving a radio wave, comprising:

determining whether or not to require a security process for transmitted/received data; and

restricting a data range to be concealed of the data according to a determination made by said determination step, and encrypting only the restricted range of the dada.

19. The secure communication method according to claim 18, wherein

the restricted data range is some frames among a plurality of frames configuring the data.

20. The secure communication method according to claim 18, wherein

the restricted data range is a portion of a frame configuring the data.

21. The secure communication method according to claim 18, wherein

the restricted data range is a portion of some frames among a plurality of frames configuring the data.