Method and System for Improving Robustness of Secure Messaging in a Mobile Communications Network

• US 20080292101A1
• Filed: 07/22/2004
• Published: 11/27/2008
• Est. Priority Date: 07/22/2004
• Status: Active Grant

• Current Assignee: Telecom Italia S.p.A.
• Original Assignee: Telecom Italia Media SPA (Telecom Italia S.p.A.)
• Inventors: Macchi, Ilario
• Granted Patent: US 8,442,231 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

A mobile communications network has mobile communications capabilities and supports a secure messaging service, such as an SMS messaging service, that allows a message sender and at least one message receiver (at least one among the message sender and the message receiver being a user of the mobile communications network) to exchange messages encrypted by means of a cryptographic process performed by the message sender, so as to obtain an encrypted message that can be decrypted by a corresponding cryptographic process performed by the intended message receiver. End-to-end security of the exchanged message is thus achieved. A cryptographic algorithm, exploited by the user of the mobile communications network for performing the cryptographic process, is modified by exploiting the mobile communications capabilities of the mobile communications network. Robustness and reliability over time of the end-to-end security messaging is improved.

Claims

1-24. -24. (canceled)

25. In a mobile communications network having mobile communications capabilities and supporting a secure messaging service that allows a message sender and at least one message receiver exchanging messages encrypted by means of a cryptographic process performed by the message sender, so as to obtain an encrypted message that can be decrypted by a corresponding cryptographic process performed by the intended message receiver, wherein at least one among the message sender and the message receiver is a user of the mobile communications network, a method comprising:

modifying a cryptographic algorithm exploited by said user of the mobile communications network for performing said cryptographic process, wherein said modifying the cryptographic algorithm is accomplished by exploiting the mobile communications capabilities of the mobile communications network.

26. The method according to claim 25, wherein said cryptographic algorithm comprises a parametric cryptographic algorithm, comprising at least two combinable basic cryptographic algorithms and configuration parameters defining a combination of the at least two basic cryptographic algorithms.

27. The method according to claim 26, wherein said modifying the cryptographic algorithm comprises modifying at least one of the basic cryptographic algorithms.

28. The method according to claim 26, wherein said modifying the cryptographic algorithm comprises modifying said configuration parameters defining a specific combination of the at least two basic cryptographic algorithms.

29. The method according to claim 26, further comprising modifying encryption/decryption keys to be used by said user of the mobile communications network for encrypting/decrypting a message, said modifying the encryption/decryption keys being accomplished by exploiting communications capabilities of the mobile communications network.

30. The method according to claim 29, comprising modifying at least one of the basic cryptographic algorithms, modifying configuration parameters and modifying encryption/decryption keys according to respective time schedules.

31. The method according to claim 25, wherein said exploiting the communications capabilities of the mobile communications network comprises using a messaging service of the network.

32. The method according to claim 25, wherein said exploiting the communications capabilities of the mobile communications network comprises exploiting a packet radio service of the network.

33. A secure messaging system comprising:

a mobile communications network having mobile communications capabilities and supporting a messaging service;

a message sender and at least one message receiver, wherein at least one among the message sender and the message receiver is a user of the mobile communications network;

a cryptographic process performed by the message sender to encrypt a message to be sent to the at least one receiver; and

a corresponding cryptographic process performed by the message receiver to decrypt the encrypted message once received,

the mobile communications network being adapted to modify a cryptographic algorithm exploited by said user of the mobile communications network for performing said cryptographic process by exploiting the mobile communications capabilities thereof.

34. The system according to claim 33, wherein said cryptographic algorithm comprises a parametric cryptographic algorithm, comprising at least two combinable basic cryptographic algorithms, and configuration parameters defining a combination of the at least two basic cryptographic algorithms, wherein the mobile communications network is adapted to modify either one or the other or both of said basic cryptographic algorithm and configuration parameters.

35. The system according to claim 33, comprising a messaging security manager server connected to the mobile communications network for managing modifications to the cryptographic algorithm.

36. The system according to claim 35, wherein the messaging security manager server is adapted to communicate with the user of the mobile communications network via a network messaging service.

37. The system according to claim 35, wherein the messaging security manager server is adapted to communicate with the user of the mobile communications network via a network packet radio service.

38. A mobile station for use in a mobile communications network having mobile communications capabilities and supporting a messaging service, the mobile station being adapted to implement a cryptographic process for encrypting/decrypting messages to be sent to/received from a message destination/sender,

the mobile station being further adapted to have a cryptographic algorithm, exploited for performing said cryptographic process, modified by exploiting the communications capabilities of the mobile communications network.

39. The mobile station according to claim 38, further adapted to manage the cryptographic algorithm as a parametric cryptographic algorithm of at least two combinable basic cryptographic algorithms, and configuration parameters defining a combination of the basic cryptographic algorithms.

40. The mobile station according to claim 39, further adapted to manage modifications of either one or both of the at least two basic cryptographic algorithms and the configuration parameters.

41. The mobile station according to claim 40, further adapted to have encryption/decryption keys exploited by the cryptographic process for encrypting/decrypting messages modified by exploiting the mobile communications capabilities of the mobile communications network.

42. The mobile station according to claim 38, wherein said mobile communications capabilities of the mobile communications network comprises one or both among a messaging service, and a packet radio service.

43. The mobile station according to claim 38, comprising a user terminal equipment and a subscriber identity module operatively associated therewith.

44. The mobile station according to claim 43, wherein at least one among the cryptographic process and operations for the modification of the cryptographic algorithm are performed by the user terminal equipment.

45. The mobile station according to claim 43, wherein at least one among the cryptographic process and operations for the modification of the cryptographic algorithm are performed by the subscriber identity module.

46. The mobile station according to claim 45, wherein the cryptographic process and operations for the modification of the cryptographic algorithm are performed by the subscriber identity module.

47. A subscriber identity module adapted to be operatively associated with user terminal equipment for forming a mobile station adapted for use in a mobile communications network having mobile communications capabilities and supporting a messaging service, the mobile station being adapted to implement a cryptographic process for encrypting/decrypting messages to be sent to/received from a message destination/sender,

the subscriber identity module being adapted to have a cryptographic algorithm modified by exploiting the communications capabilities of the mobile communications network, the cryptographic algorithm being exploited by the mobile station for performing said cryptographic process.

48. The subscriber identity module according to claim 47, further adapted to perform said cryptographic process.