METHOD FOR MANAGING A COUNTER STATUS ALLOCATED TO A PAIR COMPRISING A COMMUNICATION TERMINAL AND A BASE STATION

• US 20090327475A1
• Filed: 12/06/2006
• Published: 12/31/2009
• Est. Priority Date: 12/14/2005
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Kröselberg, Dirk, Falk, Rainer, Günther, Christian
• Granted Patent: US 9,143,935 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A counter status that is allocated to a communication terminal and a base station is usually deleted when the storage space in the respective base station is used up. To address this, the counter status is saved in an additional communication network element when a predefinable criterion is met, and can thus be retrieved.

Claims

1-10. -10. (canceled)

11. A method for managing a counter status in a communication network, comprising:

including the counter status in authentication information;

storing the counter status in the first communication network element;

increasing the counter status with individual communication processes between the first communication subscriber and the first communication network element;

storing the counter status in a second communication network element when a predeterminable first criterion is met, the counter status being stored with information indicating it is allocated to the first communication subscriber and to the first communication network element;

storing the individual communication processes in the second communication network element;

monitoring a predeterminable second criterion at the second communication subscriber, on the basis of the stored communication processes; and

when a predeterminable second criterion is met, deleting the counter status stored in the first communication element or prompting deletion of the counter statuses stored in the first communication element can be deleted.

12. The method as claimed in claim 11, wherein the communication network is a World Wide Interoperability for Microwave Access (WiMax) radio network.

13. The method as claimed in claim 11, wherein

the predeterminable first criterion is a predeterminable number of communication processes.

14. The method as claimed in claim 11, wherein the predeterminable second criterion is reaching a minimum available storage space in the first communication network element.

15. The method as claimed in claim 11, wherein both the counter status and authentication information for the first communication subscriber are stored in the second communication network element.

16. The method as claimed in claim 11, wherein the predeterminable second criterion is triggered based on an end to a period of validity of authentication information for the first communication subscriber.

17. The method as claimed in claim 11, wherein the predeterminable second criterion is triggered based on generation of new authentication information for the first communication subscriber.

18. The method as claimed in claim 11, wherein

movement of the first communication subscriber is monitored to generate a movement profile for the first communication subscriber, and

the predeterminable second criterion is set based on the movement profile for the first communication subscriber.

19. The method as claimed in claim 11, wherein

there are a plurality of first communication subscribers,

the first subscribers are prioritized, and

the predeterminable second criterion is set based on prioritization of first communication subscribers.

20. The method of claim 19, wherein the predeterminable second criterion is set such that the counter status of a higher priority first communication subscriber is deleted less frequently than the counter status of a lower priority first communication subscriber.

21. The method as claimed in claim 11, wherein

the first communication subscriber is a Mobile Subscriber Station,

the first communication network element is a Base Station, and

the second communication network element is a World Wide Interoperability for Microwave Access (WiMax) Access Service Network Gateway.

22. The method as claimed in claim 12, wherein

the predeterminable first criterion is a predeterminable number of communication processes.

23. The method as claimed in claim 22, wherein the predeterminable second criterion is reaching a minimum available storage space in the first communication network element.

24. The method as claimed in claim 23, wherein both the counter status and authentication information for the first communication subscriber are stored in the second communication network element.

25. The method of claim 24, wherein the predeterminable second criterion is set such that the counter status of a higher priority first communication subscriber is deleted less frequently than the counter status of a lower priority first communication subscriber.

26. The method as claimed in claim 25, wherein

the first communication subscriber is a Mobile Subscriber Station,

the first communication network element is a Base Station, and

the second communication network element is a World Wide Interoperability for Microwave Access (WiMax) Access Service Network Gateway.

27. The method as claimed in claim 26, wherein the predeterminable second criterion is triggered based on an end to a period of validity of authentication information for the first communication subscriber.

28. The method as claimed in claim 26, wherein the predeterminable second criterion is triggered based on generation of new authentication information for the first communication subscriber.

29. The method as claimed in claim 26, wherein

movement of the first communication subscriber is monitored to generate a movement for the first communication subscriber, and

the predeterminable second criterion is set based on the movement profile for the first communication subscriber.

30. The method as claimed in claim 26, wherein

there are a plurality of first communication subscribers,

the first subscribers are prioritized, and

the predeterminable second criterion is set based on prioritization of first communication subscribers.