Security of packet-mode transmission in a mobile communication system

• US 6,118,775 A
• Filed: 11/04/1997
• Issued: 09/12/2000
• Est. Priority Date: 03/04/1996
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Telecommunications Oy (Nokia Corporation)
• Inventors: Kari, Hannu, Karppanen, Arto
• Primary Examiner(s): Kizou, Hassan
• Assistant Examiner(s): Tsegaye, Saba
• Application Number:
  US08/952,046
• Time in Patent Office: 1,043 Days
• Field of Search: 370/278, 370/310, 370/312, 370/313, 370/349, 370/328, 370/473, 370/474, 380/9, 380/23, 380/28, 713/200
• US Class Current: 370/349
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A method for data transmission between a transmitter and a receiver in a digital mobile communication system comprising at least one mobile station and at least one air interface, in which method the data to be transmitted is assembled into frames comprising at least a header and a data portion; and frames are transmitted only when there is need for data transmission; an extra information field is added to the data portion of a frame and the transmitter and the receiver negotiate between themselves an algorithm and/or a parameter on the basis of which the contents of the extra information field are formed.

Claims

1. A method for data transmission between a transmitter and a receiver (MS, GSN) in a digital mobile communication system comprising at least one mobile station (MS) and at least one air interface (Um), in which method:

the data to be transmitted is assembled into frames (F) comprising at least a header (1) and a data portion (2); and

frames (F) are transmitted only when there is need for data transmission;

characterized in that;

an extra information field (3) is added to the data portion (2) of a frame (F), and

the transmitter and the receiver (MS, GSN) negotiate between themselves an algorithm and/or a parameter on the basis of which the contents of the extra information field (3) are formed.

2. A method as claimed in claim 1, characterized in that the algorithm and/or parameter are negotiated when a mobile station (MS) registers for use of a data transmission service.

3. A method as claimed in claim 1, characterized in that the algorithm and/or parameter are negotiated at the beginning of each connection.

4. A method as claimed in claim 3, characterized in that the algorithm and/or parameter are renegotiated during the connection.

5. A method as claimed in claim 1, characterized in that the contents of the extra information field (3) are modified between two successive frames (F) transmitted over the air interface (Um).

6. A method as claimed in claim 1, characterized in that the data portions (2) of the frames (F) are transmitted encrypted over the air interface (Um) and the extra information field (3) comprises at least one of the following identities:

a bit sequence constant

the identity of the frame (F) concerned or a portion thereof;

the IMSI or MSISDN identity of the mobile station;

a connection-specific identity;

or

a pseudo-random number.

7. A method as claimed in claim 1, characterized in that the extra information field (3) comprises an identity formed by an algorithm generating pseudo-random numbers, whereby the data portions (2) of the frames (F) can be sent encrypted or unencrypted over the air interface (Um).

8. A method as claimed in claim 1, characterized in that to improve protection, at least one second extra information field (4) is added to the data portion (2) of a frame (F), the field comprising at least one of the following identities:

a bit sequence constant

the identity of the frame (F) concerned or a portion thereof;

the IMSI or MSISDN identity of the mobile station;

a connection-specific identity;

or

a pseudo-random number.

9. A method as claimed in claim 8, characterized in that at least one of the second extra information fields (4) comprises a different identity than the first extra information field (3).