Integrity check in a communication system

• US 7,009,940 B2
• Filed: 10/10/2001
• Issued: 03/07/2006
• Est. Priority Date: 02/22/2000
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Niemi, Valtteri, Vialen, Jukka
• Primary Examiner(s): Pezzlo, John
• Application Number:
  US09/975,410
• Publication Number:
  US 20020044552A1
• Time in Patent Office: 1,609 Days
• Field of Search: 370/328, 370/338, 370/410, 370/252, 370/329, 370/278, 370/384, 370/386, 380/247, 380/270, 455/411, 713/181, 713/200, 705/75, 705/18, 709/203, 709220-222
• US Class Current: 370/252
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers

Abstract

A method of communication between a first node and a second node for a system where a plurality of different channels is provided between said first and second node. The method comprises the step of calculating an integrity output. The integrity output is calculated from a plurality of values, some of said values being the same for said different channels. At least one of said values is arranged to comprise information relating to the identity of said channel, each channel having a different identity. After the integrity output has been calculated, Information relating to the integrity output is transmitted from one of said nodes to the other.

Claims

1. A method of communication between a first node and a second node, a plurality of different channels being provided between said first and second node, said method comprising the steps of:

calculating an integrity output, said integrity output being calculated from a plurality of input values, some of said input values being the same for said different channels, at least one of said input values being arranged to comprise information relating to the identity of said channel, each channel having a different identity and at least one of said input values are identical for said different channels; and

transmitting information relating to the integrity output from one of said nodes to the other,

wherein said information relating to the identity of the channel is combined with only one other input value.

3. A method as claimed in claim 1, wherein said values input to an algorithm comprise one or more of the following values:

an integrity key;

a direction value, a fresh value, a message value and a count value.

6. A method as claimed in claim 1, wherein the output of an integrity algorithm is sent from one node to another.

7. A method as claimed in claim 1, wherein communication between said first and second nodes is via a wireless connection.

8. A method as claimed in claim 7, wherein one of said first and second nodes is user equipment.

9. A method as claimed in claim 8, wherein said user equipment is a mobile station.

10. A method as claimed in claim 7, wherein one of said first and second nodes is a radio network controller.

11. A method as claimed in claim 7, wherein one of said first and second nodes is a node B.

12. A method as claimed in claim 1, wherein said communication channels comprise a radio bearer.

13. A method as claimed in claim 12, wherein said radio bearer is a signaling radio bearer.

14. A method as claimed in claim 1, wherein said input values are input to an algorithm for calculation said output.

15. A method as claimed in claim 3, wherein the same integrity key is used for the different channels.

2. A method of communication between a first node and a second node, a plurality of different channels being provided between said first and second node, said method comprising the steps of:

calculating an integrity output, said integrity output being calculated from a plurality of input values, some of said input values being the same for said different channels, at least one of said input values being arranged to comprise information relating to the identity of said channel, each channel having a different identity and at least one of said input values are identical for said different channels;

and transmitting information relating to the integrity output from one of said nodes to the other,

wherein said information relating to the identity of the channel is combined with at least one other input value, and

wherein said combined input value input comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

4. A method of communication between a first node and a second node, a plurality of different channels being provided between said first and second node, said method comprising the steps of:

calculating an integrity output, said integrity output being calculated from a plurality of input values, some of said input values being the same for said different channels, at least one of said input values being arranged to comprise information relating to the identity of said channel, each channel having a different identity and at least one of said input values are identical for said different channels; and

transmitting information relating to the integrity output from one of said nodes to the other,

wherein said information relating to the identity of the channel is combined with at least one other input value, and

wherein said information relating to the identity of the channel is combined with one or more of the following values input to an algorithm;

a fresh value;

a count value; and

integrity key;

a direction value and a message value.

5. A method as claimed in claim 4, wherein said message value is sent from one node to another without the channel identification information.

16. A method for carrying out an integrity check for system comprising a first node and a second node, a plurality of communication channels being provided between said first node and said second node, said method comprising the step of calculating an integrity output using a plurality of values, at least one of said values being arranged to comprise information relating to the identity of said channel, each having a different identity and at least one of said values being identical for said different channels;

and transmitting information relating to the integrity output from one of said nodes to the other node,

wherein said information relating to the identity of the channel is combined with only one other input value.

17. A method of communication between a first node and a second node, a plurality of different channels being provided between said first and second node, said method comprising the steps of:

calculating an integrity output using a plurality of values, one of said values being an integrity key, each of said channels having a different integrity key; and

transmitting information relating to the output of an integrity algorithm from one of said nodes to the other,

wherein said information relating to the identity of the channel is combined with only one other input value.

18. A method of communication between a first node and a second node, a plurality of different channels being provided between said first and second node, said method comprising:

triggering an authentication procedure;

calculating a desired number of integrity parameters by the authentication procedure; and

transmitting said integrity parameters from one of said nodes to the other node,

wherein information relating to the identity of the channel is combined with only one other input value.

19. A node, said node for use in a system comprising a said node and a further node, a plurality of different channels being provided between said nodes, said node comprising means for calculating an integrity output, said integrity output being calculated from a plurality of values, at least one of said values being arranged to comprise information relating to the identity of said values being arranged to comprise information relating to the identity of said channel, each channel having a different identity and at least one of said values being identical for said different channels, at least one of said values being arranged to comprise information relating to the identity of said channel, each channel having a different identity,

wherein said information relating to the identity of the channel is combined with only one other input value.

20. A node, said node for use in a system comprising said node and a further node, a plurality of different channels being provide between said nodes, said node comprising means for calculating an integrity output, said integrity output being calculated from a plurality of values, at least one of said values being arranged to comprise information relating to the identity of said channel, each channel having a different identity and at least one of said values being identical for said different channels means for transmitting information relating to the integrity output from one of said nodes to the other node;

and means for comparing information relating to the integrity output calculated by said node with a value calculated by the further node,

wherein said information relating to the identity of the channel is combined with only one other input value.

21. An algorithm for calculating an integrity output for use in a system comprising a node and a further node, a plurality of different channels being provided between said nodes, said algorithm comprising means for calculating an integrity output, said integrity output being calculated from a plurality of values, at least on of said values being arranged to comprise information relating to the identity of said channel, each channel having a different identity and at least one of said values being identical for said different channels,

wherein said information relating to the identity of the channel is combined with at least one other input value.