Method and apparatus for storing and distributing encryption keys

• US 7,266,687 B2
• Filed: 02/16/2001
• Issued: 09/04/2007
• Est. Priority Date: 02/16/2001
• Status: Active Grant

• Current Assignee: Motorola Solutions, Inc.
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: McDonald, Daniel J., Chater-Lea, David J., Pappas, Scott J., Anderson, Walter F., Kremske, Randy, Newkirk, Dennis, Sowa, Hans Christopher, Johur, Jason J., Walton, Glenn Brian
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): BLUDAU, BRANDON S
• Application Number:
  US09/785,849
• Publication Number:
  US 20020154781A1
• Time in Patent Office: 2,391 Days
• Field of Search: None
• US Class Current: 713/163
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/08 Trunked mobile radio systems

Abstract

A method of key distribution includes generating, by a first system device (101), key material and forwarding the key material from the first system device (101) to a second system device (107). It is determined whether a mobile station (401), for which the key material is directed, is active on the system. When the mobile station is active, the key material is forwarded to a base station (115) where the mobile station (401) is active, and the base station (115) forwards the key material to the mobile station (401).

Claims

1. A method comprising the steps of:

generating, by a first infrastructure system device, a first encryption key associated with traffic encryption for group communications;

forwarding the first encryption key from the first infrastructure system device to a second infrastructure system device;

storing the first encryption key at the second infrastructure system device;

generating, by the second infrastructure system device, a second encryption key associated with traffic encryption for group communications by combining the first encryption key with a third encryption key; and

forwarding the second encryption key to a third infrastructure system device other than the first and second infrastructure system devices, wherein the second encryption key is used for encrypting messages for communicating over an air interface.

3. The method of claim 1, wherein the third infrastructure system device is any of a base station, a base site, and a TETRA site controller, wherein the step of forwarding the second encryption key to a third infrastructure system device is triggered by a mobile station residing at any of the base station, the base site, and the TETRA site controller when the first encryption key is generated, and wherein the mobile station is affiliated with a talkgroup associated with the first encryption key.

4. The method of claim 1, wherein the infrastructure third system device is any of a base station, a base site, and a TETRA site controller, wherein the step of forwarding the second encryption key to a third infrastructure system device is triggered by a mobile station arriving at any of the base station, the base site, and the TETRA site controller, and wherein the mobile station is affiliated with a talkgroup associated with the first encryption key.

5. The method of claim 1, wherein the third infrastructure system device is any of a base station, a base site, and a TETRA site controller, wherein the step of forwarding the second encryption key to a third infrastructure system device is triggered by a mobile station changing talkgroup affiliation while residing at any of the base station, the base site, and the TETRA site controller, and wherein the mobile station changes talkgroup affiliation to a talkgroup associated with the first encryption key.

6. The method of claim 1, wherein the third encryption key is associated with the third infrastructure system device.

7. The method of claim 1, wherein the first encryption key is a group cipher key, the second encryption key is a modified group cipher key and the third encryption key is a common cipher key.

8. The method of claim 1, farther comprising the step of communicating over an air interface by encrypting messages with the second encryption key.

9. The method of claim 1, farther comprising the step of updating the first encryption key when an encryption period associated with the third encryption key expires.

10. The method of claim 1, wherein the second infrastructure system device is included in a first zone of devices, the method further comprising the steps of:

encrypting the first encryption key with an interkey that is associated with the first zone of devices and at least a second zone of devices, yielding a first encrypted encryption key;

forwarding the first encrypted encryption key to a fourth infrastructure system device included in the second zone of devices, wherein the fourth system device is other than the first, second and third infrastructure system devices;

decrypting, by the fourth infrastructure system device, the first encrypted encryption key into the first encryption key.

11. The method of claim 10, further comprising the steps of:

generating, by the fourth infrastructure system device, the second encryption key by combining the first encryption key with the third encryption key; and

forwarding the second encryption key to a fifth infrastructure system device included in the second zone of devices that is other than first, second, third and fourth infrastructure system devices.

12. The method of claim 11, wherein the second encryption key is encrypted with an intrakey associated only with the second zone of devices prior to being forwarded to the fifth infrastructure system device.

13. The method of claim 11, wherein the third encryption key is associated with the fifth infrastructure system device.

14. The method of claim 11, wherein the first encryption key is a group cipher key, the second encryption key is a modified group cipher key and the third encryption key is a common cipher key.

15. The method of claim 1, further comprising the steps of:

encrypting the first encryption key with a key associated with a mobile station, yielding an encrypted mobile encryption key;

forwarding the encrypted mobile encryption key to the mobile station.

16. The method of claim 15, further comprising the steps of:

decrypting, by the mobile station, the encrypted mobile encryption key with the key associated with the mobile station, yielding the first encryption key;

combining the first encryption key with a predetermined encryption key, yielding an air interface key;

communicating over an air interface by encrypting messages with the air interface key.

17. The method of claim 16, wherein the predetermined encryption key is a common cipher key.

18. The method of claim 1, wherein the second infrastructure system device is included in a first zone of devices, the method further comprising the step of encrypting the first encryption key with an interkey associated with the first zone of devices and at least a second zone of devices prior to the forwarding step, wherein the encrypted first encryption key is stored at the second infrastructure system device.

19. The method of claim 18, further comprising the step of acknowledging receipt of the first encryption key.

20. The method of claim 19, wherein the step of acknowledging comprises decrypting the first encryption key, and when the first encryption key is decrypted properly, generating an acknowledgment to be forwarded via an air traffic router to the first infrastructure system device.

21. The method of claim 1, wherein the second infrastructure system device contains a home location register associated with the first encryption key.

22. The method of claim 1, further comprising the step of updating the first encryption key when an encryption period associated with the first encryption key expires.

2. A method comprising the steps of:

receiving, in a first infrastructure system device, a first encryption key generated in a second infrastructure system device, wherein the first encryption key is associated with traffic encryption for group communications;

storing the first encryption key at the first infrastructure system device;

generating, by the first infrastructure system device, a second encryption key associated with traffic encryption for group communications by combining the first encryption key with a third encryption key; and

forwarding the second encryption key to a third infrastructure system device other than the first and second infrastructure system devices, wherein the second encryption key is used for encrypting messages for communicating over an air interface.