Method and system for providing communications security

• US 7,278,084 B2
• Filed: 10/29/2003
• Issued: 10/02/2007
• Est. Priority Date: 10/29/2003
• Status: Expired due to Fees

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Kaaja, Harald, Palin, Arto, Salokannel, Juha, Oksanen, Markka A.
• Primary Examiner(s): Lamarre; Guy
• Assistant Examiner(s): Abraham; Esaw T.
• Application Number:
  US10/694,881
• Publication Number:
  US 20050097408A1
• Time in Patent Office: 1,434 Days
• Field of Search: 714/703, 714/41, 714/52, 714/758, 455/41.2
• US Class Current: 714/758
• CPC Class Codes: H04B 1/7183 Synchronisation
• CPC Class Codes: H04L 1/0061 Error detection codes
• CPC Class Codes: H04L 1/08 by repeating transmission, e.g. Verdan system H04L1/1858 and H04L1/189 take precedence
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/18 Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

Generating a protected content stream from a data stream provides enhanced security in short-range wireless communications networks. This protected content stream is transmitted across a first short-range communications link. In addition, information for converting the protected content stream into the data stream is transmitted across a second link. The first link may be an ultra wideband (UWB) link, while the second link may be a Bluetooth link.

Claims

1. A method of providing communications security, the method comprising:

(a) generating a protected content stream from a data stream;

(b) transmitting the protected content stream across a first short-range radio communications link; and

(c) transmitting across second short-range radio communications link information for converting the protected content stream into the data stream;

wherein the protected content stream comprises a packet, and wherein step (a) comprises inserting one or more errors into the packet.

2. The method of claim 1, wherein step (a) further comprises inserting the one or more errors into a portion of the packet, the portion at a predetermined position within the packet.

3. The method of claim 2, wherein step (a) further comprises selecting the predetermined position.

4. The method of claim 2, wherein step (a) further comprises generating the one or more errors with a code.

5. The method of claim 4, wherein the code is based on a polynomial.

6. The method of claim 4, wherein step (c) comprises transmitting the predetermined position and the code across the second short-range radio communications link.

7. The method of claim 1, wherein the packet includes a field containing an error detection code and/or an error correction code, the method further comprising:

setting the error detection code and/or the error correction code after said inserting step.

8. The method of claim 7, wherein the error detection code and/or the error correction code includes a cyclical redundancy check (CRC) code.

9. The method of claim 1, wherein step (a) comprises:

formatting the data stream into a plurality of data packets, each the data packets including a field having an error detection code and/or error correction code;

generating at least one additional packet, the additional packet including a field having an error detection code and/or error correction code; and

arranging the at least one additional packet and the plurality of data packets into the protected content stream.

10. The method of claim 9, wherein the error detection codes and/or the error correction codes for the data packets and the at least one additional packet each include cyclical redundancy check (CRC) codes.

11. The method of claim 9, wherein step (a) further comprises randomly selecting a position of the at least one additional packet in the protected content stream.

12. The method of claim 9, wherein step (c) comprises transmitting across the second short-range radio communications link a position of the at least one additional packet in the protected content stream.

13. The method of claim 1, wherein step (a) comprises:

placing the data stream into a plurality of packets, each the packets including a field having an error correction code;

setting the error correction code for each of the packets; and

injecting errors into one or more of the plurality of packets, such that the corresponding error correction codes are unable to correct these errors.

14. The method of claim 13, wherein the error correction code is a block code.

15. The method of claim 13, wherein step (a) further comprises randomly selecting a value and a location for each of the injected errors.

16. The method of claim 13, wherein step (c) comprises transmitting the value and the location for each of the injected errors across the second short-range radio communications link.

17. The method of claim 1:

wherein step (a) comprises encrypting the data stream with an encryption key; and

wherein step (c) comprises transmitting the encryption key across the second short-range radio communications link.

18. The method of claim 1:

wherein step (a) comprises encrypting the data stream with an encryption key; and

wherein step (c) comprises transmitting a decryption key across the second short-range radio communications link, the decryption key corresponding to the encryption key.

19. The method of claim 1, wherein the first short-range radio communications link is an ultra wideband (UWB) link.

20. The method of claim 1, wherein the second short-range radio communications link is a Bluetooth link.

21. A wireless communications device, comprising:

means for generating a protected content stream from a data stream;

means for transmitting the protected content stream across a first short-range radio communications link; and

means for transmitting across a second short-range radio communications link information for converting the protected content stream into the data stream;

wherein the protected content stream comprises a packet having one or more inserted errors, the one or more errors at one or more errors corresponding position within the packet.

23. The method of claim 21, wherein step (b) comprises receiving the one or more positions and a code for removing the inserted errors from the packet.

24. The method of claim 23, wherein the code is based on a polynomial.

25. The method of claim 21, wherein the protected content stream comprises a plurality of data packets and at least one additional packet.

26. The method of claim 25, wherein step (b) comprises receiving a position of the at least one additional packet in the protected content stream.

27. The method of claim 26, wherein step (c) comprises removing the at least one additional packet from the protected content stream.

28. The method of claim 21, wherein the protected content stream in encrypted, and wherein step (b) comprises receiving a key for decrypting the protected content stream.

29. The method of claim 21, wherein the first short-range radio communications link is an ultra wideband (USB) link.

30. The method of claim 21, wherein the second short-range radio communications link is a Bluetooth link.

22. A method of providing communications security, the method comprising:

(a) receiving a protected content stream from a first short-range radio communications link;

(b) receiving from a second short-range communications link information for converting the protected content stream into a data stream; and

(c) generating the data stream from the protected content stream;

wherein the protected content stream comprises a packet having one or more inserted errors, the one or more errors at one or more errors corresponding position within the packet.

31. A wireless communications device, comprising:

means for receiving a protected content stream from a first short-range radio communications link;

means for receiving from a second short-range communications link information for converting the protected content stream into a data stream; and

means for generating the data stream from the protected content stream;

wherein the protected content stream comprises a packet having one or more inserted errors, the one or more errors at one or more errors corresponding position within the packet.

32. A wireless communications device, comprising:

a controller configured adapted to generate a protected content stream from a data stream by inserting one or more errors into the packet;

a first transceiver configured to transmit the protected content stream across a first short-range communications link; and

a second transceiver configured to transmit across a second short-range radio communications link information for converting the protected content stream into the data stream.

33. The wireless communications device of claim 32, wherein the first short-range communications link is an ultra wideband (UWB) link and the second short-range communications link is a Bluetooth link.

34. A wireless communications device, comprising:

a first transceiver adapted to receive a protected content stream from a first short-range radio communications link, the protected content stream comprising a packet having one or more inserted errors;

a second transceiver adapted to receive from a second short-range radio communications link information for converting the protected content stream into a data stream; and

a controller configured to generate the data stream from the protected content stream.

35. The wireless communications device of claim 34, wherein the first short-range radio communications link is an ultra wideband (UWB) link and the second short-range communications link is a Bluetooth link.

36. A computer program stored on a computer useable medium having computer program logic recorded thereon, executable in a computer system, the computer program logic comprising:

program code for enabling a processor to generate a protected content stream from a data stream, the protected content stream comprising a packet, and the generation of the protected content stream comprising inserting one or more errors into the packet;

program code for enabling the processor to transmit the protected content stream across a first short-range radio communications link; and

program code for enabling the processor to transmit across a second short-range radio communications link information for converting the protected content stream into the data stream.

37. A computer program product stored on a computer useable medium having computer program logic recorded thereon, executable in a computer system, the computer program logic comprising:

program code for enabling a processor to receive a protected content stream from a first short-range radio communications link, the protected content stream comprising a packet having one or more inserted errors;

program code for enabling the processor to receive from a second short-range radio communications link information for converting the protected content stream into a data stream; and

program code for enabling the processor to generate the data stream from the protected content stream.

38. A method of providing communications security, the method comprising:

(a) generating a protected content stream from a data stream;

(b) transmitting the protected content stream across a first short-range radio communications link; and

(c) transmitting across a second short-range radio communications link information for converting the protected content stream into the data stream;

wherein the protected content stream comprises one or more packets, and wherein step (a) comprises inserting one or more errors in any one or more of the one or more packets.

39. The method of claim 38, wherein step (a) further comprises inserting the one or more errors into a portion of any of the one or more packets, the portion at a predetermined position within said packets.