System and method for providing variable security level in a wireless communication system

• US 7,636,842 B2
• Filed: 09/30/2005
• Issued: 12/22/2009
• Est. Priority Date: 01/10/2005
• Status: Expired due to Fees

• Current Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Original Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Inventors: Kumoluyi, Akinlolu Oloruntosi, Shin, Sung-Hyuk, Reznik, Alexander, Chitrapu, Prabhakar R., Zhang, Guodong, Tsai, Yingming
• Primary Examiner(s): Hoffman; Brandon S
• Application Number:
  US11/241,429
• Publication Number:
  US 20070140494A1
• Time in Patent Office: 1,544 Days
• Field of Search: None
• US Class Current: 713/166
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

A system and method for providing variable security levels in a wireless communication network. The present invention optimizes the often conflicting demands of highly secure wireless communications and high speed wireless communications. According to a preferred embodiment of the present invention, various security sensors are scanned to determine the likely presence of an intruder within a predetermined trust zone. If an intruder is likely present, the security level is changed to the highest setting, and consequently a lower data rate, while the intruder is identified. If the identified intruder is in fact a trusted node, the security level is returned to a lower setting. If the identified intruder is not a trusted node, the security level is maintained at an elevated state while the intruder is within the trust zone.

Claims

1. A method for providing variable level security, the method comprising:

establishing a first security level for trusted wireless devices operating within a trust zone of a wireless communication system;

wirelessly scanning the trust zone to detect the presence of intruder wireless devices; and

on the condition that an intruder wireless device is detected, establishing a second security level for the trusted wireless devices, wherein the second security level is higher than the first security level thereby preventing access by the intruder wireless device.

2. The method of claim 1 wherein the wireless communication system utilizes symmetric key cryptography, and wherein the establishing the second security level includes increasing a bit length of an encryption key.

3. The method of claim 2 wherein the key length is increased from 64 bits to 128 bits.

4. The method of claim 1 wherein the wireless communication system utilizes asymmetric key cryptography, and the establishing the second security level includes increasing the frequency at which a public key is changed.

5. The method of claim 1 wherein the establishing the second security level comprises lowering the security level when the detected intruder wireless device is a trusted wireless device.

6. The method of claim 1 wherein the establishing the second security level comprises maintaining an elevated network security level when the identified intruder wireless device is not a trusted wireless device.

7. The method of claim 1 wherein the establishing the second security level comprises terminating all communications across the wireless communication system.

8. The method of claim 1 wherein the scanning the trust zone comprises scanning with at least one sensor selected from the group consisting of:

infra-red sensors, video monitoring sensors, photo-electric sensors, motion detecting sensors, and audio sensors.

9. The method of claim 1 wherein the scanning the trust zone further comprises scanning with at least one radio frequency sensor selected from the group consisting of:

antennas, and smart antennas.

10. The method of claim 1 wherein the scanning the trust zone further comprises analyzing a channel impulse response.

11. The method of claim 1 wherein the scanning the trust zone further comprises analyzing at least one of a spatial channel impulse response, a frequency channel impulse response, and a temporal channel impulse response.

12. The method of claim 1 wherein the establishing the second security level comprises restricting unencrypted communication.

13. The method of claim 1 wherein the wireless communication system utilizes beam steering antennas, and wherein the establishing the second security level comprises steering a directional beam to create a null area in the geographic location of the intruder wireless device.

14. A method for providing variable level security, the method comprising:

establishing a first security level for trusted wireless devices operating within a trust zone of a wireless communication system;

wirelessly scanning the trust zone to detect the presence of intruder wireless devices;

detecting the presence of an intruder wireless device;

on the condition that an intruder wireless device is detected, establishing a second security level for the trusted wireless devices, wherein the second security level is higher than the first security level thereby preventing access by the intruder wireless device;

identifying the detected intruder wireless device;

determining whether the detected intruder wireless device is trusted or not trusted; and

establishing a third security level based on the determination of whether the detected intruder wireless device is trusted or not trusted.

15. The method of claim 14 wherein the wireless communication system utilizes symmetric key cryptography, and wherein the establishing the second security level and the establishing the third security level include changing a bit length of an encryption key.

16. The method of claim 14 wherein the wireless communication system utilizes asymmetric key cryptography, and wherein the establishing the second security level and the establishing the third security level include changing the frequency at which a public key is changed.

17. The method of claim 14 wherein the second security level is higher than the first security level.

18. The method of claim 14 wherein the establishing the third security level further comprises maintaining an elevated network security level when the identified intruder wireless device is not a trusted device.

19. The method of claim 14 wherein the establishing the second security level comprises terminating all communications across the wireless communication system.

20. The method of claim 14 wherein the establishing the third security level comprises terminating all communications across the wireless communication system when the identified intruder wireless device is not a trusted device.

21. The method of claim 14 wherein the scanning the trust zone further comprises scanning with at least one sensor selected from the group consisting of:

infra-red sensors, video monitoring sensors, photo-electric sensors, motion detecting sensors, and audio sensors.

22. The method of claim 14 wherein the scanning the trust zone further comprises scanning with at least one radio frequency sensor selected from the group consisting of:

antennas, and smart antennas.

23. The method of claim 14 wherein the scanning the trust zone further comprises analyzing a channel impulse response.

24. The method of claim 14 wherein the scanning the trust zone further comprises analyzing at least one of a spatial channel impulse response, a frequency channel impulse response and a temporal channel impulse response.

25. The method of claim 14 wherein the identifying the detected intruder wireless device further comprises querying a database of trusted users.

26. The method of claim 14 wherein the establishing the second security level comprises restricting unencrypted communication.

27. The method of claim 14 wherein the establishing the third security level comprises restricting unencrypted communication.

28. The method of claim 14 wherein the wireless communication system utilizes a beam steering antenna, and wherein the establishing the second security level comprises steering a directional beam to create a null area in the geographic location of the intruder wireless device.

29. The method of claim 14 wherein the wireless communication system utilizes a beam steering antenna, and wherein the establishing the third security level comprises beam steering to create a null area in the geographic location of the intruder wireless device.

30. A wireless node for providing variable level security comprising:

an intruder detector configured to detect intruder wireless devices within a trust zone;

an intruder wireless device identifier configured to identify detected intruder wireless devices and determine whether the identified intruder wireless devices are trusted or not trusted; and

a security level controller configured to adjust the security level within the trust zone, based on the determination to prevent access by the not trusted intruder wireless device.

31. The wireless node of claim 30 wherein the node is an access point.

32. The wireless node of claim 30 wherein the node is a wireless transmit/receive unit (WTRU).

33. The wireless node of claim 30 wherein the security level controller is configured to raise the security level when an intruder wireless device is detected within the trust zone.

34. The wireless node of claim 30 wherein the security level controller is configured to maintain an elevated security level when an identified intruder wireless device is determined to be not trusted.

35. The wireless node of claim 30 the security level controller is configured to lower the security level when an identified intruder wireless device is determined to be trusted.

36. The wireless node of claim 30 wherein the security level controller is configured to terminate all unencrypted communications when an intruder wireless device is detected within the trust zone.

37. The wireless node of claim 30 wherein the security level controller is configured to terminate all unencrypted communications when an identified intruder wireless device is determined to be not trusted.

38. An integrated circuit comprising:

an intruder detector configured to detect intruder wireless devices within a trust zone;

an intruder identifier configured to identify detected intruder wireless devices and determine whether the identified intruder wireless device are trusted or not trusted; and

a security level controller configured to adjust the security level within the trust zone based on the determination to prevent access by the intruder wireless device.