TLS session management method in SUPL-based positioning system

• US 7,900,039 B2
• Filed: 01/09/2006
• Issued: 03/01/2011
• Est. Priority Date: 01/17/2005
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Shim, Dong-Hee, Chu, Youn-Sung
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US11/814,128
• Publication Number:
  US 20080109650A1
• Time in Patent Office: 1,877 Days
• Field of Search: 380/272
• US Class Current: 713/151
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/12 between location registers or mobility servers

Abstract

When a SET receives a positioning service from a V-SLP by performing a roaming from a H-SLP to the V-SLP in a SUPL-based positioning system, only a new TLS connection is generated using an abbreviated handshake protocol without generating a new TLS session after the roaming. That is, when opening a TLS session for ensuring security in a SUPL-based positioning method, in particular, when opening a new TLS session between the V-SLP (V-SPC) and the SET after opening the TLS session between the H-SLP and the SET, the key information having used in the previous TLS session is provided to the V-SLP to set a new TLS connection, thereby reducing a load of an entire system.

Claims

1. A method of managing a Transport Layer Security (TLS) session in a Secure User Plane Location (SUPL)-based positioning system, the method comprising:

setting, by a Home SUPL Location Platform (H-SLP), the TLS session with a terminal, during which the H-SLP receives secret information from the terminal to be used for an encryption and an integrity check with respect to a new TLS connection of the TLS session;

receiving, by the H-SLP, a SUPL START message from the terminal;

determining, by the H-SLP, whether the terminal roams to a Visited SLP (V-SLP) based on routing information, wherein the V-SLP includes a Visited SUPL Location Center (V-SLC) and a Visited SUPL Positioning Center (V-SPC);

transferring, by the H-SLP to the V-SLC, TLS session information related to the set TLS session and the SUPL START message if it is determined that the terminal roams to the V-SLP;

transmitting, by the V-SLC to the V-SPC, the TLS session information; and

using, by the V-SPC, the TLS session information to set the new TLS connection with the terminal without exchanging further information for the encryption and the integrity check between the terminal and the V-SPC.

2. The method of claim 1,

wherein the TLS session information includes:

a TLS session ID used for setting the TLS session between the H-SLP and the terminal; and

wherein the secret information includes a master secret or a roaming-master secret for generating keys used for the encryption and the integrity check.

3. The method of claim 2, wherein the master secret is generated by applying a value obtained by concatenating a pre-master secret having an arbitrary value known between the terminal and the H-SLP to a pseudo random function.

4. The method of claim 2, wherein the roaming-master secret is generated by hashing a value obtained by concatenating the master secret with a roaming count.

5. The method of claim 1, wherein the TLS session information includes parameters indicating an encryption method and a compression method used for setting the TLS session between the H-SLP and the terminal.

6. The method of claim 1, wherein the TLS session comprises performing a full handshake protocol.

7. The method of claim 1, wherein using the TLS session information to set the new TLS connection comprises performing an abbreviated handshake protocol.

8. The method of claim 1, further comprising:

performing a SUPL positioning procedure between the V-SLP and the terminal to calculate a location of the terminal when the new TLS connection is set.

9. The method of claim 1,

wherein using the TLS session information to set the new TLS connection includes:

transmitting receiving, by the V-SPC, a Client Hello message including a Version, a SET-Random, and a sessionID from the terminal; and

sequentially transmitting a Server Hello message including a Version, a V-SLP-Random and a sessionID, a ChangeCipherSpec message and a Finished message from the V-SPC to the terminal; and

wherein the method further comprises sequentially transmitting the ChangeCipherSpec message and the Finished message by the terminal when the Finished message is transmitted from the V-SPC, to thus terminate an abbreviated handshake process.

10. The method of claim 1, further comprising:

transmitting, by the V-SLC, an RLP Standard SUPL Roaming Location Immediate Request (SSRLIA) message including a session ID and a V-SPC address for performing a position calculation to the H-SLP;

transmitting, by the H-SLP, a SUPL RESPONSE message including the session ID and the V-SPC address to the terminal in response to the SUPL START message;

calculating, by the V-SPC, a location of the terminal by performing a SUPL positioning procedure between the V-SPC and the terminal; and

transmitting a SUPL END message from the V-SPC to the terminal when the calculation of the location of the terminal is completed.

11. The method of claim 1, wherein the TLS session information

and the SUPL Start message are included in an RLP SSRLIR message to be transmitted to the V-SLC.