Method and system for securing wireless communications

• US 7,991,160 B2
• Filed: 04/18/2007
• Issued: 08/02/2011
• Est. Priority Date: 04/18/2006
• Status: Expired due to Fees

• Current Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Original Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Inventors: Ye, Chunxuan, Cha, Inhyok, Guccione, Louis J., Reznik, Alexander, Racha, Renuka
• Primary Examiner(s): GEE, JASON KAI YIN
• Application Number:
  US11/736,830
• Publication Number:
  US 20080123851A1
• Time in Patent Office: 1,567 Days
• Field of Search: 380/270
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/0875 based on channel impulse response [CIR]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 80/02 Data link layer protocols

Abstract

A wireless transmit/receive unit (WTRU) and a Node B, respectively, perform joint randomness not shared by others (JRNSO) measurement to generate JRNSO bits based on a channel estimate between the WTRU and the Node B. The WTRU and the Node B then perform a reconciliation procedure to generate a common JRNSO bits. The Node B sends the common JRNSO bits to a serving network. The WTRU and the SN secure a session key (such as an integrity key, a cipher key and an anonymity key), using the common JRNSO bits. The JRNSO measurements are performed on an on-going basis, and the session key is updated using a new set of common JRNSO bits. The JRNSO bits may be expanded by using a pseudorandom number generator (PNG) or a windowing technique. A handover may be intentionally induced to increase the JRNSO bits generation rate.

Claims

1. In a wireless communication system including a wireless transmit/receive unit (WTRU) and a serving network (SN), wherein the SN comprises at least a Node B and a radio network controller (RNC), a method for providing secure wireless communications, the method comprising:

the WTRU and the Node B performing joint randomness not shared by others (JRNSO) measurements to generate JRNSO bits based on a channel impulse response (CIR) estimate between the WTRU and the Node B;

the WTRU and the Node B performing a reconciliation procedure to generate common JRNSO bits;

the Node B sending the common JRNSO bits to the RNC;

the WTRU and the SN generating a session key used for security;

the WTRU and the SN securing said session key using the common JRNSO bits when a length of said common JRNSO bits are compared to a length of said session key and are greater than or equal to said length of said session key;

the SN sending a handover command to the WTRU and a second Node B to initiate a handover to the second Node B, the SN informing a start of JRNSO measurements between the WTRU and the second Node B;

the WTRU and the second Node B performing JRNSO measurement to generate a first set of JRNSO bits based on a channel estimate between the WTRU and the second Node B;

the WTRU and the second Node B performing a reconciliation procedure to generate a second set of common JRNSO bits;

the second Node B sending the second set of common JRNSO bits to the SN; and

the WTRU and the SN securing the session key used for security using the second set of common JRNSO bits.

2. In a wireless communication system including a wireless transmit/receive unit (WTRU) and a serving network (SN), wherein the SN comprises at least a Node B and a radio network controller (RNC), a method for providing secure wireless communications, the method comprising:

the WTRU and the Node B performing joint randomness not shared by others (JRNSO) measurements to generate JRNSO bits based on a channel impulse response (CIR) estimate between the WTRU and the Node B;

the WTRU and the Node B performing a reconciliation procedure to generate common JRNSO bits;

the Node B sending the common JRNSO bits to the RNC;

the WTRU and the SN securing a session key used for security using the common JRNSO bits; and

the SN initiating a handover to at least one alternative Node B to generate JRNSO bits between the WTRU and said at least one alternative Node B to increase a rate of JRNSO bits generation.

3. The method of claim 2 wherein the handover is a hard handover.

4. The method of claim 2 wherein the handover is a soft handover.

5. The method of claim 4 wherein each of the Node Bs transmits a same downlink probe signal to the WTRU.

6. The method of claim 5 wherein said each of the Node Bs sends the downlink probe signal with different time offsets.

7. The method of claim 5 wherein the WTRU uses a RAKE receiver in receiving the downlink probe signal.

8. The method of claim 2 further comprising:

the WTRU generating multiple sets of JRNSO bits associated with different Node Bs;

an accumulation controller collecting the multiple sets of JRNSO bits from the Node Bs; and

the WTRU and the accumulation controller generating a longer stream of JRNSO bits using the multiple sets of JRNSO bits.

9. The method of claim 8 wherein the WTRU and the accumulation controller accumulate each of the multiple sets of JRNSO bits until the WTRU is instructed to stop to accumulate by the accumulation controller.

10. The method of claim 8 wherein the WTRU and the Node Bs use multiple antennas in generation of the JRNSO bits.

11. The method of claim 8 wherein the WTRU and the Node Bs use multiple-input multiple-output (MIMO) in generation of the JRNSO bits.

12. The method of claim 10 wherein the WTRU and the Node Bs use beam-forming in generation of the JRNSO bits.

13. The method of claim 10 wherein the WTRU and the Node Bs adaptively change antenna configurations for transmission and reception in generation of the JRNSO bits.

14. The method of claim 8 wherein the accumulation controller is one of the Node Bs involved in the handover.

15. The method of claim 8 wherein the accumulation controller is said RNC.

16. A wireless communication system configured to secure wireless communications, the system comprising:

a wireless transmit/receive unit (WTRU) configured to perform joint randomness not shared by others (JRNSO) measurement to generate JRNSO bits based on a channel estimate between the WTRU and a Node B and perform a reconciliation procedure to generate common JRNSO bits; and

a serving network (SN) including at least the Node B and a radio network controller (RNC), the Node B configured to perform JRNSO measurement to generate JRNSO bits based on a channel estimate between the WTRU and the Node B and perform a reconciliation procedure to generate the common JRNSO bits, the SN and said WTRU configured to generate a session key used for security and secure said session key using the common JRNSO bits when a length of the common JRNSO bits are compared to a length of said session key and are greater than or equal to said length of said session key, wherein the SN is configured to send a handover command to the WTRU and a second Node B to initiate a handover to the second Node B, and inform a start of JRNSO measurements between the WTRU and the second Node B and the WTRU and the second Node B are configured to perform JRNSO measurement to generate JRNSO bits based on a channel estimate between the WTRU and the second Node B, and perform a reconciliation procedure to generate second common JRNSO bits so that at least one of a session key and a parameter used for security is secured using the second common JRNSO bits.

17. A wireless communication system configured to secure wireless communications, the system comprising:

a wireless transmit/receive unit (WTRU) configured to perform joint randomness not shared by others (JRNSO) measurement to generate JRNSO bits based on a channel estimate between the WTRU and a Node B and perform a reconciliation procedure to generate common JRNSO bits; and

a serving network (SN) including the Node B, the Node B configured to perform JRNSO measurement to generate JRNSO bits based on a channel estimate between the WTRU and the Node B and perform a reconciliation procedure to generate the common JRNSO bits, the SN configured to secure a session key used for security using the common JRNSO bits, wherein the SN is configured to initiate a handover to at least one destination Node B to generate JRNSO bits between the WTRU and said at least one destination Node B to increase a rate of JRNSO bits generation.

18. The system of claim 17 wherein the handover is a hard handover.

19. The system of claim 17 wherein the handover is a soft handover.

20. The system of claim 19 wherein each of the Node Bs transmits a same downlink probe signal to the WTRU.

21. The system of claim 20 wherein each of the Node Bs sends the downlink probe signal with different time offsets.

22. The system of claim 20 wherein the WTRU uses a RAKE receiver in receiving the downlink probe signal.

23. The system of claim 17 further comprising:

an accumulation controller configured to collect multiple sets of JRNSO bits from the Node Bs and generate a longer stream of JRNSO bits using the multiple sets of JRNSO bits, wherein the WTRU is configured to generate multiple sets of JRNSO bits associated with different Node Bs and generate a longer stream of JRNSO bits using the multiple sets of JRNSO bits.

24. The system of claim 23 wherein the WTRU and the accumulation controller accumulate each of the multiple sets of JRNSO bits until the WTRU is instructed to stop to accumulate by the accumulation controller.

25. The system of claim 24 wherein the WTRU and the Node Bs use multiple antennas in generation of the JRNSO bits.

26. The system of claim 25 wherein the WTRU and the Node Bs use multiple-input multiple-output (MIMO) in generation of the JRNSO bits.

27. The system of claim 25 wherein the WTRU and the Node Bs use beam-forming in generation of the JRNSO bits.

28. The system of claim 25 wherein the WTRU and the Node Bs adaptively change antenna configurations for transmission and reception in generation of the JRNSO bits.

29. The system of claim 23 wherein the accumulation controller is one of the Node Bs involved in the handover.

30. The system of claim 23 wherein the accumulation controller is said RNC.