Integrity check in a communication system

• US 8,014,307 B2
• Filed: 12/22/2005
• Issued: 09/06/2011
• Est. Priority Date: 02/22/2000
• Status: Expired due to Fees

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Niemi, Valtteri, Vialen, Jukka
• Primary Examiner(s): Pezzlo; John
• Application Number:
  US11/314,537
• Publication Number:
  US 20060159031A1
• Time in Patent Office: 2,084 Days
• Field of Search: 370/252, 370/278, 370/282, 370/386, 713/200, 709/222
• US Class Current: 370/252
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers

Abstract

A method of communication between a first node and a second node for a system where a plurality of different channels is provided between said first and second node. The method comprises the step of calculating an integrity output. The integrity output is calculated from a plurality of values, some of said values being the same for said different channels. At least one of said values is arranged to comprise information relating to the identity of said channel, each channel having a different identity. After the integrity output has been calculated, Information relating to the integrity output is transmitted from one of said nodes to the other.

Claims

1. A method, comprising:

calculating, by a calculator module, an integrity output using a plurality of input values, at least one of the input values comprising information relating to an identity of a channel, each of a plurality of channels having a different identity and at least one of the input values being identical for said different channels, wherein the identity of the channel is a radio bearer identity.

2. A method according to claim 1, further comprising:

combining information relating to an identity of a channel with at least one other input value,

wherein said information relating to the identity of the channel is combined with one or more of;

a fresh value, a count value, and integrity key, a direction value and a message value.

3. A method according to claim 1, further comprising:

combining information relating to the identity of the channel with at least one other input value,

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the at least one other input value.

4. The method according to claim 1, wherein the radio bearer identity is a signaling radio bearer identity.

5. A method, comprising:

calculating, by a calculator module, an integrity output using a plurality of values, one of said values being an integrity key, each of a plurality of channels having a different integrity key;

transmitting information relating to the output of an integrity algorithm from a first node to a second node; and

combining information relating to an identity of a channel with at least one other input value,

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

6. A method according to claim 5, further comprising:

combining information relating to an identity of the channel with at least one other input value,

wherein said information relating to the identity of the channel is combined with one or more of;

a fresh value, a count value, and integrity key, a direction value and a message value.

7. A method, comprising:

triggering an authentication procedure;

calculating, by a calculator module, a desired number of integrity parameters by the authentication procedure; and

combining information relating to an identity of a channel with at least one other input value,

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value, and

wherein each of said desired number of integrity parameters are calculated based on information relating to an identify of a channel.

8. A method according to claim 7, further comprising:

combining information relating to an identity of a channel with at least one other input value,

wherein said information relating to the identity of the channel is combined with one or more of;

a fresh value;

a count value; and

integrity key;

a direction value and a message value.

9. An apparatus, comprising:

a calculator module configured to calculate an integrity output, said integrity output being calculated from a plurality of values, at least one of said values comprising information relating to an identity of a channel, each of a plurality of channels having a different identity and at least one of said values being identical for said different channels, wherein the identity of said channel is a radio bearer identity.

10. An apparatus according to claim 9,

wherein said information relating to the identity of the channel is combined with at least one other input value, and

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

11. An apparatus according to claim 9, wherein said calculator module combines said information relating to the identity of the channel with at least one other input value,

wherein said information relating to the identity of the channel is combined with one or more of:

a fresh value;

a count value, and integrity key, a direction value and a message value.

12. The apparatus according to claim 9, wherein the radio bearer identity is a signaling radio bearer identity.

13. An apparatus, comprising:

a calculator module configured to calculate an integrity output, said integrity output being calculated from a plurality of input values, some of said input values being the same for said different channels, at least one of said input comprising information relating to the identity of said channel, each channel having a different identity and at least one of said input values are identical for said different channels, wherein the identity of said channel is a radio bearer identity; and

transmitter configured to transmit information relating to the integrity output from a first node to a second node,

wherein said information relating to the identity of the channel is combined with at least one other input value.

14. An apparatus according to claim 13, wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

15. An apparatus according to claim 13, wherein said information relating to the identity of the channel is combined with one or more of:

a fresh value, a count value, and integrity key, a direction value and a message value.

16. The apparatus according to claim 13, wherein the radio bearer identity is a signaling radio bearer identity.

17. An apparatus, comprising:

means for triggering an authentication procedure;

means for calculating a desired number of integrity parameters by the authentication procedure based on information relating to an identity of a channel; and

means for combining information relating to an identity of the channel with at least one other input value,

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

18. An apparatus according to claim 17, further comprising:

means for combining information relating to an identity of the channel with at least one other input value,

wherein said information relating to the identity of the channel is combined with one or more of;

a fresh value;

a count value; and

integrity key;

a direction value and a message value.

19. An apparatus, comprising:

a module that calculates an integrity output, said integrity output being calculated from a plurality of input values, some of said input values being the same for said different channels, at least one of said input values comprising information relating to the identity of said channel, each channel having a different identity and at least one of said input values are identical for said different channels, wherein the identity of said channel is a radio bearer identity; and

a second module, wherein the transmitter transmits information relating to the integrity output from one of said nodes to the other,

wherein said information relating to the identity of the channel is combined with at least one other input value.

20. An apparatus according to claim 19, wherein said module that calculates the integrity output the combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

21. An apparatus according to claim to claim 19, wherein said information relating to the identity of the channel is combined with one or more of the following values:

a fresh value, a count value, and integrity key, a direction value and a message value.

22. The apparatus according to claim 19, wherein the radio bearer identity is a signaling radio bearer identity.

23. A computer program embodied in a computer-readable medium, the computer-readable medium configured to control a processor to perform operations comprising:

calculating an integrity output, said integrity output being calculated from a plurality of values, at least one of said values comprising information relating to the identity of said channel, each channel having a different identity and at least one of said values being identical for said different channels,

wherein said information relating to the identity of the channel is combined with at least one other input value, and wherein the identity of said channel is a radio bearer identity.

24. The computer program according to claim 23, wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

25. The computer program according to claim 23, wherein said information relating to the identity of the channel is combined with one or more of:

a fresh value, a count value, and integrity key, a direction value and a message value.

26. The computer program embodied in a computer-readable medium according to claim 23, wherein the radio bearer identity is a signaling radio bearer identity.

27. An apparatus, comprising:

a triggering module configured to trigger an authentication procedure;

a calculator module configured to calculate a desired number of integrity parameters by the authentication procedure based on information relating to an identity of a channel; and

combining module configured to combine information relating to the identity of the channel with at least one other input value,

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

28. An apparatus according to claim 27, further comprising:

a combining module configured to combine information relating to an identity of the channel with at least one other input value,

wherein said information relating to the identity of the channel is combined with one or more of;

a fresh value;

a count value; and

integrity key;

a direction value and a message value.

29. A computer program embodied on a computer-readable medium, the computer program configured to control a processor to perform operations comprising:

calculating an integrity output using a plurality of values, one of said values being an integrity key, each of a plurality of channels having a different integrity key;

transmitting information relating to the output of an integrity algorithm from a first node to a second node; and

combining information relating to an identity of a channel with at least one other input value,

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.

30. A computer program embodied on a computer-readable medium, the computer program configured to control a processor to perform operations comprising:

triggering an authentication procedure;

calculating a desired number of integrity parameters by the authentication procedure based on information relating to an identity of a channel; and

combining information relating to the identity of the channel with at least one other input value,

wherein said combined information comprises a first part allocated to the identity of the bearer and a second part allocated to the other information provided by said value.