Secure registration for a multicast-broadcast-multimedia system (MBMS)

• US 8,098,818 B2
• Filed: 07/07/2003
• Issued: 01/17/2012
• Est. Priority Date: 07/07/2003
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Grilli, Francesco, Casaccia, Lorenzo, Semple, James, Agashe, Parag A.
• Primary Examiner(s): Dada, Beemnet W
• Application Number:
  US10/617,215
• Publication Number:
  US 20050008159A1
• Time in Patent Office: 3,116 Days
• Field of Search: 380/42, 380 44- 46, 380247-249, 380270-273, 713/181, 713/175, 370/312, 370/432, 370/328, 455/522, 455/455
• US Class Current: 380/44
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 2463/081 applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 4/08 User group management

Abstract

A method and an apparatus for secure registration for a multicast-broadcast-multimedia system (MBMS) are disclosed. A random number is generated by a broadcast-multicast-service center (BM-SC) and broadcast to user equipment in the coverage area of a radio access network (RAN). A memory module or smart card (UICC) in the user equipment generates a radio access network key (RAK) which is a function of the random number and a key selected from the group consisting of a public land mobile network key (PK) and a broadcast access key (BAK), and then generates a temporary registration key (RGK) as a function of the RAK, a service identification number and a user identification number, for example, P-TMSI, which may be extracted by the RAN to authenticate the registration as legitimate.

Claims

1. A method of obtaining secure registration by a memory module (UICC) in a multicast-broadcast-multimedia system (MBMS), the method comprising:

receiving a random number;

generating a radio access network key (RAK) as a function of the random number and a key selected from the group consisting of a public land mobile network key (PK) and a broadcast access key (BAK);

generating temporary registration key (RGK) as a function of the RAK and a user identification number; and

authenticating at least one registration message in the MBMS based on the RGK, wherein the RGK is a function of the RAK, a service identification number and the user identification number.

2. The method of claim 1, further comprising transmitting the RGK to a mobile telephone.

3. The method of claim 1, further comprising receiving a provisioning message from a broadcast-multicast service center.

4. The method of claim 3, wherein the provisioning message is a fraction of the PK and a permanent registration key (RK).

5. The method of claim 3, further comprising extracting the PK from the provisioning message.

6. The method of claim 1, wherein the RGK is a function of the RAK and a cyclic redundancy code (CRC) computed from the service identification number and the user identification number.

7. The method of claim 1, wherein the UICC comprises a subscriber identity module (SIM) in a Global System for Mobile communication (GSM).

8. The method of claim 1, wherein the UICC comprises a removable user identity module (RUIM) in a code division multiple access (CDMA) system.

9. The method of claim 1, wherein the PK is provisioned by using a public key.

10. The method of claim 1, wherein the BAK is provisioned by using a public key.

11. A method of obtaining secure registration by a mobile station in a multicast-broadcast-multimedia system (MBMS), the method comprising:

receiving a random number from a radio access network;

transmitting the random number to a memory module (UICC);

receiving from the UICC a temporary registration key (RGK) based on the random number and a user identification number; and

authenticating at least one registration message in the MBMS based on the RGK, wherein the RGK is a function of a radio access network key (RAK), a service identification number and a user identification number, and wherein the RAK is a function of the random number and a key selected from the group consisting of a public land mobile network key (PK) and a broadcast access key (BAK).

12. The method of claim 11 wherein the PK is extracted from a provisioning message received from a broadcast-multicast service center.

13. The method of claim 12, wherein the provisioning message is a function of the PK and a permanent registration key (RK).

14. The method of claim 11, wherein the RGK is a function of the RAK and a cyclic redundancy code (CRC) computed from the service identification number and the user identification number.

15. The method of claim 11, wherein the UICC comprises a subscriber identity module (SIM) in a Global System for Mobile communication (GSM) system.

16. The method of claim 11, wherein the UICC comprises a removable user identity module (RUIM) in a code division multiple access (CDMA) system.

17. The method of claim 11, wherein the PK is provisioned by using a public key.

18. The method of claim 11, wherein the BAR is provisioned by using a public key.

19. A memory module stored on a computer readable storage medium, comprising:

receiving logic configured for receiving a random number;

means for generating a radio access network key (RAK) as a function of the random number and a key selected from the group consisting of a public land mobile network key (PK) and a broadcast access key (BAK);

means for generating a temporary registration key (RGK) as a function of the RAK and a user identification number; and

means for authenticating at least one registration message in the MBMS based on the RGK, wherein the RGK is a function of the RGK, service identification number and the user identification number.

20. The memory module of claim 19, further comprising means for transmitting the RGK to a mobile telephone.

21. The memory module of claim 19, further comprising means for receiving a provisioning message from a broadcast-multicast service center.

22. The memory module of claim 21, wherein the provisioning message is a function of the PK and a permanent registration key (RK).

23. The memory module of claim 21, further comprising means for extracting the PK from the provisioning message.

24. The memory module of claim 19, wherein the RGK is a function of the RAK and a cyclic redundancy code (CRC) computed from the service identification number and the user identification number.

25. The memory module of claim 19, wherein the PK is provisioned by using a public key.

26. The memory module of claim 19, wherein the BAK is provisioned by using a public key.

27. A mobile station apparatus, comprising:

receiving logic configured for receiving a random number from a radio access network;

means for transmitting the random number to a memory module (UICC);

means for receiving from the UICC a temporary registration key (RGK) based on the random number and a user identification number; and

means for authenticating at least one registration message in the MBMS based on the RGK, wherein the RGK is a function of a radio access network key (RAK), a service identification number and a user identification number, and wherein the RAK is a function of the random number and a key selected from the group consisting of a public land mobile network key (PK) and a broadcast access key (BAK).

28. The apparatus of claim 27, wherein the PK is extracted from a provisioning message received from a broadcast-multicast service center.

29. The apparatus of claim 28, wherein the provisioning message is a function of the PK and a permanent registration key (RK).

30. The apparatus of claim 27 wherein the RGK is a function of the RAK and a cyclic redundancy code (CRC) computed from the service identification number and the user identification number.

31. The apparatus of claim 27, wherein the UICC comprises a subscriber identity module (SIM) in a Global System for Mobile communication (GSM) system.

32. The apparatus of claim 27, wherein the UICC comprises a removable user identity module (RUIM) in a code division multiple access (CDMA) system.

33. The apparatus of claim 27, wherein the PK is provisioned by using a public key.

34. The apparatus of claim 27, wherein the BAK is provisioned by using a public key.

35. A computer readable storage medium storing instructions for obtaining secure registration by a memory module (UICC) in a multicast-broadcast-multimedia system (MBMS), the method comprising:

receiving a random number;

generating a radio access network key (RAK) as a function of the random number and a key selected from the group consisting of a public land mobile network key (PK) and a broadcast access key (BAK);

generating a temporary registration key (RGK) as a function of the RAK and a user identification number; and

authenticating at least one registration message in the MBMS based on the RGK, wherein the RGK is a function of the RAK, a service identification number and a user identification number.

36. The computer readable storage device of claim 35, wherein the method further comprises transmitting the RGK to a mobile telephone.

37. The computer readable storage device of claim 35, wherein the method further comprises receiving a provisioning message from a broadcast-multicast service center.

38. The computer readable storage device of claim 37, wherein the provisioning message is a function of the PK and a permanent registration key (RK).

39. The computer readable storage device of claim 37, wherein the meted further comprises extracting the PK flora the provisioning message.

40. The computer readable storage device of claim 35, wherein the RGK is a function of the RAK and a cyclic redundancy code (CRC) computed from the service identification number and the user identification number.

41. The computer readable storage device of claim 35, wherein the UICC comprises a subscriber identity module (SIM) in a Global System for Mobile communication (GSM) system.

42. The computer readable storage device of claim 35, wherein the UICC comprises a removable user identity module (RUIM) in a code division multiple access (CDMA) system.

43. The computer readable storage device of claim 35, wherein the PK is provisioned by using a public key.

44. The computer readable storage device of claim 35, wherein the BAK is provisioned by using a public key.

45. A computer readable storage device storing instructions for obtaining secure registration by a mobile station in a multicast-broadcast-multimedia system (MBMS), the method comprising:

receiving a random number from a radio access network;

transmitting the random number to a memory module (UICC);

receiving from the UICC a temporary registration key (RGK) based on the random number and a user identification number; and

authenticating at least one registration message in the MBMS based on the RGK, wherein the RGK is a function of a radio access network key (RAK), a service identification number and a user identification number, and wherein the RAK is a function of the random number and a key selected from the group consisting of a public land mobile network key (PK) and a broadcast access key (BAK).

46. The computer readable storage device of claim 45, wherein the PK is extracted from a provisioning message received from a broadcast-multicast service center.

47. The computer readable storage device of claim 46, wherein the provisioning message is a function of the PK and a permanent registration key (RK).

48. The computer readable storage device of claim 45, wherein the RGK is a function of the RAK and a cyclic redundancy code (CRC) computed from the service identification number and the user identification number.

49. The computer readable storage device of claim 45, wherein the UICC comprises a subscriber identity module (SIM) in a Global System for Mobile communication (GSM) system.

50. The computer readable storage device of claim 45, wherein the UICC comprises a removable user identity module (RUIM) in a code division multiple access (CDMA) system.

51. The computer readable storage device of claim 45, wherein the PK is provisioned by using a public key.

52. The computer readable storage device of claim 45, wherein the BAK is provisioned by using a public key.