Early IMS security

• US 8,463,264 B2
• Filed: 08/15/2007
• Issued: 06/11/2013
• Est. Priority Date: 08/15/2007
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Alriksson, Fredrik, Lindholm, Fredrik
• Primary Examiner(s): Mehrpour, Melody
• Application Number:
  US12/673,570
• Publication Number:
  US 20110124339A1
• Time in Patent Office: 2,127 Days
• Field of Search: 380/44, 710/104, 710/100, 710/300, 710/301, 710/305, 326/30, 326/62, 326/63, 326/80, 365/189.011, 365/189.09, 455/435.1, 455/436, 370/310, 370/254, 370/252, 370/401, 370/352
• US Class Current: 455/435.1
• CPC Class Codes: H04L 2101/654 International mobile subscriber identity [IMSI] numbers
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

A method for providing Early IMS Security in a network. In registering a terminal on a telecommunications network, a plurality of private user identities (IMPIs) are derived from the IMSI of the terminal. Some or all of these IMPIs are registered with the network. Each IMPI has its own IRS containing its own IMPUs, enabling different identities of the user to be registered with the network.

Claims

1. A method in a mobile terminal of registering the terminal on a telecommunications network, comprising the steps of:

deriving a plurality of Private User Identities from an International Mobile Subscriber Identity of the terminal; and

,

registering some or all of the plurality of Private User Identities with the network.

2. The method of claim 1, further comprising the step of associating an Implicit Registration Set with each of the Private User Identities, each Implicit Registration Set containing one or more Public User Identities corresponding to the Private User Identity associated with that Implicit Registration Set.

3. The method of claim 2, wherein each Implicit Registration Set provides a distinct set of identities for the user.

4. The method of claim 1, wherein all of the plurality of Private User Identities are associated with the same user.

5. The method of claim 1, wherein the plurality of Private User Identities are generated from the International Mobile Subscriber Identity using a counter to distinguish between the different Private User Identities.

6. The method of claim 5, wherein each Private User Identity takes the form <

IMSI>

<

delimiter>

<

counter>

@<

domain name>

.

7. The method of claim 1, wherein the terminal controls which of the plurality of Private User Identities are registered with the network.

8. The method of claim 1, wherein the network supports Early IMS Security.

9. The method of claim 1, wherein the terminal registers the different Private User Identities through different access networks or using different network interfaces.

10. The method of claim 1, wherein the network supports Universal Subscriber Identity Module based IMS AKA.

11. A terminal for attachment to a network, comprising:

processing means configured to derive a plurality of Private User Identities from an International Mobile Subscriber Identity of the terminal; and

,

communication means for registering some or all of the plurality of Private User Identities with the network.

12. The terminal of claim 11, wherein the processing means is configured to associate an Implicit Registration Set with each Private User Identity, each Implicit Registration Set containing one or more Public User Identities corresponding to the Private User Identity associated with that Implicit Registration Set.

13. The terminal of claim 11, wherein the International Mobile Subscriber Identity is stored on a Subscriber Identity Module or Universal Subscriber Identity Module on a UMTS Integrated Circuit Card attached to the terminal.

14. The terminal of claim 11, wherein the plurality of Private User Identities are generated from the International Mobile Subscriber Identity using a counter to distinguish between the different Private User Identities.

15. The terminal of claim 11, wherein each Private User Identity takes the form <

IMSI>

<

delimiter>

<

counter>

@<

domain name>

.