Method for requesting, generating and distributing service-specific traffic encryption key in wireless portable internet system, apparatus for the same, and protocol configuration method for the same

• US 8,615,218 B2
• Filed: 12/08/2004
• Issued: 12/24/2013
• Est. Priority Date: 12/09/2003
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute, Hanaro Telecom., Inc., KT Corporation, Samsung Electronics Co. Ltd., SK Telecom Co., Ltd.
• Original Assignee: Electronics and Telecommunications Research Institute, Hanaro Telecom., Inc., KT Corporation, KT Freetel Co., Ltd. (KT Corporation), Samsung Electronics Co. Ltd., SK Telecom Co., Ltd.
• Inventors: Cho, Seok-Heon, Park, Ae-Soon, Yoon, Chul-Sik, Kim, Kyung-Soo, Ahn, Jee Hwan
• Primary Examiner(s): Gelin, Jean
• Assistant Examiner(s): Shen, Qun
• Application Number:
  US10/582,440
• Publication Number:
  US 20070281665A1
• Time in Patent Office: 3,303 Days
• Field of Search: 455/411, 455/466, 455/450, 455/410, 455/404.2
• US Class Current: 455/411
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services

Abstract

Disclosed are a method for requesting, generating and distributing a service-specific traffic encryption key in a wireless portable Internet system, an apparatus for the same, and a protocol configuration method for the same. In the present invention, a subscriber station sends a Key Request message for requesting a service-specific traffic encryption key to the base station using a PKM-REQ MAC message, and a base station analyzes the Key Request message to generate the requested service-specific traffic encryption key. Subsequently, the base station sends a Key Reply message, including the generated service-specific traffic encryption key, to the subscriber station using a PKM-RSP MAC message. If the base station fails to generate the key, the base station sends a Key Reject message, including a reason for the failure, to the subscriber station.

Claims

1. A method for requesting an encryption key by a subscriber station in a wireless communication system, the method comprising:

determining a service type of a traffic connection;

transmitting a first message including an identifier corresponding to the service type that requests an encryption key corresponding to the service type to a base station; and

receiving a second message including the encryption key corresponding to the service type from the base station,

wherein the encryption key is generated according to the determined service type before establishing a traffic connection with the base station,

wherein, when the encryption key is not generated for the determined service type, the base station generates a Key Reject message including an error code indicating a failure reason and the generated Key Reject message is sent to the subscriber station using a MAC message, and

wherein the base station sends an unsupported service type error code to the subscriber station when the encryption key is not generated for the determined service type.

2. The method as claimed in claim 1, wherein the first message is a key request message.

3. The method as claimed in claim 1, wherein the service type is one of a unicast service, a multicast service, and a broadcast service.

4. The method as claimed in claim 1, wherein when the service type is a multicast service, the first message includes an identifier of a multicast service group of a subscriber.

5. A method for distributing an encryption key by a base station in a wireless communication system, the method comprising:

receiving a first message including an identifier corresponding to a service type of a traffic connection to request the encryption key from a subscriber station;

generating the encryption key corresponding to the service type;

generating a second message including the encryption key;

transmitting the second message including the encryption key to the subscriber station; and

transmitting a Key Reject message, which includes an unsupported service type error code, to the subscriber station using a MAC message, when the controller generates an error for the request of the encryption key from the subscriber station for the service type being unsupported.

6. The method as claimed in claim 5, wherein the first message is a key request message.

7. The method as claimed in claim 6, wherein the second message is a key reply message including the encryption key corresponding to the service type.

8. The method as claimed in claim 5, wherein the service type is one of a unicast service, a multicast service, and a broadcast service.

9. The method as claimed in claim 5, wherein when the service type is a multicast service, the first message includes an identifier of a multicast service group of a subscriber.

10. The method as claimed in claim 5, wherein the base station sends an unauthorized multicast service group ID type error code to the subscriber station when the service type for the encryption key requested by the subscriber station is a multicast service that is an unsupported multicast service for a specific multicast service group ID.

11. An apparatus for requesting an encryption key in a wireless communication system, the apparatus comprising:

a transmitter for transmitting a first message requesting the encryption key to a base station;

a receiver for receiving a second message from the base station; and

a controller for determining a service type of a traffic connection, generating the first message including an identifier corresponding to the service type, transmitting the first message to the base station through the transmitter to request an encryption key corresponding to the service type, and receiving the second message including the encryption key corresponding to the service type from the base station through the receiver,

wherein the encryption key is generated according to the determined service type before establishing a traffic connection with the base station,

wherein, when the encryption key is not generated for the determined service type, the base station generates a Key Reject message including an error code indicating a failure reason and the generated Key Reject message is sent to the subscriber station using a MAC message, and

wherein the base station sends an unsupported service type error code to the subscriber station when the encryption key is not generated for the determined service type.

12. The apparatus as claimed in claim 11, wherein the first message is a key request message.

13. The apparatus as claimed in claim 11, wherein the service type is one of a unicast service, a multicast service, and a broadcast service.

14. The apparatus as claimed in claim 11, wherein when the service type is a multicast service, the first message includes an identifier of a multicast service group of a subscriber.

15. The apparatus as claimed in claim 11, further comprising a memory for storing information including the encryption key or the error code resulting from an analysis by a message analyzer controlled by the controller.

16. An apparatus for distributing an encryption key in a wireless communication system, the apparatus comprising:

a receiver for receiving a first message including an identifier corresponding to a service type of a traffic connection to request the encryption key from a subscriber station;

a generator for generating the encryption key corresponding to the service type;

a transmitter for transmitting a second message to the subscriber station;

a controller for receiving the first message from the subscriber station through the receiver, generating the encryption key corresponding to the service type, and generating the second message including the encryption key; and

a Key Reject transmitter for transmitting a Key Reject message, which includes an unsupported service type error code, to the subscriber station using a MAC message, when the controller generates an error for the request of the encryption key from the subscriber station for the service type being unsupported.

17. The apparatus as claimed in claim 16, wherein the first message is a key request message.

18. The apparatus as claimed in claim 17, wherein the second message is a key reply message including the encryption key corresponding to the service type.

19. The apparatus as claimed in claim 16, wherein the service type is one of a unicast service, a multicast service, and a broadcast service.

20. The apparatus as claimed in claim 16, wherein when the service type is a multicast service, the first message includes an identifier of a multicast service group of a subscriber.