Method for auto-configuration of a network terminal address

• US 8,630,420 B2
• Filed: 05/31/2005
• Issued: 01/14/2014
• Est. Priority Date: 05/31/2005
• Status: Active Grant

• Current Assignee: Telecom Italia S.p.A.
• Original Assignee: Telecom Italia S.p.A.
• Inventors: Dell'Uomo, Luca, Calvi, Andrea, Galante, Maria Pia
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US11/921,173
• Publication Number:
  US 20100008507A1
• Time in Patent Office: 3,150 Days
• Field of Search: 380/247, 380/259, 380/278, 713/162, 726 29- 30
• US Class Current: 380/278
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/75 Temporary identity
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

A method for generating a network address in a communication network includes at least one user equipment and a network equipment. The method includes: a) providing a same shared secret key both at the at least one user equipment and at the network equipment; and b) generating at least a portion of the network address at the at least one user equipment and at the network equipment based upon at least the shared secret key.

Claims

1. A method for generating a network address in a communication network comprising at least one user equipment and a network equipment, comprising:

a) providing a same shared secret key both at said at least one user equipment and at the network equipment; and

b) generating at least a portion of the network address at said at least one user equipment and at the network equipment based upon at least said shared secret key.

2. The method according to claim 1, wherein b) is performed by executing at said at least one user equipment and at the network equipment a same first algorithm on the shared secret key.

3. The method according to claim 1, wherein the shared secret key is a dynamic key.

4. The method according to claim 3, further comprising c) dynamically calculating the dynamic shared secret key at said at least one user equipment and at the network equipment.

5. The method according to claim 4, wherein c) comprises calculating the dynamic shared secret key based upon a random value.

6. The method according to claim 5, wherein, in c) said random value is communicated by one of said at least one user equipment and said network equipment to the other one.

7. The method according to claim 5, wherein c) is performed by executing at said at least one user equipment and the network equipment a same second algorithm on the random value.

8. The method according to claim 5, wherein in c) the dynamic shared secret key is calculated at said at least one user equipment and at the network equipment also taking into account a same static shared key.

9. The method according to claim 1, further comprising d) implementing an authentication procedure for verifying the identity of said at least one user equipment in order to authorize said at least one user equipment to have access to the communication network.

10. The method according to claim 9, wherein d) comprises dynamically generating a ciphering key at the network equipment and at said at least one user equipment.

11. The method according to claim 10, wherein the shared secret key used in b) is the ciphering key generated in d).

12. A communication network comprising:

at least one user equipment comprising a storing unit for storing a shared secret key and a processing unit adapted to generate a network address for the user equipment, wherein at least one portion of the network address is generated based upon at least said shared secret key; and

a network equipment adapted to store said shared secret key and to generate said network address, wherein said at least one portion of the network address is generated based upon at least said shared secret key.

13. The communication network according to claim 12, wherein the shared secret key is a dynamic key.

14. The communication network according to claim 13, wherein the processing unit of the at least one user equipment and the network equipment are both adapted to dynamically calculate said dynamic shared secret key and to generate said at least one portion of the network address based upon at least said dynamic shared secret key.

15. The communication network according to claim 14, wherein said at least one user equipment and the network equipment are adapted to dynamically calculate the dynamic shared secret key based on a challenge procedure.

16. The communication network according to claim 12, wherein the network equipment is adapted to implement an authentication procedure for verifying the identity of said at least one user equipment in order to authorize said at least one user equipment to have access to the communication network.

17. The communication network according to claim 16, wherein the authentication procedure is a challenge authentication procedure.

18. The communication network according to claim 16, wherein in the authentication procedure the network equipment and said at least one user equipment are adapted to dynamically generate a ciphering key.

19. The communication network according to claim 18, wherein the shared secret key used at said at least one user equipment and network equipment for generating said at least one portion of the network address is said ciphering key.

20. The communication network according to claim 12, wherein said at least one portion of the network address is calculated also based upon at least one parameter associated with the subscriber identity and/or with the user equipment identity.

21. The communication network according to claim 12, wherein said at least one user equipment is a mobile phone.