Security considerations for the LTE of UMTS

• US 8,832,449 B2
• Filed: 03/21/2007
• Issued: 09/09/2014
• Est. Priority Date: 03/22/2006
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Fischer, Patrick
• Primary Examiner(s): VOSTAL, ONDREJ C
• Application Number:
  US12/293,807
• Publication Number:
  US 20100235634A1
• Time in Patent Office: 2,729 Days
• Field of Search: 713/181
• US Class Current: 713/181
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 92/045 between access point and backbone network device
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

A method for providing message protection includes generating a ciphered message based upon a first counter, a message, and a ciphering key. The method further includes generating an unciphered message authentication code (MAC) based upon the first counter, an integrity protection key, and either the message or the ciphered message, and transmitting security protected data, which includes the MAC and the ciphered message, over a transmission medium.

Claims

1. A method for providing message protection, the method comprising:

generating, by a transmitter, a ciphered message based upon at least one counter, a message, and a ciphering key;

generating, by the transmitter, an unciphered message authentication code (MAC) based upon the at least one counter, an integrity protection key, and the ciphered message; and

transmitting, by the transmitter, security protected data comprising the unciphered MAC and the ciphered message over a transmission medium,

wherein the generation of the ciphered message and the generation of the unciphered MAC occur independently, and

wherein the ciphering key and the integrity protection key are generated using authentication parameters including a random challenge and an authentication token.

2. The method according to claim 1, further comprising:

transmitting, by the transmitter, the at least one counter over the transmission medium.

3. The method according to claim 1, wherein the security protected data further comprises the at least one counter.

4. The method according to claim 1, wherein the transmission medium is unsecured.

5. The method according to claim 1,

wherein the generating of the ciphered message comprises using a ciphering algorithm.

6. The method according to claim 1,

wherein the generating of the unciphered MAC comprises using an integrity protection algorithm.

7. The method according to claim 1, further comprising:

incrementing, by the transmitter, the at least one counter at each transmission of the security protected data, wherein a receiving entity synchronizes a second counter based upon a detection of the transmission of the security protected data.

8. A transmitter operable in a communication network, the transmitter comprising:

a processor for providing message protection operations, wherein the processor is configured to;

generate a ciphered message based upon at least one counter, a message, and a ciphering key; and

generate an unciphered message authentication code (MAC) based upon the at least one counter, an integrity protection key, and the ciphered message; and

a transceiver configured to transmit security protected data comprising the ciphered MAC and the ciphered message over a transmission medium,

wherein the processor is further configured to generate the ciphered message and to generate the unciphered MAC independently, and

wherein the ciphering key and the integrity protection key are generated using authentication parameters including a random challenge and an authentication token.

9. The transmitter according to claim 8, wherein the transceiver is further configured to:

transmit the at least one counter over the transmission medium.

10. The transmitter according to claim 8, wherein the security protected data further comprises the at least one counter.

11. The transmitter according to claim 8, wherein the transmission medium is unsecured.

12. The transmitter according to claim 8, wherein the

generating of the ciphered message comprises using a ciphering algorithm.

13. The transmitter according to claim 8, wherein the

generating of the unciphered MAC comprises using an integrity protection algorithm.

14. The transmitter according to claim 8, wherein the processor is further configured to:

increment the at least one counter at each transmission of the security protected data, wherein a receiving entity synchronizes a second counter based upon a detection of the transmission of the security protected data.