System and method of lawful access to secure communications

• US 9,264,227 B2
• Filed: 01/11/2013
• Issued: 02/16/2016
• Est. Priority Date: 01/12/2012
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited, Certicom Corporation (Blackberry Limited)
• Inventors: Buckley, Michael Eoin, Zaverucha, Gregory Marc, Campagna, Matthew John
• Primary Examiner(s): Dinh, Minh
• Assistant Examiner(s): An, Wayne
• Application Number:
  US13/739,671
• Publication Number:
  US 20130182841A1
• Time in Patent Office: 1,131 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds

Abstract

The present disclosure relates to systems and methods for secure communications. In some aspects, an initiator KMS receives, from an initiator UE, one or more values used in generation of an encryption key, which includes obtaining at least one value associated with a RANDRi. The initiator KMS sends the at least one value associated with the RANDRi to a responder KMS. The responder KMS generates the encryption key using the one or more values.

Claims

1. A method performed by an initiator KMS for generating an encryption key, the method comprising:

receiving a RANDRi used in generation of the encryption key, wherein the RANDRi is generated at an initiator UE;

receiving, from a responder KMS, a key resolution request; and

sending the RANDRi to the responder KMS, wherein the responder KMS is configured to generate the encryption key using the RANDRi,

wherein the initiator UE is in communication with the initiator KMS different from the responder KMS.

3. The method of claim 1, wherein the RANDRi is received in a REQUEST INIT message.

2. A method performed by a responder KMS for generating an encryption key, the method comprising:

receiving, from an initiator KMS, a RANDRi, wherein the RANDRi is used in generation of the encryption key, and wherein the RANDRi is generated at the initiator UE; and

generating the encryption key using the RANDRi.

4. The method of claim 2, wherein the RANDRi is received from the initiator KMS in a RESOLVE_RESP message.

5. The method of claim 2, wherein the RANDRi is received from the initiator KMS in a REQUEST_INIT message.