Method and apparatus for setting secure connection in wireless communications system

• US 9,270,692 B2
• Filed: 09/22/2013
• Issued: 02/23/2016
• Est. Priority Date: 11/06/2012
• Status: Active Grant

• Current Assignee: MediaTek, Inc.
• Original Assignee: MediaTek, Inc.
• Inventors: Huang, Shun-Yong, Wang, Chao-Chun, Chen, Shao-Wei, Tsai, Yu-Che
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US14/033,516
• Publication Number:
  US 20140130163A1
• Time in Patent Office: 884 Days
• Field of Search: 726/23, 380/270, 709/217
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

A method of setting a secure connection in a wireless communications system is disclosed. The method comprises setting a protocol information to a terminal; and checking a packet received in the terminal according to the protocol information; wherein the packet comprises a protocol type, a source port, and a destination port.

Claims

1. A method of setting a secure connection in a wireless communications system, the method comprising:

setting a protocol information to a terminal in the wireless communication system;

checking a protocol type of a packet received in the terminal;

checking a source port or a destination port of the packet according to the protocol information when the protocol type of the packet is transmission control protocol (TCP); and

dropping the packet when the protocol type of the packet is user datagram protocol (UDP).

2. The method of claim 1, wherein the terminal is a source device or a sink device.

3. The method of claim 2, further comprising checking if the destination port of the packet is a video or an audio port when the protocol type of the packet is user datagram protocol.

4. The method of claim 3, further comprising:

dropping the packet when the destination port of the packet received in the sink is not a video or an audio port; and

forwarding the packet to a host when the destination port of the packet received in the sink is a video or an audio port.

5. The method of claim 1, further comprising forwarding the packet to a host in the wireless system when the protocol type of the packet is neither user datagram protocol nor transmission control protocol.

6. The method of claim 1, further comprising:

dropping the packet if the source port or the destination port of the packet is not comprised in the protocol information when the protocol type of the packet is TCP; and

forwarding the packet if the source port or the destination port of the packet is comprised in the protocol information when the protocol type of the packet is TCP.

7. The method of claim 1, wherein the protocol information comprises a control port and combinations of a user input back channel (UIBC) port, an Inter-Integrated Circuit (I2C) port or a high-bandwidth digital content protection (HDCP) port.

8. A communication apparatus for a wireless communications system, comprising:

a processor;

a storage unit;

a program code, stored in the storage unit, wherein the program code instructs the processor to execute the following steps;

setting a protocol information to a terminal in the wireless communication system;

checking a protocol type of a packet received in the terminal;

checking a source port or a destination port of the packet according to the protocol information when the protocol type of the packet is transmission control protocol (TCP); and

dropping the packet when the protocol type of the packet is user datagram protocol.

9. The communication apparatus of claim 8, wherein the terminal is a source device or a sink device.

10. The communication apparatus of claim 9, wherein the steps further comprise:

checking if the destination port of the packet is a video or an audio port when the protocol type of the packet is user datagram protocol.

11. The communication apparatus of claim 10, wherein the steps further comprise:

dropping the packet when the destination port of the packet is not a video or an audio port; and

forwarding the packet to a host in the wireless system when the destination port of the packet is a video or an audio port.

12. The communication apparatus of claim 8, wherein the steps further comprise:

forwarding the packet to a host in the wireless system when the protocol type of the packet is neither user datagram protocol nor transmission control protocol.

13. The communication apparatus of claim 8, wherein the steps further comprise:

dropping the packet if the source port or the destination port of the packet is not comprised in the protocol information when the protocol type of the packet is TCP; and

forwarding the packet if the source port or the destination port of the packet is comprised in the protocol information when the protocol type of the packet is TCP.

14. The communication apparatus of claim 8, wherein the protocol information comprises a control port and combinations of a user input back channel (UIBC) port, an inter-integrated circuit (I2C) port and a high-bandwidth digital content protection (HDCP) port.

15. A method of setting a secure connection in a wireless communications system, the method comprising:

setting a protocol information to a terminal in the wireless communication system;

checking a packet received in the terminal according to the protocol information and generating at least a checking result; and

dropping or forwarding the packet according to the at least a checking result;

wherein the packet comprises a protocol type, a source port, and a destination port.

16. The method of claim 15, further comprising:

forwarding the packet if a first checking result of the at least a checking result indicates that the protocol type of the packet is neither UDP nor transmission control protocol (TCP);

dropping the packet if the first checking result indicates that the protocol type of the packet is user datagram protocol (UDP) when the terminal is a source device;

dropping the packet if the first checking result indicates that the protocol type of the packet is UDP and a second checking result of the at least a checking result indicates that the destination port of the packet received in the terminal is not a video or an audio port when the terminal is a sink device;

forwarding the packet if the first checking result indicates that the protocol type of the packet is UDP and the second checking result indicates that the destination port of the packet received in the sink is a video or an audio port when the terminal is the sink device; and

checking the source port or the destination port of the packet according to the protocol information and generating at least a protocol information checking result when the first checking result indicates that the protocol type of the packet is TCP.

17. The method of claim 16, further comprising:

dropping the packet if the at least a protocol information checking result indicates that the source port or the destination port of the packet is not comprised in the protocol information when the first checking result indicates that the protocol type of the packet is TCP; and

forwarding the packet if the at least a protocol information checking result indicates that the source port or the destination port of the packet is comprised in the protocol information when the first checking result indicates that the protocol type of the packet is TCP.

18. The method of claim 15, wherein the protocol information comprises a control port and combinations of a user input back channel (UIBC) port, an Inter-Integrated Circuit (I2C) port or a high-bandwidth digital content protection (HDCP) port.

19. A communication apparatus for a wireless communications system, comprising:

a processor;

a storage unit;

a program code, stored in the storage unit, wherein the program code instructs the processor to execute the following steps;

setting a protocol information to a terminal in the wireless communication system;

checking a packet received in the terminal according to the protocol information and generating at least a checking result; and

dropping or forwarding the packet according to the at least a checking result;

wherein the packet comprises a protocol type, a source port, and a destination port.

20. The communication apparatus of claim 19, wherein the steps further comprise:

forwarding the packet if a first checking result of the at least a checking result indicates that the protocol type of the packet is neither UDP nor transmission control protocol (TCP);

dropping the packet if the first checking result indicates that the protocol type of the packet is user datagram protocol (UDP) when the terminal is a source device;

dropping the packet if the first checking result indicates that the protocol type of the packet is UDP and a second checking result of the at least a checking result indicates that the destination port of the packet received in the terminal is not a video or an audio port when the terminal is a sink device;

forwarding the packet if the first checking result indicates that the protocol type of the packet is UDP and the second checking result indicates that the destination port of the packet received in the sink is a video or an audio port when the terminal is the sink device; and

checking the source port or the destination port of the packet according to the protocol information and generating at least a protocol information checking result when the first checking result indicates that the protocol type of the packet is TCP.

21. The communication apparatus of claim 20, wherein the steps further comprise:

dropping the packet if the at least a protocol information checking result indicates that the source port or the destination port of the packet is not comprised in the protocol information when the first checking result indicates that the protocol type of the packet is TCP; and

forwarding the packet if the at least a protocol information checking result indicates that the source port or the destination port of the packet is comprised in the protocol information when the first checking result indicates that the protocol type of the packet is TCP.

22. The communication apparatus of claim 19, wherein the protocol information comprises a control port and combinations of a user input back channel (UIBC) port, an Inter-Integrated Circuit (I2C) port or a high-bandwidth digital content protection (HDCP) port.