Method and apparatus for transmitting secure cell broadcast messages in a cellular communication network

• US 9,398,426 B2
• Filed: 06/30/2011
• Issued: 07/19/2016
• Est. Priority Date: 02/07/2011
• Status: Expired due to Fees

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Kristiansson, Ulf, sth, Karl-Johan, Blomqvist, Elias, Claassen, Geert
• Primary Examiner(s): Pyzocha, Michael
• Application Number:
  US13/983,820
• Publication Number:
  US 20130308781A1
• Time in Patent Office: 1,846 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 72/30 Resource management for broadcast services
• CPC Class Codes: H04W 76/40 for selective distribution or broadcast

Abstract

A method and apparatus is provided for transmitting a cell broadcast message in a mobile communication network comprising in a message control node receiving a initiation request identifying a first message payload segment to be transmitted, determining an authentication group for which the first message payload segment is intended and determining a first encryption key associated with the determined authentication group. The first message payload segment is encrypted using the first encryption key. A message payload is aggregated comprising the encrypted first message payload segment and at least a second message payload segment. The cell broadcast message comprising the aggregated message payload for message broadcast is transmitted within at least a part of the communication network. A method and apparatus is also provided for decrypting a cell broadcast message at a mobile terminal.

Claims

1. A method in a message control node for transmitting a cell broadcast message in a mobile communication network, the method comprising:

receiving an initiation request identifying a first message payload segment to be transmitted;

determining an authentication group of mobile terminals for which the first message payload segment is intended;

determining a first encryption key associated with the determined authentication group of mobile terminals;

encrypting the first message payload segment using the first encryption key;

aggregating a message payload comprising the encrypted first message payload segment and at least a second encrypted message payload segment, each message payload segment encrypted so that the determined authentication group of mobile terminals can decrypt the encrypted first message payload segment and a separate authentication group of mobile terminals can decrypt the second encrypted message payload segment, wherein the aggregated message payload comprises a first indicator allowing an end of the encrypted first message payload segment to be identified and/or a second indicator allowing an end of the second encrypted message payload segment to be identified by a receiving mobile terminal; and

transmitting the cell broadcast message comprising the aggregated message payload for message broadcast within at least a part of the communication network, wherein the cell broadcast message includes multiple pages and each page further includes multiple paragraphs with parameters that specify length of each paragraph and wherein the encrypted first message payload segment and/or the second encrypted message payload segment is a paragraph of a page of the cell broadcast message.

2. The method according to claim 1 wherein the determining the authentication group is based on a user or user group for which the first message payload segment is intended.

3. The method according to claim 1 further comprising:

receiving a request for decryption keys from a mobile terminal;

determining an authentication group allowable for the mobile terminal;

determining a decryption key for the determined authentication group;

transmitting the determined decryption key for storage at the mobile terminal.

4. A method according to claim 3 wherein the authentication group is determined based on mobile terminal subscriber data.

5. The method according to claim 1 wherein the cell broadcast message includes at most 15 different payload segments.

6. The method according to claim 1 wherein the cell broadcast message includes a message class that categorizes type of information included in the cell broadcast message.

7. A message control node for transmitting a cell broadcast message in a mobile communication network, the message control node comprising:

a memory;

a network interface; and

a processor operatively coupled to the memory and the network interface, wherein the processor is configured to;

receive an initiation request from the memory identifying a first message payload segment to be transmitted;

determine an authentication group of mobile terminals for which the first message payload segment is intended and for determining a first encryption key associated with the determined authentication group of mobile terminals;

encrypt the first message payload segment using the first encryption key;

aggregate a message payload comprising the encrypted first message payload segment and at least a second encrypted message payload segment, each message payload segment encrypted so that the determined authentication group of mobile terminals can decrypt the encrypted first message payload segment and a second authentication group of mobile terminals can decrypt the second encrypted message payload segment, wherein the processor is configured to include in the aggregated message payload, a first indicator allowing an end of the encrypted first message payload segment to be identified and/or a second indicator allowing an end of the second encrypted message payload segment to be identified by a receiving mobile terminal; and

instruct the network interface to transmit the cell broadcast message comprising the aggregated message payload for message broadcast within at least a part of the communication network, wherein the cell broadcast message includes multiple pages and each page further includes multiple paragraphs with parameters that specify length of each paragraph and wherein the encrypted first message payload segment and/or the second encrypted message payload segment is a paragraph of a page of the cell broadcast message.

8. The message control node according to claim 7 wherein the processor is configured to determine the authentication group based on a user or user group for which the first message payload segment is intended.

9. A message control node according to claim 7

wherein the processor is configured to:

determine the second authentication group for which a second message payload segment is intended;

determine a second encryption key associated with the second authentication group; and

encrypt the second message payload segment using the second encryption key;

and wherein the aggregating is aggregating the encrypted second message payload segment.

10. A message control node according to claim 7 wherein the processor is configured to adapt the cell broadcast message to comprise an indication on whether the first and/or second payload segment is encrypted or unencrypted.

11. The message control node according to claim 7 wherein the cell broadcast message includes at most 15 different payload segments.

12. The message control node according to claim 7 wherein the cell broadcast message includes a message class that categorizes type of information included in the cell broadcast message.