Ciphering data for transmission in a network

• US 9,520,996 B2
• Filed: 08/26/2013
• Issued: 12/13/2016
• Est. Priority Date: 10/24/2001
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Sarkkinen, Sinikka, Kettunen, Kimmo, Karhuluoma, Niina, Vainio, Antti-Pentti, Niemi, Valtteri, Kall, Jan
• Primary Examiner(s): LE, CHAU D
• Application Number:
  US14/010,395
• Publication Number:
  US 20130343540A1
• Time in Patent Office: 1,205 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 12/1859 adapted to provide push services, e.g. data channels
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]

Abstract

The invention proposes a method for transmitting a message to a plurality of user entities in a network by using a multicast service, comprising the steps of encrypting a multicast message by using ciphering, and sending the encrypted multicast message to the plurality of user entities simultaneously. The invention also proposes a corresponding multicast service control device and a corresponding user entity.

Claims

1. A method comprising:

generating an authentication key based on at least one authentication parameter in a user entity; and

sending a message including the authentication key from the user entity to a network control device, wherein the user entity is authenticated at the network control device based on the authentication key, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification.

2. The method according to claim 1, wherein the authentication parameter comprises a user identification value.

3. The method according to claim 2, wherein the user identification value is the international mobile subscriber identification.

4. The method according to claim 1, wherein an allocation between the service identification and the service indication is changed dynamically.

5. The method according to claim 1, wherein an allocation between the service identification and the service indication is determined using a map.

6. The method according to claim 1, wherein the message containing the authentication key is sent to the network control device by using a channel not requiring a radio resource control connection.

7. An apparatus comprising:

at least one processor; and

at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least;

generate an authentication key based on at least one authentication parameter in a user entity; and

send a message including the authentication key from the user entity to a network control device, wherein the user entity is authenticated at the network control device based on the authentication key, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification.

8. The apparatus according to claim 7, wherein the authentication parameter comprises a user identification value.

9. The apparatus according to claim 8, wherein the user identification value is the international mobile subscriber identification.

10. The apparatus according to claim 7, wherein an allocation between the service identification and the service indication is changed dynamically.

11. The apparatus according to claim 7, wherein an allocation between the service identification and the service indication is determined using a map.

12. The apparatus according to claim 7, wherein the message containing the authentication key is sent to the network control device by using a channel not requiring a radio resource control connection.

13. A non-transitory computer-readable medium encoded with instructions that, when executed by at least one processor, perform at least the following:

generating an authentication key based on at least one authentication parameter in a user entity; and

sending a message including the authentication key from the user entity to a network control device, wherein the user entity is authenticated at the network control device based on the authentication key, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification.

14. The non-transitory computer-readable medium according to claim 13, wherein the authentication parameter comprises a user identification value.

15. The non-transitory computer-readable medium according to claim 14, wherein the user identification value is the international mobile subscriber identification.

16. The non-transitory computer-readable medium according to claim 13, wherein an allocation between the service identification and the service indication is changed dynamically.

17. The non-transitory computer-readable medium according to claim 13, wherein an allocation between the service identification and the service indication is determined using a map.

18. The non-transitory computer-readable medium according to claim 13, wherein the message containing the authentication key is sent to the network control device by using a channel not requiring a radio resource control connection.

19. A method comprising:

receiving, at a network control device, a message including an authentication key from a user entity, and

authenticating the user entity based on the authentication key, wherein the authentication key is generated by the user entity based on at least one authentication parameter, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to service identification.

20. The method according to claim 19, wherein the authentication parameter comprises a user identification value.

21. The method according to claim 20, wherein the user identification value is the international mobile subscriber identification.

22. An apparatus comprising:

at least one processor; and

at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least;

receive, at the apparatus, a message including an authentication key from a user entity, and

authenticate the user entity based on the authentication key, wherein the authentication key is based on at least one authentication parameter from the user entity, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification.

23. The apparatus according to claim 22, wherein the authentication parameter comprises a user identification value.

24. The apparatus according to claim 23, wherein the user identification value is the international mobile subscriber identification.

25. A non-transitory computer-readable medium encoded with instructions that, when executed by at least one processor, perform at least the following:

receiving a message including an authentication key from a user entity, and

authenticating the user entity based on the authentication key, wherein the authentication key is based on at least one authentication parameter in a user entity, and wherein at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification.

26. The non-transitory computer-readable medium according to claim 25, wherein the authentication parameter comprises a user identification value.

27. The non-transitory computer-readable medium according to claim 26, wherein the user identification value is the international mobile subscriber identification.