Method for transferring sensitive information using initially unsecured communication

• US 6,249,867 B1
• Filed: 07/31/1998
• Issued: 06/19/2001
• Est. Priority Date: 07/31/1998
• Status: Expired due to Term

• Current Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Patel, Sarvar
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/127,766
• Time in Patent Office: 1,054 Days
• Field of Search: 713/167, 713/171, 713/182, 713/189, 713/200, 713/201, 380/255, 380/258, 380/278, 380/283
• US Class Current: 713/167
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

In the method for transferring sensitive information using unsecured communication, a first party receives a public key of a second party, produces an encryption result by performing keyed encryption on at least a first random number using the public key, and transfers the encryption result to the second party over an unsecured communication channel. The second party decrypts the encryption result to obtain the first random number. Authorizing information is then transferred from the first party to the second party over a first encrypted and authenticated communication channel established using the first random number. Sensitive information is further transferred from the second party to the first party over a second encrypted and authenticated communication channel established using the first random number if the second party accepts the authorizing information. Numerous applications exist for the system and method, including the wireless industry wherein the first party is a mobile and the second party is a network.

Claims

1. A method for transferring sensitive information to a first party using initially unsecured communication, comprising:

(a) receiving, at said first party, a public key of a second party;

(b) producing an encryption result by performing keyed encryption on at least a first random number using said public key;

(c) transferring said encryption result from said first party to said second party;

(d) transferring authorizing information to said second party over a first encrypted and authenticated communication channel established using said first random number; and

(e) receiving sensitive information from said second party over a second encrypted and authenticated communication channel established using said first random number.

2. The method of claim 1, wherein said step (a) receives a certificate of said public key along with said public key;

and further including,

(f) verifying said public key based on said certificate.

3. The method of claim 1, wherein said step (b) produces said encryption result by performing keyed encryption on said first random number and an identifier for said first party using said public key.

4. The method of claim 1, wherein said first and second encrypted and authenticated communication channels are a same channel.

5. The method of claim 1, wherein said step (d) comprises:

(d1) establishing said first and second encrypted and authenticated communication channels using said first random number; and

(d2) transferring authorizing information to said second party over said first encrypted and authenticated communication channel.

6. The method of claim 1, wherein said first party is a mobile and said second party is a network in a wireless communication system.

7. The method of claim 6, wherein said step (e) receives a root key, as said sensitive information, from said network.

8. The method of claim 6, wherein said first encrypted and authenticated communication channel is a voice channel.

9. The method of claim 1, prior to said step (b), furthe comprising:

(f) generating at least said first random number.

10. A method for transferring sensitive information from a first party using initially unsecured communication channel, comprising:

(a) outputting a public key of said first party;

(b) receiving, at said first party, an encryption result from a second party, said encryption result being a result of performing keyed encryption on at least a first random number using said public key of said first party;

(c) decrypting said encryption result to obtain said first random number;

(d) receiving authorizing information from said second party over a first encrypted and authenticated communication channel established using said first random number; and

(e) transferring sensitive information to said second party over a second encrypted and authenticated communication channel established using said first random number if said authorizing information is acceptable.

11. The method of claim 10, wherein said step (a) outputs a certificate of said public key along with said public key.

12. The method of claim 10, wherein said first and second encrypted and authenticated communication channels are a same channel.

13. The method of claim 10, wherein said step (d) comprises:

(d1) establishing said first and second encrypted and authenticated communication channels using said first random number; and

(d2) receiving authorizing information from said second party over said first encrypted and authenticated communication channel.

14. The method of claim 10, wherein said first party is a network in a wireless communication system, and said second party is a mobile.

15. The method of claim 14, wherein

said encryption result is a result of performing keyed encryption on said first random number and an identifier for said mobile using said public key of said first party;

said step (c) decrypts said encryption result to obtain said first random number and said identifier for said mobile; and

said step (e) transfers a root key, as said sensitive information, to said mobile; and

further including,

(f) associating said root key with said identifier for said mobile.

16. The method of claim 14, wherein said step (e) transfers a root key, as said sensitive information, to said mobile.

17. The method of claim 14, wherein said first encrypted and authenticated communication channel is a voice channel.