Method and apparatus for providing secure wireless communication

• US 7,496,347 B2
• Filed: 05/13/2005
• Issued: 02/24/2009
• Est. Priority Date: 11/12/2004
• Status: Expired due to Fees

• Current Assignee: Velocita Wireless LLC (Mobitex Technology AB)
• Original Assignee: Velocita Wireless LLC (Mobitex Technology AB)
• Inventors: Puranik, Gagan
• Primary Examiner(s): Bhattacharya; Sam
• Application Number:
  US11/128,484
• Publication Number:
  US 20060105740A1
• Time in Patent Office: 1,383 Days
• Field of Search: 455/410, 455/411, 455/412.1, 455/412.2, 713/150, 713/155, 713/172, 380/28, 380/249, 380/270, 380/277
• US Class Current: 455/410
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 3/16 with lock-out or secrecy provision in party-line systems
• CPC Class Codes: H04M 3/42382 Text-based messaging services in telephone networks such as PSTN/ISDN, e.g. User-to-User Signalling or Short Message Service for fixed networks
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications

Abstract

An approach is provided for securely communicating in a wireless network. A cryptographic server generates a command to enable a secure mode of operation for a wireless device, wherein the wireless device can operate in a secure mode and an unsecure mode in support of two-way messaging. The cryptographic server sends the command to the wireless device to activate the secure mode of operation. The secure mode of operation provides transmission of an encrypted message by the wireless device over the wireless network.

Claims

1. A method for communicating in a wireless network, the method comprising:

generating a command to enable a secure mode of operation for a wireless device, wherein the wireless device is configured to operate in a secure mode and an unsecure mode in support of two-way messaging;

transmitting the command to the wireless device to activate the secure mode of operation, wherein the secure mode of operation provides transmission of an encrypted message by the wireless device over the wireless network;

establishing a shared secret key with the wireless device, wherein the shared secret key is utilized to output the encrypted message;

obtaining signal strength of the wireless network with respect to the wireless device; and

determining a random seed based on the signal strength, wherein the random seed is used to determine the shared secret key.

2. A method according to claim 1, further comprising:

obtaining system time of the wireless network, wherein the random seed is further based on the system time.

3. A method according to claim 1, further comprising:

establishing a new shared secret key with the wireless device upon expiration of a timer or exceeding a message threshold, wherein the message threshold specifies the number of messages encrypted with the prior shared secret key.

4. A method according to claim 3, further comprising:

indexing the shared secret keys; and

transmitting, to the wireless device, an index value corresponding to one of the shared secret keys, wherein the wireless device selects the one shared secret key based on the received index value.

5. A method according to claim 1, further comprising:

generating a management command for controlling security features of the wireless device; and

transmitting the management command to the wireless device over the wireless network.

6. A method according to claim 1, wherein the security features include disabling the secure mode of operation, clearing memory of the wireless device, or auto locking to prevent user access to the wireless device.

7. A method according to claim 1, wherein the wireless device is one of a two-way pager or a telemetry device.

8. A network apparatus for supporting secure communication over a wireless network, the apparatus comprising:

a processor configured to generate a command to enable a secure mode of operation for a wireless device and to establish a shared secret key with the wireless device, the shared secret key being utilized to output an encrypted message and the wireless device is configured to operate in a secure mode and an unsecure mode in support of two-way messaging, and the processor is further configured to obtain signal strength of the wireless network with respect to the wireless device and to determine a random seed based on the signal strength, the random seed being used to determine the shared secret key, and

a communication interface configured to transmit the command to the wireless device to activate the secure mode of operation, wherein the secure mode of operation provides transmission of the encrypted message by the wireless device over the wireless network.

9. An apparatus according to claim 8, wherein the system time of the wireless network is obtained, the random seed being further based on the system time.

10. An apparatus according to claim 8, wherein the processor is further configured to establish a new shared secret key with the wireless device upon expiration of a timer or exceeding a message threshold, the message threshold specifying the number of messages encrypted with the prior shared secret key.

11. An apparatus according to claim 10, wherein the processor is further configured to index the shared secret keys, and the communication interface transmits, to the wireless device, an index value corresponding to one of the shared secret keys, the wireless device selecting the one shared secret key based on the received index value.

12. An apparatus according to claim 8, wherein the processor is further configured to generate a management command for controlling security features of the wireless device, and the communication interface transmits the management command to the wireless device over the wireless network.

13. An apparatus according to claim 8, wherein the security features include disabling the secure mode of operation, clearing memory of the wireless device, or auto locking to prevent user access to the wireless device.

14. An apparatus according to claim 8, wherein the wireless device is one of a two-way pager or a telemetry device.

15. A method for communicating in a wireless network, the method comprising:

switching from an unsecure mode of operation to a secure mode of operation;

establishing a shared secret key with a cryptographic server over the wireless network in support of two-way messaging;

generating an encrypted message using the shared secret key;

obtaining signal strength of the wireless network; and

determining a random seed based on the signal strength, wherein the random seed is used to determine the shared secret key.

16. A method according to claim 15, further comprising:

obtaining system time of the wireless network, wherein the random seed is further based on the system time.

17. A method according to claim 15, further comprising:

establishing a new shared secret key with the cryptographic server upon expiration of a timer or exceeding a message threshold, wherein the message threshold specifies the number of messages encrypted with the prior shared secret key.

18. A method according to claim 17, further comprising:

indexing the shared secret keys;

receiving, from the cryptographic server, an index value corresponding to one of the shared secret keys; and

selecting the one shared secret key based on the received index value.

19. A method according to claim 15, further comprising:

receiving a management command for controlling one or more security features; and

manipulating the security features based on the management command.

20. A method according to claim 15, wherein the security features include disabling the secure mode of operation, clearing memory of the wireless device, or auto locking to prevent user access.

21. A device for communicating in a wireless network, the device comprising:

means for switching from an unsecure mode of operation to a secure mode of operation;

means for establishing a shared secret key with a cryptographic server over the wireless network in support of two-way messaging;

means for generating an encrypted message using the shared secret key;

means for obtaining signal strength of the wireless network; and

means for determining a random seed based on the signal strength, wherein the random seed is used to determine the shared secret key.

22. A device according to claim 21, further comprising:

means for obtaining system time of the wireless network, wherein the random seed is further based on the system time.

23. A device according to claim 21, further comprising:

means for establishing a new shared secret key with the cryptographic server upon expiration of a timer or exceeding a message threshold, wherein the message threshold specifies the number of messages encrypted with the prior shared secret key.

24. A device according to claim 23, further comprising:

means for indexing the shared secret keys;

means for receiving, from the cryptographic server, an index value corresponding to one of the shared secret keys; and

means for selecting the one shared secret key based on the received index value.

25. A device according to claim 21, further comprising:

means for receiving a management command for controlling one or more security features; and

means for manipulating the security features based on the management command.

26. A device according to claim 21, wherein the security features include disabling the secure mode of operation, clearing memory of the wireless device, or auto locking to prevent user access to the device.

27. A device according to claim 21, wherein the device is a pager or telemetry device.