Method for managing a counter status allocated to a pair comprising a communication terminal and a base station

• US 9,143,935 B2
• Filed: 12/06/2006
• Issued: 09/22/2015
• Est. Priority Date: 12/14/2005
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Falk, Rainer, Gnther, Christian, Krselberg, Dirk
• Primary Examiner(s): HENDERSON, ESTHER BENOIT
• Application Number:
  US12/086,621
• Publication Number:
  US 20090327475A1
• Time in Patent Office: 3,212 Days
• Field of Search: 709/224, 713/170
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A counter status that is allocated to a communication terminal and a base station is usually deleted when the storage space in the respective base station is used up. To address this, the counter status is saved in an additional communication network element when a predefinable criterion is met, and can thus be retrieved.

Claims

1. A method for managing a counter status in a communication network, comprising:

including the counter status in authentication information;

storing the counter status in a first communication network element, the counter status being allocated to a first communication subscriber and the first communication network element;

increasing the counter status with individual communication processes between the first communication subscriber and the first communication network element;

storing the counter status in a second communication network element when a predeterminable first criterion is met, the counter status being stored with information indicating it is allocated to the first communication subscriber and to the first communication network element;

storing the individual communication processes in the second communication network element;

monitoring, by a second communication subscriber, a predeterminable second criterion, on the basis of the stored communication processes; and

when the predeterminable second criterion is met, deleting the counter status that is allocated to the first communication subscriber and stored in the first communication network element or prompting deletion of the counter status that is allocated to the first communication subscriber and stored in the first communication network element.

2. The method as claimed in claim 1, wherein the communication network is a World Wide Interoperability for Microwave Access (WiMax) radio network.

3. The method as claimed in claim 1, wherein

the predeterminable first criterion is a predeterminable number of communication processes.

4. The method as claimed in claim 1, wherein the predeterminable second criterion is reaching a minimum available storage space in the first communication network element.

5. The method as claimed in claim 1, wherein both the counter status and authentication information for the first communication subscriber are stored in the second communication network element.

6. The method as claimed in claim 1, wherein the predeterminable second criterion is triggered based on an end to a period of validity of authentication information for the first communication subscriber.

7. The method as claimed in claim 1, wherein the predeterminable second criterion is triggered based on generation of new authentication information for the first communication subscriber.

8. The method as claimed in claim 1, wherein

movement of the first communication subscriber is monitored to generate a movement profile for the first communication subscriber, and

the predeterminable second criterion is set based on the movement profile for the first communication subscriber.

9. The method as claimed in claim 1, wherein

there are a plurality of first communication subscribers,

the first subscribers are prioritized, and

the predeterminable second criterion is set based on prioritization of first communication subscribers.

10. The method of claim 9, wherein the predeterminable second criterion is set such that the counter status of a higher priority first communication subscriber is deleted less frequently than the counter status of a lower priority first communication subscriber.

11. The method as claimed in claim 1, wherein

the first communication subscriber is a Mobile Subscriber Station,

the first communication network element is a Base Station, and

the second communication network element is a World Wide Interoperability for Microwave Access (WiMax) Access Service Network Gateway.

12. The method as claimed in claim 2, wherein

the predeterminable first criterion is a predeterminable number of communication processes.

13. The method as claimed in claim 12, wherein the predeterminable second criterion is reaching a minimum available storage space in the first communication network element.

14. The method as claimed in claim 13, wherein both the counter status and authentication information for the first communication subscriber are stored in the second communication network element.

15. The method of claim 14, wherein the predeterminable second criterion is set such that the counter status of a higher priority first communication subscriber is deleted less frequently than the counter status of a lower priority first communication subscriber.

16. The method as claimed in claim 15, wherein

the first communication subscriber is a Mobile Subscriber Station,

the first communication network element is a Base Station, and

the second communication network element is a World Wide Interoperability for Microwave Access (WiMax) Access Service Network Gateway.

17. The method as claimed in claim 16, wherein the predeterminable second criterion is triggered based on an end to a period of validity of authentication information for the first communication subscriber.

18. The method as claimed in claim 16, wherein the predeterminable second criterion is triggered based on generation of new authentication information for the first communication subscriber.

19. The method as claimed in claim 16, wherein

movement of the first communication subscriber is monitored to generate a movement for the first communication subscriber, and

the predeterminable second criterion is set based on the movement profile for the first communication subscriber.

20. The method as claimed in claim 16, wherein

there are a plurality of first communication subscribers,

the first subscribers are prioritized, and

the predeterminable second criterion is set based on prioritization of first communication subscribers.