Encrypted communication method and apparatus

• US 9,871,656 B2
• Filed: 05/27/2015
• Issued: 01/16/2018
• Est. Priority Date: 05/28/2014
• Status: Active Grant

• Current Assignee: Datang Mobile Communications Equipment Company Limited (China Information Communication Technology Group Co. Ltd.)
• Original Assignee: Datang Mobile Communications Equipment Company Limited (China Information Communication Technology Group Co. Ltd.)
• Inventors: Yao, Jinhua, Liang, Bingjie, Wu, Xing, Qin, Zhuo
• Primary Examiner(s): AVERY, JEREMIAH L
• Application Number:
  US15/314,232
• Publication Number:
  US 20170118026A1
• Time in Patent Office: 965 Days
• Field of Search: None
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Provided are a method and apparatus for achieving encrypted communications, which are used for achieving a secure session between a calling UE and a called UE in an IP multimedia subsystem (IMS) architecture, so as to prevent a session message from being eavesdropped in a session process. The method of the present invention comprises: receiving, by a network-side device, first authentication information sent by a UE, and according to the first authentication information, conducting authentication on an encrypted module of the UE; generating a transmission key corresponding to the UE and second authentication information, encrypting the transmission key using an initial key corresponding to the UE, and sending the second authentication information and the encrypted transmission key to the UE; and generating a session key for encrypting a session message transmitted between a calling UE and a called UE, encrypting the session key using the transmission key corresponding to a calling UE and sending the encrypted session key to the calling UE, and encrypting the session key using the transmission key corresponding to the called UE and sending the encrypted session key to the called UE.

Claims

1. An encrypted communication method, the method comprising:

receiving, by a network-side device, first authentication information sent by a User Equipment (UE), and authenticating on an encryption module of the UE according to the first authentication information;

if the authentication on the encryption module of the UE is passed, then generating, by the network-side device, a transmission key corresponding to the UE, and second authentication information, encrypting the transmission key using an initial key corresponding to the UE, and sending the second authentication information and the encrypted transmission key to the UE, wherein the second authentication information is used by the UE to authenticate on the network-side device; and

if the network-side device receives a session setup request sent by the UE which is a calling UE after the authentication on the network-side device by the UE using the second authentication information is passed, then generating, by the network-side device, a session key for encrypting a session message transmitted between the calling UE and a called UE, encrypting the session key using the transmission key corresponding to the calling UE and sending the encrypted session key to the calling UE, and encrypting the session key using a transmission key corresponding to the called UE and sending the encrypted session key to the called UE.

2. The method according to claim 1, wherein the first authentication information comprises a UE identifier, a subscriber password hash value, a random number, an encrypted random number, and a Message Authentication Code (MAC) value corresponding to the encrypted random number calculated from a subscriber password, wherein the encrypted random number is a random number encrypted using the initial key corresponding to the UE.

3. The method according to claim 2, wherein authenticating, by the network-side device, on the encryption module of the UE according to the first authentication information comprises:

determining a local subscriber password hash value according to the UE identifier;

if the local subscriber password hash value is the same as the subscriber password hash value in the first authentication information, then encrypting the random number using the local initial key corresponding to the UE;

if the random number encrypted using the local initial key corresponding to the UE is the same as the encrypted random number in the first authentication information, then calculating an MAC value corresponding to the encrypted random number using the subscriber password; and

if the MAC value is the same as the MAC value in the first authentication information, then determining that the authentication on the encryption module of the UE is passed.

4. The method according to claim 1, wherein generating, by the network-side device, the second authentication information comprises:

encrypting the generated transmission key corresponding to the UE into the encrypted transmission key using the local initial key corresponding to the UE; and

calculating an MAC value corresponding to the encrypted transmission key from the subscriber password, and determining the MAC value as the second authentication information.

5. The method according to claim 4, wherein after the network-side device generates the transmission key corresponding to the UE, the method further comprises:

creating a correspondence relationship between the transmission key and the UE identifier of the UE corresponding to the transmission key; and

encrypting the transmission key corresponding to the UE using the subscriber password of the UE, and storing the encrypted transmission key and the correspondence relationship;

the method further comprises;

if the UE initiates an instant messaging service, then receiving, by the network-side device, an encrypted first random number, and an encrypted instant message, sent by the UE which is the calling UE, wherein the first random number is generated randomly by the calling UE, the encrypted first random number is generated by the calling UE encrypting the first random number using the transmission key corresponding to the calling UE, and the encrypted instant message is generated by the calling UE encrypting the instant message using the transmission key corresponding to the calling UE, and the first random number;

decrypting, by the network-side device, the encrypted first random number using the transmission key corresponding to the calling UE, and decrypting the encrypted instant message using the transmission key corresponding to the calling UE, and the first random number;

generating, by the network-side device, an instant message key, encrypting the instant message key into the encrypted instant message key using the transmission key corresponding to the called UE, and encrypting the instant message into the encrypted instant message using the instant message key; and

sending, by the network-side device, the encrypted instant message key and the encrypted instant message to the called UE.

6. An encrypted communication method, comprising:

generating, by a User Equipment (UE), first authentication information, and sending the first authentication information to a network-side device, wherein the first authentication information is used by the network-side device to authenticate on an encryption module of the UE;

receiving, by the UE, second authentication information, and an encrypted transmission key, sent by the network-side device, and authenticating on the network-side device according to the second authentication information, wherein the encrypted transmission key is generated by the network-side device encrypting a generated transmission key corresponding to the UE using an initial key corresponding to the UE;

decrypting, by the UE, the encrypted transmission key using the initial key corresponding to the UE;

if the authentication by the UE on the network-side device using the second authentication information is passed, then sending, by the UE which is a calling UE, a session setup request to the network-side device;

receiving, by the UE, an encrypted session key sent by the network-side device, and decrypting the encrypted session key using the transmission key generated as a result of decryption; and

encrypting and transmitting, by the UE, a session message transmitted between the UE and an opposite UE using a session key generated as a result of decryption.

7. The method according to claim 6, wherein the first authentication information comprises a UE identifier, a subscriber password hash value, a random number, an encrypted random number, and a Message Authentication Code (MAC) value corresponding to an encrypted random number calculated from a subscriber password, where the encrypted random number is a random number encrypted using the initial key corresponding to the UE.

8. The method according to claim 6, wherein the second authentication information comprises an MAC value corresponding to the encrypted transmission key calculated by the network-side device from the subscriber password, where the encrypted transmission key is generated by the network-side device encrypting the transmission key corresponding to the UE using the initial key corresponding to the UE;

authenticating, by the UE, on the network-side device according to the second authentication information comprises;

calculating an MAC value corresponding to the encrypted transmission key from the subscriber password, and if the locally calculated MAC value is the same as the MAC value in the second authentication information, then determining that the authentication on the network-side device is passed.

9. The method according to claim 6, wherein after the TIE decrypts the encrypted transmission key using the initial key corresponding to the UE, the method further comprises:

encrypting the decrypted transmission key using the subscriber password of the UE, and storing the encrypted transmission key.

10. The method according to claim 6, wherein the method further comprises:

if the UE which is the calling UE initiates an instant message service, then generating, by the calling UE, a first random number randomly, encrypting the first random number into the encrypted first random number using the transmission key corresponding to the UE, and encrypting an instant message into the encrypted instant message using the transmission key corresponding to the UE, and the first random number;

sending, by the calling UE, the encrypted first random number and the encrypted instant message to the network-side device;

receiving, by a called UE, an encrypted instant message key, and the encrypted instant message, sent by the network-side device, wherein the instant message key is generated by the network-side device, the encrypted instant message key is generated by the network-side device encrypting the instant message key using a transmission key corresponding to the called UE, and the encrypted instant message is generated by the network-side device encrypting the instant message using the instant message key; and

decrypting, by the called UE, the encrypted instant message key into the instant message key using the transmission key corresponding to the called UE, and decrypting the encrypted instant message into the instant message using the instant message key.

11. An encrypted communication apparatus, comprising:

at least one processor; and

a memory communicably connected with the at least one processor for storing instructions executable by the at least one processor, wherein execution of the instructions by the at least one processor causes the at least one processor to;

receive first authentication information sent by a User Equipment (UE), and authenticate on an encryption module of the UE according to the first authentication information;

if the authentication on the encryption module of the UE is passed, generate a transmission key corresponding to the UE, and second authentication information, encrypt the transmission key using an initial key corresponding to the UE, and send the second authentication information and the encrypted transmission key to the UE, wherein the second authentication information is used by the UE to authenticate on the network-side device; and

if a session setup request sent by the UE which is a calling UE is received, after the authentication on the network-side device by the UE using the second authentication information is passed, generate a session key for encrypting a session message transmitted between the calling UE and a called UE, encrypt the session key using the transmission key corresponding to the calling UE and send the encrypted session key to the calling UE, and encrypt the session key using a transmission key corresponding to the called UE and send the encrypted session key to the called UE.

12. The apparatus according to claim 11, wherein the first authentication information comprises a UE identifier, a subscriber password hash value, a random number, an encrypted random number, and a Message Authentication Code (MAC) value corresponding to the encrypted random number calculated from a subscriber password, wherein the encrypted random number is a random number encrypted using the initial key corresponding to the UE.

13. The apparatus according to claim 12, wherein the execution of the instructions by the at least one processor further causes the at least one processor to:

determine a local subscriber password hash value according to the UE identifier;

if the local subscriber password hash value is the same as the subscriber password hash value in the first authentication information, encrypt the random number using the local initial key corresponding to the UE;

if the random number encrypted using the local initial key corresponding to the UE is the same as the encrypted random number in the first authentication information, calculate an MAC value corresponding to the encrypted random number using the subscriber password; and

if the MAC value is the same as the MAC value in the first authentication information, determine that the authentication on the encryption module of the UE is passed.

14. The apparatus according to claim 11, wherein the execution of the instructions by the at least one processor further causes the at least one processor to:

encrypt the generated transmission key corresponding to the UE into the encrypted transmission key using the local initial key corresponding to the UE; and

calculate an MAC value corresponding to the encrypted transmission key from

the subscriber password, and determine the MAC value as the second authentication information.

15. The apparatus according to claim 14, wherein the execution of the instructions by the at least one processor further causes the at least one processor to:

create a correspondence relationship between the transmission key and the UE identifier of the UE corresponding to the transmission key; and

encrypt the transmission key corresponding to the UE using the subscriber password of the UE, and store the encrypted transmission key and the correspondence relationship;

the execution of the instructions by the at least one processor further causes the at least one processor to;

if the UE initiates an instant messaging service, receive an encrypted first random number, and an encrypted instant message, sent by the UE which is the calling UE, wherein the first random number is generated randomly by the calling UE, the encrypted first random number is generated by the calling UE encrypting the first random number using the transmission key corresponding to the calling UE, and the encrypted instant message is generated by the calling UE encrypting the instant message using the transmission key corresponding to the calling UE, and the first random number;

decrypt the encrypted first random number using the transmission key corresponding to the calling UE, and decrypt the encrypted instant message using the transmission key corresponding to the calling UE, and the first random number;

generate an instant message key, encrypt the instant message key into the encrypted instant message key using the transmission key corresponding to the called UE, and encrypt the instant message into the encrypted instant message using the instant message key; and

send the encrypted instant message key and the encrypted instant message to the called UE.

16. An encrypted communication apparatus, comprising:

at least one processor; and

a memory communicably connected with the at least one processor for storing instructions executable by the at least one processor, wherein execution of the instructions by the at least one processor causes the at least one processor to;

generate first authentication information, and send the first authentication information to a network-side device, wherein the first authentication information is used by the network-side device to authenticate on an encryption module of the UE;

receive second authentication information, and an encrypted transmission key, sent by the network-side device, and to authenticate on the network-side device according to the second authentication information, wherein the encrypted transmission key is generated by the network-side device encrypting a generated transmission key corresponding to the UE using an initial key corresponding to the UE; and

decrypt the encrypted transmission key using the initial key corresponding to the UE; and

if the authentication on the network-side device using the second authentication information is passed, send a session setup request to the network-side device;

receive an encrypted session key sent by the network-side device, and decrypt the encrypted session key using the transmission key generated as a result of decryption; and

encrypt and transmit a session message transmitted between the UE and an opposite UE using a session key generated as a result of decryption.

17. The apparatus according to claim 16, wherein the first authentication information comprises a UE identifier, a subscriber password hash value, a random number, an encrypted random number, and a Message Authentication Code (MAC) value corresponding to the encrypted random number calculated from a subscriber password, wherein the encrypted random number is a random number encrypted using the initial key corresponding to the UE.

18. The apparatus according to claim 16, wherein the second authentication information comprises an MAC value corresponding to the encrypted transmission key calculated by the network-side device from the subscriber password, wherein the encrypted transmission key is generated by the network-side device encrypting the transmission key corresponding to the UE using the initial key corresponding to the UE;

the execution of the instructions by the at least one processor further causes the at least one processor to;

calculate an MAC value corresponding to the encrypted transmission key from the subscriber password, and if the locally calculated MAC value is the same as the MAC value in the second authentication information, determine that the authentication on the network-side device is passed.

19. The apparatus according to claim 16, wherein the execution of the instructions by the at least one processor further causes the at least one processor to:

encrypt the decrypted transmission key using the subscriber password of the UE, and store the encrypted transmission key.

20. The apparatus according to claim 16, wherein the execution of the instructions by the at least one processor further causes the at least one processor to:

if an instant message service is initiated, generate randomly a first random number, encrypt the first random number into the encrypted first random number using the transmission key corresponding to the UE, and encrypt an instant message into the encrypted instant message using the transmission key corresponding to the UE, and the first random number;

send the encrypted first random number and the encrypted instant message to the network-side device;

receive an encrypted instant message key, and the encrypted instant message,

sent by the network-side device, wherein the instant message key is generated by the network-side device, the encrypted instant message key is generated by the network-side device encrypting the instant message key using a transmission key corresponding to the called UE, and the encrypted instant message is generated by the network-side device encrypting the instant message using the instant message key; and

decrypt the encrypted instant message key into the instant message key using the transmission key corresponding to the called UE, and decrypt the encrypted instant message into the instant message using the instant message key.