Security method for transmissions in telecommunication networks
View Patent ↗The invention related to method for providing connection security for the transmission between communicating parties in a telecommunication network, the method comprising the steps of: exchanging security parameters between communicating parties, providing connection security for messages based on these security parameters, and transmitting said messages between communicating parties. It is characteristic for the method according to the invention that it further comprises the steps of: reaching agreement between communicating parties on an interval for recalculation of the security parameters, monitoring of the interval for recalculation by the communicating parties, recalculating the security parameters at the agreed interval, and providing connection security for messages based on the latest recalculated security parameters.
1. A method for providing connection security for the transmission between communicating parties in a telecommunication network, the method comprising the steps of:
exchanging security parameters between communicating parties,
providing connection security for messages based on these security parameters,
transmitting said messages between communicating parties,
wherein the method further comprises the steps of:
reaching agreement between communicating parties on an interval for recalculation of the security parameters,
monitoring of the interval for recalculation by the communicating parties,
recalculating the security parameters at the agreed interval, and providing connection security for messages based on the latest recalculated security parameters.
2. The method according to claim 1 , wherein providing connection security for messages based on the latest recalculated security parameters comprises the step of
ciphering messages based on the latest recalculated security parameters.
3. The method according to claim 1 , wherein providing connection security for messages based on the latest recalculated security parameters comprises the step of
authenticating and providing integrity for the messages based on the latest recalculated security parameters.
4. The method according to claim 1 , wherein providing connection security for messages based on the latest recalculated security parameters comprises the steps of
ciphering messages based on the latest recalculated security parameters, and
authenticating and providing integrity for the messages based on the latest recalculated security parameters.
5. The method according to claim 3 , wherein authenticating and providing integrity for the messages is arranged with a message authentication code MAC.
6. The method according to claim 1 , wherein the method further comprises the steps of:
numbering the messages,
agreeing on the number of messages to determine the interval for the recalculation of the security parameters,
recalculating the security parameters after the agreed number of messages have been transmitted.
7. The method according to claim 6 , wherein the method further comprises the steps of:
numbering the messages with sequence numbers,
transmitting the sequence number with the message, and
using the latest sequence number as input for recalculation of the security parameters.
8. The method according to claim 1 , wherein the method comprises the step of
reaching agreement between communicating parties during handshaking on the interval for recalculation of the security parameters.
9. A mobile station configured to
exchange security parameters with at least one communicating party,
negotiate an agreement with the at least one communicating party on an interval for recalculation of security parameters,
monitor the interval for recalculation,
recalculate the security parameters at the agreed interval, and
providing connection security for messages transmitted between the mobile station and the at least one communicating party based on the latest calculated security parameters.
10. The mobile station according to claim 9 , configured to cipher messages based on the latest recalculated security parameters.
11. The mobile station according to claim 9 , configured to authenticate and provide integrity for messages based on the latest recalculated security parameters.
12. The mobile station according to claim 9 , configured to cipher, authenticate and provide integrity for messages based on the latest recalculated security parameters.
13. The mobile station according to claim 11 , wherein the messages are authenticated and integrity for the messages is provided with a message authentication code.
14. The mobile station according to claim 9 , configured to
number the messages,
agree on a number of messages for determining the interval for the recalculation of security parameters, and
recalculate the security parameters after the agreed number of messages have been transmitted.
15. The mobile station according to claim 14 , configured to
number the messages with sequence numbers,
transmit a respective sequence number with a message, and
use the latest sequence number as input for recalculation of the security parameters.
16. The mobile station according to claim 9 , configured to negotiate and reach an agreement with said at least one communicating party during handshaking on the interval for recalculation of the security parameters.
17. A server configured to
exchange security parameters with at least one communicating party,
negotiate an agreement with the at least one communicating party on an interval for recalculation of security parameters,
monitor the interval for recalculation,
recalculate the security parameters at the agreed interval, and
provide connection security for messages transmitted between the server and the at least one communicating party based on the latest calculated security parameters.
18. The server according to claim 17 , configured to cipher messages based on the latest recalculated security parameters.
19. The server according to claim 17 , configured to authenticate and provide integrity for messages based on the latest recalculated security parameters.
20. The server according to claim 17 , configured to cipher, authenticate and provide integrity for messages based on the latest recalculated security parameters.
21. The server according to claim 19 , wherein the messages are authenticated and integrity for the messages is provided with a message authentication code.
22. The server according to claim 17 , configured to
number the messages,
agree on a number of messages for determining the interval for the recalculation of security parameters, and
recalculate the security parameters after the agreed number of messages have been transmitted.
23. The server according to claim 22 , configured to
number the messages with sequence numbers,
transmit a respective sequence number with a message, and
use the latest sequence number as input for recalculation of the security parameters.
24. The server according to claim 17 , configured to negotiate and reach an agreement with said at least one communicating party during handshaking on the interval for recalculation of the security parameters.
25. A mobile station comprising
means for exchanging security parameters with at least one communicating party,
means for negotiating an agreement with the at least one communicating party on an interval for recalculation of security parameters,
means for monitoring the interval for recalculation,
means for recalculating the security parameters at the agreed interval, and
means for providing connection security for messages transmitted between the mobile station and the at least one communicating party based on the latest calculated security parameters.
26. A server comprising
means for exchanging security parameters with at least one communicating party,
means for negotiating an agreement with the at least one communicating party on an interval for recalculation of security parameters,
means for monitoring the interval for recalculation,
means for recalculating the security parameters at the agreed interval, and
means for providing connection security for messages transmitted between the server and the at least one communicating party based on the latest calculated security parameters.
27. A method of operating a mobile station, the method comprising
exchanging security parameters with at least one communicating party,
negotiating an agreement with the at least one communicating party on an interval for recalculation of security parameters,
monitoring the interval for recalculation,
recalculating the security parameters at the agreed interval, and
providing connection security for messages transmitted between the mobile station and the at least one communicating party based on the latest calculated security parameters.
28. A method of operating a server, the method comprising
exchanging security parameters with at least one communicating party,
negotiating an agreement with the at least one communicating party on an interval for recalculation of security parameters,
monitoring the interval for recalculation,
recalculating the security parameters at the agreed interval, and
providing connection security for messages transmitted between the server and the at least one communicating party based on the latest calculated security parameters.
29. A telecommunications network comprising at least two parties arranged to communicate with each other and to provide connection security, the at least two parties configured to
exchange security parameters with each other,
negotiate an agreement on an interval for recalculation of security parameters,
monitor the interval for recalculation,
recalculate the security parameters at the agreed interval, and
provide connection security for messages transmitted between the at least two communicating parties based on the latest calculated security parameters.
30. A telecommunications network comprising a server and at least one mobile station, the server and the at least one mobile station configured to
exchange security parameters with each other,
negotiate an agreement on an interval for recalculation of security parameters,
monitor the interval for recalculation,
recalculate the security parameters at the agreed interval, and
provide connection security for messages transmitted between the server and the at least one mobile station on the latest calculated security parameters.
31. A telecommunications network comprising at least two mobile stations, the at least two mobile stations configured to
exchange security parameters with each other,
negotiate an agreement on an interval for recalculation of security parameters,
monitor the interval for recalculation,
recalculate the security parameters at the agreed interval, and
provide connection security for messages transmitted between the at least two mobile station on the latest calculated security parameters.