System and method for securing a base station using SIM cards
View Patent ↗Methods and systems are provided for securing integrated base stations, such as base station routers (BSRs), in which a SIM card is operatively coupled with a secured portion of a base station and a secure association is established therebetween to facilitate encryption key exchange between the secured portion of the base station and a core network.
1. A base station for providing wireless communications between wireless mobile terminals and a core network, the base station comprising:
a subscriber identity module (SIM) card operatively coupled with the base station, the SIM card comprising a first security management component operatively coupled with the core network to facilitate one or more security functions in the base station;
a secure cell-site vault comprising:
one or more security function components for performing security operations with respect to communications packets handled by the base station, and
a second security management component operative with the first security management component to establish a secure association with the SIM card to facilitate one or more security functions in the base station; and
an unsecure portion comprising a radio interface operative to communicate with wireless mobile terminals, and a line interface operative to communicate with the core network;
wherein the secure cell-site vault confirms establishment of the secure association between the SIM card and the secure cell-site vault to an authentication component of the core network; and
wherein the second security management component of the secure cell-site vault is operative with the first security management component to establish the secure association between the SIM card and the secure cell-site vault by executing a Universal Mobile Telecommunications System (UMTS) Authentication and Key Agreement (AKA) procedure.
2. The base station of claim 1 , wherein the one or more security function components perform encryption or decryption security operations with respect to communications packets handled by the base station.
3. The base station of claim 2 , wherein the one or more security function components include:
a first encryption component to perform encryption and decryption security operations with respect to communications packets transferred between the base station and a radio interface of a wireless mobile terminal; and
a second encryption component to perform encryption and decryption security operations with respect to communications packets transferred between the base station and a line interface of the core network.
4. The base station of claim 3 , wherein the first and second security management components facilitate generation of session keys for the one or more security function components.
5. The base station of claim 3 , wherein the base station is an integrated base station for a femto cell, pico cell, micro cell or other type of cell.
6. The base station of claim 1 , wherein the base station is an integrated base station for a femto cell, pico cell, micro cell or other type of cell.
7. The base station of claim 1 , wherein the first and second security management components facilitate generation of session keys for the one or more security function components.
8. The base station of claim 7 , wherein the first and second security management components transfer at least one session key for the one or more security function components using the secure association established between the SIM card and the secure cell-site vault.
9. The base station of claim 7 , wherein the SIM card establishes at least one vault-gateway session key for a secure tunnel between the secure cell-site vault and a secure gateway of the core network, and the SIM card sends the at least one vault-gateway session key to the secure cell-site vault using the secure association established between the SIM card and the secure cell-site vault.