Encrypted indentifiers in a wireless communication system
View Patent ↗A method and apparatus including units configured to send a request from a first network entity to a user equipment for an identifier and receive a message indicating that a public key is required from the user equipment by the first network entity. The method and apparatus also includes units configured to send, by the first network entity, the public key to the user equipment and receive an encrypted identifier by the first network entity, wherein upon authenticating the public key, the user equipment encrypts at least part of the identifier using the public key, thereby enabling further processing between the network entity and the user equipment.
1. An apparatus comprising:
at least one processor; and
at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code causing the apparatus to at least:
send a request, from a network to a user equipment, for an identifier representative of the user equipment, the request including an indicator that the network supports encrypted identifiers, wherein the indicator is provided in a bit of the request; and
receive an encrypted identifier by the network from the user equipment, wherein the encrypted identifier includes an encrypted international mobile equipment identity.
2. The apparatus of claim 1 , wherein the request comprises an identity request message.
3. The apparatus of claim 1 , wherein the identifier is encrypted using a public key sent by the network in response to a message from the user equipment to indicate that the public key is required.
4. A non-transitory computer-readable medium encoded with instructions that, when executed by at least one processor, perform at least the following:
sending a request, from a network to a user equipment, for an identifier representative of the user equipment, the request including an indicator that the network supports encrypted identifiers, wherein the indicator is provided in a bit of the request; and
receiving an encrypted identifier by the network from the user equipment, wherein the encrypted identifier includes an encrypted international mobile equipment identity.
5. The non-transitory computer readable medium of claim 4 , wherein the request comprises an identity request message.
6. The non-transitory computer readable medium of claim 4 , wherein the received encrypted identifier includes an indicator showing that the identifier has been encrypted.
7. The non-transitory computer readable medium of claim 6 , wherein the indicator shows if a subscriber certificate or access network certificate has been used to encrypt the identifier.
8. The non-transitory computer readable medium of claim 4 , wherein the network is a visited network.
9. The non-transitory computer readable medium of claim 4 , wherein the identifier is encrypted using a public key sent by the network in response to a message from the user equipment to indicate that the public key is required.
10. The apparatus of claim 1 , wherein the received encrypted identifier includes an indicator showing that the identifier has been encrypted.
11. The apparatus of claim 10 , wherein the indicator shows if a subscriber certificate or access network certificate has been used to encrypt the identifier.
12. The apparatus of claim 1 , wherein the network is a visited network.
13. A method comprising:
sending a request, from a network to a user equipment, for an identifier representative of the user equipment, the request including an indicator that the network supports encrypted identifiers, wherein the indicator is provided in a bit of the request; and
receiving an encrypted identifier by the network from the user equipment, wherein the encrypted identifier includes an encrypted international mobile equipment identity.
14. The method of claim 13 , wherein the request comprises an identity request message.
15. The method of claim 13 , wherein the received encrypted identifier includes an indicator showing that the identifier has been encrypted.
16. The method of claim 15 , wherein the indicator shows if a subscriber certificate or access network certificate has been used to encrypt the identifier.
17. The method of claim 13 , wherein the network is a visited network.
18. The method of claim 13 , wherein the identifier is encrypted using a public key sent by the network in response to a message from the user equipment to indicate that the public key is required.
19. The apparatus of claim 1 , wherein the encrypted international mobile equipment identity includes a software version number.
20. The non-transitory computer readable medium of claim 4 , wherein the encrypted international mobile equipment identity includes a software version number.
21. The method of claim 13 , wherein the encrypted international mobile equipment identity includes a software version number.
22. The apparatus of claim 1 , wherein the network requests a secret key from a second network for decrypting the encrypted identifier.