Securing method for lawful interception
A method is presented for secure communication, the method including generating a signature using a private key, a nonce, and at least one of an identifier and a key component; and transmitting the signature, the nonce, a security parameter, and the at least one of the identifier and the key component, wherein the security parameter associates a user identity with a public key, the public key being associated with the private key.
1. A method, by an electronic device, for secure communication, comprising:
generating, by a processor of the electronic device, a Message Authentication Code (MAC) tag using a MAC key, a nonce, and at least one of an identifier and a key component generated by the processor based on private key information associated with the electronic device and a publicly known elliptic curve point, wherein the identifier is one of an International Mobile Station Equipment Identity (IMEI), a Globally Routable User Agent URI (GURU), an International Mobile Subscriber Identity (IMSI), and a Temporary International Mobile Subscriber Identity (TIMSI); and
establishing, by the processor, a secure communication session with at least one other electronic device based on generating the MAC tag and at least session security data associated with the at least one other electronic device.
2. The method of claim 1 , wherein the nonce is one of a timestamp, a random number, and a sequence number.
3. The method of claim 1 , further comprising:
generating the key component using a master key, the nonce, and a known elliptic curve point.
4. The method of claim 1 , further comprising:
transmitting at least the MAC tag, the nonce, and the at least one of an identifier and a key component.
5. The method of claim 4 , wherein the MAC tag is received and stored by a remote information processing system.
6. The method of claim 1 , further comprising:
receiving the session security data, wherein the session security data comprises a second nonce, at least one of a second identifier and a second key component.
7. A method, by an electronic device, for secure communication, comprising:
establishing, by a processor of the electronic device, a secure communication session with at least one other electronic device based on session security data associated with the at least one other electronic device having been verified by at least one remote information processing system that is separate and distinct from the electronic device and the at least one other electronic device, the session security data comprising a nonce, at least one of an identifier and a key component, and a MAC tag that was generated using the nonce, the at least one of the identifier and the key component, and a MAC key associated with the at least one other electronic device, wherein the identifier is one of an International Mobile Station Equipment Identity (IMEI), a Globally Routable User Agent URI (GURU), an International Mobile Subscriber Identity (IMSI), and a Temporary International Mobile Subscriber Identity (TIMSI).
8. The method of claim 7 , wherein establishing the secure communication session is further based on receiving, from the at least one remote information processing system, at least a key component and a nonce associated with the at least one information processing system.
9. The method of claim 7 , wherein the nonce is one of a timestamp, a random number, and a sequence number.
10. The method of claim 7 , wherein the key component was generated by the at least one other electronic device.
11. An apparatus for secure communication, comprising:
a processing circuit configured to
generate a MAC tag using a MAC key, a nonce, and at least one of an identifier and a key component generated by the processing circuit based on private key information associated with the apparatus and a publicly known elliptic curve point, wherein the identifier is one of an International Mobile Station Equipment Identity (IMEI), a Globally Routable User Agent URI (GURU), an International Mobile Subscriber Identity (IMSI), and a Temporary International Mobile Subscriber Identity (TIMSI); and
establish, a secure communication session with at least one other electronic device based on generating the MAC tag and at least session security data associated with the at least one other electronic device.
12. The apparatus of claim 11 , wherein the identifier is one of an International Mobile Station Equipment Identity (IMEI), a Globally Routable User Agent URI (GURU), an International Mobile Subscriber Identity (IMSI), and a Temporary International Mobile Subscriber Identity (TIMSI).
13. The apparatus of claim 11 , wherein the nonce is one of a timestamp, a random number, and a sequence number.
14. The apparatus of claim 11 , wherein the processor is further configured to generate the key component using a master key, the nonce, and a known elliptic curve point.
15. The apparatus of claim 11 , wherein the processor is further configured to transmit at least the MAC tag, the nonce, and the at least one of an identifier and a key component.
16. The apparatus of claim 15 , wherein the MAC tag is received and stored by a remote information processing system.
17. The apparatus of claim 11 , wherein the processor is further configured to receive the session security data, wherein the session security data comprises a second nonce, at least one of a second identifier and a second key component.
18. An apparatus for secure communication, comprising:
a processing circuit configured to establish a secure communication session with at least one electronic device based on session security data associated with the at least one electronic device having been verified by at least one remote information processing system that is separate and distinct from the apparatus and the at least one electronic device, the session security data comprising a nonce, at least one of an identifier and a key component, and a MAC tag that was generated using the nonce, the at least one of the identifier and the key component, and a MAC key associated with the at least one electronic device, wherein the key component was generated by the at least one electronic device based on private key information associated with the one electronic device and a publicly known elliptic curve point, wherein the identifier is one of an International Mobile Station Equipment Identity (IMEI), a Globally Routable User Agent URI (GURU), an International Mobile Subscriber Identity (IMSI), and a Temporary International Mobile Subscriber Identity (TIMSI).
19. The apparatus of claim 18 , wherein the processing circuit is further configured to establish the secure communication session based on receiving, from the at least one remote information processing system, at least a key component and a nonce associated with the at least one information processing system.
20. The apparatus of claim 18 , wherein the nonce is one of a timestamp, a random number, and a sequence number.