PROTOCOL-SPECIFIC KEYS FOR A HYBRID NETWORK

    公开(公告)号:EP2756649B1

    公开(公告)日:2018-08-01

    申请号:EP12783691.4

    申请日:2012-09-12

    IPC分类号: H04L29/06 H04L9/08

    摘要: Security keys are typically needed to communicate with various network communication protocols of a mixed communication network. Herein, a protocol-specific key for a particular network communication protocol is generated based upon a result of a hash operation that includes a network key associated with the mixed communication network and information corresponding to the particular network communication protocol. Interoperability of multiple devices in the mixed communication network is made possible when the multiple devices generate (i.e. derive) protocol-specific keys using the same network key and common information corresponding to particular network communication protocols.

    METHOD AND DEVICE THEREOF FOR GENERATING ACCESS STRATUM KEY IN COMMUNICATION SYSTEM
    5.
    发明授权
    METHOD AND DEVICE THEREOF FOR GENERATING ACCESS STRATUM KEY IN COMMUNICATION SYSTEM 有权
    在通信系统中生成接入层密钥的方法和设备

    公开(公告)号:EP3136763B1

    公开(公告)日:2018-03-07

    申请号:EP16158400.8

    申请日:2012-12-13

    摘要: Embodiments of the present invention provide a method and a device thereof for generating an access stratum key in a In the communication system, a user equipment UE accesses a core network via a first network-side device by using a first air interface and connects to the first network-side device via a second network-side device by using a second air interface to access the core network. The method includes: acquiring, by the network-side device, an input parameter; calculating, by the network-side device, an access stratum root key KeNB* according to the input parameter and an access stratum root key KeNB on the first air interface, or using, by the network-side device, the KeNB as the KeNB*; and generating, by the second network-side device, an access stratum key on the second air interface according to the KeNB*, or sending, by the first network-side device, the KeNB* to the second network-side device, so that the second network-side device generates the access stratum key on the second air interface according to the KeNB*. In this way, security of data transmission over the second air interface may be improved by using the access stratum key on the second air interface.

    KEY GENERATION METHOD, DEVICE AND SYSTEM
    6.
    发明公开

    公开(公告)号:EP3255914A4

    公开(公告)日:2018-02-14

    申请号:EP15882974

    申请日:2015-02-28

    摘要: Embodiments of the present invention relate to the communications field, and provide a key generation method, device, and system. The method includes: after receiving a first command, obtaining, by UE located in a first-standard network, a type identifier of a second-standard network that needs to provide a service to the UE, where the first command is a service request response message, or a handover command, or any message in an air interface secure activation process; determining, by the UE, an access key according to the type identifier of the second-standard network, a key of the first-standard network, and a non-access stratum NAS count of the first-standard network by using a preset key derivation algorithm; and generating, by the UE, an access stratum AS key of the second-standard network according to the access key. The present invention can resolve problems of relatively long total communication latency and relatively high communication load of a heterogeneous network, decrease the total communication latency of a heterogeneous network and reduce the communication load of the heterogeneous network. The present invention is used for communication in a heterogeneous network.

    PROVISION OF SECURE COMMUNIUCATIONS CONNECTION USING THIRD PARTY AUTHENTICATION
    8.
    发明授权
    PROVISION OF SECURE COMMUNIUCATIONS CONNECTION USING THIRD PARTY AUTHENTICATION 有权
    通过第三方认证提供安全通信连接

    公开(公告)号:EP2025088B1

    公开(公告)日:2018-01-17

    申请号:EP07733026.4

    申请日:2007-05-31

    IPC分类号: H04L9/08 H04L9/32

    摘要: The present invention relates to communications, and in particular though not exclusively to forming a secure connection between two untrusted devices. The present invention provides a method of securely connecting a first device (A) to a second device (B) using a third party authentication server (AS) coupled to the second device, the first device and the authentication server both having first device shared secret data (SSDa) and the second device and the authentication server both having second device shared secret data (SSDb). The method comprises receiving a request from the first device at the authentication server; the authentication server and the first device both generating a first device key (K_A) using the first device shared secret data in response to a first device random number (RANDa) sent from the authentication server to the first device; the authentication server and the second device both generating a second device key (K_B) using the second device shared secret data in response to a second device random number (RANDb) sent from the authentication server to the second device; and the authentication server securely forwarding to the second device (B) and the first device (A) a common key (K_AB) using the second and first device keys (K_B, K_A).

    KEY AGREEMENT FOR WIRELESS COMMUNICATION
    9.
    发明公开
    KEY AGREEMENT FOR WIRELESS COMMUNICATION 审中-公开
    无线通信的主要协议

    公开(公告)号:EP3249849A1

    公开(公告)日:2017-11-29

    申请号:EP17180145.9

    申请日:2013-06-26

    申请人: Certicom Corp.

    摘要: Methods, systems, and computer programs for performing key agreement operations in a communication system are described. In some aspects, a wireless network operator receives a mobile device identifier and accesses a secret key associated with the mobile device. A message authentication code function is evaluated based on the secret key to produce an output value. A session key and a challenge value are obtained based on the output value. In some aspects, a mobile device accesses a secret key in response to receiving the challenge value from the wireless network operator. A message authentication code function is evaluated based on the secret key to produce an output value. A response value and a session key are obtained based on the output value. The response value is transmitted to the wireless network operator.

    摘要翻译: 描述了用于在通信系统中执行密钥协商操作的方法,系统和计算机程序。 在一些方面,无线网络运营商接收移动设备标识符并且访问与移动设备相关联的秘密密钥。 根据密钥评估消息认证码功能以产生输出值。 会话密钥和挑战值是根据输出值获得的。 在一些方面,移动装置响应于从无线网络运营商接收到挑战值而访问秘密密钥。 根据密钥评估消息认证码功能以产生输出值。 响应值和会话密钥是根据输出值获得的。 响应值被传送给无线网络运营商。