Re-authentication system and method in communication system
    1.
    发明申请
    Re-authentication system and method in communication system 审中-公开
    通信系统中的重认证系统和方法

    公开(公告)号:US20070112967A1

    公开(公告)日:2007-05-17

    申请号:US11503011

    申请日:2006-08-11

    IPC分类号: G06F15/16

    摘要: Disclosed are a system and a method for performing re-authentication in a communication system. A user Authorization, Authentication and Accounting server transmits a user Master Session Key (MSK_U), which is generated by performing user re-authentication for a mobile station (MS) according to a twice Extensible Authentication Protocol scheme, to a device Authorization, Authentication and Accounting server that generates a new user Master Session Key (MSK_U1) by using the MSK_U and a device Master Session Key generated at initial device authentication for the MS. A base station (BS) generates a Pairwise Master Key (PMK) by using the MSK_U1, and the MS and BS generate an authorization key by using the PMK.

    摘要翻译: 公开了一种用于在通信系统中执行重新认证的系统和方法。 用户授权,认证和计费服务器通过根据两次可扩展认证协议方案向移动台(MS)执行用户再认证而生成的用户主会话密钥(MSK_U)发送到设备授权认证和 通过使用MSK_U生成新用户主会话密钥(MSK_U 1)的计费服务器和在MS的初始设备认证时生成的设备主会话密钥。 基站(BS)通过使用MSK_U1生成成对主密钥(PMK),MS和BS通过使用PMK生成授权密钥。

    Apparatus and method for ciphering/deciphering a signal in a communication system
    3.
    发明授权
    Apparatus and method for ciphering/deciphering a signal in a communication system 失效
    在通信系统中加密/解密信号的装置和方法

    公开(公告)号:US07904714B2

    公开(公告)日:2011-03-08

    申请号:US11330310

    申请日:2006-01-11

    IPC分类号: H04L29/06

    CPC分类号: H04L9/12 H04L9/0637 H04L9/065

    摘要: In a communication system, second encryption information is generated using first encryption information when data to be transmitted is generated. The data is encrypted using the second encryption information and third encryption information. A signal including the encrypted data and the first encryption information is generated and transmitted.

    摘要翻译: 在通信系统中,当生成要发送的数据时,使用第一加密信息生成第二加密信息。 使用第二加密信息和第三加密信息来加密数据。 产生并发送包括加密数据和第一加密信息的信号。

    Method for negotiating security-related functions of subscriber station in wireless portable internet system
    5.
    发明授权
    Method for negotiating security-related functions of subscriber station in wireless portable internet system 有权
    在无线便携式互联网系统中协商用户台安全相关功能的方法

    公开(公告)号:US08656480B2

    公开(公告)日:2014-02-18

    申请号:US11908932

    申请日:2006-02-14

    IPC分类号: H04L29/06

    摘要: The present invention relates to a subscriber station security-related parameter negotiation method in a wireless portable Internet system. The subscriber station security-related parameter negotiation method includes security-related parameters in transmitting/receiving basic capability negotiation request messages and basic capability negotiation response messages such that the subscriber station and the base station negotiate the subscriber station security-related parameters. The security-related parameters include an authorization policy support subfield used to negotiate an authorization policy between the subscriber station and the base station, and message authentication code mode subfields used to negotiate a message authentication code mode. The base station can inform the subscriber station that authentication or message authentication is not performed and is omitted according to a service provider policy by writing it on the authorization policy support subfield or message authentication code mode subfield. In addition, the subscriber station and the base station can select an authorization policy formed with at least one combination through the authorization policy support subfield of the security negotiation parameters. According to the present invention, the service provider of the wireless portable Internet system can more efficiently and flexibly manage the system by providing a scheme for omitting an authentication function and a message authentication function as well as for supporting various authorization policies and message authentication functions.

    摘要翻译: 本发明涉及无线便携式因特网系统中的用户台安全相关参数协商方法。 用户站安全相关参数协商方法包括发送/接收基本能力协商请求消息中的安全相关参数和基本能力协商响应消息,使得用户台和基站协商用户站安全相关参数。 安全相关参数包括用于在用户站和基站之间协商授权策略的授权策略支持子字段以及用于协商消息认证码模式的消息认证码模式子字段。 基站可以通知订户站认证或消息认证不被执行,并且根据服务提供商策略将其写入授权策略支持子字段或消息认证码模式子字段而被省略。 此外,用户站和基站可以通过安全协商参数的授权策略支持子域,选择通过至少一个组合形成的授权策略。 根据本发明,通过提供省略认证功能和消息认证功能以及支持各种授权策略和消息认证功能的方案,无线便携式因特网系统的服务提供商能够更有效和灵活地管理系统。

    Apparatus and method for ciphering/deciphering a signal in a communication system
    6.
    发明申请
    Apparatus and method for ciphering/deciphering a signal in a communication system 失效
    在通信系统中加密/解密信号的装置和方法

    公开(公告)号:US20070192594A1

    公开(公告)日:2007-08-16

    申请号:US11330310

    申请日:2006-01-11

    IPC分类号: H04L9/00

    CPC分类号: H04L9/12 H04L9/0637 H04L9/065

    摘要: In a communication system, second encryption information is generated using first encryption information when data to be transmitted is generated. The data is encrypted using the second encryption information and third encryption information. A signal including the encrypted data and the first encryption information is generated and transmitted.

    摘要翻译: 在通信系统中,当生成要发送的数据时,使用第一加密信息生成第二加密信息。 使用第二加密信息和第三加密信息来加密数据。 产生并发送包括加密数据和第一加密信息的信号。

    METHOD FOR NEGOTIATING SECURITY-RELATED FUNCTIONS OF SUBSCRIBER STATION IN WIRELESS PORTABLE INTERNET SYSTEM
    8.
    发明申请
    METHOD FOR NEGOTIATING SECURITY-RELATED FUNCTIONS OF SUBSCRIBER STATION IN WIRELESS PORTABLE INTERNET SYSTEM 有权
    在无线便携式互联网系统中讨论订户站安全相关功能的方法

    公开(公告)号:US20090119509A1

    公开(公告)日:2009-05-07

    申请号:US11908932

    申请日:2006-02-14

    IPC分类号: H04L9/00

    摘要: The present invention relates to a subscriber station security-related parameter negotiation method in a wireless portable Internet system. The subscriber station security-related parameter negotiation method includes security-related parameters in transmitting/receiving basic capability negotiation request messages and basic capability negotiation response messages such that the subscriber station and the base station negotiate the subscriber station security-related parameters. The security-related parameters include an authorization policy support subfield used to negotiate an authorization policy between the subscriber station and the base station, and message authentication code mode subfields used to negotiate a message authentication code mode. The base station can inform the subscriber station that authentication or message authentication is not performed and is omitted according to a service provider policy by writing it on the authorization policy support subfield or message authentication code mode subfield. In addition, the subscriber station and the base station can select an authorization policy formed with at least one combination through the authorization policy support subfield of the security negotiation parameters. According to the present invention, the service provider of the wireless portable Internet system can more efficiently and flexibly manage the system by providing a scheme for omitting an authentication function and a message authentication function as well as for supporting various authorization policies and message authentication functions.

    摘要翻译: 本发明涉及无线便携式因特网系统中的用户台安全相关参数协商方法。 用户站安全相关参数协商方法包括发送/接收基本能力协商请求消息中的安全相关参数和基本能力协商响应消息,使得用户台和基站协商用户站安全相关参数。 安全相关参数包括用于在用户站和基站之间协商授权策略的授权策略支持子字段以及用于协商消息认证码模式的消息认证码模式子字段。 基站可以通知订户站认证或消息认证不被执行,并且根据服务提供商策略将其写入授权策略支持子字段或消息认证码模式子字段而被省略。 此外,用户站和基站可以通过安全协商参数的授权策略支持子域,选择通过至少一个组合形成的授权策略。 根据本发明,通过提供省略认证功能和消息认证功能以及支持各种授权策略和消息认证功能的方案,无线便携式因特网系统的服务提供商能够更有效和灵活地管理系统。

    Authentication method and apparatus in a communication system
    10.
    发明授权
    Authentication method and apparatus in a communication system 有权
    通信系统中的认证方法和装置

    公开(公告)号:US09306748B2

    公开(公告)日:2016-04-05

    申请号:US13367615

    申请日:2012-02-07

    摘要: An authentication method and apparatus in a communication system are provided. In a method for authenticating a first node at a second authentication server in a communication system comprising the first node registered to a first authentication server and a second node registered to the second authentication server, an authentication request message requesting authentication of the first node is received from the second node, the authentication request message is transmitted to the first authentication server, and upon receipt of an authentication success message indicating successful authentication of the first node from the first authentication server, the authentication success message is transmitted to the second node.

    摘要翻译: 提供了通信系统中的认证方法和装置。 在通信系统中的用于认证第二认证服务器的第一节点的方法中,包括登记到第一认证服务器的第一节点和注册到第二认证服务器的第二节点,接收到请求第一节点的认证的认证请求消息 从第二节点将认证请求消息发送到第一认证服务器,并且在从第一认证服务器接收到指示成功认证第一节点的认证成功消息时,将认证成功消息发送到第二节点。