CA2616445C - Communication system and method for transmitting data of first mobile station to second mobile station without going via base station - Google Patents
Communication system and method for transmitting data of first mobile station to second mobile station without going via base station Download PDFInfo
- Publication number
- CA2616445C CA2616445C CA2616445A CA2616445A CA2616445C CA 2616445 C CA2616445 C CA 2616445C CA 2616445 A CA2616445 A CA 2616445A CA 2616445 A CA2616445 A CA 2616445A CA 2616445 C CA2616445 C CA 2616445C
- Authority
- CA
- Canada
- Prior art keywords
- data
- base station
- encryption key
- station
- traffic encryption
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/02—Terminal devices
- H04W88/04—Terminal devices adapted for relaying to or from another terminal or user
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/12—Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/03—Protecting confidentiality, e.g. by encryption
- H04W12/033—Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04B—TRANSMISSION
- H04B7/00—Radio transmission systems, i.e. using radiation field
- H04B7/24—Radio transmission systems, i.e. using radiation field for communication between two or more posts
- H04B7/26—Radio transmission systems, i.e. using radiation field for communication between two or more posts at least one of which is mobile
- H04B7/2603—Arrangements for wireless physical layer control
- H04B7/2606—Arrangements for base station coverage control, e.g. by using relays in tunnels
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
Abstract
A communication system for transmitting data of a first mobile station to a second mobile station includes a base station and a relay device. The base station is utilized for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively and for transmitting a traffic encryption key to the first and second mobile stations so that the first and second mobile stations share the traffic encryption key. The relay device is coupled to the base station and the first and second mobile stations via wireless communication, and utilized for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station.
Description
Title COMMUNICATION SYSTEM AND METHOD FOR TRANSMITTING
DATA OF FIRST MOBILE STATION TO SECOND MOBILE
STATION WITHOUT GOING VIA BASE STATION
Background of the Invention 1. Field of the Invention The present invention relates to a wireless communication scheme, and more particularly, to a communication system and related method for directly transmitting data of a mobile station to another mobile station through a relay device without going via a base station.
DATA OF FIRST MOBILE STATION TO SECOND MOBILE
STATION WITHOUT GOING VIA BASE STATION
Background of the Invention 1. Field of the Invention The present invention relates to a wireless communication scheme, and more particularly, to a communication system and related method for directly transmitting data of a mobile station to another mobile station through a relay device without going via a base station.
2. Description of the Prior Art For a communication system complying with the IEEE 802.16x standard, such as the Worldwide Interoperability for Microwave Access (WIMAX) system, the essential framework of the communication system is to utilize a base station to transfer data between mobile stations served by the base station itself. If two mobile stations communicate With each other in this condition, data transmitted by either one of the mobile stations will pass through the base station; the data is transmitted according to a point-to-multipoint mode. In order to achieve throughput enhancement and coverage extension, in the IEEE
802.16j specification, it is mentioned that multiple relay stations can be further used between a base station and mobile stations for conveying data. For the wireless network topology formed by the base station, relay stations, and the mobile stations, control signaling and data transmission is usually achieved according to a tree model. When the relay stations are used for achieving throughput enhancement and coverage extension, both control signaling and data actually transmitted in this transmission scheme is controlled via the base station, and a situation where the data is transmitted between the mobile stations in private can be avoided. An advantage is that the base station can directly control the transmission scheme once service provided by the transmission scheme is charged or the transmission scheme needs to execute service interruption. In this situation, only the base station has the capability of service destruction.
If all the transmitted data passes through the base station, the bandwidth resource of the communication system, however, will be , , greatly wasted. For example, if a mobile station MS1 transmits an amount of data to a mobile station MS2, then this amount of data may be transmitted to a base station through a certain relay station on the uplink associated with the data. It is possible that the data is transmitted to the same relay station from the base station on the downlink and then the data is transmitted to the mobile station MS2 from this relay station. As mentioned above, it is evident that the bandwidth and computation resource between the relay station and base station are occupied twice when the data is transmitted via the uplink and downlink. To solve this problem, if the above-described relay station directly transfers the data to the mobile station MS2 after receiving the data from the mobile station MS1 for preventing system resources from being consumed by the base station, this, however, does not comply with the originally developed standard: data communication between mobile stations are centrally controlled by the base station. Therefore, an acceptable method is that signaling data for control signaling is still controlled by the base station, but bearer data for data transmission can be directly transmitted from one mobile station to another mobile station through relay station(s) without going
802.16j specification, it is mentioned that multiple relay stations can be further used between a base station and mobile stations for conveying data. For the wireless network topology formed by the base station, relay stations, and the mobile stations, control signaling and data transmission is usually achieved according to a tree model. When the relay stations are used for achieving throughput enhancement and coverage extension, both control signaling and data actually transmitted in this transmission scheme is controlled via the base station, and a situation where the data is transmitted between the mobile stations in private can be avoided. An advantage is that the base station can directly control the transmission scheme once service provided by the transmission scheme is charged or the transmission scheme needs to execute service interruption. In this situation, only the base station has the capability of service destruction.
If all the transmitted data passes through the base station, the bandwidth resource of the communication system, however, will be , , greatly wasted. For example, if a mobile station MS1 transmits an amount of data to a mobile station MS2, then this amount of data may be transmitted to a base station through a certain relay station on the uplink associated with the data. It is possible that the data is transmitted to the same relay station from the base station on the downlink and then the data is transmitted to the mobile station MS2 from this relay station. As mentioned above, it is evident that the bandwidth and computation resource between the relay station and base station are occupied twice when the data is transmitted via the uplink and downlink. To solve this problem, if the above-described relay station directly transfers the data to the mobile station MS2 after receiving the data from the mobile station MS1 for preventing system resources from being consumed by the base station, this, however, does not comply with the originally developed standard: data communication between mobile stations are centrally controlled by the base station. Therefore, an acceptable method is that signaling data for control signaling is still controlled by the base station, but bearer data for data transmission can be directly transmitted from one mobile station to another mobile station through relay station(s) without going
3 via the base station. The reason is that the signaling data in general does not occupy excessive bandwidth resources while the bearer data may be multimedia data and therefore occupies more bandwidth resources.
For a WIMAX communication system, another serious problem, however, will result from using relay station(s) to transmit data without going via a base station. The problem is that a mobile station receiving the data cannot decrypt this data. This is because the WIMAX system supports end-to-end security, i.e., each mobile station and one base station has a shared secret key but a plurality of intermediate relay stations do not have the shared secret key. Originally, if all data (i.e.
signaling data and bearer data) passes through the base station, the mobile station MS1 encrypts the data with key KEY1 and the base station can decrypt the data with key KEY1. The base station then encrypts the data with another key KEY2, and the mobile station MS2 can decrypt the data with the key KEY2. If, however, the data is directly transmitted through the relay station(s) without going via the base station, the mobile station MS1 encrypts the data with the key KEY1 , but the mobile
For a WIMAX communication system, another serious problem, however, will result from using relay station(s) to transmit data without going via a base station. The problem is that a mobile station receiving the data cannot decrypt this data. This is because the WIMAX system supports end-to-end security, i.e., each mobile station and one base station has a shared secret key but a plurality of intermediate relay stations do not have the shared secret key. Originally, if all data (i.e.
signaling data and bearer data) passes through the base station, the mobile station MS1 encrypts the data with key KEY1 and the base station can decrypt the data with key KEY1. The base station then encrypts the data with another key KEY2, and the mobile station MS2 can decrypt the data with the key KEY2. If, however, the data is directly transmitted through the relay station(s) without going via the base station, the mobile station MS1 encrypts the data with the key KEY1 , but the mobile
4 station MS2 cannot decrypt the data because the mobile station MS2 does not obtain the key KEY1 (the mobile station MS2 only has the key KEY2). That is, the data cannot be decrypted although it can be correctly received. The base station may share the key KEY1 with the relay station(s) so that the relay station(s) can use the key KEY1 to decrypt the data transmitted by the mobile station MS1 and then use the key KEY2 to encrypt the received data so that the mobile station MS2 can decrypt the data transmitted from the relay station(s) with key KEY2. However, a more complicated scheme will be required to synchronously update the keys shared between the base station and relay station(s). Of course, this breaks end-to-end security provided by the WIMAX communication system.
Summary of the Invention In order to effectively reduce consumption of network bandwidth/computation resource to improve the transmission efficiency and to make a mobile station correctly decrypt received data, embodiments of the present invention may provide a communication system and related method for transmitting a traffic =
encryption key to multiple mobile stations so that the mobile stations can share the traffic encryption key together, to solve the above-mentioned problems.
According to an embodiment of the present invention, a communication system for transmitting data of a first mobile station to a second mobile station is disclosed. The communication system comprises a base station and a relay device. The base station is utilized for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively, and for transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations can share the traffic encryption key together. The relay device is coupled to the base station and the first and second mobile stations, and used for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station through appropriate mapping according to the first and second connection IDs without going via the base station.
. * 77762-10 According to the embodiment of the present invention, a communication method for transmitting data of a first mobile station to a second mobile station is further disclosed. The method comprises the following steps: providing a base station and utilizing the base station to configure an uplink and a downlink of the data to respectively correspond to a first connection ID and a second connection ID, and transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; and utilizing a relay device to receive the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station through appropriate mapping according to the first and second connection IDs without going via the base station.
According to another embodiment of the present invention, there is provided a communication system for transmitting data of a first mobile station to a second mobile station, comprising: a base station, for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively, and for transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; and a relay device, coupled to the base station and the first and second mobile stations, for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station;
wherein the base station periodically updates the traffic encryption key shared by the first and second mobile stations; and, when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, the base station does not update the traffic encryption key until the other of the first and second mobile stations notifies that base station that the traffic encryption key is about to expire.
According to still another embodiment of the present invention, there is provided a communication method for transmitting data of a first mobile station to a ' 77762-10 second mobile station, comprising: providing a base station and utilizing the base station to configure an uplink and a downlink of the data to respectively correspond to a first connection ID and a second connection ID, and transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; utilizing a relay device to receive the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station; periodically updating the traffic encryption key shared by the first and second mobile stations; and when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, not updating the traffic encryption key until another of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire.
These and other objectives of the present invention will no doubt become obvious to those of ordinary skill in the art after reading the following detailed description of the preferred embodiment that is illustrated in the various figures and drawings.
7a Brief Description of the Drawings FIG. 1 is a diagram of a communication system according to an embodiment of the present invention.
FIG. 2 is a diagram of a communication system according to another embodiment of the present invention.
FIG. 3 is a sequence diagram illustrating a base station of FIG. 1 configuring data transfer setting upon the relay station RS1.
Detailed Description Please refer to FIG. 1. FIG. 1 is a diagram of a communication system 100 according to an embodiment of the present invention. As shown in FIG. 1, the communication system 100 includes a base station 105, a relay device 110, and other relay stations, wherein the relay device 110 is a relay station RS1 in the embodiment. The communication system 100 also complies with the WIMAX
communication standard, and data can be transmitted between different mobile stations by cross communication via the communication system 100. For example, in FIG. 1, a certain amount of data of a first mobile station MS1 is transmitted to a second mobile station MS2 by the communication system 100, where broken lines respectively represent an uplink of the data and a downlink of the data while solid lines together represent a path which the data passes through in practice. The base station 105 configures the uplink and downlink of the data to respectively correspond to a first connection ID
(CID) and a second CID, and also transmits a traffic encryption key (TEK) to the first and second mobile stations MS1 and MS2 so that the first and second mobile stations MS1 and MS2 can share this traffic encryption key. The relay device 110 is coupled between the base station 105 and the first and second mobile stations MS1 and MS2, and used for receiving the data encrypted by the traffic encryption key and then transferring the data of the first mobile station MS1 to the second mobile station MS2 according to the first and second CIDs without going via the base station 105. In other words, the relay device 110 only transmits the data without encrypting/decrypting the data further. In particular, in this embodiment, the communication system 100 still controls signaling data of this transmission scheme via the base station 105. The base station 105 periodically updates the traffic encryption key so that the first and second mobile stations MS1 and MS2 can share the identical traffic encryption key at the same time. Thus, the second mobile station MS2 can directly decrypt data transmitted from the first mobile station MS1.
In this embodiment, two scenarios that the base station 105 updates the traffic encryption key periodically are provided in the following. In the first scenario, the traffic encryption key is periodically updated by using multicast. First of all, the base station 105 encrypts a group key encryption key (GKEK), which is used to encrypt/decrypt the traffic encryption key, and transmits the encrypted GKEK to the first and second mobile stations MS1 and MS2 for updating via a primary management connection. The traffic encryption key is then broadcasted by the base station 105 to be transmitted to the first and second mobile stations MS1 and MS2 after being encrypted by the GKEK, and data is encrypted by the traffic encryption key and transmitted via a transport connection. Therefore, the problems caused by the prior art scheme can be solved in this embodiment. In addition, since the first and second mobile stations MS1 and MS2 share the same traffic encryption key, this means that security levels are identical when the data are transmitted through the uplink and downlink. Besides, because each relay station on the path does not obtain the GKEK, each relay station cannot decrypt the transmitted data. Accordingly, the communication system 100 in the present invention can support end-to-end security.
In the second scenario, instead of using the base station 105 to periodically update the traffic encryption key by multicast, the first and second mobile stations MS1 and MS2 actively issue requests to the base station 105 for updating the traffic encryption key. If one of the first and second mobile stations MS1 and MS2 notifies the base station 105 that the traffic encryption key is about to expire (the key update has to be done prior to the expiry of a used key), the base station 105 does not update the traffic encryption key immediately until the other of the first and second mobile stations MS1 and MS2 also notifies the base station 105 that the traffic encryption key is about to expire. The traffic encryption key shared by the first and second mobile stations MS1 and MS2 can therefore be updated simultaneously. To shorten the length of this specification, a sequence diagram related to an update of the traffic encryption key is omitted for brevity.
In order to achieve cross communication, in this embodiment, the relay device 110 (i.e. the relay station RS1), which has cross communication capability, includes a mapping table in which it is recorded that the first CID of the data is mapped into the second CID so that the relay device 110 can transfer the data of the first mobile station MS1 to the second mobile station MS2. In general, when configuring the first and second CIDs, the base station 105 often configures the first and second CIDs to become different; thus, the relay device 110 can map the first CID of the data into the second CID according to the mapping table, and then transfer the data from the first mobile station MS1 to the second mobile station MS2. In another example, in contrast, the base station 105 configures the first and second CIDs to become identical at connection setup, i.e., the uplink and downlink of the data both correspond to the same CID. In this example, the function of the above-mentioned mapping table is optional, and the relay device 110 can transmit the data to the second mobile station MS2 without modifying the first CID of the data since the first and second CIDs are identical.
Additionally, in another embodiment, a relay device can also be composed of two or more relay stations, such as a relay device 210 of a communication system 200 shown in FIG. 2. The number of relay stations included within a relay device is not meant to be a limitation of the present invention. Furthermore, since not all relay stations have cross communication capability as described in the present invention, relay station(s) having cross communication capability will be selected and a shortest transmission path will be determined first before transmitting data. The definition of the shortest transmission path can be defined as a path using minimum connection(s) for transmission, a path occupying minimum network bandwidth resource for transmission, or a path least easily causing network congestion during transmission, and so on; the definition of the shortest transmission path can be considered to become different in various conditions according to requirements of system designers. As described above, when the first mobile station MS1 requests to communicate with the second mobile station MS2, the communication systems 100/200 first seeks relay station(s) on the uplink which data of the first mobile station MS1 passes through. For instance, the communication system 100 shown in FIG. 1 seeks out the relay stations RS1, RS2, and RS3. The communication system 100/200 then seeks relay station(s) on the downlink of the data, e.g., the communication system 100 seeks out the relay stations RS1 and RS4. Subsequently, taking the embodiment shown in FIG. 1 as an example, the communication system 100 excludes relay stations without cross communication capability and only includes those having cross communication capability among candidate relay stations. Finally, the communication systems 100 and 200 can respectively select appropriate station(s) from candidate relay stations as each relay device in the above-mentioned embodiments according to the definition of the shortest transmission path formulated by system designers themselves. For instance, in FIG. 1, the relay station RS1 is selected as the relay device 110 of the first embodiment.
The base station 105 of the communication system 100 then configures related data transfer setting upon the relay station RS1.
Please refer to FIG. 3. FIG. 3 is a sequence diagram illustrating the base station 105 of FIG. 1 configuring the data transfer setting upon the relay = .
station RS1. In general, as shown in FIG. 3, after excluding the relay stations without cross communication capability, a relay station with cross communication capability, e.g. the relay station RS1, on the selected shortest transmission path issues a cross communication request command CC-REQ to the base station 105, and then the base station 105 determines whether to accept/reject the relay station RS1 for cross communication; i.e. the data transmission scheme for cross communication is still controlled by the base station 105. If the base station 105 accepts the cross communication request command CC-REQ, the base station 105 will issue a cross communication response command CC-RSP back to the relay station RS1. After the cross communication response command CC-RSP is received by the relay station RS1, the relay station RS1 returns an acknowledge command CC-ACK to the base station 105. After this, the relay station RS1 has been configured as the relay device 110, and the setting for the mapping table of the relay station has also been completed so that cross communication can be activated immediately. Of course, before the procedure of data transfer setting, the first mobile station MS1 and base station 105 need to communicate with each other via dynamic service addition (DSA) using three-way handshake. In order to simplify the specification, in FIG. 3, the DSA using three-way handshake is represented only by MS-initiated-DSA while DSA using three-way handshake between the base station 105 and second mobile station MS2 is represented by BS-initiated-DSA. Finally, it should be noted that the above-mentioned communication systems in the whole 2 specification all comply with the WIMAX communication standard; this, however, is not meant to be a limitation of the present invention.
Summary of the Invention In order to effectively reduce consumption of network bandwidth/computation resource to improve the transmission efficiency and to make a mobile station correctly decrypt received data, embodiments of the present invention may provide a communication system and related method for transmitting a traffic =
encryption key to multiple mobile stations so that the mobile stations can share the traffic encryption key together, to solve the above-mentioned problems.
According to an embodiment of the present invention, a communication system for transmitting data of a first mobile station to a second mobile station is disclosed. The communication system comprises a base station and a relay device. The base station is utilized for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively, and for transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations can share the traffic encryption key together. The relay device is coupled to the base station and the first and second mobile stations, and used for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station through appropriate mapping according to the first and second connection IDs without going via the base station.
. * 77762-10 According to the embodiment of the present invention, a communication method for transmitting data of a first mobile station to a second mobile station is further disclosed. The method comprises the following steps: providing a base station and utilizing the base station to configure an uplink and a downlink of the data to respectively correspond to a first connection ID and a second connection ID, and transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; and utilizing a relay device to receive the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station through appropriate mapping according to the first and second connection IDs without going via the base station.
According to another embodiment of the present invention, there is provided a communication system for transmitting data of a first mobile station to a second mobile station, comprising: a base station, for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively, and for transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; and a relay device, coupled to the base station and the first and second mobile stations, for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station;
wherein the base station periodically updates the traffic encryption key shared by the first and second mobile stations; and, when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, the base station does not update the traffic encryption key until the other of the first and second mobile stations notifies that base station that the traffic encryption key is about to expire.
According to still another embodiment of the present invention, there is provided a communication method for transmitting data of a first mobile station to a ' 77762-10 second mobile station, comprising: providing a base station and utilizing the base station to configure an uplink and a downlink of the data to respectively correspond to a first connection ID and a second connection ID, and transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; utilizing a relay device to receive the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station; periodically updating the traffic encryption key shared by the first and second mobile stations; and when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, not updating the traffic encryption key until another of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire.
These and other objectives of the present invention will no doubt become obvious to those of ordinary skill in the art after reading the following detailed description of the preferred embodiment that is illustrated in the various figures and drawings.
7a Brief Description of the Drawings FIG. 1 is a diagram of a communication system according to an embodiment of the present invention.
FIG. 2 is a diagram of a communication system according to another embodiment of the present invention.
FIG. 3 is a sequence diagram illustrating a base station of FIG. 1 configuring data transfer setting upon the relay station RS1.
Detailed Description Please refer to FIG. 1. FIG. 1 is a diagram of a communication system 100 according to an embodiment of the present invention. As shown in FIG. 1, the communication system 100 includes a base station 105, a relay device 110, and other relay stations, wherein the relay device 110 is a relay station RS1 in the embodiment. The communication system 100 also complies with the WIMAX
communication standard, and data can be transmitted between different mobile stations by cross communication via the communication system 100. For example, in FIG. 1, a certain amount of data of a first mobile station MS1 is transmitted to a second mobile station MS2 by the communication system 100, where broken lines respectively represent an uplink of the data and a downlink of the data while solid lines together represent a path which the data passes through in practice. The base station 105 configures the uplink and downlink of the data to respectively correspond to a first connection ID
(CID) and a second CID, and also transmits a traffic encryption key (TEK) to the first and second mobile stations MS1 and MS2 so that the first and second mobile stations MS1 and MS2 can share this traffic encryption key. The relay device 110 is coupled between the base station 105 and the first and second mobile stations MS1 and MS2, and used for receiving the data encrypted by the traffic encryption key and then transferring the data of the first mobile station MS1 to the second mobile station MS2 according to the first and second CIDs without going via the base station 105. In other words, the relay device 110 only transmits the data without encrypting/decrypting the data further. In particular, in this embodiment, the communication system 100 still controls signaling data of this transmission scheme via the base station 105. The base station 105 periodically updates the traffic encryption key so that the first and second mobile stations MS1 and MS2 can share the identical traffic encryption key at the same time. Thus, the second mobile station MS2 can directly decrypt data transmitted from the first mobile station MS1.
In this embodiment, two scenarios that the base station 105 updates the traffic encryption key periodically are provided in the following. In the first scenario, the traffic encryption key is periodically updated by using multicast. First of all, the base station 105 encrypts a group key encryption key (GKEK), which is used to encrypt/decrypt the traffic encryption key, and transmits the encrypted GKEK to the first and second mobile stations MS1 and MS2 for updating via a primary management connection. The traffic encryption key is then broadcasted by the base station 105 to be transmitted to the first and second mobile stations MS1 and MS2 after being encrypted by the GKEK, and data is encrypted by the traffic encryption key and transmitted via a transport connection. Therefore, the problems caused by the prior art scheme can be solved in this embodiment. In addition, since the first and second mobile stations MS1 and MS2 share the same traffic encryption key, this means that security levels are identical when the data are transmitted through the uplink and downlink. Besides, because each relay station on the path does not obtain the GKEK, each relay station cannot decrypt the transmitted data. Accordingly, the communication system 100 in the present invention can support end-to-end security.
In the second scenario, instead of using the base station 105 to periodically update the traffic encryption key by multicast, the first and second mobile stations MS1 and MS2 actively issue requests to the base station 105 for updating the traffic encryption key. If one of the first and second mobile stations MS1 and MS2 notifies the base station 105 that the traffic encryption key is about to expire (the key update has to be done prior to the expiry of a used key), the base station 105 does not update the traffic encryption key immediately until the other of the first and second mobile stations MS1 and MS2 also notifies the base station 105 that the traffic encryption key is about to expire. The traffic encryption key shared by the first and second mobile stations MS1 and MS2 can therefore be updated simultaneously. To shorten the length of this specification, a sequence diagram related to an update of the traffic encryption key is omitted for brevity.
In order to achieve cross communication, in this embodiment, the relay device 110 (i.e. the relay station RS1), which has cross communication capability, includes a mapping table in which it is recorded that the first CID of the data is mapped into the second CID so that the relay device 110 can transfer the data of the first mobile station MS1 to the second mobile station MS2. In general, when configuring the first and second CIDs, the base station 105 often configures the first and second CIDs to become different; thus, the relay device 110 can map the first CID of the data into the second CID according to the mapping table, and then transfer the data from the first mobile station MS1 to the second mobile station MS2. In another example, in contrast, the base station 105 configures the first and second CIDs to become identical at connection setup, i.e., the uplink and downlink of the data both correspond to the same CID. In this example, the function of the above-mentioned mapping table is optional, and the relay device 110 can transmit the data to the second mobile station MS2 without modifying the first CID of the data since the first and second CIDs are identical.
Additionally, in another embodiment, a relay device can also be composed of two or more relay stations, such as a relay device 210 of a communication system 200 shown in FIG. 2. The number of relay stations included within a relay device is not meant to be a limitation of the present invention. Furthermore, since not all relay stations have cross communication capability as described in the present invention, relay station(s) having cross communication capability will be selected and a shortest transmission path will be determined first before transmitting data. The definition of the shortest transmission path can be defined as a path using minimum connection(s) for transmission, a path occupying minimum network bandwidth resource for transmission, or a path least easily causing network congestion during transmission, and so on; the definition of the shortest transmission path can be considered to become different in various conditions according to requirements of system designers. As described above, when the first mobile station MS1 requests to communicate with the second mobile station MS2, the communication systems 100/200 first seeks relay station(s) on the uplink which data of the first mobile station MS1 passes through. For instance, the communication system 100 shown in FIG. 1 seeks out the relay stations RS1, RS2, and RS3. The communication system 100/200 then seeks relay station(s) on the downlink of the data, e.g., the communication system 100 seeks out the relay stations RS1 and RS4. Subsequently, taking the embodiment shown in FIG. 1 as an example, the communication system 100 excludes relay stations without cross communication capability and only includes those having cross communication capability among candidate relay stations. Finally, the communication systems 100 and 200 can respectively select appropriate station(s) from candidate relay stations as each relay device in the above-mentioned embodiments according to the definition of the shortest transmission path formulated by system designers themselves. For instance, in FIG. 1, the relay station RS1 is selected as the relay device 110 of the first embodiment.
The base station 105 of the communication system 100 then configures related data transfer setting upon the relay station RS1.
Please refer to FIG. 3. FIG. 3 is a sequence diagram illustrating the base station 105 of FIG. 1 configuring the data transfer setting upon the relay = .
station RS1. In general, as shown in FIG. 3, after excluding the relay stations without cross communication capability, a relay station with cross communication capability, e.g. the relay station RS1, on the selected shortest transmission path issues a cross communication request command CC-REQ to the base station 105, and then the base station 105 determines whether to accept/reject the relay station RS1 for cross communication; i.e. the data transmission scheme for cross communication is still controlled by the base station 105. If the base station 105 accepts the cross communication request command CC-REQ, the base station 105 will issue a cross communication response command CC-RSP back to the relay station RS1. After the cross communication response command CC-RSP is received by the relay station RS1, the relay station RS1 returns an acknowledge command CC-ACK to the base station 105. After this, the relay station RS1 has been configured as the relay device 110, and the setting for the mapping table of the relay station has also been completed so that cross communication can be activated immediately. Of course, before the procedure of data transfer setting, the first mobile station MS1 and base station 105 need to communicate with each other via dynamic service addition (DSA) using three-way handshake. In order to simplify the specification, in FIG. 3, the DSA using three-way handshake is represented only by MS-initiated-DSA while DSA using three-way handshake between the base station 105 and second mobile station MS2 is represented by BS-initiated-DSA. Finally, it should be noted that the above-mentioned communication systems in the whole 2 specification all comply with the WIMAX communication standard; this, however, is not meant to be a limitation of the present invention.
Claims (11)
1. A communication system for transmitting data of a first mobile station to a second mobile station, comprising:
a base station, for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively, and for transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; and a relay device, coupled to the base station and the first and second mobile stations, for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station;
wherein the base station periodically updates the traffic encryption key shared by the first and second mobile stations; and, when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, the base station does not update the traffic encryption key until the other of the first and second mobile stations notifies that base station that the traffic encryption key is about to expire.
a base station, for configuring an uplink and a downlink of the data to correspond to a first connection ID and a second connection ID respectively, and for transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key; and a relay device, coupled to the base station and the first and second mobile stations, for receiving the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station;
wherein the base station periodically updates the traffic encryption key shared by the first and second mobile stations; and, when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, the base station does not update the traffic encryption key until the other of the first and second mobile stations notifies that base station that the traffic encryption key is about to expire.
2. The communication system of claim 1, wherein the first connection ID is identical to the second connection ID, and the base station configures the uplink and the downlink of the data to correspond to the same connection ID.
3. The communication system of claim 1, wherein the base station periodically actively updates the traffic encryption key shared by the first and second mobile stations by multicast to ensure that the traffic encryption key is not expired.
4. The communication system of claim 1, wherein the relay device is a relay station having a mapping table, the relay station is utilized for receiving the data and mapping the first connection ID of the data to the second connection ID by the mapping table, so as to transfer the data of the first mobile station to the second mobile station.
5. The communication system of claim 1, wherein the relay device comprises a plurality of relay stations, and the relay stations are utilized for receiving the data and transferring the data of the first mobile station to the second mobile station without going via the base station.
6. The communication system of claim 1, which complies with a worldwide interoperability for microwave access (WIMAX) communication standard.
7. A communication method for transmitting data of a first mobile station to a second mobile station, comprising:
providing a base station and utilizing the base station to configure an uplink and a downlink of the data to respectively correspond to a first connection ID
and a second connection ID, and transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key;
utilizing a relay device to receive the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station;
periodically updating the traffic encryption key shared by the first and second mobile stations; and when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, not updating the traffic encryption key until another of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire.
providing a base station and utilizing the base station to configure an uplink and a downlink of the data to respectively correspond to a first connection ID
and a second connection ID, and transmitting a traffic encryption key to the first and second mobile stations such that the first and second mobile stations share the traffic encryption key;
utilizing a relay device to receive the data encrypted by the traffic encryption key and transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs without going via the base station;
periodically updating the traffic encryption key shared by the first and second mobile stations; and when one of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire, not updating the traffic encryption key until another of the first and second mobile stations notifies the base station that the traffic encryption key is about to expire.
8. The communication method of claim 7, wherein the first connection ID
is identical to the second connection ID, and the step of configuring the uplink and the downlink of the data to respectively correspond to the first connection ID and the second connection ID comprises:
configuring the uplink and the downlink of the data to correspond to the same connection ID.
is identical to the second connection ID, and the step of configuring the uplink and the downlink of the data to respectively correspond to the first connection ID and the second connection ID comprises:
configuring the uplink and the downlink of the data to correspond to the same connection ID.
9. The communication method of claim 7, further comprising:
using the base station to periodically actively update the traffic encryption key shared by the first and second mobile stations by multicast to ensure that the traffic encryption key is not expired.
using the base station to periodically actively update the traffic encryption key shared by the first and second mobile stations by multicast to ensure that the traffic encryption key is not expired.
10. The communication method of claim 7, wherein the relay device is a relay station, and the step of transferring the data of the first mobile station to the second mobile station according to the first and second connection IDs comprises:
providing a mapping table, receiving the data and mapping the first connection ID of the data to the second connection ID by the mapping table, so as to transfer the data of the first mobile station to the second mobile station.
providing a mapping table, receiving the data and mapping the first connection ID of the data to the second connection ID by the mapping table, so as to transfer the data of the first mobile station to the second mobile station.
11. The communication method of claim 7, which complies with a worldwide interoperability for microwave access (WIMAX) communication standard.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CA2616445A CA2616445C (en) | 2007-12-24 | 2007-12-24 | Communication system and method for transmitting data of first mobile station to second mobile station without going via base station |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CA2616445A CA2616445C (en) | 2007-12-24 | 2007-12-24 | Communication system and method for transmitting data of first mobile station to second mobile station without going via base station |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CA2616445A1 CA2616445A1 (en) | 2009-06-24 |
| CA2616445C true CA2616445C (en) | 2015-10-20 |
Family
ID=40848312
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CA2616445A Active CA2616445C (en) | 2007-12-24 | 2007-12-24 | Communication system and method for transmitting data of first mobile station to second mobile station without going via base station |
Country Status (1)
| Country | Link |
|---|---|
| CA (1) | CA2616445C (en) |
-
2007
- 2007-12-24 CA CA2616445A patent/CA2616445C/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CA2616445A1 (en) | 2009-06-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8462953B2 (en) | Communication system and method thereof | |
| US11121862B2 (en) | System and method for wireless network access protection and security architecture | |
| EP3440865A1 (en) | Implementing radio access network slicing in a mobile network | |
| US20110222460A1 (en) | Synchronisation method between base stations, radio communication system and base station thereof | |
| CN110476446B (en) | Wireless telecommunication device and method | |
| KR101804033B1 (en) | A telecommunications method, telecommunications system, primary node, secondary node and user equipment | |
| EP3171635B1 (en) | Path switching method, mobile anchor point and base station | |
| WO2018202131A1 (en) | Communication method, device and system | |
| JP6169190B2 (en) | Traffic offload | |
| KR20210138067A (en) | Backhaul Channel Management for IAB Networks | |
| US20190230480A1 (en) | Apparatus and methods for transferring messages between networks | |
| CA2616445C (en) | Communication system and method for transmitting data of first mobile station to second mobile station without going via base station | |
| TW201438502A (en) | Communication station and communication device for interworking between different radio technologies with assistance information | |
| EP4274310A1 (en) | Network intercommunication method and apparatus | |
| TWI358918B (en) | Communication system and method thereof | |
| CN101471720A (en) | Communication system and correlation method thereof | |
| KR20240015104A (en) | Hybrid service quality flow | |
| WO2018058390A1 (en) | Data transmission method and apparatus |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| EEER | Examination request |