CN107852601B - 用于具有上下文的网络架构和安全性的方法和装置 - Google Patents

用于具有上下文的网络架构和安全性的方法和装置 Download PDF

Info

Publication number
CN107852601B
CN107852601B CN201680040888.9A CN201680040888A CN107852601B CN 107852601 B CN107852601 B CN 107852601B CN 201680040888 A CN201680040888 A CN 201680040888A CN 107852601 B CN107852601 B CN 107852601B
Authority
CN
China
Prior art keywords
client device
network
context
encrypted
key
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201680040888.9A
Other languages
English (en)
Chinese (zh)
Other versions
CN107852601A (zh
Inventor
S·B·李
G·B·霍恩
A·帕拉尼格朗德
A·E·艾斯科特
S·法琴
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Qualcomm Inc
Original Assignee
Qualcomm Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qualcomm Inc filed Critical Qualcomm Inc
Priority to CN202110491667.6A priority Critical patent/CN113194467B/zh
Publication of CN107852601A publication Critical patent/CN107852601A/zh
Application granted granted Critical
Publication of CN107852601B publication Critical patent/CN107852601B/zh
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03—Protecting confidentiality, e.g. by encryption
    • H04W12/033—Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03—Protecting confidentiality, e.g. by encryption
    • H04W12/037—Protecting confidentiality, e.g. by encryption of the control plane, e.g. signalling traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/041—Key generation or derivation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/70—Services for machine-to-machine communication [M2M] or machine type communication [MTC]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W40/00—Communication routing or communication path finding
    • H04W40/02—Communication route or path selection, e.g. power-based or shortest path routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W68/00—User notification, e.g. alerting and paging, for incoming communication, change of service or the like
    • H04W68/005—Transmission of information for alerting of incoming communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0457—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Information Transfer Between Computers (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Telephonic Communication Services (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
CN201680040888.9A 2015-07-12 2016-06-13 用于具有上下文的网络架构和安全性的方法和装置 Active CN107852601B (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110491667.6A CN113194467B (zh) 2015-07-12 2016-06-13 用于具有上下文的网络架构和安全性的方法和装置

Applications Claiming Priority (7)

Application Number Priority Date Filing Date Title
US201562191457P 2015-07-12 2015-07-12
US62/191,457 2015-07-12
US201662320506P 2016-04-09 2016-04-09
US62/320,506 2016-04-09
US15/160,198 US10091649B2 (en) 2015-07-12 2016-05-20 Network architecture and security with encrypted client device contexts
US15/160,198 2016-05-20
PCT/US2016/037279 WO2017039777A2 (en) 2015-07-12 2016-06-13 Network architecture and security with encrypted client device contexts

Related Child Applications (1)

Application Number Title Priority Date Filing Date
CN202110491667.6A Division CN113194467B (zh) 2015-07-12 2016-06-13 用于具有上下文的网络架构和安全性的方法和装置

Publications (2)

Publication Number Publication Date
CN107852601A CN107852601A (zh) 2018-03-27
CN107852601B true CN107852601B (zh) 2021-05-14

Family

ID=57731698

Family Applications (2)

Application Number Title Priority Date Filing Date
CN202110491667.6A Active CN113194467B (zh) 2015-07-12 2016-06-13 用于具有上下文的网络架构和安全性的方法和装置
CN201680040888.9A Active CN107852601B (zh) 2015-07-12 2016-06-13 用于具有上下文的网络架构和安全性的方法和装置

Family Applications Before (1)

Application Number Title Priority Date Filing Date
CN202110491667.6A Active CN113194467B (zh) 2015-07-12 2016-06-13 用于具有上下文的网络架构和安全性的方法和装置

Country Status (10)

Country Link
US (2) US10091649B2 (enExample)
EP (2) EP3429246B1 (enExample)
JP (2) JP6692886B2 (enExample)
KR (1) KR102441359B1 (enExample)
CN (2) CN113194467B (enExample)
AU (1) AU2016318200B2 (enExample)
BR (1) BR112018000640B1 (enExample)
ES (2) ES2837845T3 (enExample)
TW (1) TWI733675B (enExample)
WO (1) WO2017039777A2 (enExample)

Families Citing this family (50)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10091649B2 (en) 2015-07-12 2018-10-02 Qualcomm Incorporated Network architecture and security with encrypted client device contexts
US10097995B2 (en) 2015-07-12 2018-10-09 Qualcomm Incorporated Network architecture and security with encrypted network reachability contexts
EP3449610A1 (en) * 2016-04-29 2019-03-06 Nec Corporation Method of enabling slice security separation
US20190199521A1 (en) * 2016-08-11 2019-06-27 Ian L. Sayers Method and apparatus for secure access to a sensor or device network
US11030618B1 (en) 2016-09-30 2021-06-08 Winkk, Inc. Authentication and personal data sharing for partner services using out-of-band optical mark recognition
US20180097807A1 (en) * 2016-09-30 2018-04-05 Lg Electronics Inc. Method and apparatus for performing initial access procedure based on authentication in wireless communication system
CN109792434B (zh) * 2016-10-10 2021-02-26 华为技术有限公司 一种通信方法、安全节点网元和终端
CN111885642B (zh) 2016-11-02 2022-06-10 中兴通讯股份有限公司 切换方法及装置
CN108347416B (zh) * 2017-01-24 2021-06-29 华为技术有限公司 一种安全保护协商方法及网元
WO2018138379A1 (en) * 2017-01-30 2018-08-02 Telefonaktiebolaget Lm Ericsson (Publ) Methods for integrity protection of user plane data
US10542463B2 (en) * 2017-02-05 2020-01-21 Nokia Of America Corporation System and method for secure cell redirection in wireless networks
US10687212B2 (en) * 2017-04-07 2020-06-16 At&T Mobility Ii Llc Mobile network core component for managing security keys
US10959247B2 (en) * 2017-06-08 2021-03-23 Qualcomm Incorporated Transmission of uplink control information in new radio
CN109391963B (zh) * 2017-08-11 2022-03-11 华为技术有限公司 一种传输方法和网络设备
KR102404617B1 (ko) * 2017-11-22 2022-05-31 지티이 코포레이션 효율적인 제어 시그널링 방법 및 시스템
US11272359B2 (en) 2018-04-05 2022-03-08 Telefonaktiebolaget Lm Ericsson (Publ) Configuring radio resources
MX2020010809A (es) * 2018-04-16 2020-10-28 Ericsson Telefon Ab L M Manejo de seguridad para reanudacion de rrc desde estado inactivo.
WO2020018454A1 (en) 2018-07-16 2020-01-23 Islamov Rustam Cryptography operations for secure post-quantum communications
EP3609149A1 (en) 2018-08-08 2020-02-12 Nokia Technologies Oy Method and apparatus for security management in 5g networks
EP3864890A4 (en) 2018-10-09 2022-05-18 Lenovo (Beijing) Limited DEVICE INFORMATION IN A CONTEXT ESTABLISHMENT REQUEST
US11563676B2 (en) * 2019-08-16 2023-01-24 Nokia Technologies Oy Method and apparatus for universal integrated circuit card update via dedicated network function
US12126994B2 (en) * 2019-10-04 2024-10-22 Qualcomm Incorporated User plane integrity protection (UP IP) capability signaling in 5G/4G systems
US12335399B2 (en) 2019-12-10 2025-06-17 Winkk, Inc. User as a password
US12132763B2 (en) 2019-12-10 2024-10-29 Winkk, Inc. Bus for aggregated trust framework
US12143419B2 (en) 2019-12-10 2024-11-12 Winkk, Inc. Aggregated trust framework
US11652815B2 (en) * 2019-12-10 2023-05-16 Winkk, Inc. Security platform architecture
US11928193B2 (en) 2019-12-10 2024-03-12 Winkk, Inc. Multi-factor authentication using behavior and machine learning
US11563582B2 (en) 2019-12-10 2023-01-24 Winkk, Inc. Method and apparatus for optical encryption communication using a multitude of hardware configurations
US11936787B2 (en) 2019-12-10 2024-03-19 Winkk, Inc. User identification proofing using a combination of user responses to system turing tests using biometric methods
US11657140B2 (en) 2019-12-10 2023-05-23 Winkk, Inc. Device handoff identification proofing using behavioral analytics
US11574045B2 (en) 2019-12-10 2023-02-07 Winkk, Inc. Automated ID proofing using a random multitude of real-time behavioral biometric samplings
US12341790B2 (en) 2019-12-10 2025-06-24 Winkk, Inc. Device behavior analytics
US11553337B2 (en) 2019-12-10 2023-01-10 Winkk, Inc. Method and apparatus for encryption key exchange with enhanced security through opti-encryption channel
US12073378B2 (en) 2019-12-10 2024-08-27 Winkk, Inc. Method and apparatus for electronic transactions using personal computing devices and proxy services
US12153678B2 (en) 2019-12-10 2024-11-26 Winkk, Inc. Analytics with shared traits
US11588794B2 (en) * 2019-12-10 2023-02-21 Winkk, Inc. Method and apparatus for secure application framework and platform
US11328042B2 (en) 2019-12-10 2022-05-10 Winkk, Inc. Automated transparent login without saved credentials or passwords
US11303558B2 (en) * 2020-01-08 2022-04-12 Cisco Technology, Inc. Ultra-reliable low latency communications (URLLC) support for wireless access
CN113765950B (zh) 2020-06-02 2023-11-14 富泰华工业（深圳）有限公司 物联网设备、服务器及软件更新方法
TWI754950B (zh) * 2020-06-02 2022-02-11 鴻海精密工業股份有限公司 物聯網設備、伺服器及軟體更新方法
WO2022045332A1 (ja) * 2020-08-31 2022-03-03 日本電気株式会社 中継装置、端末及び中継方法
EP4278857A4 (en) * 2021-01-14 2025-01-22 Lenovo (Beijing) Limited Method and apparatus for data transmission processing
EP4278636A1 (en) * 2021-01-15 2023-11-22 Telefonaktiebolaget LM Ericsson (publ) First node, second node, third node and methods performed thereby, for handling encrypted traffic in a communications network
TWI760240B (zh) * 2021-05-28 2022-04-01 國立臺灣科技大學 認證授權外掛系統
US11843943B2 (en) 2021-06-04 2023-12-12 Winkk, Inc. Dynamic key exchange for moving target
US12095751B2 (en) 2021-06-04 2024-09-17 Winkk, Inc. Encryption for one-way data stream
US11824999B2 (en) 2021-08-13 2023-11-21 Winkk, Inc. Chosen-plaintext secure cryptosystem and authentication
KR102406252B1 (ko) * 2021-12-13 2022-06-08 주식회사 유니온플레이스 데이터의 보안 통신 방법
EP4445603A4 (en) * 2022-01-03 2025-03-12 Samsung Electronics Co., Ltd. Method and apparatus for selective user-level security in a wireless communication system
US12395353B2 (en) 2022-09-21 2025-08-19 Winkk, Inc. Authentication process with an exposed and unregistered public certificate

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103297958A (zh) * 2012-02-22 2013-09-11 华为技术有限公司 建立安全上下文的方法、装置及系统
EP2804441A1 (en) * 2013-05-15 2014-11-19 Alcatel Lucent Network nodes and methods
CN104272671A (zh) * 2012-05-10 2015-01-07 三星电子株式会社 数据分组的上行链路和下行链路期间的无连接传输的方法和系统

Family Cites Families (31)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US136423A (en) * 1873-03-04 Improvement in bottle-washers
US7360075B2 (en) 2001-02-12 2008-04-15 Aventail Corporation, A Wholly Owned Subsidiary Of Sonicwall, Inc. Method and apparatus for providing secure streaming data transmission facilities using unreliable protocols
US6771962B2 (en) * 2001-03-30 2004-08-03 Nokia Corporation Apparatus, and an associated method, by which to provide temporary identifiers to a mobile node involved in a communication handover
US7020645B2 (en) 2001-04-19 2006-03-28 Eoriginal, Inc. Systems and methods for state-less authentication
GB0619499D0 (en) 2006-10-03 2006-11-08 Lucent Technologies Inc Encrypted data in a wireless telecommunications system
WO2008152611A1 (en) 2007-06-15 2008-12-18 Nokia Corporation Apparatus, method and computer program product providing transparent container
US9276909B2 (en) 2008-08-27 2016-03-01 Qualcomm Incorporated Integrity protection and/or ciphering for UE registration with a wireless network
EP2317822A1 (en) 2009-10-29 2011-05-04 Panasonic Corporation Enhancement of the attachement procedure for re-attaching a UE to a 3GPP access network
CN102065417B (zh) 2009-11-16 2014-02-19 华为技术有限公司 实现安全上下文信息同步的方法、设备及系统
US9084110B2 (en) * 2010-04-15 2015-07-14 Qualcomm Incorporated Apparatus and method for transitioning enhanced security context from a UTRAN/GERAN-based serving network to an E-UTRAN-based serving network
JP5795055B2 (ja) * 2010-04-15 2015-10-14 クアルコム，インコーポレイテッド セッション暗号化および完全性キーのために拡張セキュリティコンテキストを通知するための装置および方法
SG184878A1 (en) * 2010-04-16 2012-11-29 Qualcomm Inc Apparatus and method for transitioning from a serving network node that supports an enhanced security context to a legacy serving network node
CN103120015B (zh) * 2010-10-01 2019-03-08 诺基亚通信公司 无线电资源控制连接释放消息等待计时器
CN102594555B (zh) 2011-01-17 2015-04-29 华为技术有限公司 数据的安全保护方法、网络侧实体和通信终端
WO2012134218A2 (ko) 2011-03-31 2012-10-04 엘지전자 주식회사 무선 통신 시스템에서 단말이 네트워크와의 보안 설정 방법 및 이를 위한 장치
EP2702741B1 (en) 2011-04-27 2015-10-14 Telefonaktiebolaget L M Ericsson (publ) Authenticating a device in a network
WO2012175664A2 (en) 2011-06-22 2012-12-27 Nec Europe Ltd. Energy awareness in mobile communication user equipment and networks, including optimizations based on state compression
WO2013024435A1 (en) 2011-08-15 2013-02-21 Renesas Mobile Corporation Keeping a security context during mode changes for machine - to -machine communications
US8687556B2 (en) 2011-11-18 2014-04-01 Cisco Technology, Inc. Method for correlating connection information with mobile device identity
US9276810B2 (en) * 2011-12-16 2016-03-01 Futurewei Technologies, Inc. System and method of radio bearer management for multiple point transmission
US20130298209A1 (en) * 2012-05-02 2013-11-07 Interdigital Patent Holdings, Inc. One round trip authentication using sngle sign-on systems
JP6209595B2 (ja) 2012-05-11 2017-10-04 インターデイジタル パテント ホールディングス インコーポレイテッド コンテキストアウェアピアツーピア通信
US20150092696A1 (en) * 2012-05-21 2015-04-02 Nokia Corporation Method and apparatus for managing radio bearer for user equipment
CN103929740B (zh) * 2013-01-15 2017-05-10 中兴通讯股份有限公司 数据安全传输方法及lte接入网系统
EP2757856B1 (en) 2013-01-17 2023-11-08 Alcatel Lucent Optimization of context and/or connection management in a mobile communication system
US8781502B1 (en) * 2013-02-01 2014-07-15 Swirl Networks, Inc. Systems and methods for display of supplemental content responsive to location
US9585134B2 (en) * 2013-12-13 2017-02-28 Sharp Kabushiki Kaisha Systems and methods for multi-connectivity operation
US9444819B2 (en) 2014-01-16 2016-09-13 International Business Machines Corporation Providing context-based visibility of cloud resources in a multi-tenant environment
US9497624B2 (en) * 2014-10-30 2016-11-15 Alcatel-Lucent Usa Inc. Connectionless wireless access
US10091649B2 (en) 2015-07-12 2018-10-02 Qualcomm Incorporated Network architecture and security with encrypted client device contexts
US10097995B2 (en) 2015-07-12 2018-10-09 Qualcomm Incorporated Network architecture and security with encrypted network reachability contexts

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103297958A (zh) * 2012-02-22 2013-09-11 华为技术有限公司 建立安全上下文的方法、装置及系统
CN104272671A (zh) * 2012-05-10 2015-01-07 三星电子株式会社 数据分组的上行链路和下行链路期间的无连接传输的方法和系统
EP2804441A1 (en) * 2013-05-15 2014-11-19 Alcatel Lucent Network nodes and methods

Also Published As

Publication number Publication date
WO2017039777A2 (en) 2017-03-09
ES2835056T3 (es) 2021-06-21
EP3429246A3 (en) 2019-04-10
BR112018000640B1 (pt) 2023-12-19
EP3429246A2 (en) 2019-01-16
US20180332469A1 (en) 2018-11-15
CN113194467B (zh) 2024-12-10
WO2017039777A3 (en) 2017-06-15
US10091649B2 (en) 2018-10-02
EP3320710B1 (en) 2020-09-02
US11172357B2 (en) 2021-11-09
KR20180030034A (ko) 2018-03-21
US20170013453A1 (en) 2017-01-12
TW201705781A (zh) 2017-02-01
JP2020129805A (ja) 2020-08-27
CN113194467A (zh) 2021-07-30
JP2018526869A (ja) 2018-09-13
EP3429246B1 (en) 2020-09-16
CN107852601A (zh) 2018-03-27
BR112018000640A2 (pt) 2018-09-18
JP6928143B2 (ja) 2021-09-01
TWI733675B (zh) 2021-07-21
AU2016318200A1 (en) 2017-12-07
AU2016318200B2 (en) 2020-09-10
JP6692886B2 (ja) 2020-05-13
KR102441359B1 (ko) 2022-09-06
ES2837845T3 (es) 2021-07-01
EP3320710A2 (en) 2018-05-16

Similar Documents

Publication Publication Date Title
US12010107B2 (en) Network security architecture
JP6928143B2 (ja) 暗号化されたクライアントデバイスコンテキストを用いたネットワークアーキテクチャおよびセキュリティ
US20200220850A1 (en) Network architecture and security with simplified mobility procedure
US10097995B2 (en) Network architecture and security with encrypted network reachability contexts

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant