FI107865B - Method and arrangements for handling of messages in a telecommunication system - Google Patents

Description

107865 METHOD. AND A SYSTEM FOR PROCESSING MESSAGES IN A COMMUNICATION SYSTEM

FIELD OF THE INVENTION

The present invention relates to telecommunication 5 technology. More particularly, the invention relates to a method and system for encrypting and decrypting short messages in a mobile communication network and verifying a sender in a telecommunication system.

10 BACKGROUND OF THE INVENTION

Mobile networks, such as GSM (Global System for Mobile Communications) networks, use strong encryption on the radio path between a mobile station and a base station for voice transmission.

15 In addition to voice communication, text messaging via mobile devices has also increased. With the rise in service levels, services based on text messaging have become more common. Text-based communication can be utilized in a variety of service functions, payment for services, etc. At present, the potential encryption of messages is also hampered by the fact that the mobile phone according to the current mobile communication standard cannot be encrypted. : Toxic. The only component sufficiently standardized and capable of encryption is the subscriber identity module. . li (SIM, Subscriber Identity Module).

• Mobile phones that conform to current mobile communication standards, such as GSM • ···. * *, Do not, as such, provide the ability to encrypt 30 text-to-mobile communications. Text messaging. services that require a high level of security • ♦; * ♦ *. However, services requiring high security cannot become widespread until adequate encryption of • ♦ * ··· * nominal traffic is possible.

* * 35 Currently known solutions for mobile network ·: ··· closed user groups have been implemented based on, for example, mobile phone numbers. In these applications, the message is delivered separately to each person on the distribution list, regardless of location. The disadvantage is that there are significant differences in the delivery time between the first and last person on the distribution list when delivering messages.

At present, the problem of matkaviestinstandar-di message communications is that the 10-Lise by external parties is possible to find out the content of the textual message. A further problem is to encrypt messages related to various services so that the recipient can verify the identity of the sender. A further problem is the transmission of encrypted messages 15 to a closed recipient group in a specific area.

The object of the invention is to eliminate or at least significantly alleviate the above disadvantages.

In particular, it is an object of the present invention to provide a novel method and system for encrypting outgoing message traffic between mobile stations and / or between a mobile station and a service provider according to the current mobile standard and decoding *: 25 incoming message traffic. In addition, the method and system according to the invention enable the same. . sending and receiving downloaded messages to a closed group of recipients • · · · · · * in a specific area.

The features of the present invention are referred to in the claims.

• · • · · * · · ««

SUMMARY OF THE INVENTION

• · ·. · * ·. In the method according to the invention, the data transmission and / or transmission of a message is carried out by a telecommunications network. For authentication purposes in a telecommunication system, the proxy software includes applications and parameters of the encryption algorithm used. For example, the message is a Short Message Service (SMS) message according to the mobile communication standard.

In the method, the mobile station generates and transmits and receives messages via a message exchange center of a telecommunications network, stores the space and applications needed for the encryption and / or decryption algorithm used in the identity module. In addition, the method stores the encrypted and / or salt) loaded and / or decrypted and / or decrypted message on the subscriber identity module. The encryption algorithm may be, for example, an RSA algorithm or similar high security algorithm, the operation of which is obvious to one skilled in the art. Preferably, the telecommunication 15 system comprises a telecommunication network, a mobile station connected thereto and a subscriber identity module connected to the mobile station, a message relay center, a relay software connected to the relay center, and a service provider connected to the relay software. One preferred example of a mobile communication system is the GSM system.

According to the invention, a specific memory location of the subscriber identity module is monitored and a message encryption and / or decryption of the encrypted message 25 is initiated on the basis of a predetermined character string stored in a specific memory location of the subscriber identity module. basis. For example, the monitored memory location may be • * · *. * ADN (Abbreviated Dialing Number).

• · · '· *; * Messages stored in the subscriber identity module • · · *. * * 30 are triggered if, for example, "Name: Bank" and "No.: 12345" are stored in the ADN. The encryption algorithm on the subscriber • · - identity module performs the encryption of the message or messages and returns the encrypted ones .1. messages to SMS memory locations after you • ♦ • · · **. 35 messages have been restarted. The string that triggers message encryption and / or decryption can be automatically · ·: * · removed from the subscriber identity module.

··· ♦ · • · 4 107865 This provides a sort of security feature. Now, the string initiating encryption and / or decryption does not accidentally remain in the ADN slot. Messages stored and received in the subscriber identity module can also be automatically encrypted or decrypted.

The encrypted message can also be forwarded only to a closed user group within a predetermined area. Decryption is only possible if the recipient has the required encryption key for the message pur-10 months. It is possible to use, for example, CB (Cell Broacast), which is part of the mobile communication standard. The message transmission step defines the region to which the message is to be delivered. Since the message is transmitted to the recipients using regional mobile communication technology, all users receive the message simultaneously. If a member of a Closed User Group is not within a designated area, no information will be transmitted to him. The invention is suitable, for example, for the construction of loyal customer concepts in applications where certain information is to be transmitted only to the desired group.

According to the invention, the user of a mobile station may send a service request as a message. The relay software receives the necessary information from the service provider and; *. Φ; 25 invokes an encryption and / or decryption routine which encrypts and / or decrypts the message from the service provider and forwards the encrypted and / or decrypted message to the message exchange and then to the mobile station.

The system of the invention includes means for monitoring a specific memory location of a subscriber identity module and means for initiating decryption and / or decryption of an encrypted message based on a predetermined character stored in a subscriber identity module. .

• · '*. Preferably, the system includes means for automatically deleting a subscriber identifier that initiates the same encryption and / or decryption from the subscriber identities. In addition, the system includes means for transmitting the message only to a closed user group within a defined area. Preferably, the user group has means for decrypting the encrypted message.

According to the invention, the switching software includes means for calling an encryption and / or decryption routine to encrypt and / or decrypt a message from the service provider and means for forwarding the encrypted and / or decrypted message 10 to the message relaying center and further to the mobile station.

Preferably, the subscriber identity module includes means for automatically encrypting and decrypting messages stored and received on the subscriber identity module.

The invention also relates to a subscriber identity timing module. It includes a data processing device, a memory device connected to a data processing device, and a data transfer device connected to a data processing device. In addition, the subscriber identity module is provided with an interface for transferring information between the mobile station and the subscriber identity module. The subscriber identity module includes: * · *: means for monitoring a specific memory location of the subscriber identity module, and means for initiating • and / or decrypting the message. • · * · * · * based on a predefined string stored in a specific memory location of the subscriber identity module.

An advantage of the present invention over the prior art is that it enables digital signature, encryption and decryption of messages. This enables reliable identification of the sender of the message. In addition, thanks to the invention • · ***. Many users in a predetermined area can be reached simultaneously without the network being loaded:: * ·: Members of this closed user group can get • · • ·

M1 6 107865 contains only relevant information relating to that time and area. A further advantage of the invention is that the message traffic between the service provider and the mobile station can be encrypted and at the same time the correctness of the information is verified.

LIST OF FIGURES

In the following, the invention will be described in detail with the aid of exemplary embodiments, wherein Figure 1 illustrates a preferred communication system according to the invention, Figure 2 illustrates a preferred subscriber identity module according to the invention, Figure 3 illustrates a preferred subscriber Fig. 5 shows a preferred example of message encryption, and Fig. 6 is a block diagram of a preferred embodiment of message encryption between a client and a content provider.

DETAILED DESCRIPTION OF THE INVENTION

1 2 3 25 The communication system shown in Fig. 1 comprises a communication network 1, which is organized. ie short message capability (SMS) in accordance with the mobile communication standard. Other s anoma types, such as USSD (Unstructured Service Data) messages, may also be used. Furthermore, WAP (WAP, Wireless Application Protocol) can be used instead of SMS messages.

• ♦

Preferably, the communication network is a GSM network, but other mobile networks such as UMTS (UMTS, Universal Mobile Telecommunication Standard) can be used.

t 35 A mobile station 2 is connected to the mobile communication network 1, which in turn is connected to a subscriber identity identity SIM card. In addition, the message transmission center 3 is connected to the mobile communication network 1, which may be, for example, a short message service center SM-SC (SM-SC) in the GSM system. The message relaying center 35 includes means 9 for transmitting a message only to a closed user group within a predetermined area.

Connected to the message relaying center 3 is a relay software 4 including means 11 for calling the encryption 10 and / or decryption routine to process the message received from the service provider 5. It further comprises means 12 for forwarding the encrypted and / or decrypted message to the message relaying center 3 and further to the mobile station 2. The system further comprises a service provider 5. The service provider 5 may be, for example, a bank.

A preferred subscriber identity module SIM according to Fig. 2 includes a data processing device 14, a memory device 15 connected to a data processing device 14 and a communication device 16 connected to a data processing device 14. In addition, the subscriber identity module SIM is provided with an interface RP for transmitting mobile station information; : * · 2 to the subscriber identity module SIM.

*: 25 Preferably, the subscriber identity module SIM

* · · Includes means 6 for SIM subscriber identity module. . • · ♦ *. * man encryption and / or decryption of the encrypted message • · ·

***** to start subscriber identity module SIM

• · · * · * * Based on a predefined string stored in 30 specific locations. In addition, subscriber identity -:: ·. the module includes means for decrypting 8 messages and / or • ·: * · *: decoding triggering au- .1. possibly from the subscriber identity module SIM. Edel- • ♦ ** · *. It includes means for automatically encrypting and decrypting words stored and received in the subscriber identity module SIM.

• ·· • * ♦ · · «· 8 107865

The means 6 to 16 of Figure 1 and 2 are implemented in a manner known per se and are therefore not described in further detail.

Figure 3 shows a preferred example 5 of a subscriber identity module SIM according to the present invention. The subscriber identity module SIM is connected to a terminal, which in this example is a mobile station ME according to the GSM standard. The application program in the DFx directory waits for a predetermined string code to be stored at a specific location in the specified DF directory in the EFadn file. In this case, the EF application will download the short messages contained in the EFsms file in the DF directory and process them as desired. Finally, the program returns the processed short messages back to the EFsms file. The communication between the mobile station ME and the subscriber identity module SIM is in accordance with the GSM standard.

The system shown in Figure 4 includes a sender, a sender application, and a network application. 20 In addition, the system includes a recipient end application and a closed recipient group. In this case, "sender" means a person and / or equipment and / or application that sends messages in accordance with the invention. The message may be, for example, an SMS «. * ·, · 25 message or a USSD message. The application of the sender and receiver • · is a functional entity that includes; includes both the physical hardware and its associated · · * I application software. In this example, the physical device includes a cellular phone, the associated account identity module 30, and a possible parallel subscriber identity module, such as a GSM external smart card. Application software: T: To be located either in the mobile phone and / or the subscriber identity module and / or the subscriber identity module or a system connected thereto. Application software can be distributed between different parts of the physical *: * system.

• ·· • · • · 9 107865

Area receiver means a person and / or equipment and / or application that receives area messages in accordance with the invention. In order to receive messages, mobile users in the area need sufficient hardware and software configuration. This configuration consists of physical hardware and associated application software. The principle is similar to that of the sender head application, but there may be differences in actual configuration and functionality.

The network application is a functional entity that communicates with the sender head application. A network application may refer to service platforms that include physical hardware and software. The network application may, for example, consist of a short message service center or a Cell Broadcast service center and / or associated systems and interfaces, etc. The main functions of the network application include receiving messages from the sending end application, routing messages to regional message control centers and sending messages to ... In an alternative solution, · · · *, the sending of messages can be accomplished using other than · · · * · '· 25 wireless technologies. Messages can be forwarded to a network application using, for example, data transmission networks such as TCP / IP (Transmission Control li / · Protocol; IP, Internet Protocol) or X.25.

· 1: 1: The following refers to the numbering shown in Figure 4.

41. The sender writes a message, selects • «·“ a closed user group and announces • · · *. want to send a message.

• · · 42. The sender end application encrypts the message with its *: 2 3i 35 expression key and sends the message to the network application.

3 10 107865 43. The network application forwards the message to a closed recipient group. The network does not comment on the content of the message or its encryption, but transmits the message transparently.

44. The recipient end applications of the closed recipient group users in the area decrypt. Recipients read the message in plain language.

Figure 5 illustrates a procedure for encrypting a message, for example an SMS-10 message. In block 51, the user stores the short message (s) on the subscriber identity module. In block 52, the user writes a predefined string for encryption or decryption in the Name section of the memory location, which in this example-15 cat is a "bank". At the no, the user writes "12345". These strings act as a trigger for encrypting or decrypting a message.

The next block 53 checks whether the strings stored in the memory location require encryption or decryption of the sa-20 messages. If not, it returns to block 52. If the stored string acts as a trigger for encryption or decryption, it proceeds to block 54. In block 54, it is still checked to see if I ·. • · · * '* 25 messages stored in the subscriber identity module for retrieval or decryption. If not, '' returns to block 52. If messages are processed by the subscriber identity module • · ·. **: they are loaded according to block 55 *. In block 56, the stored message is processed in the desired manner and with the required algorithm. For example, an RSA algorithm or other similar high data security algorithm can be used as the encryption algorithm. Finally, according to block 57, the encrypted or decrypted message is restored to the EFsms file according to Figure · ... * 1.

* · *** · 35 Figure 6 shows the message progress when a service request is sent from the mobile station to the service provider. The customer sends (61) a request for • • ♦ ··· 11 107865 information to the mobile user. The SM-SC forwards (62) the request to the switching software. The broker software modifies the request in a format understood by the service provider and forwards it (63) to the service provider 5. The service provider sends (64) the information it produces back to the relay software. The switching software calls (65) an encryption routine that encrypts the information using an agreed service provider-related secret key and forwards (66,67) the encrypted 10 messages to the SM-SC exchange using the telephone number associated with the sender-bird Merona secret key. The encryption routine may be part of the proxy software or may be located in its own functional unit, such as a server. The SM-SC forwards (68) the message to the mobile 15 users. The message is identified as coming from a trusted phone number and messages coming from are retrieved using the public key associated with that phone number. The mobile station displays the message in such a way as to verify authenticity, for example, 20 "Message from Inbox. Read?". The above example is applicable in both directions instead of the one-way implementation described.

The invention is not limited only by the above- • · ♦ *. While many other modifications are possible, the invention is possible within the scope of the inventive idea defined by the claims.

· • · ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ ♦ «« « · · · • «« •

Claims (19)

A method for encrypting a message of a telecommunications network (1) and / or verifying a sender of a message in a communication system comprising a telecommunications network (1), a connected mobile station (2) and a subscriber identity module (SIM) connected to the mobile station (2). a combined message switching center (3), a switching software (4) connected to a message switching center, and a service provider (5) associated with a switching software, the method comprising the applications and parameters of the encryption algorithm used to generate and transmit and receive messages by means of the message exchange center (3) of the communication network (1), storing the applications and parameters needed for the ciphering and / or decryption algorithm used in the wide identity module (SIM) and storing the message to be processed in the subscriber identity module (SIM); to monitor a specific memory location of the subscriber identity module (SIM) and initiate message encryption and / or decryption of the encrypted message to a specific memory location of the subscriber identity module (SIM) based on a predetermined string of 25 characters. Method according to Claim 1, characterized in that the string initiating the encryption and / or decryption of the message is automatically removed from the subscriber identity module (SIM). ... 30 A method according to claims 1 and 2, characterized in that a closed user group is formed having a user-specific lock: * · *: a decryption key. A method according to claims 1-3, 35, characterized in that the message is transmitted to a closed user group only * within a predetermined area. 13 107865 A method according to claims 1-4, characterized in that the switching software (4) calls an encryption and / or decryption routine that encrypts and / or decrypts the message 5 from the service provider (5) and forwards the encrypted and / or decrypted message to the message switching center. (3) and then to the mobile station (2). Method according to claims 1-5, characterized in that the message is a Short Message Service (SMS) according to the mobile communication standard. A method according to claims 1-6, characterized in that the memory location on the subscriber identity module (SIM) is an ADN-15 memory location. A method according to claims 1-7, characterized in that messages stored and received in the Subscriber Identity Module (SIM) are automatically encrypted and decrypted. Method according to claims 1-8, characterized in that a message is sent to a closed predetermined group of recipients • · · I. using CB (CB, Cell Broadcast). • · · ** * | A system for encrypting a message from a telecommunications network (1) and / or certified by the sender of the message. * in a telecommunication system comprising a communications network (1), a mobile station (2) ΓΓ connected thereto, and a subscriber identity module (SIM) connected to a mobile station (2), connected to a telecommunication network (1). 30 message relay center (3), message relay center • · ·. ···. a combined broker software (4), means (6) for hacking a specific storage location of a subscriber identity module (SIM) · ♦ ·: *. *, and a service provider (5) connected to the broker software, . . ·. The system (4) includes applications and parameters of the encryption algorithm to be used, in which system the mobile station (2) generates, transmits and receives messages via the communication center (3) of the communication network (1), stores the subscriber identities. applications and parameters needed for the encryption and / or decryption algorithm used for the SIM module and if the system is storing the message to be processed on the Subscriber Identity Module (SIM), characterized in that the system comprises means (7) for encrypting and / or for initiating decryption of an encrypted message based on a predetermined string stored in a particular memory location of the space-10 identity module (SIM). System according to Claim 10, characterized in that the system comprises means (8) for automatically decrypting the string initiating the encryption and / or decryption of the message from the Subscriber Identity Module (SIM). System according to claims 10 and 11, characterized in that the system comprises means (9) for transmitting the message to only 20 closed user groups in a predetermined area. 12 107865 A system according to claims 10 to 12, characterized in that the system comprises means (10) for encrypting the user group. 25 man to unload. • · · * · * ϊ System according to claims 10 to 13, characterized in that the switching software (4) comprises means (11) for calling an encryption and / or decryption routine from the service provider (5). encryption and / or decryption of 30 incoming messages and means ·· m. * · *. (12) for transmitting the encrypted and / or decrypted message to the message exchange center (3) and then to the mobile station (2). ··· * ... · 15. The system of claims 10-14. 35, characterized in that the system includes means (13) for automatically encrypting and decrypting messages stored and received in the subscriber identity module • · 107865 (SIM). The system according to claims 10 to 15, characterized in that the encryption algorithm 5 is an RSA algorithm or other acceptable high security encryption algorithm. A subscriber identity module (SIM) comprising a data processing device (14), a memory device (15) connected to a data processing device (14), means (6) for monitoring a specific memory location of a subscriber identity module (SIM) and a communication device (16) connected to a data processing device 14) and provided with an interface (RP) for transferring information between the mobile station (2) and the state-identity module (SIM), characterized in that the subscriber identity module (SIM) comprises means (7) for initiating message encryption and / or decryption (SIM) based on a predetermined string stored in a particular memory location 20. The subscriber identity module (SIM) according to claim 17, characterized in that • «·. the subscriber identity module (SIM) includes means (8) • ♦♦ * * for automatically removing a message string that initiates encryption and / or decryption of the message from the subscriber identity module (SIM). • · V: The broad identity module (SIM) according to claims 17 and 18, characterized in that the subscriber identity module (SIM) comprises intermediate: ***: 30 subscribers (13) stored in the subscriber identity module (SIM). ·. * ♦ ·. automatically encrypt and decrypt received and received messages. •••••••••••••••••••••••••• 107865 16