TH25980B - Methods and equipment for encryption of radio communications in telecommunication networks. - Google Patents

Abstract

The DC60 (21/10/47) covered telecommunication networks provide a cryptographic connection between the networks. Service and its tenants, when communication is initiated between the leased communication endpoint and the covered network The terminal device will Compare the stored network identity pointers associated with the stored public keys. Along with the identity pointer that Like no other to broadcast by That network, if compatibility is found The endpoint then generates a random key, encrypting the secret with the stored public key. The secret key that has been encrypted is sent to the entire telecommunications network to decrypt the secret key using the key. The private notification associated with the public key, the secret key has been It is thereafter used by all endpoints and covered networks to encrypt and decrypt the resulting shielding radio communications. Have communicated at Can be secured with the terminal equipment without even knowing the identity of Terminal device The entire telecommunication network provides an encrypted connection between the networks. Service and its tenants, when communication is initiated between the leased communication endpoint and the covered network The terminal device will Compare the stored network identity pointers associated with the stored public keys. Along with the identity pointer that Like no other to broadcast by That network, if compatibility is found The endpoint then generates a random key, encrypting the secret with the stored public key. The secret key that has been encrypted is sent to the entire telecommunications network to decrypt the secret key using the key. The private notification associated with the public key, the secret key has been It is thereafter used by all endpoints and covered networks to encrypt and decrypt the resulting shielding radio communications. Have communicated at Can be secured with the terminal equipment without even knowing the identity of Terminal device

Claims (6)

1.Methods for encrypting communications between mobile communication networks and Communication terminal which consists of the following steps: Public key collection and associated first characteristic pointer. With mobile communication network As mentioned at the terminal Communicate such A comparison of the first such identity pointer, which was obtained Keeping at the terminal Communicate it with the pointer A second identity obtained from the aforementioned mobile network, the creation of a secret key at the communication terminal when Unique pointer number one with The second identity pointer Encrypting the secret key with the public key that is stored Recorded at the terminal Communicate such Signaling the such encrypted secret key from the terminal Such communication Obtaining the said key at the said mobile network Decryption of the encrypted secret key obtained with the private key. Binds to that public key, encrypting the communication with that secret key and maintaining that crypto communication between the media network. Such moving substances and Such communication terminal When the mobile communication network does not know the identity of the said communication terminal 2. Method according to claim 1, the record-keeping process The public key contains Previous procedure for keeping public keys 3. Method according to claim 1 which also includes a procedure Key signaling Such public from the communication network It moves them when the public key is requested from Such communication terminal 4. Method according to Clause 3, the procedure for submitting a contract Public key also Consists of the process of transmitting information signals to Confirm the authenticity of the public key 5. Method according to Clause 3, which the comparison process. Also contains steps Loud transmission of public key requests According to the communication terminal, when the first identity pointer is not matched with the second identity pointer 6. Method according to claim 1, in which the procedure for receiving and removing Secret key to secret key It has been done at the radio base station. In the mobile communication network 7. Method according to claim No. 1, the decryption process To the cryptographic key that Has been action that controls Radio network in the mobile communication network 8. Method according to Clause 1 which the network communicates. The movement consists of General communication network 9. Method according to claim 1, which communication terminal Consists of a mobile terminal 1 0. Method according to claim 1, which communication terminal Such includes Terminal fixed 1 1. Method according to claim 1 in which the network communicates The movement consists of Mobile network 1 2. Method according to claim 1, which also consists of the following steps: connecting a number of service networks to a media network. Such mobile messages, users of such communication terminals It is said to be the tenant of at least one service network of multiple networks and the provisioning of communication routes between communication terminals. The aforementioned substance network service At least one network of Multiple networks 1 3. Method according to claim 1, which private key and key The said public is related to the RSA 1 algorithm 4. Method according to Clause 1, which the secret key Consists of a symmetric cryptographic key 1 5. Method according to claim 1, in which the key generation process Secret process consists of Generate random numbers that occur naturally. 1 6. Method according to Clause 1. The process of generating keys. The secret procedure consists of the following steps: to check the received signal in digital form at the terminal. Such communication and at least low-order bit separation. One bit from the received signal that can be verifiable 1 7. Method according to claim 1, where the key generation process The secret consists of the following steps: checking the signal at the output of an analog to di converter. Microphone mental and at least one low-order separation from the output contract. That can be verifiable 1 8. Method according to claim 1, which the process of creating keys The secret consists of the following steps: checking the signal at one of the speech codec's output and extracting at least one low-order bit from the output signal. Put verifiable as mentioned 1 9. Method according to Clause 1, which the process of creating keys. Secret consists of the following steps: creating a seed for a pseudo-random number and generating a pseudo-random number from that default 2 0. Method according to claim 1, where the length of the secret key is Said Prior to such communication terminal 2 1. Method of Clause 1 in which the secret key still It consists of a number of numbers. 2. 2. Method according to Clause 1, the record keeping process That public key, and One such identity pointer It is also possible to keep a record of the expiration date associated with the said public key. 2. 3. Method of Clause 22, which the communication terminal has. Such substances will signal Requesting a public key to the network Mobile communication if the public key has expired 2 4. Method according to claim 1, which also includes the following steps: to change the public key that the network communicates. The movement and How to save the changed public key at Such communication terminal 2 5. Method according to Clause 24, which the replacement procedure Convert that public key It also consists of a distribution process. The changed public key signal from the mobile network is a predetermined time period. 2. 6. Methods for encrypting communications between the mobile networks. Mobile communication network and The communication terminal consists of the following steps: Distribution of public key signals from conventional communication networks Said to the terminal A number of communication Terminal A number of such communications are available, including the first communication terminal. Creating a secret key at the one communication terminal Encrypt it with that public key at the terminal. The first communication channel transmits the said cryptographic key from the terminal. One such communication Obtaining the said cryptographic key at the communication network Such general To decrypt such a secret secret key with a private key. Bind to that public key. Encrypting such communications with that secret key and maintaining such encrypted communications between networks. Such general communication network; and First communication terminal As mentioned when general communication networks do not know their identity. The first communication terminal 2 7. Method in accordance with claim 26, which the distribution procedure Signs also include The procedure here is to transfer the said public key from the radio network controller. To the base station at least One of the stations in the communication network And the transmission of such public key signals from at least one of the base stations. The signal also It consists of a key signaling procedure. Such public services from a number of base stations in Communication network 2. 9. Method according to Clause 26, which the distribution process Public key signs It also consists of a distribution process. Information signals to verify the validity of the keys. 3 0. Method according to Clause 26, which the distribution process Public key signs It also contains the submission process. Information signals to verify the validity of the said public key upon request. 3 1. Methods for encrypting communications between the public and the public. Mobile communication network and The communication terminal consists of the following steps: Keeping records of the two numbers related to the redemption algorithm Changed the keys for Differ Hellman exponential and character. Identify the first identity related to the communication network. The mobile terminal at the said communication terminal. Comparison of the first identity pointer that has been collected. Recorded at the communication terminal As mentioned with pointer A second identity obtained from the aforementioned mobile network, the generation of a random number at one such communication terminal. When one identity pointer matches With the second identity pointer, the second random number generation that the mobile communication network sounds. Say when the first identity pointer is matched with the second identity pointer, and by using the first and second random numbers as input to a step. Differ Hellman's exponential key exchange method generates a third number that will be used as the secret key by the communication terminal and the such crypto mobile network. Such communication with that secret key and maintaining encrypted communication between communication networks. The movement and Such communication terminal when Such mobile communication network does not know the identity of 3 such communication terminal 2. Method according to Clause 31, where the numbering process Two steps The previous two numbers 3 3. Method of claiming 31 which also consists of stages When the signal of two numbers It is from the mobile communication network. There when two such numbers are requested from the said communication terminal. 3 4. Procedure according to Clause 33, where the advantage procedure The comparison also consists of steps. Sending the request signal from the terminal. Communication when the first identity pointer is not matched with the second identity pointer 3 5. Method of claim 31, where the record-keeping procedure The said two numbers and Such one identity pointer also Consists of keeping a record of the expiration date associated with the number 3 6. Method of claim 35, which the communication terminal It signals the Request two new numbers with the algorithm. Key exchange of Diffe-Hellman Exponential if those two numbers have expired. 3 7. Method of Clause 31, which also includes the following steps: exchange of two numbers connected with the redemption algorithm. Changed the key of Diffe- Hellman to an exponential, affiliated version. The mobile communication network and the record keeping of the aforementioned two numbers at the Terminal 3. 8. Procedures according to Clause 37, which the procedure for changing Convert those two numbers also Consists of a numbered signal distribution process Two transformed ones from the communication network Moving loudly 3 9. Methods for encrypting communications between the parties. Mobile communication network and The communication terminal consists of the following steps: The two-digit signal distribution is related to the algorithm. Exchanging keys One from the network This general communication is carried out to a number of communication terminals, including a number of such communication terminals. One such communication First random number generation at the first communication terminal. Second random number generation, such general communication network It uses the first and second random numbers as input to the procedure. The exponential key exchange method generates the third number. That will be used as secret key by the communication terminal. One such And such general communication network Encrypting such communications with that secret key and maintaining encrypted communications between communication networks. The movement and Such communication terminal when General communication network does not know the identity of the terminal. One such communication 4 0. A system used to encrypt communications between networks. General communication network and Communication terminal Which consists of The access network included in the said general communication network and the access network path that has been linked to the terminal. Minor of such communication related to Bind to the access network to store a record of the public cryptographic key associated with the general communication network, generating the cryptographic key with the stored public cryptographic key, signaling the encrypted secret key. Also network Such general communication Encrypt such communication as well. Such a secret key And maintain encrypted communication between Such general communication networks and such communication terminals Say when conventional communication networks are not Know the identity of the Terminal 4 such media min. 1. a system used to encrypt communications between networks General communication network and Communication terminal Which consists of One network path to record private cryptographic keys, distribute public crypto keys, and decrypt keys. The time of the encrypted secret operation The second network path is related to the network path. One such signal is for broadcasting the encryption key. The public that received such distribution Network path First and second It is related to the access network of General communication network and network access pathways which have been linked to the terminal Such communication and Tied to the access network In order to receive a public cryptographic key, the broadcast generates a secret key to the secret key with the encryption key. Public record Save it Send the encrypted secret key to Such general communication networks encrypt such communications. Said by the secret key And maintain encrypted communication between the general communication network and the Communicate it when the network communicates General unknown The identity of the communication terminal 4 2. Method according to claim 1, the record keeping process Also contains steps Requesting the public key from the media network The message moves when the public key was not initially saved 4 3. Method according to claim 1, the record keeping process Also contains steps Requesting the public key from the media network Mobile message when exploitation of the stored public key is unsuccessful 4 4. Method according to claim 1, which the secret key generation process also consists of steps Generating and changing secret keys by pseudo-random number sequence 4 5. The procedure according to Clause 44, which took place in the process of changing the secret key, was triggered. After encrypting the previously defined volume Encrypt Communicated for a predetermined time Or respond to requests which have been Previously defined from a reference or a mobile communication network 4 6. Procedures according to claim 1, which also includes a procedure for opening a path for A communication terminal can be established. Encrypt and signal another secret key to the network. The mobile communication that will be used in place of the secret key.