TH32292A - How to set up a secure connection in a wireless network - Google Patents

Abstract

DC60 (18/02/41) An invention concerning a method for establishing a secure connection for inter-terminal connections in a wireless network. In this method, data is transmitted from the first terminal (MS1) through a network hub to the second terminal (MS2). The method described in the invention is characterized in that it consists of the following steps: routing the transmitted data through the medium (MD) using security method one for securing the connection at the secure protocol layer between the first terminal (MS1) and the medium (MD); using security method two for securing the connection at the secure protocol layer between the medium (MD) and the second terminal (MS2); and performing the secure protocol layer transformation at the medium (MD). The invention concerns a method for establishing a secure connection for inter-terminal connections in a wireless network. In this method, data is transmitted from the first terminal (MS1) through a network hub to the second terminal (MS2). The method described in the invention is characterized in that it consists of the following steps: It has the following characteristics: It involves routing the data transmitted through the medium (MD) using security method one to secure the connection at the Secure Layer between the first terminal (MS1) and the medium (MD); using security method two to secure the connection at the Secure Layer between the medium (MD) and the second terminal (MS2); and finally, it performs the Secure Layer security transformation at the medium (MD).

Claims (21)

1. The method for implementing a secure connection for inter-device connections in a wireless network involves the Secure Layer protocol, which maintains connection security functions above the Transport Layer and below the Application Layer. This method comprises the following steps: Data transmission from the first terminal (MS1) through a network hub to the second terminal (MS2). This method also includes the following steps: Storing security information from at least the first and second terminals (MS1 and MS2) in a database (DB). This database contains security information including the terminal protocol layer, data routing through the medium (MD), applying security method one to secure the Secure Layer connection between the first terminal (MS1) and the medium (MD), applying security method two to secure the Secure Layer connection between the MD and the second terminal (MS2), and performing security method transformation at the application layer. Secure Communication Method at the Medium (MD) 2. The method under claim 1 that gives it a unique characteristic is the centralization of the network through an intermediary (MD). 3. The procedure under claim 1 or 2, which has been made more special, still consists of the following steps: 4. The method under patent 2 is characterized in that it still consists of the following steps: indicating that the data being transmitted will be routed from the first terminal (MS1) to the chosen medium (MD), and routing the transmitted data to the chosen medium (MD). 5. The method under claim 2 is characterized as follows: the data being transmitted is a short message, and the method still consists of the following steps: transmission of data from the first terminal (MS1) through the intermediate network hub to the second terminal (MS2); routing the data transmitted from the intermediate network hub to the medium (MD); and routing the transformed data transmitted from the medium (MD) back to the intermediate network hub. 6. The method under claim 5, which is characterized by a centralized network of intermediaries comprising short message service centers (SMSCs). 7. The method under claim 6 is characterized by the medium (MD) being connected to a link pegged to the short message service center (SMSC) in conjunction with the GSM network. 8. The method under claim 6 is modified in that it still comprises the following steps: indicating by adding an annex to the Short Message Service Center (SMSC) address that the transmitted data must be routed from the first terminal (MS1) to the chosen medium (MD), and routing the transmitted data to the chosen medium (MD). 9. The method under claim 4 is modified so that it still comprises the following steps: indicating by appending to the address of the second terminal (MS2) that the data being transmitted must be routed from the first terminal (MS1) to the chosen medium (MD), and routing the transmitted data to the chosen medium (MD). 10. The method under Claim 1 is modified so that it shall still consist of the following layers: the provision of security of the connection between the first terminal (MS1) and the medium (MD) with the first set of cryptographic keys, and the provision of security of the connection between the medium (MD) and the second terminal (MS2) with the second set of cryptographic keys. 11. The method under Claim 1 is specialized in that it shall still consist of the following steps: securing the connection between the first terminal (MS1) and the medium (MD) with the first set of cryptographic keys, and securing the connection between the medium (MD) and the second terminal (MS2) with a second set of cryptographic algorithms. 12. The method under Claim 1 is made special in that it still consists of the following steps: providing security for the connection between the first terminal (MS1) and the medium (MD) with a second set of cryptographic keys and the first set of cryptographic algorithms; and providing security for the connection between the medium (MD) and the second terminal (MS2) with a second set of cryptographic keys and the second set of cryptographic algorithms. 13. The procedure under Claim 1 is modified to include the following steps: securing the connection between the first terminal (MS1) and the medium (MD) using the Class 1 communication protocol, and securing the connection between the medium (MD) and the second terminal (MS2) using the Class 2 communication protocol. 14. The method under claim 1 is characterized by the fact that security of the connection is provided using cryptography. 15. The method under Claim 1 is characterized by the fact that connection security is provided using a MAC address code to verify the authenticity of the message. 16. The arrangement for providing secure connection between terminals in a wireless network, where the first terminal (MS1) transmits data through the network hub to the second terminal (MS2), is characterized by the following components: a Media Unit (MD) for translating the security methods of the transmitted data, which contains a database (DB) containing security information for at least one of the first and second terminals (MS1 and MS2), and which contains the security information in the database (DB) containing the communication protocols of the terminal's security layer; a Translator Unit (C) for deconsolidating the connection security using the security method of the first and second terminals; a Routing Unit (R) for routing the data transmitted from the network hub to the Media Unit (MD); and a Transmitting Unit (T) for transmitting the translating data to the second terminal (MS2). 17. The arrangement according to claim 16 is characterized by the decryption unit (C) consisting of a decryption unit (D) for decrypting the data transmitted received from the first terminal (MS1) and a reencryption unit (E) for re-encrypting the data via decryption. 18. The arrangement according to claim 16 is made special in that the conversion unit (C) consists of a validation unit (V) for verifying the transmitted data and a new validation unit (RV) for verifying the data transmitted with different security messages. 19. The arrangement according to claim 16 is characterized by the fact that the information on how to maintain user security in the database (DB) contains the encryption key of the terminal. 20. The arrangement according to claim 16 is characterized by the fact that the information on how to maintain the security of the database (DB) user contains the terminal's encryption algorithm. 21. The arrangement under claim 16 is characterized in that the arrangement is connected to the Short Message Service Center (SMSC) in conjunction with the mobile communications network.