Method for securing data traffic between mobile radio network and ims network
AssigneeAktiengesellschaft
InventorDirk Kröselberg
Life of this patent
Estimating the term…
Abstract
Data traffic between a mobile radio network and an IMS network is secured by first authenticating a mobile subscriber in the mobile radio network and in the IMS network. Next, an examination is carried out to check whether the identity of the mobile subscriber authenticated in the IMS network corresponds to the identity of the subscriber authenticated in the mobile radio network. If so, a confirmation message is sent from the IMS network to the mobile subscriber in the even of corresponding identities and a data exchange is carried out between the mobile subscriber and the IMS network by a security protocol protected by a common key derived from the confirmation message.
Claims9
A method for user authentication and securing data traffic between a mobile radio network and an Internet protocol-based multimedia subsystem network, comprising:
- authenticating a mobile subscriber in the mobile radio network;
- authenticating the mobile subscriber in the Internet protocol-based multimedia subsystem network;
- determining whether a first identity of the mobile subscriber authenticated in the Internet protocol-based multimedia subsystem network corresponds to a second identity of the mobile subscriber authenticated in the mobile radio network;
- sending, if the first and second identities correspond, a confirmation message from the Internet protocol-based multimedia subsystem network to the mobile subscriber;
- and
- exchanging data between the mobile subscriber and the Internet protocol-based multimedia subsystem network using a security protocol protected by a common key derived from the confirmation message for the security protocol.
A data network, comprising:
- a mobile radio network authenticating a mobile subscriber therein to obtain a first identity of the mobile subscriber;
- an Internet protocol-based multimedia subsystem network authenticating the mobile subscriber to obtain a second identity of the mobile subscriber, said networks securing data traffic between the mobile subscriber and the Internet protocol-based multimedia subsystem network by determining whether the first and second identities of the mobile subscriber correspond and, if the first and second identities correspond, sending a confirmation message from the Internet protocol-based multimedia subsystem network to the mobile subscriber and exchanging data between the mobile subscriber and the Internet protocol-based multimedia subsystem network using a security protocol protected by a common key derived from the confirmation message for the security protocol.
Dependencies are inferred from the claim text.