Systems and methods for utilizing ims data security mechanisms in a circuit switched network
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorsFredrik Lindholm, Rolf Blom
Life of this patent
Estimating the term…
Abstract
Aspects of the present invention provide a mechanism to utilize IMS media security mechanisms in a CS network and, thereby, provide end-to-end media security in the case where the media traffic travels across both a CS network and a PS network.
Claims28
A method performed by a network gateway, comprising:
- establishing a circuit switched connection with a mobile terminal;
- receiving from the mobile terminal via the circuit switched connection a frame including a payload comprising encrypted encoded data intended for a remote mobile terminal and an encryption parameter that is required by the remote communicate device to decrypt the encrypted encoded data;
- creating a protocol data unit that includes the encoded data and the encryption parameter;
- and
- transmitting via a packet switched network the protocol data unit so that it will be received by the remote mobile terminal.
A mobile terminal, comprising:
- a key module configured to obtain or create an encryption key;
- a circuit switched connection establishment module for initiating a circuit switched connection;
- a payload creating module configured to produce a payload for a frame, wherein the payload includes encrypted encoded data and one or more encryption parameters;
- and
- a transmitter operable to transmit the frame to a gateway using the circuit switched connection.
A method performed by an application server to facilitate communication between a mobile terminal and another terminal, comprising:
- receiving at the application server a session initiation message transmitted from the mobile terminal, the session initiation message comprising encryption information for securing communications;
- storing the encryption information included in the session initiation message;
- receiving at the application server a session initiation message transmitted from a gateway;
- determining whether the session initiation message transmitted from the gateway correlates with the session initiation message transmitted from the mobile terminal;
- retrieving the encryption information in response to determining that the session initiation message transmitted from the gateway correlates with the session initiation message transmitted from the mobile terminal;
- and
- transmitting an session initiation message to another server after retrieving the encryption information, wherein the session initiation message transmitted to the another server includes the encryption information.
An application server for facilitating communications between a mobile terminal and another terminal, comprising:
- a receiver operable to receive a session initiation message transmitted from the mobile terminal, the session initiation message comprising encryption information for securing communications;
- a data storage unit for storing the encryption information included in the session initiation message;
- a message correlating module configured to determine whether a session initiation message transmitted from a gateway correlates with the session initiation message transmitted from the mobile terminal;
- a encryption information retrieving modules configured to retrieve the encryption information in response to a determination that the session initiation message transmitted from the gateway correlates with the session initiation message transmitted from the mobile terminal;
- and
- a transmitter operable to transmit a session initiation message to another server after retrieving the encryption information, wherein the session initiation message transmitted to the another server includes the encryption information.
An application server for facilitating communications between a mobile terminal and another terminal, comprising:
- a receiver operable to receive from a gateway an initiation message indicating that the mobile terminal has requested establishment of a secure session with the other terminal;
- a key management module configured to retrieve encryption information for securing communications from a key management system in response to the receiver receiving the initiation message from the gateway;
- and
- a transmitter operable to transmit the retrieved encryption information to another application server in response to the key management module retrieving the encryption information, wherein said another application server is neither a Mobile Switching Center (MSC) nor a media gateway (MGW).
An application server for facilitating communications between a mobile terminal and another terminal, comprising:
- a receiver operable to receive a key request message transmitted from the mobile terminal;
- a key management module configured to transmit a key to the mobile terminal in response to receipt of the key request message;
- a data storage unit for storing the key;
- and
- an initiation message transmitting module configured to (a) determine whether the stored key is associated with information that matches information included in an initiation message transmitted from a gateway and (b) in response to determining that that the stored key is associated with information that matches information included in the initiation message transmitted from the gateway, transmit to another server an initiation message.
Dependencies are inferred from the claim text.