Timing adjustment for session security protocol
AssigneeAlcatel Lucent
InventorBulin Zhang
Life of this patent
Estimating the term…
Abstract
According to certain embodiments of the present invention, cryptosynchronization values are calculated on an initiating and/or responding device in a communications system such that cryptosynchronization-based procedures might succeed even when the discrepancy between the system times of the initiating and responding devices exceeds the cryptosync constraints imposed by the communications system. In one embodiment, the initiating device add/subtracts a cryptosynchronization adjustment value x to/from the initiating device's system time to yield an adjusted initiator cryptosynchronization value. In another embodiment, the receiving device adjusts the receiving device's system time to yield an adjusted receiver cryptosynchronization value.
Claims18
A first node for a communication system comprising the first node and a second node, wherein, in a first communication procedure:
- the first node derives (i) a first cryptosynchronization value (e.g., TimeStampLong(IR)) and (ii) a second cryptosynchronization value (e.g., TimeStampShort(IR)) based on (i) first node system time (e.g., SystemTime(IR)) and (ii) a cryptosynchronization adjustment value (e.g., x), wherein the cryptosynchronization adjustment value is selected to be greater than an expected maximum difference between the first node system time and the second node system time;
- the first node generates an initiator message digest based on the first cryptosynchronization value;
- the first node transmits the initiator message digest and the second cryptosynchronization value to the second node;
- the second node generates a third cryptosynchronization value (e.g., TimeStampLong(RR)) based on (i) the second cryptosynchronization value received from the first node and (ii) second node system time (e.g., SystemTime(RR));
- the second node generates a responder message digest based on the third cryptosynchronization value;
- and
- the second node compares (i) the initiator message digest received from the first node and (ii) the responder message digest to determine whether the first communication procedure fails.
A first node for a communication system comprising the first and a second node, wherein, in a second communication procedure:
- the second node derives a fourth cryptosynchronization value (e.g., CryptoSync(IR)) and a fifth cryptosynchronization value (e.g., CryptoSyncShort(IR)) based on second node system time (e.g., SystemTime(IR));
- the second node generates an initiator message digest based on the fourth cryptosynchronization value;
- the second node transmits the initiator message digest and the fifth cryptosynchronization value to the first node;
- the first node generates a sixth cryptosynchronization value (e.g., CryptoSync(RR)) based on (i) the fifth cryptosynchronization value received from the second node, (ii) first node system time (e.g., SystemTime(RR)), and (iii) and a cryptosynchronization adjustment value (e.g., x), wherein the cryptosynchronization adjustment value is selected to be greater than an expected maximum difference between the access network system time and the access terminal system time;
- the first node generates a responder message digest based on the sixth cryptosynchronization value;
- and
- the first node compares (i) the initiator message digest received from the second node and (ii) the responder message digest to determine whether the second communication procedure fails.
A first node for a communication system comprising the first and a second node, wherein, in a second communication procedure:
- the second node derives a fourth cryptosynchronization value (e.g., CryptoSync(IR)) and a fifth cryptosynchronization value (e.g., CryptoSyncShort(IR)) based on second node system time (e.g., SystemTime(IR));
- the second node generates an initiator message digest based on the fourth cryptosynchronization value;
- the second node transmits the initiator message digest and the fifth cryptosynchronization value to the first node;
- the first node generates a sixth cryptosynchronization value (e.g., CryptoSync(RR)) based on (i) the fifth cryptosynchronization value received from the second node, (ii) first node system time (e.g., SystemTime(RR)), and (iii) and a cryptosynchronization adjustment value (e.g., x);
- the first node generates a responder message digest based on the sixth cryptosynchronization value;
- the first node compares (i) the initiator message digest received from the second node and (ii) the responder message digest to determine whether the second communication procedure fails;
- and
- the first node derives the sixth cryptosynchronization value Cryptosync(RR) according to:
- Cryptosync
-
- (
- RR
- )
- =
- (
- SystemTime
-
- (
- RR
- )
- -
- x
- -
- (
- (
- (
- SystemTime
-
- (
- RR
- )
- -
- x
- )
-
- [
- 15
-
- :
-
- 0
- ]
- -
- CryptosyncShort
-
- (
- IR
- )
- )
-
- mod
-
-
- 2
- 16
- )
- )
-
- mod
-
-
- 2
- 64
- where SystemTime(RR) is the first node system time;
- x is the cryptosynchronization adjustment value;
- and CryptoSyncShort(IR) is the fifth cryptosynchronization value.
Dependencies are inferred from the claim text.