Secure session key generation
AssigneeInterDigital Patent Holdings, Inc.
InventorsLouis J. Guccione, Yevgeniy Dodis, Yogendra C. Shah, Inhyok Cha
Life of this patent
Estimating the term…
Abstract
A method and apparatus for securing the interface between a Universal Integrated Circuit Card (UICC) and a Terminal in wireless communications is disclosed. The security of Authentication and Key Agreement (AKA) and application level generic bootstrapping architecture (GBA) with UICC-based enhancements (GBA_U) procedures is improved. A secure shared session key is used to encrypt communications between the UICC and the Terminal. The secure shared session key generated using authenticating or non-authenticating procedures.
Claims43
A method for securing communications between a Universal Integrated Circuit Card (UICC) and a Terminal, the method comprising:
- generating a first secure shared session key, wherein the first secure shared session key is configured to enable secure communication between the UICC and the Terminal, during a procedure that requires communications between the UICC and the Terminal, wherein the procedure is at least one of an authentication and key agreement (AKA) procedure or a generic bootstrapping architecture (GBA) procedure;
- encrypting communications between the UICC and the Terminal using the first secure shared session key to establish a secure channel between the UICC and the Terminal;
- performing, via the established secure channel between the UICC and the Terminal, the at least one of the AKA procedure or the GBA procedure resulting in generation of a second secure shared session key, whereby communications between the UICC and the Terminal resulting in generation of the second secure shared session key are encrypted by the first secure shared session key;
- and
- using the second secure shared session key to encrypt communications to and from the Terminal subsequent to the at least one of the AKA procedure or the GBA procedure.
A wireless transmit/receive unit (WTRU), the WTRU comprising:
- a Universal Integrated Circuit Card (UICC) configured to:
- generate a first secure shared session key, wherein the first secure shared session key is configured to enable secure communication, between the UICC and a Terminal, during a procedure that requires communications between the UICC and the Terminal, wherein the procedure is at least one of an authentication and key agreement (AKA) procedure or a generic bootstrapping architecture (GBA) procedure, and the Terminal configured to:
- generate the first secure shared session key,
- encrypt communications with the first secure shared session key to establish a secure channel between the Terminal and the UICC;
- perform, via the established secure channel between the UICC and the Terminal, the at least one of the AKA procedure or the GBA procedure resulting in generation of a second secure shared session key, whereby communications between the UICC and the Terminal resulting in generation of the second secure shared session key are encrypted by the first secure shared session key;
- and
- use the second secure shared session key to encrypt communications subsequent to the at least one of the AKA procedure or the GBA procedure.
Dependencies are inferred from the claim text.