US6081601A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method of implementing connection security in a wireless network
Assignee: Nokia Technologies Oy
•
Filing: 1998-01-27
•
Granted: 2000-06-27
•
Expires: 2018-01-27
Abstract
Abstract The invention relates to a method of providing connection security for a connection between terminals in a wireless network. In the method data is transmitted from a first terminal (MS1) via nodes in the network to a second terminal (MS2). The method according to the invention is characterized by that it includes the steps of: routing the transmitted data via a mediator (MD), using the first security method for providing connection security at the security protocol layer between the first terminal (MS1) and the mediator (MD), using the second security method for providing connection security at the security protocol layer between the mediator (MD) and the second terminal (MS2), and performing the security method conversion at the security protocol layer at the mediator (MD).
Inventors
- 👤 Tommi Raivisto
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 11:45
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0464; H04W; H04W12/00; H04W12/03; H04W12/033; H04L63/12; H04L63/123; H04W4/00; H04W4/12; H04W4/14
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
181 words
A method of providing connection security for a connection between terminals in a wireless network, in which connection a security protocol layer for connection security function is above a transport protocol layer and below an application protocol layer, the method including the following steps: transmitting data from a first terminal (MS1) via nodes in the network to a second terminal (MS2), characterized in that the method further includes the steps of: storing information about the subscriber security method of at least the first and the second terminal (MS1 and MS2) in a database (DB), wherein the information in the database (DB) about the subscriber security method includes security layer protocols of the terminals, routing the transmitted data via a mediator (MD), using a first security method for providing connection security at the security protocol layer between the first terminal (MS1) and the mediator (MD), using a second security method for providing connection security at the security protocol layer between the mediator (MD) and the second terminal (MS2), and performing security method conversion at the security protocol layer at the mediator (MD).
Claim 2
Independent Claim
181 words
A method of providing connection security for a connection between terminals in a wireless network, in which connection a security protocol layer for connection security function is above a transport protocol layer and below an application protocol layer, the method including the following steps: transmitting data from a first terminal (MS1) via nodes in the network to a second terminal (MS2), characterized in that the method further includes the steps of: storing information about the subscriber security method of at least the first and the second terminal (MS1 and MS2) in a database (DB), wherein the information in the database (DB) about the subscriber security method includes security layer protocols of the terminals, routing the transmitted data via a mediator (MD), using a first security method for providing connection security at the security protocol layer between the first terminal (MS1) and the mediator (MD), using a second security method for providing connection security at the security protocol layer between the mediator (MD) and the second terminal (MS2), and performing security method conversion at the security protocol layer at the mediator (MD).
Claim 3
Dependent Claim
16 words
A method according to claim 1, characterized in that the network node is a mediator (MD).
Claim 4
Dependent Claim
32 words
A method according to claim 1, characterized in that the method further includes the step of: retrieving the security information of the terminals (MS1, MS2) from a database (DB) for the conversion.
Claim 5
Dependent Claim
43 words
A method according to claim 2, characterized in that the method further includes the steps of: indicating the transmitted data to be routed from the first terminal (MS1) to a chosen mediator (MD) and routing the transmitted data to the chosen mediator (MD).
Claim 6
Dependent Claim
72 words
A method according to claim 2, characterized in that the transmitted data is a short message and the method further includes the steps of: transmitting data from the first terminal (MS1) via an intermediate network node to the second terminal (MS2), routing the transmitted data from the the intermediate network node to the mediator (MD), and routing the transmitted data as converted from the mediator (MD) back to the intermediate network node.
Claim 7
Dependent Claim
19 words
A method according to claim 5, characterized in that the intermediate network node comprises a short message service center(SMSC).
Claim 8
Dependent Claim
31 words
A method according to claim 6, characterized in that the mediator (MD) is connected with a fixed link to the short message service center (SMSC) in association with a GSM network.
Claim 9
Dependent Claim
58 words
A method according to claim 6, characterized in that the method further includes the steps of: indicating by an appendix to the address of the short message service center (SMSC) that the transmitted data is to be routed from the first terminal (MS1) to a chosen mediator (MD) and routing the transmitted data to the chosen mediator (MD).
Claim 10
Dependent Claim
56 words
A method according to claim 4, characterized in that the method further includes the step of: indicating by an appendix to the address of the second terminal (MS2) that the transmitted data is to be routed from the first terminal (MS1) to a chosen mediator (MD) and routing the transmitted data to the chosen mediator (MD).
Claim 11
Dependent Claim
55 words
A method according to claim 1, characterized in that the method further includes the steps of: providing connection security between the first terminal (MS1) and the mediator (MD) with a first set of cryptographic keys and providing connection security between the mediator (MD) and the second terminal (MS2) with a second set of cryptographic keys.
Claim 12
Dependent Claim
55 words
A method according to claim 1, characterized in that the method further includes the steps of: providing connection security between the first terminal (MS1) and the mediator (MD) with a first set of cryptographic algorithms and providing connection security between the mediator (MD) and the second terminal (MS2) with a second set of cryptographic algorithms.
Claim 13
Dependent Claim
69 words
A method according to claim 1, characterized in that the method further includes the steps of: providing connection security between the first terminal (MS1) and the mediator (MD) with a first set of cryptographic keys and a first set of cryptographic algorithms and providing connection security between the mediator (MD) and the second terminal (MS2) with a second set of cryptographic keys and a second set of cryptographic algorithms.
Claim 14
Dependent Claim
53 words
A method according to claim 1, characterized in that the method further includes the steps of: providing connection security between the first terminal (MS1) and the mediator (MD) with a first security layer protocol and providing connection security between the mediator (MD) and the second terminal (MS2) with a second security layer protocol.
Claim 15
Dependent Claim
15 words
A method according to claim 1, characterized in that connection security is provided using encryption.
Claim 16
Dependent Claim
19 words
A method according to claim 1, characterized in that connection security is provided using the message authentication code MAC.
Claim 17
Dependent Claim
149 words
An arrangement for providing connection security for a connection between terminals in a wireless network, where a first terminal (MS1) transmits data via nodes in the network to a second terminal (MS2), characterized in that the arrangement includes a mediator (MD) for converting the security method of the transmitted data, which includes: a database (DB) containing information about the subscriber security method of at least the first and the second terminal (MS1 and MS2), and wherein the information in the database (DB) about the subscriber security method contains security layer protocols of the terminals and a converting unit (C) for dissembling connection security using first security method and assembling connection security using second security method, a routing unit (R) for routing the transmitted data from a network node to the mediator (MD), and a transmission unit (T) for transmitting the transmitted data as converted to the second terminal (MS2).
Claim 18
Dependent Claim
149 words
An arrangement for providing connection security for a connection between terminals in a wireless network, where a first terminal (MS1) transmits data via nodes in the network to a second terminal (MS2), characterized in that the arrangement includes a mediator (MD) for converting the security method of the transmitted data, which includes: a database (DB) containing information about the subscriber security method of at least the first and the second terminal (MS1 and MS2), and wherein the information in the database (DB) about the subscriber security method contains security layer protocols of the terminals and a converting unit (C) for dissembling connection security using first security method and assembling connection security using second security method, a routing unit (R) for routing the transmitted data from a network node to the mediator (MD), and a transmission unit (T) for transmitting the transmitted data as converted to the second terminal (MS2).
Claim 19
Dependent Claim
40 words
An arrangement according to claim 16, characterized in that the converting unit (C) includes a decryption unit (D) for decrypting the transmitted data received from the first terminal (MS1) and a re-encryption unit (E) for re-encrypting the decrypted transmitted data.
Claim 20
Dependent Claim
39 words
An arrangement according to claim 16, characterized in that the converting unit (C) includes a verification unit (V) for verifying the transmitted data and a re-verification unit (RV) for making verification of the transmitted data with different security information.
Claim 21
Dependent Claim
24 words
An arrangement according to claim 16, characterized in that the subscriber security method information in the database (DB) contains cryptographic keys of the terminals.
Claim 22
Dependent Claim
24 words
An arrangement according to claim 16, characterized in that the subscriber security method information in the database (DB) contains encryption algorithms of the terminals.
Claim 23
Dependent Claim
27 words
An arrangement according to claim 16, characterized in that the arrangement is connected to a short message service center (SMSC) in association with a mobile communication network.
References Cited (Backward Citations)
US5280529A
Cited
US5455861A
Cited
US5583940A
Cited
US5657390A
Cited
US5689566A
Cited
US5802178A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-06-27 | 2003-12-27 | 2004-06-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-06-27 | 2007-12-27 | 2008-06-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-06-27 | 2011-12-27 | 2012-06-27 | $7700.00 | Window Closed / Lapsed |