Safety transmission method in telecommunication network

Abstract

The invention related to method for providing connection security for the transmission between communicating parties in a telecommunication network, the method comprising the steps of: exchanging security parameters between communicating parties, providing connection security for messages based on these security parameters, and transmitting said messages between communicating parties. It is characteristic for the method according to the invention that it further comprises the steps of: reaching agreement between communicating parties on an interval for recalculation of the security parameters, monitoring of the interval for recalculation by the communicating parties, recalculating the security parameters at the agreed interval, and providing connection security for messages based on the latest recalculated security parameters.

Description

Technical field:

[0001] The invention relates to a method of providing connection security for transmissions between communicating parties of a telecommunication network. Background technique

[0002] At the beginning of communication, a handshake is usually performed between telecommunication network applications, during which the parties involved generally authenticate each other and exchange key information, such as negotiating encryption algorithms and encryption keys used in communication. Only after the handshake can the actual data be transferred. The security of the transmission is generally ensured, for example, by encryption. Attached Figure 1a and 1b A block diagram is shown of two known encryption algorithms that can be used to secure transmissions: symmetric algorithms and public-key algorithms.

[0003] Figure 1a A symmetric algorithm based on keys shared between participants is shown. On side A on one side, Figure 1a In block E of , the message M to be ...

Examples

Embodiment Construction

[0029] The invention can be applied to any telecommunication network. In the following, the present invention will be described in detail by taking a mobile station operating in a digital GSM mobile communication system and communicating with applications located inside or outside the GSM network as an example.

[0030] The main embodiment of the present invention will be described in detail below with reference to FIGS. 2 , 3 and 4 .

[0031] Figure 2 shows some examples of the aforementioned connections. The mobile station MS contacting the bank server first performs a handshake according to the prior art, during which the MS and the bank can authenticate each other and exchange required session key information. According to the invention, the mobile station and the bank server negotiate and agree on appropriate intervals for recalculating security parameters for providing confidentiality, data integrity and authentication during communication, eg during a handshake. For e...

Technical field:

[0001] The invention relates to a method of providing connection security for transmissions between communicating parties of a telecommunication network. Background technique

[0002] At the beginning of communication, a handshake is usually performed between telecommunication network applications, during which the parties involved generally authenticate each other and exchange key information, such as negotiating encryption algorithms and encryption keys used in communication. Only after the handshake can the actual data be transferred. The security of the transmission is generally ensured, for example, by encryption. Attached Figure 1a and 1b A block diagram is shown of two known encryption algorithms that can be used to secure transmissions: symmetric algorithms and public-key algorithms.

[0003] Figure 1a A symmetric algorithm based on keys shared between participants is shown. On side A on one side, Figure 1a In block E of , the message M to be ...

Examples

Embodiment Construction

[0029] The invention can be applied to any telecommunication network. In the following, the present invention will be described in detail by taking a mobile station operating in a digital GSM mobile communication system and communicating with applications located inside or outside the GSM network as an example.

[0030] The main embodiment of the present invention will be described in detail below with reference to FIGS. 2 , 3 and 4 .

[0031] Figure 2 shows some examples of the aforementioned connections. The mobile station MS contacting the bank server first performs a handshake according to the prior art, during which the MS and the bank can authenticate each other and exchange required session key information. According to the invention, the mobile station and the bank server negotiate and agree on appropriate intervals for recalculating security parameters for providing confidentiality, data integrity and authentication during communication, eg during a handshake. For e...

Images