Patent Application
20070230702
The present disclosure generally relates to wireless packet data service networks. More particularly, and not by way of any limitation, the present disclosure is directed to a mobile communications device and related data service network employing a method, apparatus and system operable to timely and efficiently update encryption keys employed for communication between the mobile communication device and a plurality of communication nodes.
The present disclosure is directed toward key generation of a mobile communication device with respect to communication with a plurality of communication nodes. It is known in the art to provide communication sessions between a mobile communication device and multiple communication nodes according to a variety of communication systems. It is further known in the art to conduct periodic authentication of a mobile communication device in order to ensure that a device engaged in communication with a node is correctly identified. Additionally, it is known to employ encryption algorithms to provide secure communications between a mobile communication device and another communication node.
A more complete understanding of the embodiments of the present disclosure may be had by reference to the following Detailed Description when taken in conjunction with the accompanying drawings wherein:
A system, method and apparatus of the present disclosure will now be described with reference to various examples of how the embodiments can best be made and used. Identical reference numerals are used throughout the description and several views of the drawings to indicate identical or corresponding parts, wherein the various elements are not necessarily drawn to scale.
According to a first aspect, the present disclosure relates to a mobile communication device including a storage structure operable to store data relating to key generation requests received by the mobile communication device, a logic structure operable to identify a key generation request received during a communication session with a first communication node and to store in the storage structure a record related to the key generation request, and a processing unit operable to initiate a key generation session responsive to the key generation request upon completion of the communication session with the first communication node.
In certain embodiments, the communication session with the first communication node may be a key generation session. In certain embodiments, the communication session with the first communication node may be conducted via a wireless connection. In certain embodiments, the logic structure may be a transport stack. In certain embodiments, the first communication node may be a remote services server. The storage structure employed for storage of key generation requests may be a queue. In other embodiments, the device may further include a key generation module.
According to a second aspect, the present disclosure relates to a method for managing key generation for a mobile communication device. The method includes the steps of receiving at a mobile communication device a key generation request during a communication session between the mobile communication device and a first communication node, storing a record relating to the key generation request in a storage structure within the mobile communication device and initiating a key generation session responsive to the key generation request upon completion of the communication session with the first communication node.
According to a third aspect, the present disclosure relates to a system including means for receiving at a mobile communication device a key generation request during a communication session between the mobile communication device and a first communication node, means for storing a record relating to the key generation request in a storage structure within the mobile communication device, and means for initiating a key generation session responsive to the key generation request upon completion of the communication session with the first communication node.
Referring now to the drawings, and more particularly to
A number of application servers 104-1 through 104-N disposed as part of the enterprise network 102 are operable to provide or effectuate a host of internal and external services such as email, video mail, Internet access, corporate data access, messaging, calendaring and scheduling, information management, and the like. Application servers 124-1, 124-2 have a similar functionality within enterprise network 122. Accordingly, a diverse array of personal information appliances such as desktop computers, laptop computers, palmtop computers, et cetera, although not specifically shown in
Additionally, remote services servers 106, 126 may be interfaced with enterprise networks 102, 122 for enabling a corporate user to access or effectuate any of the services from a remote location using a suitable mobile communications device 116. A secure communication link with end-to-end encryption may be established that is mediated through an external IP network, i.e., a public packet-switched network such as the Internet 108, as well as the wireless packet data service network 112 operable with mobile communications device 116 via suitable wireless network infrastructure that includes a base station (BS) 114. In one embodiment, a trusted relay network 110 may be disposed between the Internet 108 and the infrastructure of wireless packet data service network 112. Alternatively, the functionality of a relay network may be integrated within the infrastructure of the wireless packet data service network 112. By way of example, mobile communications device 116 may be a data-enabled handheld device capable of receiving and sending messages, web browsing, interfacing with corporate application servers, et cetera.
According to the embodiments disclosed herein, network environment 100 employs encryption algorithms in order to provide for secure communications between certain communication nodes within network environment 100. In certain embodiments, encrypted, secure communications are provided between mobile communication device 116 and at least one of remote service servers 106, 126. Alternate embodiments may employ other secure communication channels between the various communication nodes of the various networks shown.
In order to maintain the security of the encryption employed for secure communication within network environment 100, the encryption keys employed for secure communication may be periodically updated. Although encryption keys are generally not updated for each communication session between two nodes of a network, they could be where security is at a premium.
When encryption is to be updated, a communication node at one end of a secure communication channel may request a new encryption key from the communication node at the other end of the communication channel. Alternately, a user of or application resident on one of the communication nodes may generate an internal key generation request. When such a request is made, there is always the possibility that the communication node receiving the request may be engaged at that time in communication with yet another communication node and therefore unable to address the key generation request at that time. Alternately, the communication node may undergo a reset after receiving the request but before completing the key generation. When such a situation occurs, there is a likelihood that the request for a key update will be lost. If the requesting node or application is not provided with the capability to resubmit the request promptly, the security of the encryption may be compromised.
In order to maintain the integrity of the secure communications between the mobile communication device 116 and other nodes within network environment 100, certain embodiments of the present disclosure employ a key generation request storage structure designed to capture requests sent to the mobile communication device 116, in order to minimize dropped requests. In mobile communication device 116, the storage structure employed is a storage queue, although alternate embodiments may employ other structures, which may include stacks, linked lists, arrays or any other data structure known to those of skill in the art as being useful for storing such information. Mobile communication device 116 addresses the requests stored within the storage queue in a particular order, which may be a simple “first-in first-out” methodology, or may be a more complex methodology, as the application requires. These and other aspects of the present disclosure are described in further detail below.
For purposes of the present disclosure, the wireless packet data service network 112 may be implemented in any known or heretofore unknown mobile communications technologies and network protocols. For instance, the wireless packet data service network 112 may be comprised of a General Packet Radio Service (GPRS) network that provides a packet radio access for mobile devices using the cellular infrastructure of a Global System for Mobile Communications (GSM)-based carrier network. In other implementations, the wireless packet data service network 112 may comprise an Enhanced Data Rates for GSM Evolution (EDGE) network, an Integrated Digital Enhanced Network (IDEN), a Code Division Multiple Access (CDMA) network, or any 3rd Generation (3G) network. By way of providing an exemplary embodiment, the teachings of the present disclosure will be illustrated with a GPRS-based carrier network, although those skilled in the art should readily recognize that the scope of the present disclosure is not limited thereby.
The bottom layer (Layer 1) of the transport stack 206 is operable as an interface to the wireless network's packet layer. Layer 1 handles basic service coordination within the exemplary network environment 100 shown in
A microprocessor 302 providing for the overall control of an embodiment of mobile communications device 116 is operably coupled to a communication subsystem 304 which includes a receiver 308 and transmitter 314 as well as associated components such as one or more local oscillator (LO) modules 310 and a processing module such as a digital signal processor 312. As will be apparent to those skilled in the field of communications, the particular design of the communication module 304 may be dependent upon the communications network with which the mobile communications device 116 is intended to operate.
In one embodiment, the communication module 304 is operable with both voice and data communications. Regardless of the particular design, however, signals received by antenna 306 through base station 114 are provided to receiver 308, which may perform such common receiver functions as signal amplification, frequency down conversion, filtering, channel selection, analog-to-digital (A/D) conversion, and the like. Similarly, signals to be transmitted are processed, including modulation and encoding, for example, by digital signal processor 312, and provided to transmitter 314 for digital-to-analog (D/A) conversion, frequency up conversion, filtering, amplification and transmission over the air-radio interface via antenna 316.
Microprocessor 302 also interfaces with further device subsystems such as auxiliary input/output (I/O) 318, serial port 320, display 322, keyboard 324, speaker 326, microphone 328, random access memory (RAM) 330, a short-range communications subsystem 332, and any other device subsystems generally labeled as reference numeral 333. To control access, a Subscriber Identity Module (SIM) or Removable User Identity Module (RUIM) interface 334 is also provided in communication with the microprocessor 302.
In one implementation, SIM/RUIM interface 334 is operable with a SIM/RUIM card having a number of key configurations 344 and other information 346 such as identification and subscriber-related data. Operating system software and transport stack software may be embodied in a persistent storage module (i.e., non-volatile storage) such as flash memory 335. In one implementation, flash memory 335 may be segregated into different areas, e.g., storage area for computer programs 336 as well as data storage regions such as device state 337, address book 339, other personal information manager (PIM) data 341, and other data storage areas generally labeled as reference numeral 343. Key generation request storage structure 216 and key generation module 218 are operably connected to flash memory 335, including transport stack 206, as shown. As described in further detail below, key generation request storage structure 216 and key generation module 218 facilitate key generation for secure communication between mobile communication device 116 and communication nodes.
At the outset of message flow, remote services server 106 is engaged in a communication session, which may be a key generation session or an OTA updating session, with mobile communication device 116. As part of the communication process, remote services server 106 sends message 500 from remote services server 106 to base station 114, which is forwarded as message 502 from base station 114 to transceiver 304 and message 504 from transceiver 304 to cpu 302 of mobile communication device 116. The content of messages 500, 502, 504 may vary from one embodiment to another, but in one embodiment messages 500, 502, 504 may represent an authentication or “challenge” message from remote services server 106 to mobile communication device 116 which only mobile communication device 116 would be capable of properly responding to. As an example, messages 500, 502, 504, may be encrypted in such a manner that only mobile communication device 116 would feasibly be capable of decrypting them.
While remote services server 106 is engaged in the communication session with mobile communication device 116, remote services server 126 attempts to initiate a key generation session with mobile communication device 116. Although the present disclosure employs the term “key generation” for simplicity, those of skill in the art will appreciate that this term may apply to either an initial key generation or a subsequent key generation. In an attempt to initiate a key generation session, remote services server 126 first sends message 506 from remote services server 126 to base station 114, which is forwarded as message 508 from base station 114 to transceiver 304. Because mobile communication device 116 is already engaged in an existing communication session 530 with remote services server 106, mobile communication device 116 is not able to engage in the requested key generation session with remote services server 126 at this point in time. Mobile communication device 116 will not be free to respond to a key generation request until the existing communication session 530 with remote services server 106 is complete. Accordingly, the key generation request 506 from remote services server 126 is moved, as message 510, from transceiver 304 to memory 335, where it is stored in the key generation request storage structure 216 within memory 335. Although messages 506, 508, 510 represent an external key generation request, essentially the same process to that described above is employed for internal key generation requests originating, for example, from a device user or resident application. As described in detail below, key generation request 506 from remote services server 126 will be handled after the completion of communication session 530 between mobile communication device 116 and remote services server 106.
Having temporarily handled key generation request 506 from remote services server 126 (i.e., a second communication node), mobile communication device 116 can complete communication session 530 with remote services server 106 (i.e., the first communication node). Mobile communication device 116 generates message 512 from cpu 302 to transceiver 304, forwarded as message 514 from transceiver 304 to base station 114 and then message 516 from base station 114 to remote services server 106. The content of this reply communication may vary from one embodiment to another, but in one embodiment messages 512, 514, 516 may represent a response to an encrypted challenge transmitted to mobile communication device 116 by remote services server 106. Where communication session 530 is a key generation session, messages 512, 514, 516 may contain a new encryption key generated by key generation module 218 to be used in future communication with mobile communication device 116.
Upon receipt of message 516, remote services server 106 generates message 518 from remote services server 106 to base station 114, which is forwarded as message 520 from base station 114 to transceiver 304 and message 522 from transceiver 304 to cpu 302. In certain embodiments, this group of messages may represent a second round of authentication. In other embodiments, this group of messages may contain data relating to provisioning or other logistical information. In certain embodiments, this group of messages may be an acknowledgment that mobile communication device 116 has been authenticated by remote services server 106.
Upon receipt of message 522, cpu 302 generates message 524 from cpu 302 to transceiver 304, which is forwarded as message 526 from transceiver 304 to base station 114 and message 528 from base station 114 to remote services server 106. As above, the content of these messages may vary, and may range from basic acknowledgment to detailed operational information. Implementation of any of these embodiments is well within the knowledge of those of skill in the art to which this disclosure pertains.
Delivery of message 528 to remote services server 106 represents completion of communication session 530 between remote services server 106 and mobile communication device 116. Upon completion of communication session 530, mobile communication device 116 is free to respond to key generation request 506 from remote services server 126, which was originally received during communication session 530. In order to respond to key generation request 506, cpu 302 first queries key generation request storage structure 216 for pending key generation requests, as represented by message 536 from cpu 302 to memory 335. Memory 335 responds in the form of message 538 from memory 335 to cpu 302. Under the circumstances shown in
Upon receipt of message 538 identifying key generation request 506 from remote services server 126, cpu 302 initiates key generation session 534 in association with key generation module 218 within mobile communication device 116. Cpu 302 initiates key generation session 534 by generating message 540 from cpu 302 to transceiver 304, which is forwarded as message 542 from transceiver 304 to base station base station 114 and message 544 from base station 114 to remote services server 126.
Upon receipt of message 544, remote services server 126 generates message 546 from remote services server 126 to base station 114, which is forwarded as message 548 from base station 114 to transceiver 304 and message 550 from transceiver 304 to cpu 302. Upon receipt of message 550, cpu 302 generates message 552 from cpu 302 to transceiver 304, which is forwarded as message 554 from transceiver 304 to base station 114 and message 556 from base station 114 to remote services server 126. In certain embodiments, messages 552, 554, 556 will contain a new encryption key generated by key generation module 218 in response to the key generation request by remote services server 126.
The process of key generation depicted in the message flow of
Request handling process 602 runs generally parallel to request receipt process 600 described above. In block 610, the device waits for a pending key generation request to be stored in the key generation request storage structure 216 within flash memory 335. If there is a key generation request stored therein, process flow proceeds to block 612, where a stored key generation request is retrieved from the key generation request storage structure 216 within flash memory 335. If there is more than one key generation request record stored within the key generation request storage structure 216, an algorithm is used in order to determine which record is to be retrieved first. As discussed above, certain embodiments of the present disclosure may employ a simple “first-in, first-out” queueing algorithm. Other embodiments may employ alternate scenarios, which may include sorting or weighting the records according to one or more factors. In the embodiment depicted in
The key generation request record retrieved from key generation request storage structure 216 is processed in block 614. As noted above, process 602 runs generally in parallel to process 600. Accordingly, process 600 may in certain cases be adding new requests to key generation request storage structure 216 while process 602 is handling previously stored key generation requests. As also noted above, the key generation request record is generally maintained within flash memory 335 even after it is retrieved for processing. If a device reset or other event occurs interrupting the processing of the retrieved key generation request, process flow will generally return to block 610. Because the key generation request record was previously retained within flash memory 335, the key generation request will again be retrieved from flash memory 335 for processing. In the event of multiple resets or other interruptions, this sequence of steps may repeat multiple times until the key generation request is successfully processed. In certain cases, there may be some reason why a particular key generation request cannot be processed. For this reason, certain embodiments may provide an option for manual deletion of a particular key generation request. Once the key generation request is successfully processed or a manual delete of that record is requested, process flow proceeds to block 616, where the key generation request is deleted from flash memory 335. Process flow then proceeds back to block 610, where the device waits for the existence of other pending key generation requests within flash memory 335.
It is believed that the operation and construction of the embodiments of the present disclosure will be apparent from the Detailed Description set forth above. While the exemplary embodiments shown and described may have been characterized as being preferred, it should be readily understood that various changes and modifications could be made therein without departing from the scope of the present disclosure as set forth in the following claims.
