Securing method for lawful interception

Patent metadata

Field	Value
Publication number	US-10320850-B2
Application number	US-201615272927-A
Country	US
Kind code	B2
Filing date	Sep 22, 2016
Priority date	Jun 24, 2013
Publication date	Jun 11, 2019
Grant date	Jun 11, 2019

Abstract

A method is presented for secure communication, the method including generating a signature using a private key, a nonce, and at least one of an identifier and a key component; and transmitting the signature, the nonce, a security parameter, and the at least one of the identifier and the key component, wherein the security parameter associates a user identity with a public key, the public key being associated with the private key.

First claim

The invention claimed is:

1. A method, by an electronic device, for secure communication, comprising:
generating, by a processor of the electronic device, a signature using a private key, a nonce, and at least one of an identifier and a key component, at least the signature being destined for reception by at least one other electronic device;
establishing, by the processor, a secure communication session with at least one other electronic device based on generating the signature and at least session security data associated with the at least one other electronic device and obtained by the electronic device, wherein the session security data is generated, at least in part, by the at least one other electronic device.

2. The method of claim 1 , wherein the identifier is one of an International Mobile Station Equipment Identity (IMEI), a Globally Routable User Agent URI (GRUU), an International Mobile Subscriber Identity (IMSI), and a Temporary International Mobile Subscriber Identity (TIMSI).

3. The method of claim 1 , wherein the nonce is one of a timestamp, a random number, and a sequence number.

4. The method of claim 1 , wherein the secure communication session is further established with the at least one electronic device based on a security parameter, wherein the security parameter is a certificate that associates a user identity with a public key, the public key being associated with the private key.

5. The method of claim 1 , further comprising:
generating the key component using a master key, the nonce, and a known elliptic curve point.

6. The method of claim 1 , further comprising:
transmitting the signature and a public key associated with the private key.

7. The method of claim 1 , further comprising:
receiving the session security data, wherein the session security data comprises a second nonce, at least one of a second identifier and a second key component, a second security parameter, and a second signature that was generated using a second private key, the second nonce, and the at least one of the second identifier and the second key component, and
wherein establishing the secure communication session comprises
verifying the second nonce and the at least one of the second identifier and the second key component using the received second signature and the second security parameter, wherein the second security parameter associates a second user identity with a second public key, the second public key being associated with the second private key; and
generating a session key using the at least one of the second identifier and the second key component, when verification is successful in the verifying step.

8. A method, by an electronic device, for secure communication, comprising:
establishing, by a processor of the electronic device, a secure communication session with at least one other electronic device based on session security data associated with the at least one other electronic device and obtained by the electronic device, wherein the session security data is generated, at least in part, by the at least one other electronic device, the session security data comprising
a nonce, at least one of an identifier and a key component, a security parameter, and a signature that was generated by the at least one other electronic device using a private key, the nonce, and the at least one of the identifier and the key component.

9. The method of claim 8 , wherein prior to establishing the secure communication session, the method further comprising:
verifying the nonce and the at least one of the identifier and the key component using the received signature and the security parameter; and
generating a session key using the at least one of the identifier and the key component.

10. The method of claim 8 , further comprising, wherein establishing the secure communication session comprises:
generating a second signature using a second private key, a second nonce, and at least one of a second identifier and a second key component; and
transmitting the second signature, the second nonce, a second security parameter, and the at least one of the second identifier and the second key component, wherein the second security parameter associates a second user identity with a second public key, the second public key being associated with the second private key.

11. An apparatus for secure communication, comprising:
a processing circuit configured to generate a signature using a private key, a nonce, and at least one of an identifier and a key component; and
a transmitter configured to transmit session security data comprising the signature, the nonce, a security parameter, and the at least one of the identifier and the key component, where the session security data is destined for reception by at least one electronic device for establishing a secure communication session therewith, and wherein the security parameter associates a user identity with a public key, the public key being associated with the private key.

12. An apparatus for secure communication, comprising:
a processing circuit configured to establish a secure communication session with at least one other electronic device based on session security data associated with the at least one other electronic device and obtained by the electronic device, the session security data comprising a nonce, at least one of an identifier and a key component, a security parameter, and a signature that was generated by the at least one other electronic device using a private key, the nonce, and the at least one of the identifier and the key component.

Assignees

• Blackberry Ltd
• Certicom Corp

Inventors

• Buckley Michael Eoin
• Hollatz Michael Charles
• Lambert Robert John
• Ebeid Nevine Maurice Nassif

Classifications

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04L63/0435

  wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06) · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L9/3073

  involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing · CPC title

• H04M3/2281

  Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls · CPC title