Reducing detectability of an encryption key

Patent metadata

Field	Value
Publication number	US-11032059-B2
Application number	US-201715457606-A
Country	US
Kind code	B2
Filing date	Mar 13, 2017
Priority date	Aug 25, 2011
Publication date	Jun 8, 2021
Grant date	Jun 8, 2021

Abstract

Methods and systems are provided for enhancing security of encrypted messages. One or more bits may be selected in an encrypted message, with the one or more bits being selected such that there is no sequence of consecutive bits in the message, having a length that is greater than or equal to a defined threshold value, that is free of bit errors. An adjustment may be applied to the encrypted message prior to transmitting the message to introduce bit errors in the message, with the adjustment being configured to affect the one or more selected bits. The adjustment may include inverting the one or more selected bits. The one or more bits may be selected and/or adjustment may be configured to reduce detectability of an encryption key used in encrypting messages.

First claim

What is claimed:

1. A method for controlling transmissions in a communication device, the method comprising:
generating a physical layer (L 1 ) based encrypted message, wherein the encrypted message is configured based on a wireless networking specification for communication in a corresponding wireless network;
selecting one or more bits in the encrypted message;
applying an adjustment to the encrypted message prior to transmitting the encrypted message to introduce bit errors in the encrypted message;
wherein:
the adjustment is configured to affect the one or more selected bits; and
the one or more selected bits are selected and the adjustment is configured such that there is no sequence of consecutive bits in the encrypted message that has a length that is greater than or equal to a defined threshold value and that is free of bit errors; and

transmitting the encrypted message over a wireless connection to a target communication device.

2. The method of claim 1 , wherein the adjustment comprises inverting the one or more selected bits.

3. The method of claim 1 , wherein the encrypted message is a physical layer data frame encoding a data link layer control frame, and comprising determining the one or more selected bits based on particular bit positions in the physical layer data frame.

4. The method of claim 1 , wherein the one or more selected bits are corrected at a receiver-side device by use of forward error correction.

5. The method of claim 1 , comprising determining the one or more selected bits at a physical layer.

6. The method of claim 5 , comprising determining the one or more selected bits so that the encrypted message contains at least one bit error within any sequence of consecutive bits having a particular length.

7. The method of claim 6 , comprising adjusting the particular length based on a desired lowered quality of transmission.

8. The method of claim 1 , comprising determining the one or more selected bits and/or configuring the adjustment to reduce detectability of an encryption key used in encrypting the encrypted message.

9. The method of claim 8 , wherein said encryption key is used in a GSM network to encrypt messages at a base station that uses an A5/1 cipher protocol.

10. A system comprising:
one or more circuits for use in a communication device for controlling transmissions, the one or more circuits are configured to:
generate a physical layer (L 1 ) based encrypted message, wherein the encrypted message is configured based on a wireless networking specification for communication in a corresponding wireless network;
select one or more bits in the encrypted message;
apply an adjustment to the encrypted message prior to transmitting the encrypted message to introduce bit errors in the encrypted message, the adjustment being configured to affect the one or more selected bits; and
transmit the encrypted message over a wireless connection to a target communication device;
wherein:
the adjustment is configured to affect the one or more selected bits; and
the one or more bits are selected and the adjustment is configured such that there is no sequence of consecutive bits in the encrypted message that has a length that is greater than or equal to a defined threshold value and that is free of bit errors.

11. The system of claim 10 , wherein the adjustment comprises inverting the one or more selected bits.

12. The system of claim 10 , wherein:
the encrypted message comprises a physical layer data frame encoding a data link layer control frame; and
the one or more circuits are configured to determine the one or more selected bits at particular positions in the physical layer data frame.

13. The system of claim 10 , wherein the one or more selected bits are corrected at a receiver-side device by use of forward error correction.

14. The system of claim 10 , wherein the one or more circuits are configure to set or adjust the adjustment to reduce detectability of an encryption key used in encrypting the encrypted message.

15. The system of claim 10 , wherein:
the communication device comprises a base station that is configurable to use an A5/1 cipher protocol; and
the one or more circuits are configured to determine the one or more selected bits and/or configure the adjustment to reduce detectability of an encryption key used in a GSM network when encrypting messages using the A5/1 cipher protocol.

16. The system of claim 10 , wherein the one or more circuits are configured to determine the one or more selected bits at a physical layer.

17. The system of claim 16 , wherein the one or more circuits are configured to determine the one or more selected bits so that the encrypted message contains at least one bit error within any sequence of consecutive bits having a particular length.

18. The system of claim 17 , wherein the one or more circuits are configured to adjust the particular length based on a desired lowered quality of transmission.

Assignees

• Swisscom Ag

Inventors

• Seiler Thomas
• Jarosch Andreas

Classifications

• H04L9/002 Primary

  Countermeasures against attacks on cryptographic mechanisms (network architectures or network communication protocols for protection against malicious traffic H04L63/1441) · CPC title

• H04L2209/80

  Wireless · CPC title

• H04L2209/16

  Obfuscation or hiding, e.g. involving white box · CPC title

• H04W12/037

  of the control plane, e.g. signalling traffic · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title