Selectable tunnel encryption level management for multi access user equipment

Patent metadata

Field	Value
Publication number	US-11849314-B2
Application number	US-202117340125-A
Country	US
Kind code	B2
Filing date	Jun 7, 2021
Priority date	Jun 9, 2020
Publication date	Dec 19, 2023
Grant date	Dec 19, 2023

Abstract

A method for ensuring secure wireless communication of a first device in a communication system includes: retrieving information about a type of trustiness of a first communication link of a first access technology and about a type of trustiness of a second communication link of a second access technology, wherein a second device and the first device are configured to communicate data with each other via the first communication link and the second communication link; determining, by a processor of the first device and/or a processor of the second device, security levels based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link.

First claim

The invention claimed is:

1. A method for providing secure wireless communication of a first device in a communication system, wherein the method comprises:
retrieving information about a type of trustiness of a first communication link of a first access technology and about a type of trustiness of a second communication link of a second access technology, wherein a second device and the first device are configured to communicate data with each other via the first communication link and the second communication link; and
setting up, by a processor of the first device and/or a processor of the second device, security level(s) for the first and second communication links based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein setting up the security level(s) comprises:
setting up a uniform dynamic security level for both the first and second communication links based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein the dynamic security level is adjustable during communication over the first and second communication links; or
setting up a first security level for the first communication link and a second security level for the second communication link based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein the first security level is different from the second security level.

2. The method of claim 1 , further comprising:
analyzing the data before transmission and determining a security demand level of the data.

3. The method of claim 2 , wherein the data is analyzed with respect to deep packet inspection (DPI), protocol information and/or destination of data packets.

4. The method of claim 2 , wherein different data packets of the data have different security demand levels.

5. The method of claim 2 , wherein setting up the security level(s) is further based on the security demand level of the data.

6. The method of claim 2 , further comprising:
receiving, by a multipath scheduler, information about the security demand level of the data.

7. The method of claim 6 , further comprising:
scheduling, by the multipath scheduler, data packets of the data to the first communication link and the second communication link based on respective security demand levels of the data packets.

8. The method of claim 1 , further comprising:
receiving, by a multipath scheduler, information about type of trustiness of the data.

9. The method of claim 8 , further comprising:
scheduling, by the multipath scheduler, data packets of the data to the first communication link or the second communication link based on the type of trustiness of the data.

10. The method of claim 1 , wherein the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link is stored in a network entity, gained from user feedback, gained from Wi-Fi specifications, and/or gained from location information.

11. The method of claim 1 , wherein the first communication link and/or the second communication link is a tunneled communication link.

12. The method of claim 1 , wherein the first device is a user equipment (UE), and the second device is a server of a network provider.

13. The method of claim 1 , wherein the first device is a user equipment (UE) or a server of a network provider.

14. The method of claim 1 , further comprising:
scheduling, by a multipath scheduler, data packets of the data to the first communication link or the second communication link.

15. The method of claim 1 , wherein the level of trustiness of the first communication link is higher than the level of trustiness of the second communication link; and
wherein based on the level of trustiness of the first communication link being higher than the level of trustiness of the second communication link, the first communication link is set up with a lower security level than the second communication link.

16. The method of claim 15 , wherein the first communication link corresponds to a home-based Wi-Fi connection, and the second communication link corresponds to a foreign Wi-Fi connection.

17. A communication system for providing secure wireless communication of a user equipment (UE), wherein the communication system comprises:
a user equipment;
a server of a network provider; and
a network configured to provide a first communication link of a first access technology and a second communication link of a second access technology for communication of data between the UE and the server;
wherein a processor of the user equipment and/or a processor of the server is configured to:
retrieve information about a type of trustiness of the first communication link and about a type of trustiness of the second communication link; and
setting up security level(s) for the first and second communication links based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein setting up the security level(s) comprises:
setting up a uniform dynamic security level for the first communication link and the second communication link based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein the dynamic security level is adjustable during communication over the first and second communication links; or
setting up a first security level for the first communication link and a second security level for the second communication link based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein the first security level is different from the second security level.

18. The communication system of claim 17 , wherein the UE and/or the server comprises a multipath scheduler configured to distribute data packets of the data between the first and the second communication link.

19. A non-transitory computer-readable medium having processor-executable instructions stored thereon for providing secure wireless communication of a first device in a communication system, wherein the processor-executable instructions, when executed, facilitate:
retrieving information about a type of trustiness of a first communication link of a first access technology and about a type of trustiness of a second communication link of a second access technology, wherein a second device and the first device are configured to communicate data with each other via the first communication link and the second communication link; and
setting up, by a processor of the first device and/or a processor of the second device, security level(s) for the first and second communication links based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein setting up the security level(s) comprises:
setting up a uniform dynamic security level for the first communication link and the second communication link based on the information about the type of trustiness of the first communication link and about the type of trustiness of the second communication link, wherein the dynamic security level is adjustable during c

Assignees

• Deutsche Telekom Ag

Inventors

• Amend Markus

Classifications

• H04W12/037 Primary

  of the control plane, e.g. signalling traffic · CPC title

• H04L45/24

  Multipath · CPC title

• H04W72/12

  Wireless traffic scheduling · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04L63/105 Primary

  Multiple levels of security · CPC title