Abstract:
A method includes receiving an authentication request from a mobile station (401) and determining whether to forward the request to an authentication agent. When it is determined to forward the request, the request is forwarded to the authentication agent (107). A random number and a random seed are received from the authentication agent (107). The random number and the random seed are forwarded to the mobile station (401). A response to the random number and the random seed from the mobile station (401) is received and forwarded to the authentication agent (107). The authentication agent (107) compares the response with an expected response. When the authentication agent (107) authenticates the mobile station (401), a derived cipher key is received from the authentication agent (107).
Abstract:
A method of key distribution includes generating, by a first system device (101), key material and forwarding the key material from the first system device (101) to a second system device (107). It is determined whether a mobile station (401), for which the key material is directed, is active on the system. When the mobile station is active, the key material is forwarded to a base station (115) where the mobile station (401) is active, and the base station (115) forwards the key material to the mobile station (401).
Abstract:
The method generally includes the steps of receiving (201) a message (100) comprising a message indicator (101) and a plurality of encrypted blocks (103 through 111). When at least one block of the plurality of encrypted blocks is received with error, a second message is transmitted (215), which second message requests a retransmission of the at least one block. Upon receiving the retransmission of the at least one block without error, a keystream is generated (219) from the message indicator and the at least one block is decrypted using the keystream.
Abstract:
A method of decrypting retransmitted parts of a message includes receiving (201) a message comprising encryption synchronization and a plurality of encrypted blocks. Until a first block of the plurality of encrypted blocks is received with error, a first keystream is generated (205) from the encryption synchronization and at least one of the plurality of encrypted blocks, and, using the first keystream, the plurality of encrypted blocks, received without error before the first block of the plurality of encrypted blocks is received with error, is decrypted (207). A priming block is determined (211) from the message. When the first block of the plurality of encrypted blocks is received with error, a second message is transmitted (219) requesting a retransmission of the first block. Upon receiving the retransmission of the first block without error, a second keystream is generated (223) from the priming block and the retransmission of the first block and decrypting the retransmission of the first block is decrypted (225) using the second keystream.
Abstract:
In a cellular communication system (eg. TETRA), a receiver can continue to decrypt signals despite checksum errors arising from synchronisation verification failures on behalf of transmitters which do not use real time clocks to calculate the checksum. Synchronisation verification values are transmitted via half-slot stealing and verified according to a local time base, and a fall back mode is entered if the verification value is invalid which allows continued communication, perhaps with a warning that it may comprise a replay attack. Synchronisation may proceed on the basis of previously received parameters (eg a flywheel process). This method allows flexible interoperability in mixed groups of transceivers, some of which incorporate real time clocks and some of which don't. Such failures or errors would usually terminate the communication to protect against replay attacks.
Abstract:
A communication system comprises a first plurality of remote stations 107, 109, 111, belonging to a first call group 119 having an associated first encryption key and first encryption mode and a second plurality of remote stations 113, 115, belonging to a second call group 121 having an associated second encryption key and second encryption mode. The encryption mode is the mode of encryption to be used by the stations belonging to the call or talk group, for example, in accordance with the TETRA standards, four default encryption modes are possible: Mode 0 is non-encrypted transmission and non-encrypted reception, Mode 1 is non-encrypted transmission and encrypted or non-encrypted reception, Mode 2 is encrypted transmission and encrypted or non-encrypted reception and Mode 3 is encrypted transmission and encrypted reception. A group controller 117 forms a third call group 123 which comprises the first and second call groups 119, 121 and which has an associated third encryption key. When communicating on the third, merged call group, the first plurality of remote stations 107, 109, 111 use the third encryption key and the first encryption mode while the second plurality of remote stations 113, 115 use the third encryption key and the second encryption mode. The invention may provide an improved system for combining call groups supporting encrypted communication (e.g. talk groups of different emergency services) and is applicable to a TETRA (Terrestrial Trunked Radio) cellular communication system.
Abstract:
The method generally includes the steps of receiving (201) a message (100) comprising a message indicator (101) and a plurality of encrypted blocks (10 3 through 111). When at least one block of the plurality of encrypted blocks i s received with error, a second message is transmitted (215), which second message requests a retransmission of the at least one block. Upon receiving the retransmission of the at least one block without error, a keystream is generated (219) from the message indicator and the at least one block is decrypted using the keystream.
Abstract:
A communication system comprises a first plurality of remote (mobile) stations (107, 109, 111) belonging to a first call group (119) having an associated first encryption key and a first encryption mode. A second plurality of remote stations (113, 115) belongs to a second call group (121) having an associated second encryption key and a second encryption mode. A group controller (117) forms a third call group (123) which comprises the first and the second call groups (119, 123) and which has an associated third encryption key. When communicating on the third, combined call group, the first plurality of remote stations (107, 109, 111) use the third encryption key and the first encryption mode whereas the second plurality of remote stations (113, 115) use the third encryption key and the second encryption mode. The invention may provide an improved system for combining call groups supporting encrypted communication. The invention is applicable to a TETRA (TErrestrial Trunked RAdio) cellular communication system.