Systems, methods and apparatus for detecting and correcting encryption errors

TECHNICAL FIELD

[0001] Embodiments of the present invention relate generally to communications technology and, in particular, to systems, methods and apparatus for detecting and correcting errors encryption.

BACKGROUND

[0002] The modern age of communication has led to a significant expansion of wireline and wireless networks. Computer networks, television networks, and telephony networks are experiencing an unprecedented technological expansion, fueled by consumer demand. Wireless and mobile networking technologies are related to the same consumer demand, thus providing more flexibility and efficiency of information transmission and provide convenience for the users. In parallel with the expansion of networks have been developed mobile computing devices that use the opportunities offered by wireless networks for mobile computing. As a result, mobile communication devices and wireless networks are widely used by consumers to support mobile computing for a wide range of communications.

[0003] In order to prevent a third party attempts to compromise the confidentiality of the data network, at least some of the data may be encrypted. Participation in the encrypted communication may require the recipient using the first set of one or more input parameters of the encryption to decrypt the received encrypted data. The first set of input parameters of the encryption may be synchronized with a second set of one or more input parameters of the encryption used by the sender to encrypt the data to ensure accuracy of decrypting the encrypted data by the recipient. When the first and second sets of input parameters are not synchronized encryption, encryption may fail when the recipient is not able to accurately decipher the encrypted data.

Brief description of some examples of the invention

[0004] Thus, a method, apparatus, and computer program products for detecting and correcting errors encryption. In this connection provides methods, devices and computer program products that can provide several benefits to the computing devices of users of computing devices and network operators. Embodiments of the invention provide a receiving device configured to determine the occurrence of errors encryption. In this regard, embodiments of the invention provide a receiving device configured to determine the occurrence of errors by comparing the value of encryption of decrypted data with the expected value to determine the expected value equal to the value of decrypted data. This comparison allows for some embodiments, detect error occurrence encryption regardless of the type of service that is associated with encrypted protocol data unit. Embodiments of the invention also provide a receiving device configured to initiate a procedure error correction encryption so that resynchronize a local set of one or more input parameters of the encryption used to decrypt the received encrypted data with a set of one or more input parameters of the encryption used by the transmitting apparatus for encrypting transmitting the encrypted data to the terminal. Some embodiments of the invention provide a receiving apparatus configured to initiate resynchronization radio link control in a transmitting apparatus for retiming one or more input parameters of the encryption. Embodiments of the invention also provide a receiving device configured for autonomous resynchronisation one or more input parameters of the encryption by selecting the most likely alternative value for at least one or more input parameters of the encryption.

[0005] In the first embodiment, a method which comprises using a first set of one or more input parameters of the encryption to decrypt the encrypted data in the received protocol data unit. In the method according to the present embodiment, the encrypted data was encrypted using the second set of one or more input parameters of the encryption. The method according to the present embodiment also includes comparing a value of at least a portion of the decrypted data with the expected value. The method according to the present embodiment also includes the determination of the error of encryption when the value of at least part of the decrypted data does not match the expected value. The method according to the present embodiment further includes initiating a resynchronization procedure encryption in response to a determination that an error has occurred encryption to resynchronize at least one input parameter of the encryption of the first set of at least one input parameter of the encryption of the second set.

[0006] As another example of the invention, an apparatus is provided. The apparatus in this embodiment includes at least one processor and at least one memory storing computer program code, wherein at least one memory and stored computer program code are configured, with the at least one processor for controlling the apparatus so that it uses at least at least a first set of one or more input parameters of the encryption to decrypt the encrypted data in the received protocol data unit. In the apparatus according to the embodiment of the encrypted data was encrypted using the second set of one or more input parameters of the encryption. At least one memory and stored computer program code is further configured, together with at least one processor for controlling the apparatus so that it compares the value of at least part of the decrypted data with the expected value. At least one memory and stored computer program code is further configured, together with at least one processor for controlling the apparatus so that it determines the occurrence of the error of encryption when the value of at least part of the decrypted data does not match the expected value. At least one memory and stored computer program code is further configured, together with at least one processor for controlling the apparatus so that it initiates a resynchronization encryption in response to determining that an error occurred encryption to resynchronize at least one inlet encryption parameter from the first set of at least one input parameter of the encryption of the second set.

[0007] As another example, a computer program product. The computer program product includes at least one computer-readable medium having stored thereon computer readable program instructions. The computer-readable program instructions may include a plurality of program instructions. Although this brief description of the program instructions are ordered, it will be understood that this brief description is only exemplary and the order of the commands given only for ease of description, the computer program product. An exemplary procedure in any way does not limit the implementation of the relevant computer program instructions. The first program command according to the present embodiment is configured to use the first set of one or more input parameters of the encryption to decrypt the encrypted data received PDU. Encrypted data according to the present embodiment has been encrypted using a second set of one or more input parameters of the encryption. A second software command according to the present embodiment is configured to compare a value of at least a portion of the decrypted data with the expected value. Third program command according to the present embodiment is configured to determine the occurrence of errors of encryption when the value of at least part of the decrypted data does not match the expected value. The fourth program command according to this embodiment is configured to initiate resynchronization encryption procedures in response to determining that an error has occurred encryption to resynchronize at least one input parameter encryption of the first set of at least one input parameter of the encryption of the second set.

[0008] In another embodiment, an apparatus is provided which includes means for using the first set of one or more input parameters of the encryption to decrypt the encrypted data received PDU. Encrypted data according to the present embodiment has been encrypted using a second set of one or more input parameters of the encryption. The apparatus according to the present embodiment further comprises means for comparing the value of at least part of the decrypted data with the expected value. The apparatus according to this embodiment further includes means for determining error occurrence encryption when the value of at least part of the decrypted data does not match the expected value. The apparatus according to the present embodiment further comprises means for initiating resynchronization encryption procedure in response to determining that an error occurred encryption to resynchronize at least one input parameter of the encryption of the first set of at least one input parameter of the encryption of the second set.

[0009] The foregoing brief description is given only for general representation of several examples of the invention to provide a basic understanding of some aspects of the invention. Accordingly, it should be noted that the above examples are only some examples and should not be construed to narrow the scope or spirit of the invention. It should be noted that the present invention encompasses many potential embodiments, some of which will be described below in addition to those described here briefly.

BRIEF DESCRIPTION OF DRAWINGS

[0010] Having described the embodiments of the invention outlined below are considered the accompanying drawings, which are not necessarily to scale and in which:

[0011] Figure 1 shows a system of detecting and correcting errors in the encryption according to an embodiment of the present invention;

[0012] Figure 2 is a schematic block diagram of a mobile terminal according to an embodiment of the present invention;

[0013] Figure 3 shows a flowchart in accordance with an example of a method of detecting and correcting errors in the encryption according to an embodiment of the present invention;

[0014] Figure 4 shows a flowchart in accordance with an example of a method for detecting and correcting errors encryption according to an embodiment of the invention;

[0015] Figure 5 shows a flowchart in accordance with an example of a method for detecting and correcting errors encryption according to an embodiment of the invention; and

[0016] Figure 6 shows a flowchart in accordance with an example of a method for detecting and correcting errors encryption according to an embodiment of the invention.

Detailed description

[0017] Some embodiments of the present invention will now be described in more detail with reference to the accompanying drawings, in which some, but not all embodiments of the invention. The invention may be embodied in different forms and should not be construed as limited to the embodiments set forth, but these embodiments are provided so that the description satisfies the legislative requirements. Identical reference numbers always refer to the same elements.

[0018] As used herein, the term "circuitry" refers to the following: (a) only to the hardware implementation of the scheme (e.g., implementation of analog circuits and / or digital circuits), (b) a combination of circuit and computer program products, including software instructions and / or firmware stored in one or more computer readable memory, which work together with managing device to perform one or more functions described herein, (c) schemes such as, for example, a microprocessor (s) or part of the microprocessor (s) which require software or firmware to operate, even if the software or built-in program is not physically present. This definition of the term "diagram" refers to all uses of the term, including all claims. As another example used herein, the term "circuit" also includes the realization that includes one or more processors and / or part (s) and associated software and / or firmware. As an additional example used herein, the term "circuit" also includes, for example, integrated circuits or baseband processor integrated circuit to a mobile phone application or other similar integrated circuits on a server in a cellular network device, another network device and / or another computer device.

[0019] Figure 1 shows a block diagram of a system 100 for detecting and correcting errors in the encryption according to an embodiment of the present invention. As used herein, the term "sample" means a "shown as an example", and as such represents one example embodiment of the invention, and in any case should not be construed as narrowing the scope or spirit of the invention. It should be noted that the invention encompasses many potential embodiments in addition to those shown and described herein. Thus, while Figure 1 shows one example of the configuration of the system for detecting and correcting errors of encryption can be used many other configurations for implementing embodiments of the present invention.

[0020] In at least some embodiments, the system 100 includes a receiver 102 coupled to the transmitter 104 over a network 108. Network 108 may include a wireless network, wired network, or a combination thereof. In one embodiment, network 108 includes a cellular network or PLMN of use, which for example may be designed to operate in accordance with the standards of the third generation partnership project (Third Generation Partnership Project, 3 GPP). The network 108 may include the Internet.

[0021] The receiving device 102 may be configured as one or more computer devices. For example, the receiving device 102 may be configured as a desktop computer, a laptop, a mobile terminal, a mobile computer, mobile phone, mobile communication device, a gaming device, digital camera / camcorder, audio / video player, a television device, a radio, a digital video recorder, a positioning device , any combination thereof, and / or similar devices for receiving data over the network 108 that have been encrypted and / or transmitted by the transmitting device 104. As another example, the receiving device 102 may include a network node (e.g., RNC, radio network controller, RNC), mobility management entity (mobility management entity, MME, and the like) for decrypting the data transmitted by the transmitting device 104, an access point (e.g., a base station, the base transceiver, the modified base transceiver and / or another access point network) for providing access to a network 108 and receiving encrypted data from the transmitting device 104, any other network node adapted to perform at least some of the functions relating to this transmitting device 104, some combination thereof, etc.

[0022] The transmitter 104 may also be configured as one or more computer devices. For example, the transmitter 104 may be configured as a desktop computer, a laptop, a mobile terminal, a mobile computer, mobile phone, mobile communication device, a gaming device, digital camera / camcorder, audio / video player, a television device, a radio, a digital video recorder, a positioning device , any combination of these and / or similar devices for encryption and / or transmission network 108 the data that have been encrypted, the receiving device 102. As another example, transmitting apparatus 104 may be a network node (e.g., radio network controller, RNC ), mobility management entity (MME) and the like, designed to encrypt data and transmit them to the receiver 102, an access point (e.g., a base station, the base transceiver, the modified base transceiver and / or other network access point) intended to provide access to the network 108 and transmit the encrypted data to the receiving device 102, any other network node adapted to perform at least some of the functions relating to this transmitting device 104, some combination thereof, etc. In an embodiment, receiver 102 and / or transmitting device 104 formed as a mobile terminal, such as shown in Figure 2. In this regard, Figure 2 shows a diagram of a mobile terminal 10 representative of one embodiment of a receiving device 102 and / or transmitting device 104 in accordance with embodiments of the present invention. It should be noted, however, that the mobile terminal 10 is illustrated and hereinafter described is merely illustrative of one type of receiver 102 and / or the transmitting device 104, which can be used in the present invention, and therefore should not be construed as limiting the scope of the invention. Although there are illustrated and will be described as an example several options for electronic devices, other electronic devices, such as mobile phones, mobile computers, portable digital assistants (portable digital assistants PDA), pagers, laptop computers, desktop computers, gaming consoles, televisions, and other electronic system can use embodiments of the present invention.

[0023] As shown, the mobile terminal 10 may include an antenna 12 (or multiple antennas 12) connected to a transmitter 14 and a receiver 16. The mobile terminal 10 may also include a processor 20 for transmitting signals to a transmitter and receiving signals from the receiver. Processor 20 may for example be configured in a variety of means, including circuitry, one or more microprocessors with accompanying digital signal processors, one or more processors without accompanying a digital signal processor, one or more co-processors, one or more multi-core processors, one or more controller, processor circuits, one or more computers, and various other processing elements including integrated circuits such as, for example, application specific integrated circuit ASIC (application specific integrated circuit) or a field programmable gate array FPGA (field programmable gate array) or some combinations thereof. Thus, while Figure 2 shows one processor in some embodiments, processor 20 comprises a plurality of processors. Signals sent and received by the processor 20, may include signaling information in accordance with the air interface standard corresponding to the cellular system, and / or any number of various wired and wireless network technologies, including but not limited to, Wireless-Fidelity (Wi-Fi), wireless access technology LAN (wireless local access network WLAN), such as standards of the Institute of Electrical and Electronics Engineers (Institute of Electrical and Electronics Engineers, IEEE) 802.11, 802.16, etc. Furthermore, these signals may include speech data, data generated by the user, the data requested by the users, etc. In this regard, the mobile terminal can operate with one or more radio-interface standards, communication protocols, modulation types, access types, etc. In particular, the mobile terminal may operate in accordance with different communication protocols of the first generation (1G), second generation (2G), 2.5G, third-generation (3G), fourth generation (4G), Internet Protocol Multimedia Subsystem (IMS), including For example, Session Initiation Protocol (SIP), etc. For example, the mobile terminal may operate in accordance with a wireless communication protocol 2G IS-136 (Time Division Multiple Access, TDMA), global system for mobile communications (Global System for Mobile communications, GSM), IS-95 (Code Division Multiple Access, CDMA) etc. Furthermore, for example, the mobile terminal may operate in accordance with 2.5G wireless communication protocol-General Packet Radio Service (GPRS), Enhanced Data GSM Environment (EDGE), etc. Furthermore, for example, the mobile terminal may operate in accordance with a wireless communications protocol 3G, such as the universal mobile telecommunications system (Universal Mobile Telecommunications System, UMTS), code division multiple access (Code Division Multiple Access 2000, CDMA2000), wideband multiple access code division (Wideband Code Division Multiple Access, WCDMA), multiple access and time division synchronized code division (Time Division-Synchronous Code Division Multiple Access, TD-SCDMA), etc. The mobile terminal may for example be used for transmitting and / or receiving data transmitted in accordance with high-speed protocol packet access downlink (high-speed downlink packet access HSDPA), high speed protocol packet access uplink communication (high-speed uplink packet access, HSUPA), etc. The mobile terminal may further operate in accordance with 3.9G wireless communication protocols, such as Long Term Evolution (LTE) and enhanced universal terrestrial radio access network (Evolved Universal Terrestrial Radio Access Network, E-UTRAN) etc. Furthermore, for example, the mobile terminal may operate in accordance with a wireless communication protocol of the fourth generation (4G) and the like, as well as similar wireless communication protocols that may be developed in the future.

[0024] Some mobile terminals improved narrowband mobile telephone system (Narrow-band Advanced Mobile Phone System, NAMPS), as well as total access communication system (Total Access Communication System, TAGS), may also benefit from embodiments of the present invention as telephones dual mode or higher (e.g., digital / analog or TDMA / CDMA / analog phones). Furthermore, the mobile terminal 10 may operate in accordance with protocols Wireless Fidelity (Wi-Fi) or global interoperability for microwave access (Worldwide Interoperability for Microwave Access, WiMAX).

[0025] Obviously, the processor 20 may comprise circuitry for implementing audio / video and logic functions of the mobile terminal 10. For example, processor 20 may include a digital signal processor device, a microprocessor device, an analog-digital converter, a digital to analog converter, etc. The control and signal processing of the mobile terminal may be allocated between these devices according to their capabilities. The processor may further include an internal voice coder (voice coder, VC) 20a, an internal data modem (data modem, DM) 20b, etc. Furthermore, the processor 20 may include functions for controlling one or more programs that may be stored in memory. For example, the processor 20 can manage the application connection, such as a web browser. Connection Software may allow the mobile terminal 10 transmit and receive Web content, such as localized content, in accordance with the protocol, such as Wireless Application Protocol (Wireless Application Protocol, WAP), hypertext transfer protocol (hypertext transfer protocol HTTP) and so on. P. The mobile terminal 10 may use the transmission control protocol / Internet protocol (Transmission Control Protocol / Internet Protocol, TCP / IP) to transmit and receive Web content via the Internet or other networks.

[0026] The mobile terminal 10 may also comprise a user interface including, e.g., the earphone or speaker 24, Up 22, microphone 26, display 28, user input interface and the like which can be operatively connected to the processor 20. In this regard, the processor 20 may include a user interface circuit configured to control at least some functions of one or user interface elements, such as, for example, a speaker 24, Up 22, microphone 26, display 28, etc. Processor 20 and / or a diagram of a user interface comprising a processor 20 may be configured to control one or more functions of one or more elements of the user interface using the computer program instructions (e.g., software and / or firmware) stored in memory accessible CPU 20 (e.g., volatile memory 40, nonvolatile memory 42 and the like). Although not shown, the mobile terminal may comprise a battery for powering various circuits related to the mobile terminal, such as circuits for providing mechanical vibration as a detectable output. The user input interface may comprise devices allowing the mobile terminal to receive data, such as a keyboard 30, a touch display (not shown), a joystick (not shown) and / or other input device. In embodiments with a keyboard Keyboard can contain numeric (0-9) and related (* #) button and / or other keys to control the mobile terminal.

[0027] As shown in Figure 2, the mobile terminal 10 may also include one or more devices to share information and / or receiving data. For example, the mobile terminal can include a radio frequency (RF) transceiver near field and / or interrogator 64 so that data can be transmitted and / or obtained from electronic devices in accordance with RF techniques. The mobile terminal may comprise other transceivers short range such as, for example, infrared (IR) transceiver 66, transceiver 68 Bluetooth ™ (BT), working using a wireless technology developed by the Bluetooth ™ Special Interest Group, transceiver 70 Wireless Universal Serial Bus (wireless universal serial bus WUSB), etc. 68 Bluetooth ™ transceiver is capable of operating in accordance with the Bluetooth ™ technology, ultra-low power (eg, radio standard Wibree ™). In this regard, the mobile terminal 10 and, in particular, short-range transceiver capable of transmitting and / or receiving data from electronic devices in the vicinity of the mobile terminal, such as within 10 meters away. Although not shown, the mobile terminal can transmit and / or receiving data from electronic devices according to various wireless networking techniques, including Wireless Fidelity (Wi-Fi), WLAN techniques such as the techniques IEEE 802.11, IEEE 802.16, and so on. P.

[0028] The mobile terminal 10 may comprise memory, such as module 38 identifying the subscriber (subscriber identity module, SIM), a removable user identity module (removable user identity module, R-UIM), Universal Subscriber Identity Module (universal subscriber identity module, USIM ) and the like, which may store information elements related to a mobile subscriber. In addition to the SIM, the mobile terminal may comprise other removable and / or fixed memory. The mobile terminal 10 may include volatile memory 40 and / or nonvolatile memory 42. For example, volatile memory 40 may comprise RAM (Random Access Memory RAM), including dynamic and / or static RAM, on-chip cache or memory vnekristalnuyu etc . Nonvolatile memory 42, which can be embedded and / or removable, may include, for example, read-only memory, flash memory, magnetic storage devices (e.g., hard disk drives, floppy disks, magnetic tapes, etc.), drives optical disc and / or optical disks, non-volatile memory (non-volatile random access memory NVRAM), etc. As the volatile memory 40, nonvolatile memory 42 may comprise a sector cache to store data temporarily. Memory may store one or more programs, instructions, pieces of information, data and the like which can be used by the mobile terminal for performing functions of the mobile terminal. For example, memory may include identification codes, such as an international mobile equipment identity code (mobile equipment identification (IMEI) code), capable of uniquely identifying the mobile terminal 10.

[0029] Returning to Figure 1, in the embodiment, receiving device 102 includes a variety of devices, such as processor 110, memory 112, communication interface circuitry 114 and 118 controls decryption to perform various functions described herein. These means receiving device 102 described herein may be implemented, for example, a diagram of hardware elements (such as suitably programmed processor, combinational logic circuit, and the like), a computer program product comprising computer-readable program instructions (e.g., software or firmware) stored on a computer readable medium (e.g., memory 112) controlled respectively-arranged processing unit (e.g., processor 110), or combinations thereof.

[0030] The processor 110 may, for example, be configured in a variety of devices, including one or more microprocessors with accompanying digital signal processor, one or more processors without accompanying a digital signal processor, one or more co-processors, one or more multi-core processors, one or a controller, processor circuitry, one or more computers, and various other processing elements including integrated circuits such as, for example, application specific integrated circuit ASIC (application specific integrated circuit), or field programmable gate array FPGA (field programmable gate array) or some combination thereof. Thus, while Figure 1 shows one processor in some embodiments, processor 110 comprises a plurality of processors. A plurality of processors can be functionally related to each other and may be designed to implement, together with one or more functionalities of the receiving device 102 as described herein. In embodiments where the receiver 102 is designed as a mobile terminal 10, the processor 110 may be implemented as, or may include a processor 120. In the exemplary embodiment, processor 110 for executing instructions stored in memory 112 or otherwise accessible to the processor 110 . These commands, when executed by the processor 110 can control the receiver 102 to implement one or more of the functional capabilities of the receiving device 102 as described herein. The processor 110 configured hardware, or in software, or combination thereof, may comprise a device capable of performing operations in accordance with embodiments of the present invention, if configured. For example, when the processor 110 is configured in the form of ASIC, FPGA and the like, the processor 110 may comprise a specially configured hardware for carrying out one or more operations described herein. Furthermore, as another example, when processor 110 is in the form of artist command, for example, stored in memory 112, instructions may specifically configure the processor 110 to perform one or more algorithms and operations described herein.

[0031] Memory 112 may include, for example, volatile and / or nonvolatile memory. Although Figure 1 shows one memory, memory 112 may comprise a plurality of memories. Memory 112 may include volatile memory, a volatile memory or a combination thereof. In this regard, memory 112 may include, for example, hard disk drive, memory, cache memory, flash memory, memory, a compact disc read-only (compact disc read only memory CD-ROM), memory in the form of a digital versatile disc read only (digital versatile disc read only memory DVD-ROM), an optical disk, a circuit for storing information, or combinations thereof. In embodiments where the receiver 102 is designed as a mobile terminal 10, the memory 112 may include volatile memory 40 and / or non-volatile memory 42. The memory 112 may be configured to store information, data, applications, commands, etc. to control the receiver 102 to perform a variety of functions in accordance with embodiments of the present invention. For example, in at least some embodiments, memory 112 is configured to buffer input data for processing by the processor 110. Additionally, or at least in some embodiments, memory 112 configured to store program instructions for execution of processor 110. Memory 112 may store information in a static and / or dynamic information. This stored information can be stored and / or used in the control circuit 118 during the decryption performance of its functions.

[0032] The communication interface 114 may be implemented as any device or means represented as a circuit hardware, software product comprising computer readable instructions stored on a computer readable medium (e.g., memory 112), and controls the processing unit (e.g., processor 110 ), or a combination thereof that is configured to receive and / or transmit data from / to a device of the system 100, such as, for example, the sending device 104. In at least one embodiment, communication interface 114, at least partially, configured in the form of or otherwise controlled by the processor 110. In this regard, the communication interface 114 may be coupled to the processor 110, such as via a bus. Communication interface 114 may include, for example, an antenna, a transmitter, a receiver, a transceiver and / or supporting hardware or software for communication with one or more devices in the system 100. The communication interface 114 may be configured to receive and / or transmit data to using any protocol that can be used for communication between devices in the system 100. The communication interface 114 may be further coupled to a memory 112 and / or decryption circuit 118 controls, for example via the bus.

[0033] The circuit 118 controls decryption can be performed in a variety of devices such as a diagram, hardware, software product comprising computer readable instructions stored on a computer readable medium (e.g., memory 112) and executed by the processing unit (e.g., processor 110) or combinations thereof, and in one embodiment, processor 110 is configured / controlled by the processor 110. In embodiments where the control circuit 118 is separate from the decryption processor 110, decryption control circuit 118 may be coupled to the processor 110. The circuit 118 may include decryption control and / or be configured to implement at least some of the functionality of the control object radio link (radio link control, RLC), the object of the packet data convergence protocol (packet data convergence protocol PDCP), etc. Driving 118 control decryption may also communicate with one or more of the memories 112 or 114 communication interface, for example via the bus.

[0034] Referring now to the transmitter 104, in the example, the transmitter 104 includes various means such as a processor 120, memory 122, communication interface circuitry 124 and 126 controls encryption, to perform various functions described herein. These means transmitting device 104 as described herein may be implemented, for example, a diagram of hardware elements (such as suitably programmed processor, combinational logic circuit, and the like), a computer program product comprising computer-readable program instructions (e.g. , software or firmware) stored on a computer readable medium (e.g., memory 122) and executed correspondingly-configured processing unit (e.g., processor 120), or combinations thereof.

[0035] The processor 120 may, for example, be configured in a variety of devices, including one or more microprocessors with accompanying digital signal processor, one or more processors without a digital signal processor, one or more co-processors, one or more multi-core processors, one or more controller, processor circuitry, one or more computers, and various other processing elements including integrated circuits such as, for example, application specific integrated circuit ASIC (application specific integrated circuit), or field programmable gate array FPGA (field programmable gate array), or some combination thereof. Thus, while Figure 1 shows one processor in some embodiments, processor 120 comprises a plurality of processors. A plurality of processors can be functionally linked with one another and can be together configured to implement one or more functionalities of the transmitting device 104 as described herein. A plurality of processors may be implemented in a single computing device or distributed across multiple computing devices, together configured to implement one or more functionalities of the transmitting device 104 as described herein. In embodiments in which the transmitting device 104 is in the form of a mobile terminal 10, the processor 120 may be implemented as processor 20 or can include a processor 20. In the exemplary embodiment, processor 120 is configured to execute instructions stored in memory 122 or otherwise accessible to the processor 120. These commands, when executed by the processor 120, can control the transmission device 104 to implement one or more functionalities of the transmitting device 104 as described herein. The processor 120 configured hardware, or in software, or combination thereof, may comprise a device capable of performing operations in accordance with embodiments of the present invention, if configured. For example, when the processor 120 is configured in the form of ASIC, FPGA and the like, the processor 120 may comprise a specially configured hardware for performing one or more operations described herein. Furthermore, as another example, when processor 120 is in the form of artist command, for example, stored in memory 122, instructions may specifically configure the processor 120 to perform one or more algorithms and operations described herein.

[0036] Memory 122 may include, for example, volatile and / or nonvolatile memory. Although Figure 1 shows one memory, memory 122 may comprise a plurality of memories, a plurality of memories may be implemented in a single computing device or distributed between multiple computing devices. Memory 122 may include volatile memory, a volatile memory or a combination thereof. In this regard, memory 122 may include, for example, hard disk drive, memory, cache memory, flash memory, memory, a compact disc read-only (compact disc read only memory CD-ROM), memory in the form of a digital versatile disc read only (digital versatile disc read only memory DVD-ROM), an optical disk, a circuit for storing information, or combinations thereof. In those embodiments in which the transmitting device 104 is in the form of a mobile terminal 10, the memory 122 may include volatile memory 40 and / or non-volatile memory 42. The memory 122 may be configured to store information, data, applications, commands, etc. for controlling the transmitter 104 to perform various functions in accordance with embodiments of the present invention. For example, in at least some embodiments, memory 122 is configured to buffer input data for processing by the processor 120. Additionally, or at least in some embodiments, memory 122 configured to store program instructions for execution by processing unit 120. Memory 122 can store information in the form of static and / or dynamic information. This stored information can be stored and / or used in the control circuit 126 encryption in the performance of its functions.

[0037] The communication interface 124 may be implemented as any device or means in the form of a diagram, hardware, software product comprising computer readable instructions stored on a computer readable medium (e.g., memory 122) and executed by the processing unit (e.g., processor 120), or combination thereof that is configured to receive and / or transmit data from / to a device of the system 100, such as, for example, the receiving device 102. In at least one embodiment, communication interface 124, at least partially, formed or otherwise controlled processor 120. In this regard, the communication interface 124 may be coupled to the processor 120, such as via a bus. Communication interface 124 may include, for example, an antenna, a transmitter, a receiver, a transceiver and / or supporting hardware or software for communication with one or more devices in the system 100. The communication interface 124 may be configured to receive and / or transmit data using any protocol that can be used for communication between devices in the system 100. The communication interface 124 may be further coupled to a memory 122 and / or 126 controls encryption scheme, for example via the bus.

[0038] The circuit 126 controls the encryption can be performed in a variety of devices such as a diagram, hardware, software product comprising computer readable instructions stored on a computer readable medium (e.g., memory 122) and executed by the processing unit (e.g., processor 120) or combinations thereof, and in one embodiment, is formed / controlled by the processor 120. In embodiments where the control circuit 126 is separate from the encryption processor 120, encryption control circuit 126 may be coupled to the processor 120. The control circuit 126 may comprise encryption and / or be configured to implement at least some of the functionality of the control object radio link (radio link control, RLC), the object of the packet data convergence protocol (packet data convergence protocol PDCP), etc. Managing encryption circuit 126 may also communicate with one or more of the memories 122 or 124 communication interface, for example via the bus.

[0039] It should be noted that in some embodiments, receiving device 102 is configured to perform at least some of the herein described functions of the transmission device 104. In this regard, the receiving device 102 may include encryption control circuit 126, which may be implemented as a processor 110 or work under his direction. Furthermore, in some embodiments, the transmitting device 104 is configured to perform at least some of the functions described herein, a receiving device 102. In this regard, the transmitter 104 may include decryption control circuit 118, which may be implemented as a processor 120, or operate under its control. Accordingly, embodiments of the invention can facilitate the detection and correction of errors in encrypting uplink and downlink communications network.

[0040] The Encryption Control circuit 126 is configured in some embodiments to encrypt a data protocol data unit (protocol data unit, PDU), to be transmitted to the receiver 102. PDU may contain RLC PDU, PDCP PDU etc. PDU may comprise unacknowledged mode (unacknowledged mode, UM) PDU, so that the receiving apparatus 102 should not confirm reception UM PDU. In addition, PDU may include acknowledged mode (acknowledged mode, AM) PDU, so that the receiving device must acknowledge the receipt of 102 UM PDU. PDU may be associated with any of the various types of service, is carried between the receiving device 102 and transmitting device 104 or another device on the network 108. The service type includes a high-level communication application, a supporting unit PDU, transmitted to the receiving device 102. For example, the service type can include a voice-switched (circuit switched, CS), transmitted with the use of high-speed packet access (High Speed ​​Packet Access, HSPA). In another example, the type of service may include voice over Internet protocol (voice over Internet protocol, VolP), streaming service or other service in real time. Encryption Control circuit 126 may be configured to encrypt data with a set of one or more input parameters of the encryption. A set of one or more input parameters of the encryption may include, for example, one or more of the following: the key encryption (ciphering key, CK), COUNT-C, BEARER (e.g., the identifier of the radio channel), LENGTH (data length), DATA (encrypted parameter Data), etc. COUNT-C value may comprise and / or be identified based at least in part, the hyperframe number (Hyper Frame Number, HFN) and a sequence number (e.g., sequence number RLC SN). HFN may include field initialized as the initial value of the exchange between the transmitter 104 and the receiver 102 during establishment of a radio channel. RLC SN may contain a sequence number included in the header PDU, and may be increased by 1 for each transfer PDU. Circuit 126 controls encryption may use a set of input parameters to encrypt data using any codec such as, for example, adaptive multi-rate (Adaptive Multi-Rate, AMR) codec, the adaptive multi-rate wideband (AMR-Wideband, AMR-WM) codec, etc. .P.

[0041] Control circuit 126 may be pre-encrypted configured so as to include encrypted "expected value" in the PDU for transmission to the receiving apparatus 102. The expected value may comprise a value field of data blocks filling the insignificant information (padding field), a length indicator PDU header field, currently defined as R field (e.g., a PDCP PDU), and / or other values. For example, the field padding information may comprise one or more bits with the expected value of a receiving device 102 that include PDU to ensure alignment of data octets within the PDU. In another example, the length indicator may indicate the last octet of each RLC service data unit, included in the PDU (e.g., '1111101' for the voice mode CS HSPA). Thus, the expected values ​​may indicate the PDU size or otherwise expected by the receiver 102 value. In another example, PDU header may include a value that indicates the type of PDCP, which is associated with the PDCP PDU (e.g., '010' AMR PDCP PDU data for CS voice HSPA, '000' for the PDCP Data PDU in VolP, etc.) .

[0042] In some embodiments, the "expected value" is predetermined depending on the configuration of the system 100. Additionally or alternatively, circuit 126 controls encryption and decryption control circuit 118 can be configured to independently determine the expected value on the basis of at least partially type communication service for which data is transmitted between a receiver 102 and a transmitter 104 (e.g., the expected value in the PDU header). In another example, the encryption control circuit 126 may be configured to set the expected value and the expected value of the receiving device 102 during the connection setup phase (for example, at radio bearer setup, during resynchronization RLC etc.).

[0043] When a PDU, comprising the expected value of a receiving device 102, encrypted, communication interface 124 may transmit the PDU to the receiving device 102 where it can be accepted communication interface 114. The circuit 118 controls decryption in some embodiments is configured to use a set of one or more input parameters of the encryption circuit 118 controls supported decryption to decrypt the encrypted data in the received PDU. A set of one or more input parameters of the encryption may include, for example, one or more encryption keys (ciphering key, CK), COUNT-C, BEARER (identifier RB), LENGTH (data length), DATA (encrypted data parameters), and so on. P. Decryption control scheme 118 may be configured to use a set of input parameters with the purpose of decrypting the encrypted data using any codec control circuit 126 used to encrypt data.

[0044] After the decryption circuit 118 controls decryption of encrypted data, decryption control circuit 118, in some embodiments, it compares the values ​​of at least part of the decrypted data with the expected value. As described above, the expected value expected circuit 118 controls decryption may be pre-configured, selected circuit 126 controls encryption and quantity circuit 118 controls decryption based at least in part, network signaling, received by terminal 102, a specific circuit 118 controls decryption Based at least in part, the type of service that is associated with the received PDU, etc. At least part of the decrypted data may include a portion (e.g., title, field, etc.) PDU, which is the expected value. If the value of at least part of the decrypted data does not match the expected value, control circuit 118 in some embodiments decryption detects error occurrence encryption. Therefore, if the set of input parameters encryption used decryption control circuit 118 to decrypt the data synchronized with a set of input parameters of the encryption circuit 126 controls used to encrypt data, at least part of the decrypted data should be equal to the expected value.

[0045] The circuit 118 control decryption is configured in some embodiments to initiate the procedure for resynchronization encryption in response to determining that an error has occurred encryption to resynchronize at least one of the plurality of input parameters of the encryption scheme used 118 control decryption to decrypt the encrypted data in the received PDU ("first set of input parameters of the encryption") of at least one of the plurality of input parameters of the encryption scheme used 126 manage encryption for encrypting data PDU, transmitted to the receiving device 102 ("second set of input parameters of the encryption") . In this regard, the resynchronization at least one input parameter, the encryption of the first set of at least one input parameter of the encryption of the second set may include, for example, a standalone update circuit 118 controls decryption of one or more input parameters of the encryption of the first set based on the signal exchange to the transmitter 104, wherein the circuit 118 controls decryption and circuit 126 controls encryption of the transmitting device 104 sets one or more synchronized input encryption settings of the first and second set in step communication settings (e.g., setting a radio channel and / or process commands in the security mode ) and / or control circuit 118 and decryption circuit 126 controls encryption of a transmitting device 104 sets one or more input parameters of the encryption synchronized first and second set of communication setting step (for example, when setting a radio channel and / or procedures in the security mode command).

[0046] In some embodiments, the decryption control circuit 118 is configured to initiate a resynchronization procedure encryption by initiating a resynchronization procedure RLC (e.g., RLC reinstallation procedure when operating in AM or UM mode, RLC reset procedure when operating in AM mode, etc.) to initializing at least one input parameter encryption so that a first set of input parameters of the encryption resynchronize with the second set of input parameters of the encryption. In this regard, the receiver 102 and the transmitter 104 may be involved in the updating procedure the cell and the circuit 118 controls decryption and circuit 126 controls encryption can initiate resetting RLC or other RLC-procedure resynchronization in the procedure updates the cell so that the circuit 118 Control and decrypting encrypted control circuit 126 could initiate at least one input parameter of the encryption resynchronize (e.g., the value of COUNT-C, UM RLC SN, and the like).

[0047] In addition, or in addition, in some embodiments, control circuit 118 is configured to initiate the decryption procedure autonomous resynchronisation encryption. In this regard, the decryption control circuit 118 may be configured to select the most likely alternative value for at least one input parameter from a first set of encryption. The most likely alternative value may, for example, include an increase in the value of the input parameter encryption when encryption is an input parameter of a parameter that increases with each received PDU. For example, the decryption control circuit may be configured to increment the HFN COUNT-C to the current value of HFN + COUNT-C 1 as the most likely alternative value. Driving 118 decryption control can then be used to select the most probable alternative value for the at least one input parameter from the first set of encryption to decrypt the data in the received PDU, where the error occurred encrypt or decrypt data in the subsequent adoption PDU. If the selected at least one alternate most probable value for the input parameter is correctly synchronized encryption value (s), then at least part of the decrypted data will be equal to the expected value. If at least part of the decrypted data does not match the expected value, the first and second sets of input parameters of the encryption is not currently synchronized and the circuit 118 controls decryption may be configured to again select the most likely alternative value for one or more input parameters encrypt and decrypt the received PDU try again. The circuit 118 controls decryption may be configured to repeat the process of selecting the most plausible alternative values ​​for one or more input parameters of the encryption, while circuit 118 controls decryption autonomously not resynchronize at least one input parameter of the encryption of the first set of at least one input parameter encryption of the second set. Additionally or alternatively, circuit 118 control decryption can be configured to repeat the process of selecting the most plausible alternative values ​​for one or more input parameters encryption while circuit 118 control decryption will not make a certain number of failed attempts to choose the most likely alternative to one or more cryptographic input values, whereupon decryption control circuit 118 may start resynchronization RLC, as described above for the initialization of at least one input parameter in the encryption transmission apparatus 104. A certain number of failed autonomous resynchronisation may for example be signaled to the receiving apparatus 102 via signaling network (e.g., from the transmitter 104) or decryption control circuit 118 may be pre-configured so as to produce a certain number of unsuccessful attempts before initiating resynchronization RLC.

[0048] In some embodiments, circuit 118 controls decryption is not configured to initiate resynchronization encryption in response to each determination that an error has occurred encryption, but instead is configured to initiate resynchronization encryption after occurrence of a certain number of consecutive errors encryption (for example, for a certain number of consecutive received PDU). The set can contain a natural number greater than zero. Decryption control scheme 118 may be pre-configured to a predetermined number. In another example, the circuit 118 controls decryption may be configured to determine a predetermined number based, at least in part on the type of service with which the associated PDU (e.g., a predetermined number may be 3 to voice mode CS to HSPA and 10 for the streaming service) . Moreover or additionally decryption control circuit 118 may be configured to determine a predetermined number based, at least in part on the received network signaling message transmitted by the transmitting device 104. In this regard, encryption control circuit 126 may be configured to define a predetermined number of consecutive errors encryption that control decryption circuit 118 should detect before resynchronization encryption procedures. Encryption Control circuit 126 may then create a network signaling message, which defines a predetermined specific number, for transmission to the receiving device 102 communication interface 124. In embodiments in which the decryption control circuit 118 is configured to initiate a resynchronization procedure encryption after occurrence of a certain number of consecutive errors encryption circuit 118 controls decryption may be configured to change the count value based at least in part, and appeared consecutive errors encryption after the determination of the error encryption initiation procedures resynchronization encryption based, at least partially, a predetermined relationship between the counter value and a predetermined number. For example, the circuit 118 control decryption can be configured to increase or decrease the value of the counter, if the circuit 118 control decryption determines the appearance of the error of encryption, and the commencement of the resynchronization encryption when the counter value is equal to the threshold value, such as a specific number (for example, if there is an increase from the initial counter value equal to zero) or zero (for example, if there is a reduction from the initial count value equal to the predetermined number). It should be borne in mind, however, that increasing and decreasing counter values ​​are only offered as examples of how the decryption control circuit 118 may be configured to change the value of the counter in some embodiments. In addition, the initial values ​​and threshold values ​​are given as examples only, and decryption control circuit 118 may be configured to use other initial values ​​and thresholds.

[0049] In some embodiments, the decryption control circuit 118 is configured to allow error detection and verification of encryption to encrypt the occurrence of the error only if one or more conditions. For example, the decryption control circuit 118 may be configured to detect errors encryption only when it is configured by the transmitting device 104, for example via the signaling network, transmitted to the receiving device 102 transmitting device 104. In this regard, the control circuit 126 may be configured encrypting to enable and / or disable the error detection circuit 118 controls the encryption decryption by initiating the signaling network to enable and / or disable the error detection encryption transmitted to the receiving device 104. The transmitting device 102 network signaling may further comprise an indication of a certain number of consecutive errors encryption scheme that 118 control decryption should detect before the procedure resynchronization encryption. Additionally or alternatively, circuit 118 controls decryption may be configured to include an error detection encryption based at least in part, the type of service that is associated with the received PDU.

[0050] Figure 3 shows a flowchart in accordance with an example of a method of detecting and correcting errors encryption according to an embodiment of the invention. 3 illustrates operations that may be performed by a circuit 118 controls decryption. The method may comprise, when the decryption control circuit 118 initializes the value of at least one of the input parameters of the encryption of the first set of one or more input parameters of the encryption transmission apparatus 104 during an operation 300. Operation 310 may comprise the step of, when the control circuit 118 uses the decryption the first set of input parameters for encryption decryption of encrypted data in the received PDU. Decryption control scheme 118 may compare the value of at least part of the decrypted data with the expected value in an operation 320. Operation 330 may comprise, when control circuit 118 determines the occurrence of the error decryption of encryption when the value of at least a portion of the decrypted data does not match the expected value . The circuit 118 controls decryption may then initiate a resynchronization procedure encryption in response to detecting an error during an operation 340.

[0051] Figure 4 shows a flowchart in accordance with an example of a method for detecting and correcting errors encryption according to an embodiment of the invention. Figure 4 illustrates operations that may be performed by a circuit 118 controls decryption. The method may comprise, when the decryption control circuit 118 initializes the value of at least one of the input parameters of the encryption of the first set of one or more input parameters of the encryption transmission apparatus 104 during an operation 400. Operation 410 may comprise, when control circuit 118 determines decrypting a predetermined number of consecutive errors encryption which must occur prior to the procedure of resynchronization encryption during operation 410. The control scheme 118 may perform decryption determination at step 410 is based at least in part, the network signaling transmitted by the transmission device 104, and / or type of service that is associated with the received PDU. Operation 420 may comprise, when control circuit 118 detects the decryption of the given number of consecutive errors encryption decryption consecutive received PDU. The circuit 118 controls decryption may then initiate a resynchronization procedure encryption during operation 430 in accordance with the determination made as a result of operation 420.

[0052] Figure 5 shows a flowchart in accordance with an example of a method of detecting and correcting errors encryption according to an embodiment of the invention. 5 illustrates operations that may be performed by a circuit 126 controls encryption. Operation 500 may comprise the step of, when the control circuit 126 initializes the value encrypted at least one input parameter, the encryption of the second set of one or more input parameters for encryption for encrypting data using receiver 102. Control circuit 126 can use the encrypted second set of inputs encrypting for encrypting data in the PDU and transmission to the receiver 102 during an operation 510. Operation 520 may optionally include the step of, when the control circuit interacts encryption during the procedure of resynchronization encryption receiving apparatus 102 when the receiving apparatus detects an error encryption. Operation 520 may be performed in embodiments in which the decryption control circuit 118 is configured to initiate resynchronization RLC.

[0053] Figure 6 illustrates a flowchart according to an exemplary method for detecting and correcting errors encryption according to an embodiment of the invention. 6 shows the operations that can be performed by a circuit 126 controls encryption. Operation 600 may comprise, when control circuit 126 initializes the value encrypted at least one input parameter, the encryption of the second set of one or more input parameters of the encryption is used to encrypt the data via the receiving device 102. The encryption control circuit 126 may then initiate transmission of the message signaling network, configuring the encryption error detection, a receiver unit 102. The network signaling message may include instructions to implement encryption error detection receiver 102, where the team determined a specific number of consecutive errors encryption, the existence of which the receiving device 102 must determine before the procedure resynchronization encryption and / or a certain number of failed attempts resynchronization autonomous, always follow the receiver 102 before the procedure resynchronization RLC. Encryption Control circuit 126 can use a second set of inputs to encrypt data in the PDU and transmission to the receiver 102 during an operation 620. Operation 630 may optionally include the step of, when the control circuit interacts encryption during the procedure of resynchronization encrypting with a receiver 102, when the receiving device detects encryption error (e.g., a certain number of consecutive errors encryption). Operation 630 may be performed in embodiments in which the decryption control circuit 118 is configured to initiate resynchronization RLC.

[0054] Figures 3-6 are block diagrams of systems, methods and computer program products according to embodiments of the invention. It will be understood that each block or step of the flowchart, and combinations of blocks in the flowchart may be implemented by various means, such as hardware and / or computer program product comprising one or more computer-readable media with data stored on them computer-readable program instructions. For example, one or more procedures described herein may be implemented by computer program instructions of a computer program product. In this regard, the computer program products that embody the procedures described herein may be stored in one or more memory devices receiving apparatus 102, transmitting apparatus 104, mobile terminal, server, or other computing device and executed by a processor in a computing device ( for example, a processor 110 and / or processor 120). In some embodiments, computer program instructions, including computer program products that embody the procedures described above may be stored in the memory of several computing devices. It should be noted that any such computer program product may be loaded onto a computer or other programmable apparatus to create a machine, so that the computer program product including instructions that are executed on the computer or other programmable apparatus create means for implementing the functions specified in blocks or stages flowchart. Furthermore, the computer program product may comprise one or more computer-readable memory that can store computer program instructions, so that one or more computer readable memory can direct a computer or other programmable apparatus so that it is operated in a certain way so that the computer program product comprises device that implements the functions specified in the blocks or steps of a flow diagram. Computer program commands of one or more computer program products may be loaded onto a computer or other programmable apparatus to ensure that the number of operational stages in the computer or other programmable apparatus to perform a process while using the computer so that the commands that are executed on the computer or other programmable apparatus, would provide steps for implementing the functions specified in the blocks or steps of a flow diagram.

[0055] Thus, the blocks or steps of the flowchart support combinations of devices for performing the specified functions and combinations of steps for performing the specified functions. It should also be noted that one or more blocks or steps of the flowchart, and combinations of blocks or steps in the flowchart can be implemented by computer hardware special purpose systems which perform the specified functions or steps, or combinations of special products in the form of equipment and computer programs.

[0056] The above described functions may be implemented in different ways. For example, any suitable means for performing each of the functions described above may be used to implement embodiments. In one embodiment, the processor may be configured accordingly constitute all or part of elements of the invention. In another embodiment, all or part of elements of the invention can be configured to operate under the control of a computer program product. A computer program product for performing the methods according to embodiments of the invention includes a computer readable medium such as nonvolatile media, and computer-readable software code portions, such as a sequence of computer instructions embodied in a computer readable medium.

[0057] Some embodiments provide a number of advantages for the computing devices of users of computing devices and network operators. Embodiments of the invention provide a receiver for determining error occurrence encryption. In this regard, embodiments of the invention provide a receiver for determining error occurrence by comparing the value of encryption of decrypted data and the expected value to determine whether the value of the decrypted data with the expected value. This comparison makes it possible, for some embodiments, to determine error occurrence encryption regardless of the type of service that is associated with the encrypted data protocol block. Embodiments of the invention provide a receiver 102 designed to detect the occurrence of errors encryption in situations in which the CRC (cyclic redundancy check, CRC) for data protected by CRC, it may be inefficient.

[0058] Embodiments of the invention also provide a receiving device configured to initiate error correction encrypt to generate resynchronization local set of one or more input parameters of the encryption used to decrypt the received encrypted data by a set of one or more input encryption parameters used by the transmitting apparatus for encrypting data to be encrypted before transmission to the terminal. Some embodiments of the invention provide a receiver device configured to initiate resynchronization radio link control via a transmitter generating resynchronization one or more input parameters of the encryption. Embodiments of the invention also provide a receiving device configured for autonomous resynchronisation one or more input parameters of the encryption by selecting the most likely alternative value for at least one of the input parameters of the encryption. Embodiments of the invention provide means of network signaling a configuration error detection encryption and / or procedures to eliminate errors encryption resolve compatibility issues that may arise when the reception device configured to determine the occurrence of errors encryption and / or initiate error correction encryption transmits information on the network, not designed to support encryption error correction procedures.

[0059] Many modifications and other embodiments of the invention set forth herein, may be suggested by those skilled in the art to which this invention belongs, through explanations given in the preceding description in conjunction with the drawings. Therefore, it should be understood that the embodiments are not limited to the specific embodiments disclosed and that modifications and other embodiments are within the scope of the claims. Furthermore, although the above description and the accompanying drawings describe examples in the context of certain example combinations of elements and / or functions, it should be noted that other combinations of elements and / or functions may be provided in alternative embodiments without departing from the scope of the appended claims. In this regard, for example, different combinations of elements and / or functions than those described above may also be contained in some claims. Although specific terms are employed herein, they are used in a generic and descriptive sense only and not for purposes of limitation.