| 摘要 |
The present invention relates to method for operating a trust center for distributing key material to at least one radio station, comprising the steps of at the trust center, dividing an identifier of the radio station, said identifier being a code word consisting a first number of bits, into a plurality of subidentifiers, and generating for each subidentifier, an keying material function selected out of a set of keying material functions on the basis of the considered subidentifier at the trust center, transmitting to the radio station the identifier and the key material comprising the generated encryption functions. |
| 主权项 |
1. A method of communicating from a first radio station to a second radio station, comprising:
at the first and second radio stations, receiving respectively a first and second identifiers and first and second keying materials, distributed from a trust centre in accordance with the following steps: dividing a hash output of a first identifier of the first radio station at the trust centre, said first identifier being a code word consisting of a first number of bits, generating for each sub-identifier at the trust centre, a keying material function selected out of a first set of keying material functions on the basis of the considered sub-identifier, and transmitting from the trust centre to the first radio station the first identifier and the first set of keying material comprising a set of generated encryption functions, dividing a second identifier of the second radio station at the trust centre, said second identifier being a code word consisting of a first number of bits, into a plurality of sub-identifiers, generating for each sub-identifier at the trust centre, a keying material function selected out of a second set of keying material functions on the basis of the considered sub-identifier, and transmitting from the trust centre to the second radio station the second identifier and the second set of keying material comprising the generated encryption functions, at the first radio station transmitting the first identifier to the second radio station, at the second radio station computing a second encryption key based on the second keying material and the first identifier, and sending a first message to the first station by means of the second encryption key, at the first radio station, checking whether the first message is valid before starting the communication with the second radio station, wherein the second encryption key is obtained by
(a) generating a set of subkeys by means of the set of keying material functions of the second key material applied over the first identifier,(b) obtaining the second encryption key from the concatenation of the subkeys. |
