Abstract: Disclosed is an apparatus and method for data transmission/reception in a mobile telecommunication system, and more particularly to an apparatus and method for data transmission/reception in a mobile telecommunication system employing an Orthogonal Frequency Division Multiplexing (OFDM) scheme. The method includes identifying a CHannel IDentifier (CH_ID), which represents a first resource indicated by a Forward Shared Control CHannel (F-SCCH) among all resources; identifying a second resource indicated by resource assignment information for group terminals; and when the first resource includes all or a part of the second resource, and a third resource unused by the group terminals exists in the entire or part of the second resource, transmitting/receiving data by means of the third resource and a fourth resource, which is a remaining part of the first resource excluding the second resource.

Abstract: Disclosed is a method of preventing a replay attack during a handoff in a communication system using a Mobile IPv6 protocol. A mobile node creates a CoA (Care of Address) by handoff and sends the CoA to a correspondent node, thereby creating a binding entry. Upon receipt of a binding update message including a HoA and a CoA from the mobile node or an attacker, the correspondent node searches a binding cache for a binding entry having the same HoA (Home Address) and CoA as included in the binding update message. If it is determined that the binding entry has the same respective HoA and CoA as contained in the binding update message, the correspondent node checks a Used field of the binding entry. If it is determined that the Used field of the binding entry is equal to a predetermined value, the correspondent node sends a reauthentication command message to the mobile node.

Abstract: A method and apparatus for updating a whitelist in a mobile communication system are disclosed. The user equipment can selectively update the whitelist when connecting to the mobile communication system not only through a macro base station but also through a femtocell base station. The apparatus includes a User Equipment (UE), a Mobility Management Entity (MME), a macro base station (eNB), and a femtocell base station (HeNB).

Abstract: A security system processing method of a User Equipment (UE) and a security system for a wireless communication system are provided. The security processing method of the UE includes transmitting a Layer 3 message including a UE security capability to a Mobility Management Entity (MME) and the eNB, receiving a Access Stratum Security Mode Command (AS SMC) including a AS security algorithm selected by the eNB, as a result of verification of the UE security capability and information received from the MME, and a AS Message Authentication Code (MAC), transmitting a AS security mode complete message including the AS SMC to the eNB after verification of integrity of the AS SMC using the AS MAC, and transmitting, when receiving a Non Access Stratum (NAS) SMC including the UE security capability, a NAS security mode complete message to the MME after verification of integrity of the NAS SMC.

Abstract: Disclosed is a system for providing handover of a mobile node in a wireless network supporting Mobile IP (Internet Protocol). The mobile node sends, when handover is needed, a request for neighbor access router information to a first access router currently communicating with the mobile node, and selects, if the neighbor access router information is received, a second access router serving as a target access router using the received neighbor access router information. The first access router exchanges access router information with a neighbor access router, provides neighbor access router information to the mobile node upon receiving the neighbor access router information request from the mobile node, and redirects data to be delivered to the mobile node to the second access router to which the mobile node will be handed over. The second access router forwards data to be delivered to the mobile node, received from the first access router, to the corresponding mobile node.

Abstract: A system is provided for managing mobility of an Access Terminal (AT) in a Proxy Mobile Internet Protocol (PMIP) communication system. As the AT performs a handoff, a target Signaling Radio Network Controller (SRNC) delivers session information of the AT, acquired from a source SRNC of a source network, to a target Access Network (AN). An Authentication, Authorization and Accounting server (AAA) performs an AT access authentication process. Then, a target Access Gateway (AGW) performs a proxy registration procedure, with the target AN, and receives, from the AT, a message indicating a need to establish an interface with the HA. A Home Agent (HA) performs mobility management for the AT, receives a message for requesting proxy registration for mobility management for the AT, sends an access request message to the AAA, receives an access accept message, and sends a response message for proxy registration to the target AGW.

Abstract: A method is provided for managing mobility of an Access Terminal (AT) in a mobile communication system using a Mobile Internet Protocol (MIP). The method includes generating, by an AT that has entered a new network, a Security Parameter Index (SPI) and a security key for mutual authentication with a Home Agent (HA) of the new network, sending, by the AT, a registration request message including authentication information including the SPI, the authentication information being generated using the security key, upon receipt of the registration request message, searching, by the HA, a database for the SPI included in the authentication information, verifying the authentication information according to the search result, upon successful verification of the authentication information, generating, by the HA, mobility binding information of the AT, and sending, by the HA, a registration response message including the HA's IP address.

Abstract: A method and apparatus for performing device authentication and user authentication in a mobile communication network are provided. A connection is established between an MS and an SRNC that controls communications of the MS through a BS. The SRNC receives a D-MSK for device authentication of the MS from an AAA server that has completed an EAP negotiation with the MS and stores the D-MSK by the SRNC, when the BS triggers an EAP authentication after the connection establishment. The SRNC receives an R-MSK from an AG and stores the R-MSK after the connection establishment. The R-MSK is generated using a U-MSK for user authentication of the MS received from the AAA server by the AG. The SRNC generates a PMK for use during a session using at least one of the D-MSK and the R-MSK, and one of the BS and the SRNC generate a key set using the PMK, for use in at least one of data encryption, data integrity check, and session management during the session.

Abstract: A method for managing mobility of an AT in a mobile communication system using Mobile IPv4. The AAA and the AT generate a first key for mutual authentication between the AT and a HA, and the AAA and the AG generate a second key for mutual authentication between the AG and the HA. The AG generates a third key for mutual authentication between the AG and the AT. The AT acquires a CoA that it will use in a foreign network. The AT sends an RRQ message to the AG. The AG verifies the RRQ message received from the AT, using a third authentication key. The AG then sends to the HA an RRQ message. The HA verifies the AT and the AG, and allocates an HoA of the AT. The HA sends an RRP message including the allocated HoA of the AT in response to the RRQ message.

Abstract: A method for managing mobility of an Access Terminal (AT) using a Proxy Mobile Internet Protocol in a mobile communication system. Access authentication is performed between the AT and an Authentication, Authorization and Accounting server. The AT sends a Dynamic Host Configuration Protocol (DHCP) Server Discover message including information for authentication check to an Access Gateway (AG) while performing the access authentication. The AG sends a Proxy Registration Request message including information for mobility management for the AT to a Home Agent (HA). The AG receives from the HA a Proxy Registration Response message indicating a successful reception of the Proxy Registration Request message. The AG sends a DHCP Offer message including a Home Address (HoA) of a corresponding AT and sends a DHCP Acknowledgement message for accepting use of the HoA, to the AT, when the AT notifies the AG of its intention to use the HoA.

Abstract: Disclosed is an apparatus and method for generating a security key in a mobile communication system that performs security key generation. An Authentication, Authorization and Accounting (AAA) server generates a Master Session Key (MSK) and an Enhanced MSK (EMSK) from a Long Term Credential key, and a Device-MSK (D-MSK), a User-MSK (U-MSK) and a Device and User-MSK (DU-MSK) from the MSK and the EMSK. An Access Gateway (AG) generates a Root-MSK (R-MSK) from the MSK and EMSK received from the AAA server. A Signaling Radio Network Controller (SRNC) generates a Pairwise Master Key (PMK) from the R-MSK received from the AG, and a Traffic Session Key (TSK) from the PMK. A Base Station (BS) sets up a radio connection to a Mobile Station (MS) using the TSK received from the SRNC, and performs radio communication using the set radio connection. The MS generates an MSK and an EMSK, and generates there from a D-MSK, a U-MSK, a DU-MSK, an R-MSK, a PMK, an SRK and a TSK, to perform radio communication with the BS.

Abstract: A method and system for managing mobility of an MS in a mobile communication system using Mobile IP are provided. It is determined whether to generate an authentication key for mutual authentication between the MS and an HA after access authentication with an AG. The authentication key is generated, if it is determined to generate the authentication key after the access authentication. An information request message is transmitted to the AG. A reply message including information allocated by an AAA server is received from the AG. A binding update message for registering mobility binding of the MS is transmitted to the HA.

Abstract: Disclosed is a method for calculating a routing cost or a hop count of a mobile IP (Internet Protocol) in an IP network. The IP network can communicate with the MN having a mobile IP and includes a plurality of access routers. If the MN moves to a new access router, the MN generates a distance measurement request message and transmits the generated distance measurement request message to an access router serving as a regional anchor point (RAP) of the MN. Upon receiving the distance measurement request message, the access router serving as the RAP generates an acknowledgement message having an initial hop limit field value and a hop limit value, and transmits the acknowledgement message. The MN calculates a hop count using the initial hop limit field value and the hop limit value.

Abstract: Disclosed is an apparatus and method for data transmission/reception in a mobile telecommunication system, and more particularly to an apparatus and method for data transmission/reception in a mobile telecommunication system employing an Orthogonal Frequency Division Multiplexing (OFDM) scheme. The method includes identifying a CHannel IDentifier (CH_ID), which represents a first resource indicated by a Forward Shared Control CHannel (F-SCCH) among all resources; identifying a second resource indicated by resource assignment information for group terminals; and when the first resource includes all or a part of the second resource, and a third resource unused by the group terminals exists in the entire or part of the second resource, transmitting/receiving data by means of the third resource and a fourth resource, which is a remaining part of the first resource excluding the second resource.

Abstract: A method and system for performing handoff between a source system and a target system are provided. The target system has a different network access standard from that of the source system. An access terminal, connected to the source system, transmits a request message including an identifier of the access terminal to be identified in the target system, to the target system, via the source system, in order to access the target system. A session storage of the target system acquires the identifier of the access terminal from the access terminal via the source system. The session storage of the target system acquires session information of the access terminal from an old session storage to which the access terminal was connected before it accesses the source system, using the acquired identifier. After the session information is acquired, a gateway of the target system acquires context information related to a data service of the access terminal from a gateway of the source system.

Abstract: A handoff method between a source network to which a terminal is connected in order of a Base Station (BS) and an Access Service Network (ASN), and a target network to which the terminal is connected in order of a Packet Data Service Node (PDSN), a Packet Control Function (PCF) and an Access Network (AN). The terminal sends a handoff request message with AN information of the target network to the ASN via the BS. The ASN forwards the handoff request message to the PCF via the PDSN using the AN information. Upon receipt of the handoff request message, the PCF sends a request for session information to the ASN via the PDSN. The PDSN sends a request for context information to the ASN. Upon receipt of the session information request and the context information request, the ASN transfers the context information to the PDSN and transfers the session information to the AN via the PDSN and the PCF.

Abstract: Disclosed is a way to solve a problem of an operation error, which may occur in transmitting a Binding Update (BU) or Registration ReQuest (RRQ) message for a mobile node to a home agent due to the fact that a PDSN supports a Proxy Mobile Internet Protocol (PMIP) for the mobile terminal and the corresponding mobile node supports a client mobile IP when there is the mobile node using the client mobile IP in a 3GPP2 mobile communication system supporting the PMIP, thereby enabling efficient communication.

Abstract: A retransmission method and apparatus in a multi-hop broadband wireless communication system are provided, in which if there is a failed data block among data blocks received from a source node, a Relay Station (RS) transmits a feedback message requesting retransmission of the failed data block to the source node, transmits a successfully received data block to a destination node, receives a retransmitted data block for the failed data block from the source node, transmits the received retransmitted data block to the destination node, receives from the destination node a feedback message about data blocks transmitted to the destination node, and transmits the feedback message to the source node.

Abstract: A method for controlling a data rate by a Base Station (BS) in a multi-hop communication system in which a Relay Station (RS) located between the BS and a Mobile Station (MS) relays a signal exchanged between the BS and the MS. The data rate control method includes receiving, from the RS, channel information of the MS and channel information of the RS; calculating a target data rate to the RS using the channel information of the MS and the channel information of the RS; generating data to be transmitted to the RS according to the calculated target data rate; and transmitting the generated data to the RS.

Abstract: A packet filtering apparatus for filtering a packet transmitted from a mobile node to a correspondent node in a network system using Mobile Internet Protocol (IP). The packet filtering apparatus includes a next header reader for reading a next header of the received packet to determine whether it is a mobility header, a mobility header type reader for reading a mobility header type when the next header is the mobility header, a mobility option reader for reading a mobility option added by the mobile node, and a packet rule applier for determining whether a home address included in the mobility option read by the mobility option reader is identical to a source address stored in a packet filter rule, and determining whether to pass the packet according to the determination result.