Electrical computers and digital processing systems: support – Multiple computer communication using cryptography – Central trusted authority provides computer authentication
Reexamination Certificate
1998-07-23
2001-03-06
Peeso, Thomas R. (Department: 2132)
Electrical computers and digital processing systems: support
Multiple computer communication using cryptography
Central trusted authority provides computer authentication
C713S161000, C713S168000, C713S169000, C713S152000, C380S278000, C380S279000, C380S283000
Reexamination Certificate
active
06199161
ABSTRACT:
BACKGROUND OF THE INVENTION
The invention relates to a method for managing authentication keys in a mobile communication system comprising at least one authentication center, base stations and mobile stations to which subscriber identity modules may be coupled and which communicate with said base stations.
The invention is intended to be applied in mobile communication systems in which subscribers may be identified by means of a subscriber identity module which is either in the mobile stations or may be coupled to it. An example of such a mobile communication system is represented by the GSM system (Global System for Mobiles). Another example of such a mobile communication system is the TETRA radio telephone system (TETRA=Trans European Trunked Radio). The TETRA radio telephone system is an example of the PMR (=Private Mobile Radio) radio telephone system.
The telecommunications network checks a subscriber's identity by carrying out an Authentication Procedure to be sure that the subscriber identity given by the mobile station is correct. By checking the subscriber identity, the network makes it sure that only such subscribers who have the right to use the network services are able to use them. At the same time it is ascertained that an unauthorized user will not cause any extra costs to entitled users or be able to impersonate another subscriber.
In the following, the checking method of a subscriber's identity will be described in more detail by means of a GSM-related example. Similar principles are also applicable to systems of the GSM type and to the Tetra system. The mobile communication system always checks a subscriber's identity in conjunction with registration, call set-up stage and when activating or deactivating certain supplementary services. The subscriber identity is also checked at Location Area (LA) updating in cases the subscriber's roaming number i.e. MSRN (Mobile Station Roaming Number) changes. In other location area (LA) updating instances, the network operator may decide whether to check a subscriber's identity or not.
A subscriber's identity is checked according to the following steps:
Having obtained information of the situation described above, which initiates checking of the subscriber's identity, the mobile communication system, for example its Authentication Center (AUC) transmits a random number RAND to the mobile station, the RAND being generated in the system. Having received the RAND, the mobile station computes, by a specific algorithm, the received RAND, and an Authentication Key K previously stored in the mobile station, a value for an acknowledgment parameter SRES. Hence, the key K is stored at least in the authentication center and the mobile station so that they are both able to compute the same reference numbers. The mobile station sends the acknowledgment parameter SRES to the mobile communication network, in particular to its authentication center, which checks the parameter SRES value, computed in the mobile station, i.e. compares it to the value it has computed, and as a result of this comparison deducts whether the subscriber who transmitted the acknowledgment parameter is an authorized subscriber.
The mobile stations used in mobile communication systems have a subscriber identity and an authentication key stored in a subscriber identity module, which may be attached to the mobile station detachably or integrated therein. The subscriber identity modules which are coupled detachably to the mobile station and which contain the identifiers of the subscribers may, when required, be connected to a terminal equipment to form a mobile station. Such subscriber identity modules and mobile stations to which the subscriber identity module is integrated are usually subscriber-specific and they are identified by a subscriber's secure identifier (IMSI=International Mobile Subscriber Identity or ITSI=Individual Tetra Subscriber Identity). Detachable subscriber identity modules include e.g. SIM cards (SIM=Subscriber Identity Module).
The subscriber identity module described above, such as a SIM card, is subscriber specific, which means that subscriber equipments are not confined to a specific subscriber. The subscriber identity module, such as a SIM card, is a smart card which is placed in the mobile equipment and which contains information, e.g. an authentication key K, required for identifying a subscriber and for encrypting radio traffic. A subscriber identity module, such as a SIM card, in this application refers to a functional card that can be removed from a mobile equipment and by means of which a subscriber is able to use a card controlled mobile equipment.
If a subscriber identity module e.g. a SIM card is employed, the user need not have a mobile equipment of his own, but a subscriber identity module e.g. a SIM card issued to him by the operator of the mobile communication system is all he needs. Such a subscriber identity module is, in a way, a phone card by means of which the subscriber can make (and receive) calls from any mobile equipment of the system. The functions of the SIM card on the one hand include providing the mobile station with data indicating the user in a well protected manner and on the other hand to offer services to the mobile station. Such services may include e.g. maintaining (inputting, changing) a Personal Identification Number (PIN), maintaining the data protection key i.e. the authentication key K, and unblocking by e.g. a PUK code, Personal Unblocking Key, a SIM card blocked by too many attempts of inputting a wrong PIN.
To incorporate a SIM card in hand-held phones, a so-called plug-in-SIM has been introduced as an alternative way of implementing a subscriber identity module. A plug-in-SIM is approximately a coin-sized part containing the electronics of a credit card sized SIM card, and it is placed in a phone so that the user is not able to replace it with ease. The phone may also have an incorporated plug-in-SIM and, in addition, a card reader. If the card reader contains a card, the phone is identified on the basis of the external card, otherwise on the basis of the incorporated plug-in-SIM. Unless the context gives reason to some other interpretation, the term subscriber identity module, such as a SIM card, in this application refers to the plug-in-SIM, the credit card sized smart card SIM, and the subscriber identity module which is incorporated in the mobile station and which contains the subscriber identity and the authentication key K.
In addition to mobile communication systems according to the GSM mobile communication system, the method of the invention is intended for use also in PMR (Private or Professional Mobile Radio) networks, i.e. trunked networks which are typically company networks or public safety and security networks, in which all the channels are used by one or more companies or public authority groups. The security of the networks used by the authorities is set stricter security demands than the normal GSM network.
In the following, the management of the authentication key K is described in normal operation according to the GSM system. When a subscriber acquires a subscriber identity module, for example a SIM card (SIM=Subscriber Identity Module), the subscriber's IMSI, authentication key K and encryption algorithms are stored in the SIM card. The IMSI and the authentication key K are additionally stored in the authentication center AUC of the subscriber's home PLMN (Public Land Mobile Network). Each PLMN comprises one or more authentication centers.
In the GSM system, two key managing methods have been defined. When using the one which is protected better there is no need to transfer the key from a place to another. When employing the method protected worse, the key is transferred within the network, which results in that the method is allowed to be used only when it is not necessary to transfer encrypted information between PLMNs. At other times, the network may decide which one of the methods t
Intellectual Property
Nokia Telecommunication Oy
Peeso Thomas R.
Pillsbury & Winthrop LLP
LandOfFree
Management of authentication keys in a mobile communication... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Management of authentication keys in a mobile communication..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Management of authentication keys in a mobile communication... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2465913