Local authentication in a communication system

• US 20020091931A1
• Filed: 01/05/2001
• Published: 07/11/2002
• Est. Priority Date: 01/05/2001
• Status: Abandoned Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Quick, Roy Franklin Jr., Rose, Gregory G.
• Application Number:
  US09/755,660
• Publication Number:
  US 20020091931A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Methods and apparatus are presented for providing local authentication of subscribers travelling outside their home systems. A subscriber identification token 230 provides authentication support by generating a signature 370 based upon a key that is held secret from a mobile unit 220. A mobile unit 220 that is programmed to wrongfully retain keys from a subscriber identification token 230 after a subscriber has removed his or her token is prevented from subsequently accessing the subscriber'"'"'s account.

Claims

1. A subscriber identification module for providing local authentication of a subscriber in a communication system, comprising:

a memory; and

a processor configured to implement a set of instructions stored in the memory, the set of instructions for;

generating a plurality of keys in response to a received challenge;

generating an authentication signal based on a received signal and a first key from the plurality of keys, wherein the received signal is transmitted from a communications unit communicatively coupled to the subscriber identification module, and the received signal is generated by the communications unit using a second key from the plurality of keys, the second key having been communicated from the subscriber identification module to the communications unit; and

transmitting the authentication signal to the communications system via the communications unit.

2. The processor of 1, wherein the authentication signal is generated by a hash function.

3. The processor of 2, wherein the hash function is the Secure Hash Algorithm (SHA-1).

4. The processor of 1, wherein the authentication signal is generated by an encryption algorithm.

5. The processor of 4, wherein the encryption algorithm is the Data Encryption Standard (DES).

6. A subscriber identification module, comprising:

a key generation element; and

a signature generator configured to receive a secret key from the key generation element and information from a mobile unit, and further configured to output a signature to the mobile unit.

7. The key generation element of claim 6, comprising:

a memory; and

a processor configured to execute a set of instructions stored in the memory, wherein the set of instructions performs a cryptographic transformation upon an input value to produce a plurality of temporary keys.

8. The processor of claim 7, wherein the cryptographic transformation is performed using a permanent key.

9. The signature generator of claim 6, comprising:

a memory; and

a processor configured to execute a set of instructions stored in the memory, wherein the set of instructions performs a cryptographic transformation upon the information from the mobile unit by using the secret key, wherein the signature results from the cryptographic transformation.

10. An apparatus for providing secure local authentication of a subscriber in a communication system, comprising a subscriber identification module configured to interact with a communications unit, wherein the subscriber identification module comprises:

a key generator for generating a plurality of keys from a received value and a secret value, wherein at least one communication key from the plurality of keys is delivered to the communications unit and at least one secret key from the plurality of keys is not delivered to the communications unit; and

a signature generator for generating an authorization signal from both the at least one secret key and from an authorization message, wherein the authorization message is generated by the communications unit using the at least one communication key.

11. The subscriber identification module of claim 10, wherein the subscriber identification module is configured to be inserted into the communications unit.

12. The subscriber identification module of claim 10, wherein the signature generator generates the authorization signal by using a hash function.

13. The subscriber identification module of claim 10, wherein the signature generator generates the authorization signal by using the Data Encryption Standard (DES).

14. The subscriber identification module of claim 10, wherein the at least one communication key comprises an integrity key.

17. The method of claim 16, wherein the generating of the signature signal is performed using a nonreversible operation.

18. The method of claim 16, wherein the generating of the signature signal is performed using DES.

19. The method of claim 16, wherein the generating of the signature signal is performed using a hash function.

20. The method of claim 19, wherein the hash function is SHA-1.

15. The subscriber identification module of 12, wherein the hash function is SHA-1.

16. A method for providing authentication of a subscriber using a subscriber identification device, comprising:

generating a plurality of keys;

transmitting at least one key from the plurality of keys to a communications device communicatively coupled to the subscriber identification device and holding private at least one key from the plurality of keys;

generating a signature at the communications device using both the at least one key transmitted to the communications device and a transmission message;

transmitting the signature to the subscriber identification device;

receiving the signature at the subscriber identification device;

generating a primary signature from the received signature; and

conveying the primary signature to a communications system.

21. A method for providing authentication of a subscriber using a subscriber identification device, comprising:

generating a plurality of keys;

transmitting at least one key from the plurality of keys to a communications device communicatively coupled to the subscriber identification device and holding private at least one key from the plurality of keys;

assigning a weight to the transmission message at the communications device in accordance with a relative importance of the transmission message;

generating a signature at the communications device using both the at least one key transmitted to the communications device and the transmission message;

transmitting the signature to a communications system if the assigned weight to the transmission message indicates that the transmission message is unimportant; and

transmitting the signature to the subscriber identification device if the assigned weight to the transmission message indicates that the transmission message is important, whereupon the subscriber identification device generates a primary signature from the received signature signal, and then conveys the primary signature to a communications system.