Method and apparatus for anonymous network access in the absence of a mobile subscriber identity module

• US 20020142753A1
• Filed: 06/19/2001
• Published: 10/03/2002
• Est. Priority Date: 04/02/2001
• Status: Abandoned Application

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Inventors: Andersen, Niels Peter Skov, Pecen, Mark E., Howell, Stephen Andrew
• Application Number:
  US09/884,781
• Publication Number:
  US 20020142753A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/75 Temporary identity
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 76/50 for emergency connections
• CPC Class Codes: H04W 8/24 Transfer of terminal data

Abstract

A method and apparatus enabling a mobile user device (102) to anonymously access a network (108, 114) in circumstances where access to the network is prohibited that includes an interim identity generator (138), positioned in the mobile user device, generating an interim international mobile subscriber identity (IMSI) in response to access to the network being prohibited. The interim IMSI is utilized for signaling exchanges requiring information corresponding to a SIM card (142) when access is prohibited. A user identity module (152, 154) detects the presence of the interim IMSI in a signaling message, and routes the signaling message to a first home location register (156), in response to the signaling message including the interim IMSI, which then computes and transmits an authentication triplet to the mobile user device. The user identity module routes the signaling message to a second home location register (150) in response to the signaling message not including the interim IMSI.

Claims

1. A mobile user device capable of anonymously accessing a network, the mobile user device comprising:

a SIM detector detecting whether access to the network is prohibited; and

an interim identity generator generating an interim international mobile subscriber identity (INSI) in response to access to the network being prohibited, wherein the interim IMSI is utilized for signaling exchanges requiring information corresponding to the SIM card when access is prohibited.

2. The mobile user device of claim 1, further comprising:

a first home location register for signaling exchanges utilizing an IMSI accessed from the SIM card; and

a second home location register for signaling exchanges utilizing the interim IMSI.

3. The mobile user device of claim 1, wherein the mobile user device accesses the network along a circuit-switched path.

4. The mobile user device of claim 1, wherein the mobile user device accesses the network along a packet-switched data path.

5. The mobile user device of claim 1, wherein the mobile user device is capable of accessing the network along one or more of a circuit-switched path and a packet-switched path.

6. The mobile user device of claim 1, wherein the interim IMSI has a length of 15 digits and includes a predetermined unused interim mobile country code, a predetermined unused interim mobile network code, and pseudo-random digits associated containing a portion of an international mobile equipment identity (IMEI) associated with the mobile user device.

7. The mobile user device of claim 1, wherein the interim IMSI is generated using local information corresponding to the mobile user device.

8. The mobile user device of claim 1, wherein interim IMSI is generated using one or more of local information containing an international mobile equipment identity (IMEI) corresponding to the mobile user device, local information containing a pre-computed SRES, local information containing a pre-computed ciphering key, a combination of identities that reside on the SIM card, and portions of identities that reside on the SIM card.

9. The mobile user device of claim 1, wherein the interim identity generator generates the IMSI in response to one of the SIM detector detecting a subscriber identity module card not being inserted within the mobile user device and the SIM detector detecting that service is barred.

10. A wireless communication system comprising:

a first network;

a mobile user device exchanging data with the first network;

an interim identity generator, positioned in the mobile user device, generating an interim international mobile subscriber identity (IMSI) in response to access by the mobile user device being prohibited;

a first radio access network positioned along a first data path extending between the mobile user device and the first network, the first radio access network transmitting and receiving data exchanged between the mobile user device and the first network; and

a first user identity module, positioned along the first data path, detecting the presence of the interim IMSI, wherein the interim IMSI is utilized for signaling exchanges requiring information corresponding to a SIM card while access is prohibited.

11. The wireless communication system of claim 10, wherein the interim identity generator generates the IMSI in response to one of the SIM detector detecting the SIM card not being inserted within the mobile user device and the SIM detector detecting that service is barred.

12. The wireless communication system of claim 10, further comprising:

a first home location register for signaling exchanges utilizing an IMSI accessed from the SIM card in response to access by the mobile user device being prohibited; and

a second home location register for signaling exchanges utilizing the interim IMSI, wherein the first user identity module directs the interim IMSI to the second home location register, and wherein the second home location register computes and transmits an authentication response triplet to the mobile user device upon receipt of the interim IMSI.

13. The wireless communication system of claim 10, wherein the first data path is a packet-switched data path.

14. The wireless communication system of claim 10, wherein the first data path is a circuit-switched data path.

15. The wireless communication system of claim 10, further comprising:

a second network; and

a second user identity module positioned along a second data path extending between the mobile user device and the second network, the second user identity module detecting the presence of the interim IMSI.

16. The wireless communication system of claim 15, further comprising:

a first home location register for signaling exchanges utilizing an IMSI accessed from the SIM card in response to access by the mobile user device being prohibited; and

a second home location register for signaling exchanges utilizing the interim IMSI, wherein the first user identity module and the second user identity module direct the interim IMSI to the second home location register, and wherein the second home location register computes and transmits an authentication response triplet to the mobile user device upon receipt of the interim IMSI.

17. The wireless communication system of claim 16, wherein the first data path is a packet-switched data path and the second data path is a circuit-switched data path, and the mobile user device is capable of transmitting data along one of the first data path and the second data path.

18. The wireless communication system of claim 16, wherein the first data path is a packet-switched data path and the second data path is a circuit-switched data path, and the mobile user device is capable of transmitting data along the first data path and the second data path.

19. The wireless communication system of claim 16, further comprising a second radio access network positioned along a third data path extending between the mobile user device and the first network, and along a fourth data path extending between the mobile user device and the second network, wherein the first network is a packet-switched data network and the second network is a circuit-switched data network.

20. The wireless communication system of claim 16, wherein the interim IMSI has a length of 15 digits and includes a predetermined unused interim mobile country code, a predetermined unused interim mobile network code, and pseudo-random digits associated containing a portion of an international mobile equipment identity (IMEI) associated with the mobile user device.

21. The wireless communication system of claim 20, wherein the first data path and the third data path are packet-switched data paths, the second data path and the fourth data path are circuit-switched data paths, and the mobile user device is capable of transmitting data along the packet-switched data path and the circuit-switched data path.

22. The wireless communication system of claim 21, wherein interim IMSI is generated using one or more of local information containing an international mobile equipment identity (IMEI) corresponding to the mobile user device, local information containing a pre-computed SRES, local information containing a pre-computed ciphering key, a combination of identities that reside on the SIM card, and portions of identities that reside on the SIM card.

24. The method of claim 22, wherein the interim IMSI has a length of 15 digits and includes a predetermined unused interim mobile country code, a predetermined unused interim mobile network code, and pseudo-random digits associated containing a portion of an international mobile equipment identity (IMEI) associated with the mobile user device.

25. The method of claim 24, wherein the interim IMSI is generated using one or more of local information containing an international mobile equipment identity (IMEI) corresponding to the mobile user device, local information containing a pre-computed SRES, local information containing a pre-computed ciphering key, a combination of identities that reside on the SIM card, and portions of identities that reside on the SIM card.

26. The method of claim 25, further comprising the steps of:

detecting whether a signaling message includes the interim IMSI;

routing the signaling message to a first home location register in response to the signaling message including the interim IMSI and to a second home location register in response to the signaling message not including the interim IMSI; and

computing and transmitting an authentication response triplet from the first home location register to the mobile user device.

27. The method of claim 23, wherein the step of detecting further comprises detecting one of a subscriber identity module card not being inserted within a mobile user device and detecting that service is barred.

23. A method of anonymous network access by a mobile user device when network access is prohibited, comprising:

detecting network access being prohibited; and

generating an interim international mobile subscriber identity (IMSI) in response to network access being prohibited.