System and method of secure authentication and billing for goods and services using a cellular telecommunication and an authorization infrastructure

• US 20020161723A1
• Filed: 05/10/2002
• Published: 10/31/2002
• Est. Priority Date: 09/11/2000
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Asokan, Nadarajah, Ginzboorg, Philip
• Granted Patent: US 7,308,431 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 : Access security

Abstract

A system, method and computer program for authorizing a mobile station to use a product, service, access or other rights provided by a service provider through the use of digital signatures. These digital signatures are based on a shared signing key, and can be verified using a signature verification service. This system, method and computer program will validate the identity of the mobile station being used utilizing long term keys stored in the mobile station and an authentication center. The system, method and computer program will then utilize the signing key and the signature verification service to verify digital signatures that enable the authorization to access products, services, access or other rights using a mobile station. When this system, method and computer program is used for authorizing payment transactions, the gateway will verify the authenticity of any charges made based on the signatures received. Thus, a user of this system, method and computer program can purchase goods and services without fear of fraud or errors.

Claims

1. A method for authorizing a mobile station to use a product, service, access, or some other right provided by a service provider, comprising:

accessing a gateway by the mobile station and transmitting an identification code to the gateway;

verifying the identity of the mobile station by the gateway accessing an authentication center and comparing variables computed by the mobile station and variables computed by the gateway;

creating a shared signing key;

delivering a signature verification address to the mobile station by the gateway when the identity of the mobile station has been verified, wherein a signature verification service at said address is capable of verifying digital signatures using the shared signing key;

requesting a product, service, access or a right from the service provider and transmitting a digital signature, accompanied by the signature verification address to the service provider by the mobile station; and

accessing the signature verification address by the service provider and verifying the digital signature.

2. The method recited in claim 1, wherein said verifying the legitimacy of the gateway by the mobile station by comparing the variables computed by the gateway with the variables computed by the mobile station, further comprises:

transmitting from the mobile station to the gateway a session identification and an international mobile subscriber identifier;

transmitting the international mobile subscriber identifier from the gateway to the authentication center;

transmitting from the authentication center to the gateway a random number (RAND), a signed response (SRES), and an encryption key;

computing a variable M1 by the gateway and transmitting the variable M1 and the random number to the mobile station;

computing a variable M1′

by the mobile station; and

verifying the legitimacy of the gateway when the variable M1 equals the variable M1′

.

3. The method recited in claim 2, further comprises:

computing an integrity key (K) by both the mobile station and the authentication center as a function of RAND and Ki, where RAND is a random number issued by the authentication center, and Ki is a secret key contained within the authentication center and the mobile station.

4. The method recited in claim 1, wherein the shared signing key (SK) is either generated by the mobile station and transmitted to the gateway, or generated by a the gateway and transmitted to the mobile station, or a portion of the shared signing key (SK) is generated by both the mobile station and the gateway and exchanged.

5. The method recited in claim 3, wherein the shared signing key (SK) is computed based from the integrity key (K).

6. The method recited in claim 1, further comprising:

constructing by the gateway a signature verification address and transmitting the signature verification address to the mobile station;

computing a variable M3 by the gateway and transmitting the variable M3 and the signature verification address to the mobile station;

computing a variable M3′

by the mobile station;

verifying the legitimacy of the gateway when the variable M3 equals the variable M3′

.

7. The method recited in claim 6, wherein the variables M3 and M3′

are computed using the formula M3=M3′

=MAC(K, C), where MAC is a message authentication code function, K is an integrity key and C is data contained in the message by which the signature verification address is delivered to the mobile station.

8. The method recited in claim 1, wherein verifying the identity of the mobile station by the gateway accessing an authentication center and comparing variables computed by the mobile station and variables computed by the gateway, further comprises:

transmitting a signed response, a public key and a variable M2 computed by the mobile station to the gateway;

computing a variable M2′

by the gateway;

comparing the variable M2 and the variable M2′

; and

verifying the identity of the mobile station when variable M2 is equal to variable M2′

.

9. The method recited in claim 8, wherein variables M2 and M2′

are computed using the formula M2=M2′

=MAC(K, {SRES}, Key, [{restrictions}], [alias]), wherein MAC is a message authentication code function, SRES is a signed response, K is an integrity key, Key is the shared signing key SK or a partial key to be used in the computation of signing key SK, restrictions are limits on the use of signatures made with the signing key SK and alias is an alternate identification for the mobile station.

10. The method recited in claim 1, further comprises:

requesting a product, service, access or right from the service provider and transmitting the digital signature, accompanied by the signature verification address as payment or authorization to the service provider further comprises;

transmitting the signature verification address with the request for the product or service;

receiving an authorization request from the service provider describing the product, service, access or right;

computing a digital signature on the authorization request;

approving the authorization request by transmitting the digital signature to the service provider; and

accepting delivery of the product or service by the mobile subscriber.

11. The method recited in claim 10, wherein the service provider upon transmission of the digital signature, further comprises:

verifying the digital signature by the seller contacting the signature verification service and the signature verification service verifying the digital signature;

verifying, by the signature verification service, that restrictions associated with the use of signatures made with the signing key SK are not violated; and

creating the an accounting record for the product, service, access, or right delivered.

12. The method recited in claim 11, further comprising:

transmitting from the service provider to the gateway the accounting record having an authorization request and digital signature of a customer of a home network operator service;

determining by the gateway that a corresponding record exists in a local database and the validity of the digital signature;

determining whether the authorization request violates any restrictions contained in the corresponding record;

crediting the service provider with an amount equal to that in the authorization request; and

billing the mobile subscriber with the amount of the authorization request.

13. The method recited in claim 1, further comprising:

verifying the legitimacy of the gateway by the mobile station by comparing the variables computed by the gateway with the variables computed by the mobile station.

14. The method recited in claim 1, wherein delivering a signature verification address to the mobile station by the gateway when the identity of the mobile station and the gateway have been verified, further comprises:

requesting a signature verification address by the mobile station from the gateway.

16. The system recited in claim 15, wherein the mobile station certificate/signature verification address acquisition module verifies that the gateway is authorized to issue the signature verification address through the use of comparing variables computed by the gateway and the mobile station.

17. The system recited in claim 16, further comprising:

a buyer purchase module to request the purchase of a good or service from a seller, present signature verification address to the seller, receive an invoice and provide the seller with a digital signature approving the purchase of the good or service;

a seller sales module to verify the validity of the signature verification address and the validity of the digital signature, issue an invoice, generate an accounting record and deliver a product or service;

a seller billing module to transmit to the gateway the accounting record and receive a response indicating if the accounting record has been approved for payment; and

a gateway billing module to verify the accounting record and an accompanying signature, and issue a credit to the seller and debit to the buyer when the accounting record and the accompanying signature are verified.

18. The system recited in claim 17, wherein the gateway certificate/signature verification address generation module transmits an international mobile subscriber identifier to the authentication center, receives a random number, a signed response and an encryption key from the authentication center, computes a variable M1, M2′

, and M3 and verifies the validity of the mobile station by comparing variable M2 received from the mobile station with variable M2′

.

19. The system recited in claim 15, wherein the mobile station further comprises:

a subscriber identification module (SIM) used to compute a signed response and a ciphering key based on a secret key, installed by a home network operator service in the subscriber identification module upon signing up for a service plan, and a random number obtained from an authentication center in the home network operator service;

an A3 algorithm module, contained in the SIM, is used to compute the signed response; and

an A8 algorithm module, contained in the SIM, is used to compute the ciphering key, wherein through the transmission of signed responses to and from the mobile station a telecommunication infrastructure is able to verify that the mobile station is authorized to access the telecommunication infrastructure and the gateway.

15. A system for ordering, paying for and delivering goods and services using a mobile station, comprising:

a GSM mobile communication authentication module to verify that the mobile station is permitted to access a telecom infrastructure;

a mobile station certificate/signature verification address acquisition module to request a signature verification address for the mobile station from a gateway; and

a gateway certificate/signature verification address generation module to verify that the mobile station is authorized to receive the signature verification address by transmitting an international mobile subscriber identifier received from the mobile station to an authentication center, calculate variables based on information received from the authentication center and compare them to variables computed by the mobile station, and issue the signature verification address to the mobile station when the variables match.

20. A computer program embodied on a computer readable medium and executable by a computer for ordering, paying for and delivering goods and services using a mobile station, comprising:

a GSM authentication code segment to verify that the mobile station is permitted to access a telecom infrastructure;

a mobile station certificate/signature verification address acquisition code segment to request a signature verification address for the mobile station from a gateway; and

a gateway certificate/signature verification address generation code segment to verify that the mobile station is authorized to receive the signature verification address by transmitting an international mobile subscriber identifier received from the mobile station to an authentication center, calculate variables based on information received from the authentication center and compare them to variables computed by the mobile station, and issue the digital certificate to the mobile station when the variables match.

21. The system recited in claim 20, wherein the mobile station certificate acquisition code segment verifies that the gateway is authorized to issue the signature verification address through the use of comparing variables computed by the gateway and the mobile station.

22. The computer program recited in claim 21, further comprising:

a buyer purchase code segment to request the purchase of a good or service from a seller, present the signature verification address to the seller, receive an invoice and provide the seller with a digital signature approval the purchase of the good or service;

a seller sales code segment to verify the validity of the of the digital signature using the signature verification address, issue an authorization request, generate an accounting record and deliver a product or service;

a seller billing code segment to transmit to the gateway the accounting record and receive a response indicating if the accounting record has been approved for payment; and

a gateway billing code segment to verify the accounting record and an accompanying signature, and issue a credit to the seller and debit to the buyer when the accounting record and the accompanying signature are verified.

23. The computer program recited in claim 21, wherein the mobile station certificate/signature verification address acquisition code segment transmits a session identification and an international mobile subscriber identifier to the gateway, receives a random number and a variable M1 from the gateway and verifies that the gateway is authentic by computing and comparing the variable M1′

with M1.

24. The computer program recited in claim 20, wherein the gateway certificate generation/signature verification address code segment transmits an international mobile subscriber identifier to the authentication center, receives a random number, a service response and an encryption key from the authentication center, computes a variable M1, and M2′

.