System and method for authentication in public networks

• US 20030191939A1
• Filed: 08/08/2002
• Published: 10/09/2003
• Est. Priority Date: 04/08/2002
• Status: Abandoned Application

• Current Assignee: Quanta Computer
• Original Assignee: Quanta Computer
• Inventors: Tsai, Hsien-Ming, Huang, Jammy
• Application Number:
  US10/214,143
• Publication Number:
  US 20030191939A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

In conventional public networks, a subscriber identity module (SIM) is installed on a mobile station for authenticating users and improving the communication security between mobile stations and the network. This specification proposes an authentication agent (AA) installed on a network and with the SIM of the mobile station installed on the AA. Thus, the mobile station gets authenticated from the AA and then the AA uses the SIM of the mobile station to obtain authentication from the authentication server.

Claims

1. A public network authentication system, which comprises:

a mobile station (MS);

an authentication server; and

an authentication agent (AA), which has a subscriber identity module (SIM) corresponding to the MS;

wherein the MS processes authentication with the AA and the AA uses the SIM to process authentication with the authentication server.

2. The system of claim 1, further comprising an access network wherein the AA controls the access network to allow connection between the MS and the Internet if the authentication between the MS and the AA is successful.

3. The system of claim 1 further comprising a billing center (BC) and a router, wherein the AA controls the router to generate a charge data record (CDR) to the BC.

4. The system of claim 1, further comprising an external access network containing an access right controller (ARC), wherein when the MS roams to the external access network, the MS first passes authentication with the AA and the AA notifies the ARC to allow the MS to connect to the Internet.

5. A public network authentication method, comprising:

an MS processing authentication with an AA containing an SIM corresponding to the MS using a first protocol; and

the AA using the SIM to process authentication with an authentication server using a second protocol.

6. The method of claim 5, further comprising the AA controlling an access network to allow connection between the MS and the Internet if the authentication between the MS and the AA is successful.

7. The method of claim 5, further comprising the AA controlling a router to generate a CRD to a BC.

8. The method of claim 5 further comprising the AA notifying an ARC to allow the MS to connect to the Internet if the authentication between the MS and the AA is successful when the MS roams to an external access network.

9. An AA for a public network, which has an SIM corresponding to a MS, wherein the AA and the MS use a first protocol to process authentication and the AA uses the SIM to process authentication with an authentication server using a second protocol.

10. The AA of claim 9, also controlling an access network to allow the MS to connect to Internet services.

11. The AA of claim 9, also controlling a router to generate a CDR to a BC.

12. The AA of claim 9, also notifying an ARC of an external access network to allow the Internet connection of the MS when the MS roams to the external access network.