Network authentication

• US 20060053281A1
• Filed: 10/28/2005
• Published: 03/09/2006
• Est. Priority Date: 08/15/2000
• Status: Active Grant

• Current Assignee: Stefan Andersson
• Original Assignee: Stefan Andersson
• Inventors: Andersson, Stefan
• Granted Patent: US 8,165,299 B2
• Time in Patent Office: Days
• US Class Current: 713/159
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

An existing communications device, such as a WAP-enabled mobile phone or other device, can be used as an authentication token. This has the advantage that WAP-enabled devices include components which are used in public key/private key cryptographic systems as a part of their standard communication functions. These components therefore advantageously allow the device to be used as an authentication token when communicating with a remote server.

Claims

1-27. -27. (canceled)

28. A method of operating a mobile communications device that includes a cryptographic module, the method comprising:

detecting whether a node accessed by the mobile communications device via a wireless network requires performance of an authentication, and in response to detecting that the node accessed by the mobile communications device via the wireless network requires performance of the authentication, using the cryptographic module to carry out the authentication; and

detecting whether a local external device having a connection to a network by means other than the mobile communications device requires performance of an authentication, and in response to detecting that the local external device requires performance of the authentication, using the cryptographic module to carry out the authentication.

29. The method of claim 28, wherein the mobile communications device is a Wireless Application Protocol (WAP)-enabled device.

30. The method of claim 29, wherein the cryptographic module is implemented in a Wireless Identity Module (WIM).

31. The method of claim 29, wherein each of the authentications is carried out in accordance with Wireless Public Key Infrastructure.

32. The method of claim 28, wherein communications between the mobile communications device and the local external device take place via a wired connection.

33. The method of claim 28, wherein communications between the mobile communications device and the local external device take place via a wireless connection.

34. A mobile communications device comprising:

a cryptographic module;

means for detecting whether a node accessed by the mobile communications device via a wireless network requires performance of an authentication, and in response to detecting that the node accessed by the mobile communications device via the wireless network requires performance of the authentication, uses the cryptographic module to carry out the authentication; and

means for detecting whether a local external device having a connection to a network by means other than the mobile communications device requires performance of an authentication, and in response to detecting that the local external device requires performance of the authentication, uses the cryptographic module to carry out the authentication.

35. The mobile communications device of claim 34, wherein the mobile communications device is a Wireless Application Protocol (WAP)-enabled device.

36. The mobile communications device of claim 35, wherein the cryptographic module is implemented in a Wireless Identity Module (WIM).

37. The mobile communications device of claim 35, wherein each of the authentications is carried out in accordance with Wireless Public Key Infrastructure.

38. The mobile communications device of claim 34, comprising:

means for communicating with the local external device via a wired connection.

39. The mobile communications device of claim 34, comprising:

means for communicating with the local external device via a wireless connection.