HRPD NETWORK ACCESS AUTHENTICATION METHOD BASED ON CAVE ALGORITHM

• US 20090190562A1
• Filed: 04/10/2009
• Published: 07/30/2009
• Est. Priority Date: 09/26/2003
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: LIU, Weimin
• Granted Patent: US 7,990,930 B2
• Time in Patent Office: Days
• US Class Current: 370/335
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

A HRPD network access authentication method based on CAVE algorithm is provided. An AT (Access Terminal) generates a random number “RAND” necessary for a calculation of an AUTH1 by using a “Random text” included in the CHAP Challenge message. A UIM (User Identity Module) card works out the AUTH1 by using the random number “RAND” and an SSD_A (Shared Secret Data A) in the UIM card. The AT carries the AUTH1 in a Result field of the CHAP Response message. An AN-AAA (Access Network-Authentication, Authorization, and Accounting) generates the random number “RAND” necessary for the calculation of an AUTH2 by using a “Random text” included in a Radius Access Request message. The AN-AAA works out the AUTH2 by using the random number “RAND”. The two results AUTH1 and AUTH2 are compared. If the results are the same, the authentication on the AT passes. Otherwise, AT access is rejected.

Claims

1. A method for operating during an authentication in a HAT (Hybrid Access Terminal), which can operate according to a CDMA (Code Division Multiple Access) 2000 1x scheme and an HRPD (High Rate Packet Data) scheme, comprising the steps of:

receiving a CHAP (Challenge Handshake Authentication Protocol) challenge message from an HRPD system;

generating, by a removable UIM (User Identity Module) card, which includes a CAVE (Cellular Authentication and Voice Encryption) algorithm, a first result “

AUTH1”

that the removable UIM works out by the CAVE algorithm by using the CHAP challenge message in the removable UIM card;

transmitting, by the HAT, to the HRPD system, the AUTH1 with an identification of the HAT by using a CHAP response message; and

receiving an access accept message from the HRPD system.

2. The method as defined in claim 1, wherein the CHAP challenge message and the access accept message include random text, and random numbers “

RAND”

are obtained from the random text.

3. The method as defined in claim 2, further comprising, upon receiving an SSD (Shared Secret Data) update message from a CDMA2000 1x network, updating an SSD stored in the removable UIM included in the HAT.

4. The method as defined in claim 3, wherein the SSD stored in the removable UIM card can be used in CDMA2000 1x network access authentication.

5. The method as defined in claim 3, wherein the removable UIM card generates the AUTH1 using the stored SSD with the RAND.

6. The method as defined in claim 1, wherein the identification is a NAI (Network Access Identifier).

7. The method as defined in claim 6, wherein the CHAP response message includes a parameter field with the NAI, which is constructed by a combination of an IMSI (International Mobile Station Inquiry) in the removable UIM card and a domain name in the HAT.

8. The method as defined in claim 6, wherein the CHAP response message includes such parameter fields as the NAI, and the AUTH1, in which a result field is used for storing the AUTH1 that the removable UIM works out by using the CAVE algorithm.