METHOD FOR CRYPTOGRAPHICALLY VERIFIABLE IDENTIFICATION OF A PHYSICAL UNIT IN A PUBLIC, WIRELESS TELECOMMUNICATIONS NETWORK

• US 20130072159A1
• Filed: 09/14/2012
• Published: 03/21/2013
• Est. Priority Date: 05/26/2000
• Status: Active Grant

• Current Assignee: IPCom GmbH & Co KG
• Original Assignee: IPCom GmbH & Co KG
• Inventors: ADI, Wael
• Granted Patent: US 8,638,933 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 2209/26 Testing cryptographic entity, e.g. testing integrity of encryption key or encryption algorithm
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/75 Temporary identity

Abstract

A method for confirming identity of a physical unit (M) in an open, wireless telecommunications network, having the following steps: storing a secret identity (SIMEI) and an open identity (IMEI) in memory in the physical unit (M); receiving an identity request (IR) with a first parameter (CHv) from the testing device (P) at the physical unit (M); generating an electronic signature (SIGt) by means of a first cryptographic function (F3) from the secret identity (SIMEI) and at least the first parameter (CHv) in the physical unit (M), and sending the generated electronic signature (SIGt) and the open identity (IMEI) to a testing device (P); wherein the identity of the physical unit (M) is confirmed if the electronic signature (SIGt) matches a corresponding electronic signature (SIGv) generated by the testing device by application of a first cryptographic function to the secret identity (SIMEI).

Claims

1. A method for confirming identity of a physical unit (M) in an open, wireless telecommunications network, having the following steps:

a) storing a secret identity (SIMEI) and an open identity (IMEI) in memory in the physical unit (M);

b) receiving an identity request (IR) with a first parameter (CHv) from the testing device (P) at the physical unit (M);

c) generating an electronic signature (SIGt) by means of a first cryptographic function (F3) from the secret identity (SIMEI) and at least the first parameter (CHv) in the physical unit (M), and sending the generated electronic signature (SIGt) and the open identity (IMEI) to a testing device (P);

wherein the identity of the physical unit (M) is confirmed if the electronic signature (SIGt) matches a corresponding electronic signature (SIGv) generated by the testing device by application of a first cryptographic function to the secret identity (SIMEI).

2. The method of claim 1, wherein the secret identity (SIMEI) is generated by a third cryptographic function (F1) from the open identity (IMEI) and the second secret key (MIGK).

3. The method of claim 1, wherein the open key (EMIGK) is sent to the testing device over the internet.

4. The method of claim 3, wherein the first and second parameters (CHv;

CHt) are linked by means of an exclusive-OR function (+).

5. The method of claim 3. wherein the first and second parameters (CHv;

CHt) are multiplexed and then linked by means of an exclusive-OR function (+), with a feedback from the output of the first cryptographic function (F3) to the exclusive-OR (+).

6. The method of claim 3, wherein the first and/or second parameters (CHv;

CHt) are provided in the form of random variables.

7. The method of claim 1, wherein the telecommunications network is a mobile telephone system.