Method of carrying out an authentication check between a base station and a mobile station in a mobile radio system

• US 5,390,245 A
• Filed: 04/07/1993
• Issued: 02/14/1995
• Est. Priority Date: 03/09/1990
• Status: Expired due to Term

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Dahlin, Jan. E. A. S., Dent, Paul W., Raith, Alex K.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/043,758
• Time in Patent Office: 678 Days
• Field of Search: 380/23, 380/25, 380/34, 380/49, 380/50, 375/1, 379/58-62, 379/95, 340/825.31, 340/825.34, 455/33.1, 455/34.1, 455/34.2, 455/54.1, 455/54.2, 455/56.1
• US Class Current: 380/247
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices

Abstract

Methods for carrying out an authentication check in a mobile telephone system in which an authentic base station serves a plurality of mobile stations. A prior method carried out a unidirectional check from the base to a calling mobile, permitting a false base to carry out a false authentication check by collecting a number of so-called RAND-Response pairs. To avoid this problem, another unidirectional, base-to-mobile, authentication check and an authentication check from the mobile to the base are carried out. In one embodiment, only the bi-directional authentication check is carried out.

Claims

1. A method for establishing the authenticity of a network and a mobile station in a mobile radio system, the method comprising the steps of:

forming in each of the network and the mobile station a first signal and a second signal;

transmitting the first signal formed in the network to the mobile station;

establishing the authenticity of the network by comparing in the mobile station the first signal formed in the mobile station with the first signal received from the network;

transmitting the second signal formed in the mobile station to the network; and

establishing the authenticity of the mobile station by comparing in the network the second signal formed in the network with the second response signal received from the mobile station.

2. A method according to claim 1 wherein the first and second signals depend on other data in addition to the pseudo-random number.

3. A method according to claim 2 wherein the other data includes a personal identification number of the mobile station.

4. A method according to claim 2 wherein the other data includes an electronic serial number of the mobile station.

5. A method according to claim 2 wherein the other data includes a number dialled from the mobile station.

6. A method according to claim 1 wherein the second signal formed in the mobile station is transmitted to the network only if the first signal formed in the mobile station is identical to the first signal received from the network.

7. A method according to claim 1 further including the step of establishing voice communication between the network and the mobile station if the second signal formed in the network is identical to the second signal received from the mobile station.

8. A method according to claim 1 further including the step of terminating voice communication between the network and the mobile station if the second signal formed in the network is not identical to the second signal received from the mobile station.