Process for improving public key authentication

• US 5,402,490 A
• Filed: 09/01/1992
• Issued: 03/28/1995
• Est. Priority Date: 09/01/1992
• Status: Expired due to Term

• Current Assignee: CDC Propriete Intellectuelle
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Mihm, Jr., Thomas J.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US07/937,772
• Time in Patent Office: 938 Days
• Field of Search: 380/21, 380/23-25, 380/30, 380/52, 340/825.34
• US Class Current: 380/247
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor

Abstract

An environment which includes a communications network, user terminals, and an authentication center provides communication services only to legitimate subscribers. The authentication center receives an equipment ID for each terminal, generates a series of sequence numbers and uses a secret key to encrypt the sequence numbers and the equipment ID with a user ID and an error detection code to form an encrypted block. This block is programmed into an authentication module and sent to the subscriber for installation in the subscriber'"'"'s terminal. The authentication center sends a public key to network authentication nodes. When the subscriber operates the terminal to gain access to the network, a log-on message, which includes the encrypted block and an unencrypted version of the equipment ID, is sent to an authentication node. The node decrypts the encrypted block and evaluates the IDs and sequence number to determine whether to grant access to services.

Claims

1. A method for authenticating, by an authentication center having a first processor contained therein, user terminals used by users of a communication service offered by a communication service provider, said communication service being accessible through at least one user terminal of said user terminals, said one user terminal including a second processor contained therein, said user terminal having equipment identification data (ID) associated therewith and having pre-encrypted messages including sequence numbers stored therein, said method comprising steps of:

(a) obtaining by said first processor, said equipment ID for said one user terminal;

(b) obtaining by said first processor, said sequence numbers for said one user terminal;

(c) forming at said authentication center by said first processor, an encrypted block, said encrypted block including said equipment ID and said sequence numbers;

(d) storing said encrypted block in said one user terminal, said pre-encrypted messages comprising said encrypted block; and

(e) receiving a log-on message from said one user terminal to said communication service provider at least at initiation of a communication session, said log-on message including one of said pre-encrypted messages and said equipment ID.

2. A method as claimed in claim 1 wherein said step (c) comprises the steps of:

(c1) combining said equipment ID associated with said one user terminal with said sequence number to form a combined block, said sequence number being from a list of numbers in a particular order;

(c2) encrypting said combined block to form said encrypted block; and

(c3) repeating said steps (c1) and (c2) for each of said sequence numbers of said list of numbers to form a list of encrypted blocks which comprise said pre-encrypted messages, and said step (d) additionally comprises the step of storing said pre-encrypted messages in said one user terminal, and said step (e) additionally comprises the step of receiving a log-on

message including one of said pre-encrypted messages stored in said one user terminal.

3. A method as claimed in claim 1 wherein said step (c) comprises a step of including first user identification data (ID) in said encrypted block.

4. A method as claimed in claim 1 wherein:

said step (c) includes a step of using a secret key in forming said encrypted block; and

said method additionally comprises a step of sending a public key to said communication service provider, said public key complementing said secret key.

5. A method as claimed in claim 1 wherein:

said step (c) includes a step of generating expiration date data for association with said encrypted block;

said step (d) includes a step of storing said expiration date data in said one user terminal; and

said log-on message includes said expiration date data with said pre-encrypted message and said equipment ID.

6. A method as claimed in claim 1 wherein:

said step (c) includes a step of programming an authentication module to store said encrypted block; and

said step (d) comprises a step of physically combining said authentication module with said one user terminal.

7. A method as claimed in claim 6 wherein said step (c) is performed at a location remote to said one user terminal, and said method additionally comprises a step of transporting said authentication module from said remote location to said one user terminal.

8. A method as claimed in claim 1 wherein said step (c) uses an encryption key to form said encrypted block, and said method additionally comprises steps of repeating said step (c) and said step (d) for said one user terminal from time-to-time, wherein different encryption keys are used during different repetitions of said step (c).

9. A method for authenticating user terminals used by users of a communication service accessible through said user terminals, wherein said user terminals-have pre-encrypted messages stored therein, said pre-encrypted messages including sequence numbers and equipment identification data (ID) associated with said user terminals, said method comprising steps of:

(a) receiving from one of said user terminals, a log-on message at initiation of each calling session, said log-on message including an encrypted block and an identifying block, said encrypted block being one of said pre-encrypted messages and including a first equipment ID in an encrypted form and one of said Sequence numbers in an encrypted form, said identifying block including a second equipment ID in a non-encrypted form;

(b) decrypting at a communication service provider, said encrypted block by a first processor to obtain said first equipment ID and said sequence number;

(c) evaluating by said first processor, said first and second equipment IDs to detect correspondence therebetween;

(d) evaluating by said first processor, said sequence number with a previously used sequence number to detect a correspondence therebetween; and

(e) denying access to said communication service when said step (c) fails to detect said correspondence or said step (d) detects said correspondence.

10. A method as claimed in claim 9 wherein:

said encrypted block additionally includes an error detection code;

said step (b) additionally obtains said error detection code;

said steps (c) and (d) additionally evaluate said error detection code to determine when an error is indicated; and

said step (e) denies access to said communication service when said step (c) or said step (d) determines that said error is indicated.

11. A method as claimed in claim 9 wherein:

said encrypted block additionally includes first user identification data (ID);

said step (b) additionally obtains said first user ID;

said method additionally comprises the step of maintaining a list of second user IDs;

said step (c) additionally evaluates said first user ID and said list of second user IDs to determine whether said first user ID is included in said list of second user IDs; and

said step (d) additionally determines whether to grant access to said communication service in response to said evaluation of said list of second user IDs with respect to said first user ID.

12. A method as claimed in claim 11 wherein said list of second user IDs serves as an unauthorized user list, and said step (d) denies access to said communication service when said first user ID is included in said list of second user IDs.

13. A method as claimed in claim 9 wherein:

said first equipment ID is encrypted using a secret key;

said method additionally comprises step of receiving a public key from a remote location, said public key complementing said secret key; and

said step (b) utilizes said public key in decrypting said encrypted block by said first processor.

14. A method as claimed in claim 13 wherein:

said communication service is a communication service provided through a network having a plurality of central switching offices in data communication with one another, each of said central switching offices in communication with its own plurality of base stations; and

said method additionally comprises steps of;

providing an authentication center in data communication with said

central switching offices and said base stations, generating said complementing secret and public keys at said authentication center,

forming said encryption block at said authentication center, and

sending said public key from said authentication center to at least one of said central switching offices and said base stations.

15. A method as claimed in claim 9 wherein said log-on message additionally includes expiration date data, and said method additionally comprises steps of:

saving first and second decryption keys in a memory contained in said authentication station; and

selecting, in response to said expiration date data, one of said first and second decryption keys for use in said step (b).

16. A method as claimed in claim 9 wherein:

said communication service is provided through a network having a plurality of central switching offices, each of said central switching offices in communication with its own plurality of base stations; and

said steps (b), (c), (d) and (e) are performed at said base stations of said network.

17. A method as claimed in claim 9 wherein:

said communication service is provided through a network having a plurality of central switching offices, each of said central switching offices in communication with its own plurality of base stations; and

said steps (b), (c), (d) and (e) are performed at said central switching offices.

18. A system for providing communication services only to authenticated user terminals for use by users through a communication network having a plurality of nodes, said communication services being provided through said user terminals having pre-encrypted messages stored therein, said pre-encrypted messages including sequence numbers and equipment identification data (ID) associated with said user terminals, said system comprising:

one or more authentication modules, each authentication module for combining with a corresponding one of said user terminals; and

means, responsive to said equipment IDs, for producing said authentication modules, each of said authentication modules for storing an encrypted block of data therein, said encrypted block of data including said equipment ID in an encrypted form and a series of said sequence numbers in an encrypted form, said sequence numbers comprising a list of numbers in a particular order.

19. A system as claimed in claim 18 wherein said producing means is in data communication with said communication network, said producing means for generating complementary encryption and decryption keys, said encryption keys being used in forming said encrypted blocks and said decryption keys being transmitted to said network.

20. A system as claimed in claim 19, at least some of said network nodes for:

receiving said decryption keys and receiving log-on messages, wherein each message includes one of said authentication module encrypted blocks and one of said user terminal equipment IDs;

decrypting said encrypted blocks using said decryption keys;

evaluating whether said equipment IDs from said encrypted blocks corresponds to said equipment IDs from said user terminals;

evaluating whether said sequence number from said encrypted blocks corresponds to said sequence number from said network nodes; and

granting access to said communication services based on said evaluation.

21. A system as claimed in claim 20 wherein:

said producing means for providing said encrypted blocks additionally provides user identification data (ID);

said at least some network nodes each include memory means for storing a list of user IDs; and

said at least some network nodes evaluate said user IDs from said encrypted blocks with said list of user IDs in determining whether to grant access to said communication services.

22. A method for authenticating user terminals for use by users using a communication service provided by a communication network in communication with an authentication center, said communication network accessible through said user terminals having pre-encrypted messages stored therein, said pre-encrypted messages including sequence numbers and equipment identification data (ID) associated therewith, said sequence numbers comprising a list of numbers in a particular order, said method comprising steps of:

(a) obtaining said equipment ID and said sequence numbers for one of said user terminals by a first processor;

(b) forming an encrypted block, said encrypted block including said equipment ID and said sequence numbers;

(c) storing said encrypted block in a memory in said one user terminal;

(d) sending a log-on message from said one user terminal to said communication network at initiation of each calling session, said log-on message including said encrypted block and said equipment ID;

(e) decrypting said encrypted block portion of said log-on message by said first processor to obtain an authentication equipment ID;

(f) evaluating said authentication equipment ID by said first processor to detect correspondence between said authentication equipment ID and said equipment ID;

(g) evaluating said sequence number by said first processor to determine if said sequence number is subsequent to previous sequence numbers used; and

(h) denying said communication services to said one user terminal when said step (f) fails to detect said correspondence or said step (g) determines said sequence number is not subsequent to previous sequence numbers used.

23. A method as claimed in claim 22 wherein:

said step (b) further comprises a step of including an error detection code in said encrypted block;

said step (e) additionally includes a step of decrypting said encrypted block portion of said log-on message to obtain said error detection code;

said step (f) additionally includes a step of evaluating said error detection code to determine when an error is indicated;

said step (g) additionally includes a step of evaluating said error detection code to determine when an error is indicated; and

said step (h) denies access to said communication service when said step (f) or (g) determines that said error is indicated.

24. A method as claimed in claim 23 wherein:

said step (b) additionally includes a step of forming an encrypted block, said encrypted block including first user identification data (ID);

said step (e) additionally includes a step of obtaining said first user ID;

said method additionally comprises a step of storing a list of second user IDs in a memory coupled to said first processor;

said step (f) additionally includes a step of evaluating said first user ID and said list of second user IDs to determine whether said first user ID is included in said list of second user IDs; and

said step (h) denies access to said communication service when said step (f) determines that said first user ID is included in said list of second user IDs.

25. A method as claimed in claim 22 wherein:

said step (b) includes step of programming an authentication module to retain said encrypted block; and

said step (c) comprises a step of physically combining said authentication module with said one user terminal.

26. A method as claimed in claim 22 wherein:

said network has a plurality of central switching offices in data communication with one another, each of said central switching offices being associated with its own plurality of base stations; and

said method additionally comprises steps of;

generating complementing secret and public keys at said authentication center;

using, in said step (b), said secret key at said authentication center to form said encrypted block; and

sending said public key from said authentication center to at least one of said central switching offices and said base stations.

27. A system for providing communication services only to authenticated users, said system comprising:

a user terminal having equipment identification data (EID) stored therein; and

a removable user authentication module having sequence numbers and said EID stored therein in a pre-encrypted form, said sequence numbers comprising a list of numbers in a particular order, wherein said user terminal is adapted to receive said removable user authentication module.

28. An apparatus for authenticating a user terminal for use by a user to a system which provides communication services through said user terminal having pre-encrypted messages stored therein, said pre-encrypted messages including sequence numbers and equipment identification data associated therewith, said apparatus comprising:

a memory for storing said pre-encrypted messages, said pre-encrypted messages having a predetermined relationship to said equipment identification data, said predetermined relationship being expressed in accordance with an encryption key; and

housing means coupled to said user terminal, said housing means for retaining said memory and to removably couple said memory to said user terminal.

29. An apparatus as claimed in claim 28 wherein said memory is further for storing an expiration date, said expiration date indicating when said encryption key becomes invalid.

30. An apparatus as claimed in claim 28 wherein:

said memory is further for storing user identification data and said pre-encrypted messages including said sequence numbers therein; and

said user identification data and said equipment identification data are encrypted together at an authentication center in accordance with said predetermined encryption relationship.

31. An apparatus as claimed in claim 28 wherein:

said memory is further configured for storing an error detection code therein;

said error detection code and said equipment identification data are encrypted together in accordance with said predetermined encryption relationship; and

said error detection code and said sequence numbers are encrypted together in accordance with said predetermined encryption relationship.

32. A method of accessing a communication system through a subscriber unit, said subscriber unit including an authentication module which includes blocks of pre-encrypted information, said pre-encrypted information including an equipment ID associated with said subscriber unit, each of said blocks including a sequence number, said blocks being encrypted at an authentication center and stored in said authentication module in an encrypted form, said method comprising the steps of:

sending, by said subscriber unit, said equipment ID and one of said blocks of said pre-encrypted information to a communication service provider when access is desired to said communication system; and

receiving notice of access to said communication service from said service provider when said service provide detects correspondence between said equipment ID and a decrypted equipment ID, and determines that said sequence number is subsequent to a previous sequence number, said communication service provider decrypting said one of said blocks to determine said equipment ID and said sequence number.