Method for validating a communication link

• US 5,488,649 A
• Filed: 05/06/1994
• Issued: 01/30/1996
• Est. Priority Date: 05/06/1994
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Schellinger, Michael J.
• Primary Examiner(s): Bost, Dwayne D.
• Application Number:
  US08/239,012
• Time in Patent Office: 634 Days
• Field of Search: 379/58, 379/59, 379/61, 379/62, 455/26.1, 455/54.1, 455/33.1, 340/825.3, 340/825.31, 340/825.34, 380/23
• US Class Current: 455/411
• CPC Class Codes: H04B 1/3877 Arrangements for enabling portable transceivers to be used in a fixed position, e.g. cradles or boosters
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04M 1/72505 Radio link set-up procedures
• CPC Class Codes: H04M 1/727 Identification code transfer arrangements
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices

Abstract

The method of the present invention generally validates a communication link in a communication system. In particular, the method validates a communication link between a cordless base station and authorization and call routing equipment by authenticating the cordless base station to communicate with said authorization equipment (603) and authenticating the authorization equipment to communicate with the cordless base station (604). Preferrably, the step of authenticating the cordless base station is based upon a first random number generated within the authorization equipment (502) and the step of authenticating the authorization equipment is based upon a second random number generated within the cordless base station (504). A communication link is allowed between the cordless base station and the authorization equipment when both the cordless base station and the authorization equipment have been authenticated (614).

Claims

1. A method for validating a communication link between a cordless base station and authorization equipment, said cordless base station being coupled to a telephone network and adapted to communicate with a wireless communication device, the method comprising the steps of:

authenticating said cordless base station to communicate with said authorization equipment, said step of authenticating said cordless base station being based upon a first random number generated within said authorization equipment;

authenticating said authorization equipment to communicate with said cordless base station, said step of authenticating said authorization equipment being based upon a second random number generated within said cordless base station; and

allowing a communication link between said cordless base station and said authorization equipment when said cordless base station and said authorization equipment have been authenticated.

2. The method for validating a communication link according to claim 1 wherein said step of authenticating said cordless base station comprises transmitting a connect message from said authorization equipment to said cordless base station, said connect message including said first random number generated by said authorization equipment.

3. The method for validating a communication link according to claim 2 wherein said step of authenticating said cordless base station further comprises transmitting a cordless base station authentication result from said cordless base station to said authorization equipment.

4. The method for validating a communication link according to claim 1 wherein said step of authenticating said authorization equipment further comprises transmitting an authorization equipment authentication message from said cordless base station to said authorization equipment, said authorization equipment authentication message including said second random number generated by said cordless base station.

5. The method for validating a communication link according to claim 4 wherein said step of authenticating said authorization equipment further comprises transmitting an authorization equipment authentication result from said authorization equipment to said cordless base station.

6. A method for validating a wired communication link between a base station and a second device connected in a telecommunication network, the method comprising the steps of:

(a) transmitting a first authentication request signal from said second device to said base station, said first authentication request signal having a first random number;

(b) generating within said base station a first authentication result based upon said first random number;

(c) generating within said second device a second authentication result based upon said first random number;

(d) comparing said first authentication result and said second authentication result to authenticate said base station;

(e) transmitting a second authentication request signal from said base station to said second device, said second authentication request signal including a second random number;

(f) generating within said second device a third authentication result based upon said second random number;

(g) generating within said base station a fourth authentication result based upon said second random number; and

(h) comparing said third authentication result and said fourth authentication result to authenticate said second device.

7. The method for validating a wired communication link according to claim 6 further including a step of transmitting from said base station to said second device a unique identification number identifying said base station prior to the step of (c) generating a second authentication result.

8. The method for validating a wired communication link according to claim 6 wherein said step (b) of generating a first authentication result comprises generating a first authentication result based upon said first random number and a unique identification number identifying said base station;

and

wherein said step (c) of generating a second authentication result comprises generating a second authentication result based upon said first random number and a unique identification number identifying said base station.

9. The method for validating a wired communication link according to claim 6 wherein said step (f) of generating a third authentication result comprises generating a third authentication result based upon said second random number and a unique identification number identifying said base station;

and

wherein said step (g) of generating a fourth authentication result comprises generating a fourth authentication result based upon said second random number and a unique identification number identifying said base station.

10. The method for validating a wired communication link according to claim 6 wherein said step (b) of generating a first authentication result comprises generating a first authentication result based upon said first random number and an address uniquely identifying said second device;

and

wherein said step (c) of generating a second authentication result comprises generating a second authentication result based upon said first random number and an address uniquely identifying said second device.

11. The method for validating a wired communication link according to claim 6 wherein said step (f) of generating a third authentication result comprises generating a third authentication result based upon said second random number and an address uniquely identifying said second device;

and

wherein said step (g) of generating a fourth authentication result comprises generating a fourth authentication result based upon said second random number and an address uniquely identifying said second device.

12. The method for validating a wired communication link according to claim 6 wherein said step (b) of generating a first authentication result comprises generating a first authentication result based upon said first random number and a wireline interface key (WIKEY);

and

wherein said step (c) of generating a second authentication result comprises generating a second authentication result based upon said first random number and a wireline interface key (WIKEY).

13. The method for validating a wired communication link according to claim 6 wherein said step (f) of generating a third authentication result comprises generating a third authentication result based upon said second random number and a wireline interface key (WIKEY);

and

wherein said step (g) of generating a fourth authentication result comprises generating a fourth authentication result based upon said second random number and a wireline interface key (WIKEY).

14. A method for authenticating a cordless base station operating in a communication system having authorization equipment, said cordless base station having an identification code associated therewith, the method comprising the steps of:

transmitting an authentication request from said authorization equipment to said cordless base station, said authentication request including a random number generated at said authorization equipment;

generating a first authentication result based upon said random number and a first identification number;

transmitting said first authentication result to said authorization equipment;

transmitting said identification code associated with said cordless base station to said authorization equipment;

generating a second authentication result at said authorization equipment based upon said random number and said first identification number; and

comparing said first authentication result and said second authentication result to authenticate said cordless base station.

15. A method for authenticating authorization equipment operating in a communication system having a cordless base station coupled to a telephone network, said cordless base station having an identification code associated therewith, the method comprising the steps of:

transmitting an authentication request from said cordless base station to said authorization equipment, said authentication request including a random number generated at said cordless base station and a first identification number;

generating a first authentication result at said cordless base station, said first authentication result being based upon said random number and said first identification number;

generating a second authentication result at said authorization equipment based upon said random number and said cordless base station identification code;

transmitting said second authentication result to said cordless base station; and

comparing said first authentication result and said second authentication result to authenticate said authentication equipment.

16. A method for authenticating authorization equipment operating in a communication system having a cordless base station coupled to a telephone network, said cordless base station having an identification code associated therewith, the method comprising the steps of:

transmitting an authentication request from said cordless base station to said authorization equipment, said authentication request including a random number generated at said cordless base station and a first identification number;

generating a first authentication result at said cordless base station, said first authentication result being based upon said random number and said first identification number;

receiving at said cordless base station a second authentication result generated at said authorization equipment based upon said random number and said cordless base station identification code; and

comparing said first authentication result and said second authentication result to authenticate said authentication equipment.

17. A method for validating a wired communication link between a base station and a second device connected in a telecommunication network, the method comprising the steps of:

(a) transmitting a first authentication request signal from said second device to said base station, said first authentication request signal having a first random number;

(b) transmitting a second authentication request signal from said base station to said second device, said second authentication request signal including a second random number and a first authentication result generated within said base station based upon said first random number;

(c) authenticating said base station by comparing said first authentication result to a second authentication result generated within said second device based upon said first random number;

(d) transmitting a third authentication result from said second device to said base station, said third authentication result generated within said second device based upon said second random number; and

(e) authenticating said second device by comparing said third authentication result to a fourth authentication result generated within said base station based upon said second random number.