Method and apparatus for authentication in a communication system

• US 5,668,875 A
• Filed: 07/15/1996
• Issued: 09/16/1997
• Est. Priority Date: 07/29/1994
• Status: Expired due to Term

• Current Assignee: Motorola Solutions, Inc.
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Brown, Daniel Peter, Finkelstein, Louis David
• Primary Examiner(s): Barron, Jr., Gilberto
• Application Number:
  US08/683,590
• Time in Patent Office: 428 Days
• Field of Search: 380/23, 455/54.2, 379/62
• US Class Current: 380/248
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/42229 Personal communication services, i.e. services related to one subscriber independent of his terminal and/or location diverting calls from one subscriber to another subscriber, i.e. two different subscriptions H04M3/54; selecting arrangements in intelligent networks H04Q3/005
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 8/12 between location registers or mobility servers
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A method and apparatus for authenticating a roaming subscriber. In a preferred embodiment, a subscriber receives a challenge that is in a format of a local authentication protocol, and determines whether the local authentication protocol is the subseriber'"'"'s home system authentication protocol. If it is not, the subscriber converts the challenge into a format (e.g., bit length) compatible with its home system authentication protocol, and processes the converted challenge with the subscriber'"'"'s secret key and authentication algorithm into an authentication response. The authentication response is converted to be compatible with the local authentication protocol, and transmitted to a local system communication unit. The challenge and response is then forwarded to the subscriber'"'"'s home system for similar conversion and processing, and subscriber'"'"'s response is compared against a home system generated response.

Claims

1. A method of authenticating a subscriber unit in a wireless communication system comprsing the steps of:

receiving a request for authentication of the subscriber unit from a first communication system;

determining that the first communication system uses a first system authentication protocol different from a second system authentication protocol used in the subscriber unit; and

generating authentication information in the first system authentication protocol by generating a challenge and a response and by converting the challenge and response from the second system authentication protocol into a challenge and response in the first system authentication protocol.

2. A method of generating authentication information for use in autheticating a subscriber unit of a wireless communication system, the method comprising the steps of:

receiving a request for service from the subscriber unit;

generating a first authentication challenge based on a first authentication protocol; and

converting the first authentication challenge into a second authentication challenge in a second authentication protocol.

3. The method of claim 2, further comprising generating a first response based on the first authentication challenge.

4. The method of claim 3, further comprising converting the first response into a second response in the second protocol.

5. The method of claim 4, further comprising sending the second authentication challenge and the second response to the subscriber unit.

6. The method of claim 2, wherein the first authentication protocol is used in a first communication system and the second authentication protocol is used in a second communication system.