Method and apparatus for providing authentication security in a wireless communication system

• US 5,943,615 A
• Filed: 01/15/1997
• Issued: 08/24/1999
• Est. Priority Date: 01/15/1997
• Status: Expired due to Term

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Rose, Gregory G., Quick, Roy F.
• Primary Examiner(s): Chin, Wellington
• Assistant Examiner(s): Tran, Pablo N.
• Application Number:
  US08/784,279
• Time in Patent Office: 951 Days
• Field of Search: 455/410, 455/411, 455/33, 455/53, 455/560, 455/561, 455/575, 380/43, 380/46, 380/49, 380/23, 379/62, 379/63, 340/825.31, 340/825.34, 340/825.44
• US Class Current: 455/411
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices

Abstract

An apparatus for providing authentication of a mobile station in a wireless communication system. The present invention takes the number dialed by the mobile station user and computes the 24 bit number (AUTH_-- DATA) for authentication in accordance with a hashing function that has the following characteristics. The hashing function takes as its input at least the entire dialed digit string contained in the request for service and the number of digits. In a preferred embodiment, the ordering of the digits affects the result, as well as, the values of the digits. The preferred embodiment of the hashing function also accepts some or all of the mobile station identifier data. The function provides as output a number of suitable size for input to a second calculation of an authentication signature, such as the 24 bits required for AUTH_-- DATA. The output number is created in such a way that there is a minimum likelihood that other sets of dialed digits may create the same result.

Claims

1. In mobile communication system, a method for authenticating the identity of a mobile station, comprising the steps of:

receiving a sequence of dialed digits entered by a mobile station user which identify a target communication unit;

generating a first number derived from said sequence of dialed digits and the number of digits in said sequence of dialed digits;

generating an authentication message in accordance with said first number; and

transmitting said sequence of dialed digits and said authentication message from said mobile station to a remote base station.

2. The method of claim 1 further comprising the steps:

receiving at said base station said sequence of dialed digits and said authentication message;

generating a local version of said first number derived from said received sequence of dialed digits and the number of digits in said received sequence of dialed digits;

generating a locally generated authentication message in accordance with said locally generated first number; and

comparing said locally generated authentication message with said received authentication message.

3. The method of claim 2 wherein the step of generating a locally generated authentication message is performed in accordance with a set of mobile station identification parameters stored in said base station.

4. The method of claim 1 wherein the step of generating an authentication message is performed in accordance with a set of mobile station identification parameters stored in said mobile station.

5. The method of claim 1 wherein the step of generating said first number comprises setting part of said first number to said number of digits in said sequence of dialed digits.

6. In mobile station, a method for authenticating the identity of said mobile station, comprising the steps of:

receiving a sequence of dialed digits entered by a mobile station user which identify a target communication unit;

generating a first number derived from said sequence of dialed digits and the number of digits in said sequence of dialed digits;

generating an authentication message in accordance with said first number; and

transmitting said sequence of dialed digits and said authentication message from said mobile station to a remote base station.

7. The method of claim 6 wherein the step of generating an authentication message is performed in accordance with a set of mobile station identification parameters stored in said mobile station.

8. The method of claim 6 wherein the step of generating said first number comprises setting part of said first number to said number of digits in said sequence of dialed digits.

9. In base station, a method for authenticating the identity of a mobile station, comprising the steps of:

receiving at said base station a sequence of dialed digits and an authentication message transmitted by said mobile station;

generating a local version of said first number derived from said received sequence of dialed digits and the number of digits in said received sequence of dialed digits;

generating a locally generated authentication message in accordance with said locally generated first number; and

comparing said locally generated authentication message with said received authentication message.

10. The method of claim 9 wherein the step of generating a locally generated authentication message is performed in accordance with a set of mobile station identification parameters stored in said base station.

11. The method of claim 9 wherein the step of generating said local version of said first number comprises setting part of said local version of said first number to said number of digits in said received sequence of dialed digits.

12. A mobile station comprising:

means for receiving a sequence of dialed digits entered by a mobile station user which identify a target communication unit;

means for generating a first number derived from said sequence of dialed digits and the number of digits in said sequence of dialed digits;

means for generating an authentication message in accordance with said first number; and

means for transmitting said sequence of dialed digits and said authentication message from said mobile station to a remote base station.

13. The mobile station of claim 12 further comprising:

mobile station identification parameter means for providing identification parameters; and

wherein said means for generating an authentication message is responsive to said identification parameters.

14. The mobile station of claim 12 wherein said means for generating a first number sets part of said first number to said number of digits in said sequence of dialed digits.

15. A base station comprising:

means for receiving at said base station a sequence of dialed digits and an authentication message transmitted by said mobile station;

means for generating a local version of said first number derived from said received sequence of dialed digits and the number of digits in said received sequence of dialed digits;

means for generating a locally generated authentication message in accordance with said locally generated first number; and

means for comparing said locally generated authentication message with said received authentication message.

16. The method of claim 15 wherein means for generating said local version of said first number sets part of said first number to said number of digits in said received sequence of dialed digits.