Communication method and device

• US 6,047,066 A
• Filed: 08/10/1998
• Issued: 04/04/2000
• Est. Priority Date: 12/13/1995
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Brown, Daniel Peter, Pennypacker, Frank C., Finkelstein, Louis David
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US09/131,302
• Time in Patent Office: 603 Days
• Field of Search: 380/2, 380/21, 380/30
• US Class Current: 380/2
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices

Abstract

A system (100) and method of improving activation security allows a remote device (104) to identify that there is a difference between a first signal transmitted by a central site (102) and a first signal received by the remote device. A derived number is used. The derived number can be displayed to the user for verbal verification by the user, or the derived number can be used internally of the remote device, or the central site, for verification that is transparent to the user. A significant amount of security is added without substantially altering the communication protocol.

Claims

1. A method of monitoring a communication link between a central site and a remote device, for determining that an authentication key is securely communicated to the remote device when the remote device is not certified, comprising the steps of:

sending a first signal from the central site that is at least a component of a public key;

deriving a return signal as a function the at least a component of a public key;

sending the return signal from the remote device to the central site; and

detecting an intruder at the central site if the base station does not receive a signal based on the shared number at the base station.

2. The method as defined in claim 1, wherein the shared number is stored in the central site with a subscription identification associated with the remote device.

3. The method as defined in claim 2, wherein the shared number is periodically updated by the central site.

4. The method as defined in claim 1, wherein the shared number is not secret.

5. The method as defined in claim 2, wherein the shared number is transmitted prior to the authentication session.

6. The method as defined in claim 1, wherein the derived number is a function of the authentication key and a random number.

7. The method as defined in claim 1, wherein the shared number is stored in the central cite and the remote device.

9. The method as defined in claim 1, wherein the return signal identifies a shared number stored in the central site with a subscription identification associated with the remote device.

10. The method as defined in claim 2, wherein the shared number is periodically updated by the central site.

11. The method as defined in claim 1, wherein the shared number is not a secret.

12. The method as defined in claim 1, wherein the derived number is a function of the authentication key and a random number.

13. The method as defined in claim 1, wherein the shared number is stored in the central cite and the remote device.

14. The method as defined in claim 1, wherein the predetermined number is in a signal received from a broadcast by the central site.

8. A method of over-the-air service provisioning of a remote device having an electronic serial number for communication on a communication link with a central site, characterized in that the operation of the remote device during establishment of an authentication key for use in communication with the remote device, includes the steps of:

receiving a first signal from the central site over the communication link, the first signal including at least a component of a public key;

deriving a return signal as a function of the received signal including that at least a portion of the public key; and

sending the return from the remote device to the central site which return signal to be used to establish a common authentication key for the remote device and the central site, and wherein the return signal is derived as a function of a predetermined value whereby the base station can detect whether an intruder was present in the communication link during over-the-air service provisioning from the return signal.