Method of managing mobile station operational parameters

• US 6,408,175 B1
• Filed: 11/09/1999
• Issued: 06/18/2002
• Est. Priority Date: 03/03/1999
• Status: Expired due to Term

• Current Assignee: Aegis 11 S.A. (Fineur International S.A.)
• Original Assignee: LG Information & Communications Ltd. (LG Corporation)
• Inventors: Park, Hyoung Sun
• Primary Examiner(s): Trost, William
• Assistant Examiner(s): Tran, Congvan
• Application Number:
  US09/436,726
• Time in Patent Office: 952 Days
• Field of Search: 455/410, 455/411, 455/414, 455/418, 455/419, 455/420, 455/433, 455/550, 455/560, 455/515, 380/247, 380/270
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

A method of managing mobile station operational parameters is disclosed in which a mutual authentication between a mobile station and a network is performed. The present method allows a mutual authentication while maintaining the updating procedure of the mobile station operational parameters in the conventional procedure.

Claims

1. A method of managing mobile station operational parameters in a wireless communication network, comprising:

transmitting a message from a network to a mobile station to indicate an initiation of an update of the mobile station operational parameters; and

updating the mobile station operational parameters after completing a mutual authentication between the mobile station and the network, wherein the mutual authentication comprises

generating a first random number at the network and transmitting the first random number to the mobile station, and generating a first authentication at the network utilizing the first random number;

generating at the mobile station a second authentication utilizing the first random number received from the network and generating a second random number, said mobile station transmitting the second random number with the second authentication to the network and generating a third authentication utilizing the second random number;

comparing the second authentication with the first authentication;

generating at the network a fourth authentication utilizing the second random number from the mobile station;

transmitting from the network the fourth authentication to the mobile station if the first authentication and the second authentication are equivalent;

comparing the third authentication with the fourth authentication; and

completing a mutual authentication if the third authentication and the fourth authentication are equivalent.

2. The method of claim 1, wherein the first random number is transmitted to the mobile station with said message.

3. The method of claim 1, wherein the third authentication is generated prior to transmitting the second random number and the second authentication.

4. The method of claim 1, wherein the fourth authentication is generated prior to comparing the second authentication with the first authentication.

5. A method of managing mobile station operational parameters in a wireless communication network, comprising:

transmitting a message from a network to a mobile station to indicate an initiation of an update of the mobile station operational parameters; and

updating the mobile station operational parameters after completing a mutual authentication between the mobile station and the network, wherein the mutual authentication comprises

generating a first random number at the network and transmitting the first random number to the mobile station;

generating at the mobile station a first authentication utilizing the first random number received from the network and generating a second random number, said mobile station transmitting the second random number with the first authentication to the network and generating a second authentication utilizing the second random number;

generating at the network a third authentication utilizing the first random number, and comparing the third authentication with the first authentication from the mobile station;

generating at the network a fourth authentication utilizing the second random number from the mobile station;

transmitting the fourth authentication to the mobile station if the first authentication and the third authentication are equivalent;

comparing the second authentication with the fourth authentication; and

completing a mutual authentication if the second authentication and the fourth authentication are equivalent.

6. The method of claim 5, wherein the first random number is transmitted to the mobile station with said message.

7. The method of claim 5, wherein the second authentication is generated prior to transmitting the second random and the first authentication.

8. The method of claim 5, wherein the fourth authentication is generated prior to comparing the third authentication with the first authentication.

9. A method of managing mobile station operational parameters in a wireless communication network, comprising:

transmitting a message from a network to a mobile station to indicate an initiation of an update of the mobile station operational parameters; and

updating the mobile station operational parameters after completing a mutual authentication between the mobile station and the network, wherein the mutual authentication comprises

generating a first random number at the mobile station and generating a first authentication utilizing the first random number, said mobile station transmitting the first random number to the network;

generating at the network a second authentication utilizing the first random number received from the network and generating a second random number, said network transmitting the second random number with the second authentication to the mobile station and generating a third authentication utilizing the second random number;

comparing the second authentication with the first authentication;

generating at the mobile station a fourth authentication utilizing the second random number from the network;

transmitting from the mobile station the fourth authentication to the network if the first authentication and the second authentication are equivalent;

comparing the third authentication with the fourth authentication; and

completing a mutual authentication if the third authentication and the fourth authentication are equivalent.

10. The method of claim 9, wherein the third authentication is generated prior to transmitting the second random number and the second authentication.

11. The method of claim 9, wherein the fourth authentication is generated prior to comparing the second authentication with the first authentication.

12. A method of managing mobile station operational parameters in a wireless communication network, comprising:

transmitting a message from a network to a mobile station to indicate an initiation of an update of the mobile station operational parameters; and

updating the mobile station operational parameters after completing a mutual authentication between the mobile station and the network, wherein the mutual authentication comprises

generating a first random number at the mobile station and transmitting the first random number to the network;

generating at the network a first authentication utilizing the first random number received from the mobile station and generating a second random number, said network transmitting the second random number with the first authentication to the mobile station and generating a second authentication utilizing the second random number;

generating at the mobile station a third authentication utilizing the first random number, and comparing the third authentication with the first authentication from the network;

generating at the mobile station a fourth authentication utilizing the second random number from the network;

transmitting the fourth authentication to the network if the first authentication and the second authentication are equivalent;

comparing the second authentication with the fourth authentication; and

completing a mutual authentication if the second authentication and the fourth authentication are equivalent.

13. The method of claim 12, wherein the second authentication is generated prior to transmitting the second random number and the first authentication.

14. The method of claim 12, wherein the fourth authentication is generated prior to comparing the third authentication with the first authentication.

15. A method of performing OTAFA procedure comprising:

determining a mobile station'"'"'s availability for the OTAFA;

generating and storing at a network a first random number if the mobile station is OTAPA capable;

transmitting to the mobile station a message notifying the start of the OTAPA procedure with the first random number;

generating at the mobile station a first authentication using the first random number, a second random number, and a second authentication;

transmitting to the network a response message with the second random number and the first authentication;

initiating an authentication procedure at the network by generating a third authentication using the first random number and comparing the first authentication with the third authentication;

generating and transmitting a fourth authentication using the second random number if the first authentication and the third authentication are equivalent;

comparing at the mobile station the fourth authentication and the second authentication, and if equivalent, transmitting to the network a second message allowing a parameter update;

transmitting from the network to the mobile station at least one parameter for update upon receiving the second message; and

updating at the mobile station said at least one parameter for update.

16. The method of claim 15, wherein the first random number is transmitted to the mobile station with the message.

17. The method of claim 15, wherein the second authentication is generated prior to transmitting the second random number and the first authentication.

18. The method of claim 15, wherein the fourth authentication is generated prior to comparing the first authentication with the third authentication.

19. The method of claim 15, wherein the third authentication is generated prior to transmitting the second random number and the second authentication.

20. A method of authenticating a mobile station and a communication network, comprising:

generating and storing at a network a first random number;

transmitting to the mobile station a message with the first random number;

generating at the mobile station a first authentication signature using the first random number, a second random number, and a second authentication signature;

transmitting to the network a response message with the second random number and the first authentication signature;

initiating an authentication procedure at the network by generating a third authentication signature using the first random number and comparing the first authentication signature with the third authentication signature;

generating and transmitting a fourth authentication signature using the second random number;

comparing the fourth authentication signature and the second authentication signature at the mobile station; and

transmitting a second message from the mobile station to the network indicating authentication complete if the fourth authentication signature and the second authentication are equivalent.

21. The method of claim 20, wherein the fourth authentication is generated and transmitted only if the first authentication signature and the third authentication signature are equivalent.

22. A method of authenticating a mobile station and a communication network, comprising:

generating a first random number at a network and transmitting the first random number to a mobile station;

generating a first authentication signature at the network using the first random number;

generating a second authentication signature at the mobile station using the first random number received from the network;

generating a second random number at the mobile station,

transmitting the second random number with the second authentication signature from the mobile station to the network;

generating a third authentication signature at the mobile station using the second random number;

comparing the second authentication signature with the first authentication signature at the network;

generating a fourth authentication signature at the network using the second random number from the mobile station;

transmitting from the network the fourth authentication signature to the mobile station if the first authentication signature and the second authentication signature are equivalent;

comparing the third authentication signature with the fourth authentication signature at the mobile station; and

completing a mutual authentication if the third authentication signature and the fourth authentication signature are equivalent.

23. A method of authenticating a mobile station and a communication network, comprising:

generating a first random number at a network and transmitting the first random number to the mobile station;

generating a first authentication signature at the mobile station using the first random number received from the network and generating a second random number;

transmitting the second random number with the first authentication signature from the mobile station to the network;

generating a second authentication signature at the mobile station using the second random number;

generating a third authentication signature at the network using the first random number, and comparing the third authentication signature with the first authentication signature from the mobile station;

generating a fourth authentication signature at the network using the second random number from the mobile station;

transmitting the fourth authentication signature to the mobile station if the first authentication signature and the third authentication signature are equivalent;

comparing the second authentication signature to the fourth authentication signature; and

completing a mutual authentication if the second authentication signature and the fourth authentication signature are equivalent.