Process to control a subscriber identity module (SIM) in mobile phone system

• US 6,690,930 B1
• Filed: 04/11/2000
• Issued: 02/10/2004
• Est. Priority Date: 05/26/1998
• Status: Expired due to Term

• Current Assignee: T-Mobile Deutschland GmbH (Deutsche Telekom AG)
• Original Assignee: T-Mobile Deutschland GmbH (Deutsche Telekom AG)
• Inventors: Dupre, Michael
• Primary Examiner(s): Urban, Edward F.
• Assistant Examiner(s): CHOW, CHARLES CHIANG
• Application Number:
  US09/463,786
• Time in Patent Office: 1,400 Days
• Field of Search: 455/411, 455/558, 455/557, 455/407, 455/550, 455/410, 455/415, 455/418, 455/575, 455/563, 380/10, 380/247, 380/248, 380/249, 380/23, 380/29, 380/211, 380/283, 380/273, 380/282, 235/380-384, 379/58, 379/59, 379/355, 379/356, 379/357, 379/550, 379/558, 379/563, 379/564, 379/144, 713/200
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 8/245 from a network towards a terminal
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

A process to control a subscriber identity module (SIM) in mobile phone systems. The process consists of the mobile phone network sending one or more specific control values to the subscriber identity module that initiate specific actions or procedures within the subscriber identity module. Certain random values sent by the mobile phone network to the subscriber identity module for regular authentication purposes are used as control values (Control RANDs).

Claims

1. A process to control a subscriber identity module (SIM) in mobile phone systems, the process comprising:

sending at least one distinct Control RAND to the subscriber identity module by means of the mobile phone system;

initiating non-authentication actions or procedures within the subscriber identity module using the at least one Control RAND; and

using the at least one Control RAND for regular authentication of the subscriber identity module in the mobile phone system.

2. The process according to claim 1, wherein a group of different Control RANDs is used to initiate an action or procedure.

3. The process according to claim 1, wherein the at least one Control RAND initiates a number of different actions or procedures.

4. The process according to one of claims 1-3, and further comprising:

testing the received Control RANDs in the subscriber module prior to initiating an action or procedure by comparing the Control RANDs to specific comparison values (Comparison RAND'"'"'s) available in the SIM.

5. The process according to claim 4, wherein the comparison values are stored permanently on the SIM.

6. The process according to claim 4, wherein the comparison values are calculated using data stored in the SIM.

7. The process according to claim 4, wherein the comparison value is derived using the security algorithm A3/A8 implemented in the SIM as a function of the secret key Ki and/or other stored fixed parameters Z.

8. The process according to one of claims 1-3, wherein for each SIM, a number of control values are reserved that each initiate a particular action or a particular procedure on the SIM.

9. The process according to one of claims 1-3, wherein a series of allowable Control RANDs is reserved at a suitable point in the mobile phone network and that each of these is allocated to a specific SIM and specific actions.

10. A subscriber identity module (SIM) to be used for the process according to one of claims 1 trough 3, wherein at least one comparison value (Comparison RAND) is securely stored on it or can be calculated using data stored on it.

11. The subscriber identity module (SIM) according to claim 10, wherein a comparison value is derived using the A3/A8 security algorithms implemented in the SIM as a function of the secret key Ki and/or other fixed stored parameters Z.

12. The subscriber identity module (SIM) according to claim 10, wherein a number of different A3/A8 security algorithms are stored on the SIM which can be alternated by receiving a correct Control RAND.

13. The subscriber identity module (SIM) according to claim 10, wherein a number of secret keys Ki are stored on the card or can be derived from one Ki stored there, and that these different keys can be alternated by receiving a correct Control RAND.