SIM card to mobile device interface protection method and system

• US 7,054,613 B2
• Filed: 04/02/2003
• Issued: 05/30/2006
• Est. Priority Date: 05/03/2002
• Status: Expired due to Fees

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Smeets, Bernard
• Primary Examiner(s): Urban, Edward
• Assistant Examiner(s): Chan, Richard
• Application Number:
  US10/406,048
• Publication Number:
  US 20030220096A1
• Time in Patent Office: 1,154 Days
• Field of Search: 455/466, 455/558, 455/557, 380/247, 380/270, 713/168, 713/169, 713/172
• US Class Current: 455/410
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Method and system for protecting an interface between a mobile device for a wireless telecommunications system and a smart card. A method according to the present invention comprises generating a first key in the mobile device and a second key in the smart card, generating a first authentication value in the mobile device using the first key and generating a second authentication value in the smart card using the second key, and comparing the generated first and second authentication values. Use of the mobile device and/or the smart card is enabled based on a result of the comparison.

Claims

1. A method for protecting an interface between a mobile device for a wireless telecommunications system and a smart card, comprising:

generating a first key in the mobile device and a second key in the smart card;

generating a first authentication value in the mobile device using the first key and generating a second authentication value in the smart card using the second key; and

comparing the generated first and second authentication values,

wherein use of at least one of the mobile device and the smart card is enabled based on a result of the comparison;

wherein the mobile device includes a first algorithm and the smart card includes a second algorithm, and wherein the first key is generated in the mobile device using the first algorithm and the second key is generated in the smart card using the second algorithm;

wherein the first key is generated from the first algorithm using an input Personal Identification Number and an input key generated from a randomly generated value, and wherein the second key is generated from the second algorithm using the input Personal Identification Number, a key provided in the smart card and the randomly generated value.

2. The method according to claim 1, wherein the randomly generated value and the input key are provided by an operator of a wireless telecommunications network.

3. The method according to claim 1, wherein the second algorithm is installed in the smart card by a manufacturer of the smart card.

4. The method according to claim 1, wherein the second algorithm is downloaded in the smart card by an operator of a wireless telecommunications network.

5. A system for protecting an interface between a mobile device for a wireless telecommunications system and a smart card, comprising:

a first key generator for generating a first key in the mobile device and a second key generator for generating a second key in the smart card;

a first authentication value generator in the mobile device for generating a first authentication value in the mobile device using the first key, and a second authentication value generator for generating a second authentication value in the smart card using the second key; and

a comparator for comparing the generated first and second authentication values, wherein use of at least one of the mobile device and the smart card is enabled based on a result of the comparison;

wherein the first key generator includes a first algorithm and the second key generator includes a second algorithm, and wherein the first key is generated in the mobile device using the first algorithm and the second key is generated in the smart card using the second algorithm;

wherein the first key is generated from the first algorithm using an input Personal Identification Number and an input key generated from a randomly generated value, and wherein the second key is generated from the second algorithm using the input Personal Identification Number, a key provided in the smart card and the randomly generated value.