Method of generating an authentication

• US 7,233,782 B2
• Filed: 08/14/2002
• Issued: 06/19/2007
• Est. Priority Date: 08/14/2002
• Status: Expired due to Fees

• Current Assignee: Agency For Science Technology and Research
• Original Assignee: Agency For Science Technology and Research
• Inventors: Zhou, Jianying, Deng, Huijie, Bao, Feng
• Primary Examiner(s): Feild; Joseph
• Assistant Examiner(s): Vu; Michael T.
• Application Number:
  US10/524,260
• Publication Number:
  US 20050246769A1
• Time in Patent Office: 1,770 Days
• Field of Search: 455/411, 455/404.2, 455/407, 709/238, 709/245, 713/155, 713/182, 726/16
• US Class Current: 455/404.2
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration

Abstract

A method of generating an authentication for updating a mobile communications device'"'"'s 40 location to a second communications device 60 is disclosed herein. The mobile communications device 40 is registered to a home network 30 comprising a proxy server but roams to a foreign network 40 with a different network number. The method proposes that, at the time of performing the location update, the second communications device and the proxy server each provides an input to a hash function to generate a shared secret; and using the shared secret as the authentication when the proxy server or the mobile communications device transmits the location update to the second communications device.

Claims

1. A method of generating an authentication for updating a mobile communications device'"'"'s location to a second communications device, the mobile communications device being registered to a proxy server, the method comprising, when performing the location update,

providing a first input from the proxy server and a second input from the second communications device to a first algorithm to generate a shared secret, and

using the shared secret as the authentication when transmitting the location update to the second communications device, wherein the mobile communications device provides a device address and a cryptographic key to the second communications device, and the second communications device verifies the validity of the device address prior to providing the second input to the first algorithm.

2. A method according to claim 1, wherein the first algorithm is a hash function and wherein the shared secret is a hash of first and second random numbers.

3. A method according to claim 1, wherein the device address is derived from a second algorithm using the cryptographic key as an input, the cryptographic key being associated with the mobile device.

4. A method according to claim 3, wherein the second algorithm is a hash function and a hash of the cryptographic key is the device address of the mobile communications device.

5. A method according to claim 3, wherein the cryptographic key is a public key of an asymmetric key pair associated with the mobile communications device.

6. A method according to claim 5, wherein the second communications device sends an encrypted copy of the second input to the mobile communications device, the encryption being performed using the public key of the mobile device.

7. A method according to claim 1, wherein the verification comprises performing a hash of the cryptographic key to obtain a digest, and comparing the digest of the hash with the device address.

8. A method according to claim 1, further comprising using the shared secret as an input to a third algorithm, and obtaining an output from the third algorithm as the authentication.

9. A method according to claim 1, wherein the authentication is a hash of a concatenation of the shared secret and a location update message.

10. A method according to claim 9, further comprising transmitting the location update message together with the authentication to the second communications device.

11. A method according to claim 10, further comprising computing, by the second communications device, a hash of a concatenation of the shared secret and the location update message for comparison with the authentication.

12. A method according to claim 11, wherein if the authentication and the hash of the concatenation of the shared secret and the location update message are the same, the second communications device registers a new location of the mobile communications device and transmits subsequent messages to the new location.

13. A method according to claim 1, wherein the first input from the proxy server is a random number.

14. A method according to claim 1, wherein the second input from the second communications device is a random number.

15. A method according to claim 1, wherein the second communications device is mobile.

16. A method according to claim 1, wherein the second communications device has a fixed inter-network address.