Mobile communication system and apparatus constituting same

• US 7,386,299 B2
• Filed: 08/22/2003
• Issued: 06/10/2008
• Est. Priority Date: 03/02/2001
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Nakamura, Takaharu
• Primary Examiner(s): Eng, George
• Assistant Examiner(s): Afshar, Kamran
• Application Number:
  US10/646,938
• Publication Number:
  US 20050287988A1
• Time in Patent Office: 1,754 Days
• Field of Search: 455410-411, 455418-420, 455/456.4, 455/422.1, 455/423, 455/425, 455/514, 455/517, 455/558, 455/69, 455/522, 455571-574, 370/328, 370/338, 370/311, 370/318, 713168-171, 380/270, 380/44, 380/274
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

In a mobile communication system for authenticating a communicating party when communication is performed between a mobile terminal and a device on the side of a network, the mobile terminal, upon receiving a request signal requesting operation execution from the network device, sends the network device an authentication request signal in order to determine whether the request signal is a request signal from an authorized network device, and performs an authentication operation. The network device executes an authentication operation based upon the authentication request signal received from the mobile terminal and sends a result of the authentication operation to the mobile terminal. The mobile terminal compares the result of its own authentication operation and the result of the authentication operation sent from the network device and executes an operation that is in accordance with the request signal only if authentication that the network device is an authorized network device is obtained based upon agreement of results.

Claims

1. A mobile terminal in a mobile communication system for authenticating a communicating party when communication is performed between the mobile terminal and a device on the side of a network, comprising:

authentication processing means which, when a request signal requesting operation execution is received from a network device, is for executing authentication processing to check whether said request signal is a request signal from an authorized network device; and

operation execution means for executing an operation that is in accordance with said request signal if authentication that the network device is an authorized network device is obtained, wherein said authentication processing means includes;

an authentication necessity table that indicates whether each request received from the network device requires authentication;

means for storing an identifier and key information of a mobile terminal;

a random-number generator for generating any random number when said request signal is received from the network device;

an authentication operation unit for executing a prescribed authentication operation using said key information and random number;

an authentication request signal transmitter for creating an authentication request signal, which includes said terminal identifier and random number, and sending this signal to the network device;

a receiver for receiving an authentication result, which has been obtained by an authentication operation performed on the network side, from the network device; and

a comparator for comparing the authentication result computed by the mobile terminal and the authentication result sent from the network device and deciding that the network device is an authorized network when the compared results agree, wherein

said authentication processing means refers to said table when said request is received from the network device, and executes authentication processing if the received request is one requiring authentication, and said operation execution means executes the operation that is in accordance with said request signal if authentication that the network device is an authorized network device is obtained,

said authentication processing means foregoes authentication processing if a request is not one requiring authentication, and said operation execution means executes the operation that is in accordance with said request signal, and

said request signal is;

a signal requesting that radio wave emissions be inhibited, a signal requesting that inhibition of radio wave emissions be canceled, a signal requesting that the mobile terminal make a transition to power cut-off, to a standby operation, and a signal requesting disclosure of mobile terminal information possessed by the mobile terminal.

2. A mobile communication system for authenticating a communicating party when communication is performed between a mobile terminal and a device on the side of a network, wherein

the mobile terminal includes:

authentication processing means which, when a signal requesting execution of a prescribed operation has been received from a network device, is for sending an authentication request signal to the network device in order to determine whether said request signal is a request signal from an authorized network device;

performing an authentication operation; and

comparing result of this authentication operation with result of an authentication operation sent from the network device; and

operation execution means for executing an operation that is in accordance with said request signal if authentication that the network device is an authorized network device is obtained; and

said network device includes an authentication operation unit for executing an authentication operation based upon an authentication request signal received from said mobile terminal, and sending result of this authentication operation to the mobile terminal, wherein the authentication processing means of said mobile terminal includes;

an authentication necessity table that indicates whether each request received from the network device requires authentication;

means for storing an identifier and key information of a mobile terminal;

a random-number generator for generating any random number when said request signal is received from the network device;

an authentication operation unit for executing a prescribed authentication operation using said key information and random number;

an authentication request signal transmitter for creating an authentication request signal, which includes said terminal identifier and random number, and sending this signal to the network device;

a receiver for receiving result of an authentication operation obtained by an authentication operation of the network device; and

a comparator for comparing result of the authentication operation performed by the mobile terminal and the result of the authentication operation sent from the network device and deciding that the network device is an authorized network device when the compared results agree, wherein

said authentication processing means refers to said table when said request is received from the network device and executes authentication processing if the received request is one requiring authentication, and said operation execution means executes the operation that is in accordance with said request signal if authentication that the network device is an authorized network device is obtained,

said authentication processing means foregoes authentication processing if a request is not one requiring authentication, and said operation execution means executes the operation that is in accordance with said request signal, and

said request signal is;

a signal requesting that radio wave emissions be inhibited, a signal requesting that inhibition of radio wave emissions be canceled, a signal requesting that the mobile terminal make a transition to power cut-off, to a standby operation, and a signal requesting disclosure of mobile terminal information possessed by the mobile terminal.