Method and apparatus for accessing network authentication

• US 8,018,905 B2
• Filed: 04/22/2003
• Issued: 09/13/2011
• Est. Priority Date: 04/22/2002
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Parekh, Nilesh
• Primary Examiner(s): Yao; Kwang B
• Assistant Examiner(s): Rutkowski; Jeffrey M
• Application Number:
  US10/421,218
• Publication Number:
  US 20030219003A1
• Time in Patent Office: 3,066 Days
• Field of Search: 370/352, 455/432.2, 455/410
• US Class Current: 370/335
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

In a wireless communication system, a method of authenticating a mobile station is claimed. A first CHAP challenge message is transmitted. A first CHAP response message is received in response to the first CHAP message. An IMSI message corresponding to the received CHAP message is transmited. A plurality of parameters is received in response to the transmitted IMSI message. at least one parameter is then transmitted. A second CHAP response message is received in response to the transmitted parameter. The second CHAP response message is then compared to one of said plurality of parameters.

Claims

1. In a wireless communication system, a method of authenticating a mobile station, the method comprising:

transmitting a first CHAP challenge message;

receiving a first CHAP response message;

transmitting an IMSI message corresponding to the received first CHAP response message;

receiving a plurality of parameters in response to the transmitted IMSI message;

transmitting a second CHAP challenge message in response to the received plurality of parameters, wherein the second CHAP challenge message includes at least one parameter of the plurality of parameters;

receiving a second CHAP response message in response to the transmitted parameter included in the second CHAP challenge message; and

comparing the second CHAP response message to one of said plurality of parameters.

2. The method as set forth in claim 1, wherein the plurality of parameters comprise a cipher key, a SRES parameter, and a RAND parameter.

3. The method as set forth in claim 2, wherein the step of comparing comprises comparing a parameter of the second CHAP response message to the SRES parameter.

4. The method as set forth in claim 1, further comprising transmitting an acceptance message if a parameter of the second CHAP response message matches one of said plurality of parameters.

10. The method as set forth in claim 1, wherein the step of transmitting the second CHAP challenge message is performed before a step of transmitting a CHAP success message such that a CHAP success message is not transmitted between transmitting the first CHAP challenge message and transmitting the second CHAP challenge message.

5. In a wireless communication system, an apparatus of authenticating a mobile station, the apparatus comprising:

means for transmitting a first CHAP challenge message;

means for receiving a first CHAP response message;

means for transmitting an IMSI message corresponding to the received first CHAP response message;

means for receiving a plurality of parameters in response to the transmitted IMSI message;

means for transmitting a second CHAP challenge message in response to the received plurality of parameters, wherein the second CHAP challenge message includes at least one parameter of the plurality of parameters;

means for receiving a second CHAP response message in response to the transmitted parameter included in the second CHAP challenge message; and

means for comparing the second CHAP response message to one of said plurality of parameters.

6. The apparatus as set forth in claim 5, wherein the plurality of parameters comprise a cipher key, a SRES parameter, and a RAND parameter.

7. The apparatus as set forth in claim 6, wherein the means for comparing comprises comparing a parameter of the second CHAP response message to the SRES parameter.

8. The apparatus as set forth in claim 5, further comprising means for transmitting an acceptance message if a parameter of the second CHAP response message matches one of said plurality of parameters.

9. The apparatus as set forth in claim 5, wherein the second CHAP challenge message is transmitted before a CHAP success message is transmitted such that a CHAP success message is not transmitted between transmitting the first CHAP challenge message and transmitting the second CHAP challenge message.

11. In a wireless communication system, an apparatus of authenticating a mobile station, the apparatus comprising:

a network station configured to transmit a first CHAP challenge message to the mobile station;

the network station configured to receive a first CHAP response message from the mobile station;

the network station configured to transmit an IMSI message corresponding to the received first CHAP response message;

the network station configured to receive a plurality of parameters in response to the transmitted IMSI message;

the network station configured to transmit a second CHAP challenge message to the mobile station in response to the received plurality of parameters, wherein the second CHAP challenge message includes at least one parameter of the plurality of parameters;

the network station configured to receive a second CHAP response message from the mobile station in response to the transmitted parameter included in the second CHAP challenge message; and

the network station configured to compare the second CHAP response message to one of said plurality of parameters.

12. The apparatus as set forth in claim 11, wherein the plurality of parameters comprise a cipher key, a SRES parameter, and a RAND parameter.

13. The apparatus as set forth in claim 12, wherein the second CHAP response message is compared to the SRES parameter.

14. The apparatus as set forth in claim 11, further comprising a station configured to transmit an acceptance message if a parameter of the second CHAP response message matches one of said plurality of parameters.

15. The apparatus as set forth in claim 11, wherein the second CHAP challenge message is transmitted to the mobile station before a CHAP success message is transmitted to the mobile station such that a CHAP success message is not transmitted between the first CHAP challenge message and the second CHAP challenge message.

16. A processor readable product, comprising:

processor non-trasitory readable medium storing;

instructions for causing a processor to cause a station to receive a first CHAP response message;

instructions for causing a processor to cause a station to transmit an IMSI message corresponding to the received first CHAP response message;

instructions for causing a processor to cause a station to receive a plurality of parameters in response to the transmitted IMSI message;

instructions for causing a processor to cause a station to transmit a second CHAP challenge message in response to the received plurality of parameters, wherein the second CHAP challenge message includes at least one parameter of the plurality of parameters;

instructions for causing a processor to cause a station to receive a second CHAP response message in response to the transmitted parameter included in the second CHAP challenge message; and

instructions for causing a processor to cause a station to compare the second CHAP response message to one of said plurality of parameters.

17. The processor readable product as set forth in claim 16, wherein the plurality of parameters comprise a cipher key, a SRES parameter, and a RAND parameter.

18. The processor readable product as set forth in claim 17, wherein a parameter of the second CHAP response message is compared to the SRES parameter.

19. The processor readable product as set forth in claim 16, further comprising instructions for causing a processor to transmit an acceptance message if a parameter of the second CHAP response message matches one of said plurality of parameters.

20. The processor readable product as set forth in claim 16, wherein the second CHAP challenge message is transmitted before a CHAP success message is transmitted such that a CHAP success message is not transmitted between the first CHAP challenge message and the second CHAP challenge message.