Network authentication

• US 8,165,299 B2
• Filed: 10/28/2005
• Issued: 04/24/2012
• Est. Priority Date: 08/15/2000
• Status: Expired due to Fees

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Andersson, Stefan
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): WILLIAMS, JEFFERY L
• Application Number:
  US11/261,177
• Publication Number:
  US 20060053281A1
• Time in Patent Office: 2,370 Days
• Field of Search: None
• US Class Current: 380/270
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

An existing communications device, such as a WAP-enabled mobile phone or other device, can be used as an authentication token. This has the advantage that WAP-enabled devices include components which are used in public key/private key cryptographic systems as a part of their standard communication functions. These components therefore advantageously allow the device to be used as an authentication token when communicating with a remote server.

Claims

1. A method of operating a mobile communications device that includes a cryptographic module, the method comprising:

detecting whether communication with a service node via a wireless network should be performed and if so then performing;

detecting whether the service node accessed by the mobile communications device via the wireless network requires performance of an authentication, and in response to detecting that the service node accessed by the mobile communications device via the wireless network requires performance of the authentication, using the cryptographic module to carry out the authentication; and

if the authentication is successfully carried out then communicating with the service node via the wireless network and interacting with the service node to exchange data content of relevance to the service node; and

detecting whether a local external device having a connection to a network by means other than the mobile communications device requires performance of an authentication, and in response to detecting that the local external device requires performance of the authentication, using the cryptographic module to carry out the authentication.

2. The method of claim 1, wherein the mobile communications device is a Wireless Application Protocol (WAP)-enabled device.

3. The method of claim 2, wherein the cryptographic module is implemented in a Wireless Identity Module (WIM).

4. The method of claim 2, wherein each of the authentications is carried out in accordance with Wireless Public Key Infrastructure.

5. The method of claim 1, wherein communications between the mobile communications device and the local external device take place via a wired connection.

6. The method of claim 1, wherein communications between the mobile communications device and the local external device take place via a wireless connection.

7. A mobile communications device comprising:

means for communicating with a service node via a wireless network and interacting with the service node to exchange data content of relevance to the service node;

a tangible cryptographic module;

means for detecting whether the service node accessed by the mobile communications device via the wireless network requires performance of an authentication, and in response to detecting that the service node accessed by the mobile communications device via the wireless network requires performance of the authentication, using the cryptographic module to carry out the authentication; and

means for detecting whether a local external device having a connection to a network node by means other than the mobile communications device requires performance of an authentication, and in response to detecting that the local external device requires performance of the authentication, using the cryptographic module to carry out the authentication,

wherein the service node may or may not be the same as the network node.

8. The mobile communications device of claim 7, wherein the mobile communications device is a Wireless Application Protocol (WAP)-enabled device.

9. The mobile communications device of claim 8, wherein the cryptographic module is implemented in a Wireless Identity Module (WIM).

10. The mobile communications device of claim 8, wherein each of the authentications is carried out in accordance with Wireless Public Key Infrastructure.

11. The mobile communications device of claim 7, comprising:

means for communicating with the local external device via a wired connection.

12. The mobile communications device of claim 7, comprising:

means for communicating with the local external device via a wireless connection.