Method and system for veryfying the authenticity of a first communication participants in a communications network

• US 8,565,429 B2
• Filed: 06/18/2003
• Issued: 10/22/2013
• Est. Priority Date: 06/15/1999
• Status: Expired due to Fees

• Current Assignee: Munitech IP S.a.r.l. (Marathon Patent Group, Inc.)
• Original Assignee: Siemens AG
• Inventors: Cuellar, Jorge, Horn, Guenther
• Primary Examiner(s): WILLIAMS, JEFFERY L
• Application Number:
  US10/463,426
• Publication Number:
  US 20030229784A1
• Time in Patent Office: 3,779 Days
• Field of Search: None
• US Class Current: 380/247
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/108 Source integrity

Abstract

In the method and the arrangement for checking the authenticity of a first communication subscriber in a communications network, a first information item is formed in the first communication subscriber using a fault detection data item of the first communication subscriber and an information item relating to a random data item. In a second communication subscriber in the communications network, a second fault information item is formed using a fault detection data item of the second communication subscriber and the information relating to the random data item. The authenticity of the first communication subscriber is checked using the first fault information and the second fault information.

Claims

1. A method for resynchronizing an error detection datum in a communication network, comprising:

forming an authentication information item for a first communication subscriber using a first error detection datum and an information item concerning a random datum, the first communication subscriber being a service provider;

transmitting the authentication information item and the information item concerning the random datum, from the first communication subscriber to a second communication subscriber, the second communication subscriber being a service user;

forming a second error detection datum at the second communication subscriber using the authentication information item and the information item concerning the random datum;

checking whether the second error detection datum lies in a predetermined range, the second error detection datum being checked by the second communication subscriber by a process comprising;

determining a difference between the first and second error detection data; and

forming a sequence error when the difference does not lie in the predetermined range

transmitting the sequence error from the second communication subscriber to the first communication subscriber; and

resynchronyzing the first error detection datum using the sequence error wherein

the sequence error is transmitted to the first communication subscriber without the first communication subscriber first transmitting a resynchronization request to the second communication subscriber,

the sequence error contains the information item concerning the random datum and contains the second error detection datum,

the first communication subscriber verifies the sequence error, and

the first communication subscriber changes a value of the first error detection datum in dependence on a value of the second error detection datum to thereby resynchronize the first error detection datum.

2. The method according to claim 1, wherein the first error detection datum is a sequential number.

3. The method according to claim 1, wherein the information item concerning the random datum is a random number.

4. The method according to claim 1, wherein the service provider is a mobile radio operator and the service user is a mobile telephone.

5. The method according to claim 1, wherein the first and second error detection data are sequential numbers.

6. The method according to claim 5, wherein the information item concerning the random datum is a random number.

7. A method to resynchronize an error detection datum in a communication network, comprising:

forming authentication information for a first communication subscriber using a first error detection datum and a random datum, the first communication subscriber being a service provider;

transmitting the authentication information and the random datum, from the first communication subscriber to a second communication subscriber, the second communication subscriber being a service user;

forming a second error detection datum at the second communication subscriber using the authentication information and the random datum;

checking whether the second error detection datum lies in a predetermined range, the second error detection datum being checked by the second communication subscriber by a process comprising;

determining a difference between the first and second error detection data; and

forming a sequence error when the difference does not lie in a predetermined range;

transmitting the sequence error from the second communication subscriber to the first communication subscriber; and

resynchronizing the first error detection datum using the sequence error

wherein the sequence error is transmitted to the first communication subscriber without the first communication subscriber first transmitting a resynchronization request to the second communication subscriber.

8. A system to resynchronize an error detection datum in a communication network, comprising:

a first communication subscriber to form an authentication information item using a first error detection datum and an information item concerning a random datum and to transmit an authentication information item and the information item concerning the random datum, and

a second communication subscriber to receive the authentication information item and the information item concerning the random number from the first communication subscriber, to form a second error detection datum using the authentication information item and the information item concerning the random datum and to check whether the second error detection datum lies in a predetermined range to authenticate the first communication subscriber, wherein

the first communication subscriber is a service provider and the communication network and the second communication subscriber is a service user in the communication network,

to check whether the second error detection datum lies in the predetermined range;

a difference between the first and second error detection data is determined; and

a sequence error is formed when the difference does not lie in the predetermined range

the sequence error is transmitted from the second communication subscriber to the first communication subscriber, and

the sequence error is used to resynchronize the first error detection datum

wherein the sequence error is transmitted to the first communication subscriber without the first communication subscriber first transmitting a resynchronization request to the second communication subscriber, wherein

the sequence error contains the information item concerning the random datum and contains the second error detection datum,

the first communication subscriber verifies the sequence error, and

the first communication subscriber changes the first error detection datum in dependence on a value of the second error detection datum to thereby resynchronize the first error detection datum.

9. The system according to claim 8, wherein the service provider is a mobile radio operator and the service user is a mobile telephone.

10. A system to resynchronize an error detection datum in a communication network having first and second communication subscribers, comprising:

means for forming an authentication information item at the first communication subscriber using a first error detection datum and an information item concerning a random datum, the first communication subscriber being a service provider;

means for transmitting the authentication information item and the information item concerning the random datum from the first communication subscriber to the second communication subscriber, the second communication subscriber being a service user;

means for forming a second error detection datum at the second communication subscriber using the authentication information item and the information item concerning the random datum; and

means for checking whether the second error detection datum lies in a predetermined range, wherein

to check whether the second error detection datum lies in the predetermined range;

a difference between the first and second error detection data is determined; and

a sequence error is formed when the difference does not lie in the predetermined range

the sequence error is transmitted from the second communication subscriber to the first communication subscriber, and

the sequence error is used to resynchronize the first error detection datum wherein

the sequence error is transmitted to the first communication subscriber without the first communication subscriber first transmitting a resynchronization request to the second communication subscriber.