Method for cryptographically verifiable identification of a physical unit in a public, wireless telecommunications network

• US 9,100,827 B2
• Filed: 01/22/2014
• Issued: 08/04/2015
• Est. Priority Date: 05/26/2000
• Status: Expired due to Term

• Current Assignee: IPCom GmbH & Co KG
• Original Assignee: IPCom GmbH & Co KG
• Inventors: Adi, Wael
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): AVERY, JEREMIAH L
• Application Number:
  US14/161,268
• Publication Number:
  US 20140235207A1
• Time in Patent Office: 559 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/26 Testing cryptographic entity, e.g. testing integrity of encryption key or encryption algorithm
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/75 Temporary identity

Abstract

A method for identification of a physical unit (M) storing a secret identity (SIMEI) and an open identity (IMEI) in memory in a physical unit (M); generating a first parameter (CHv) in the testing device (P); sending an identity request (IR) with the first parameter (CHv) from the testing device (P) to the physical unit (M); generating an electronic signature (SIGt) by use of a first cryptographic function (F3) from the secret identity (SIMEI) and at least the first parameter (CHv) in the physical unit (M), and sending SIGt and the open identity (IMEI) to the testing device (P); and identifying the physical unit (M) by a comparison of the electronic signature (SIGt) sent and a corresponding electronic signature (SIGv) in the generated testing device (P).

Claims

1. A mobile telephone for use in an open, wireless telecommunications network, comprising:

a non-volatile memory;

an identity module configured to;

store a mobile phone secret identity and store a mobile phone open identity in the non-volatile memory in the mobile telephone, the mobile phone secret identity being an encryption of the mobile phone open identity;

receive an identity request with a first parameter from a testing device;

generate an electronic signature by means of a first cryptographic function from the secret identity and at least the first parameter in the mobile telephone, and send the generated electronic signature and the open identity to the testing device;

wherein the secret identity is such that the open identity of the mobile telephone is confirmed if the electronic signature matches a corresponding electronic signature generated by the testing device by application of the first cryptographic function to the secret identity;

wherein the corresponding electronic signature is generated as a function of an open key; and

wherein the electronic signature is generated from the secret identity, the first parameter and a second parameter and the first and second parameters are linked with the secret identity by means of an exclusive-OR function.

2. The mobile telephone of claim 1, wherein the secret identity is generated by a second cryptographic function from the open identity and a second secret key.

4. The mobile telephone of claim 1, wherein the first and/or second parameters are provided in the form of random variables.

3. A mobile telephone for use in an open, wireless telecommunications network, comprising:

a non-volatile memory;

an identity module configured to;

store a mobile phone secret identity and store a mobile phone open identity in the non-volatile memory in the mobile telephone, the mobile phone secret identity being an encryption of the mobile phone open identity;

receive an identity request with a first parameter from a testing device;

generate an electronic signature by means of a first cryptographic function from the secret identity and at least the first parameter in the mobile telephone, and send the generated electronic signature and the open identity to the testing device;

wherein the secret identity is such that the open identity of the mobile telephone is confirmed if the electronic signature matches a corresponding electronic signature generated by the testing device by application of the first cryptographic function to the secret identity;

wherein the corresponding electronic signature is generated as a function of an open key; and

wherein the electronic signature is generated from the secret identity, the first parameter and a second parameter and the first and second parameters are multiplexed and then linked with the secret identity by means of an exclusive-OR function, with a feedback from the output of the first cryptographic function to the exclusive-OR function.

5. A physical unit (M) for use in an open, wireless telecommunications network, the physical unit being configured to:

store a secret identity (SIMEI) and an open identity (IMEI) in a memory in the physical unit (M);

receive an identity request (IR) with the first parameter (CHv) from a testing device (P) at the physical unit (M);

generate an electronic signature (SIGt) by means of a first cryptographic function (F1) from the secret identity (SIMEI) and at least the first parameter (CHv) in the physical unit (M), and send the generated electronic signature (SIGt) and the open identity (IMEI) to the testing device (P), so that the testing device may identify the physical unit (M) by a comparison of the electronic signature (SIGt) sent and a corresponding electronic signature (SIGv);

wherein the corresponding electronic signature (SIGv) is generated as a function of an open key; and

wherein the electronic signature (SIGt) is generated from the secret identity (SIMEI), the first parameter (CHv) and a second parameter where the first parameter (CHv) and the second parameter are linked with the secret identity (SIMEI) by means of an exclusive-OR function.

6. The physical unit of claim 5, wherein the secret identity (SIMEI) is generated by a second cryptographic function (F2) from the open identity (IMEI) and a first secret key (MIGK).

7. The physical unit of claim 5, wherein the telecommunications network is a mobile telephone system.