Method and apparatus for managing authentication in wireless communication system while subscriber identity module is not available

• US 10,225,736 B2
• Filed: 10/06/2015
• Issued: 03/05/2019
• Est. Priority Date: 10/06/2014
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Jolivet, Paul
• Primary Examiner(s): Shen, Qun
• Application Number:
  US15/511,436
• Publication Number:
  US 20170295490A1
• Time in Patent Office: 1,246 Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier

Abstract

A method and apparatus for performing an authentication procedure in a wireless communication system is provided. A mobile equipment, which runs a plurality of applications, detects that a universal integrated circuit card (UICC) of the mobile equipment is in a first status, in which the UICC is able to answer a request, or a second status, in which the UICC is not able to answer a request. If detected, the mobile equipment stores a first set of authentication credentials in the UICC and a second set of authentication credentials in the mobile equipment, and performs the authentication procedure by using one of the first set of authentication credentials for the first status or the second set of authentication credentials for the second status.

Claims

1. A method for performing, by a mobile equipment running at least one application, an authentication procedure in a wireless communication system, the method comprising:

detecting whether a universal integrated circuit card (UICC) of the mobile equipment is in a first status or a second status;

when it is detected that the UICC is in the first status or the second status, storing a first set of authentication credentials in the UICC and a second set of authentication credentials in the mobile equipment;

performing a fallback authentication procedure by using one of the first set of authentication credentials or the second set of authentication credentials;

setting a timer upon performing the fallback authentication procedure; and

performing a normal authentication procedure when the timer expires and upon detecting that the UICC is not in the first status or the second status,

wherein when UICC processing is busy but the UICC is able to answer a request, the UICC is in the first status, and when the UICC interface is busy such that the UICC is not able to answer a request, the UICC is in the second status,

wherein the first set of authentication credentials is used for performing the fallback authentication procedure when the UICC of the mobile equipment is in the first status,

wherein the second set of authentication credentials is used for performing the fallback authentication procedure when the UICC of the mobile equipment is in the second status,

wherein the first set of authentication credentials has a higher security level than the second set of authentication credentials, and

wherein the first set and second set of authentication credentials are pre-calculated.

2. The method of claim 1, wherein each of the first and second set of authentication credentials includes at least one of a reference number, a random number, a related result or location security level (LSL) information.

3. The method of claim 2, wherein the LSL information indicates one of the UICC, secure storage in the mobile equipment, or normal storage in the mobile equipment.

4. The method of claim 1, further comprising:

deleting the first and second set of authentication credentials upon performing the fallback authentication procedure.

5. A mobile equipment running at least one application comprising:

a memory;

a transceiver;

a universal integrated circuit card (UICC); and

a processor, operatively coupled to the memory, the transceiver and the UICC, wherein the processor is configured to;

detect whether the UICC is in a first status or a second status;

when it is detected that the UICC is in the first status or the second status, store a first set of authentication credentials in the UICC and a second set of authentication credentials in the memory;

perform a fallback authentication procedure by using one of the first set of authentication credentials or the second set of authentication credentials;

set a timer upon performing the fallback authentication procedure; and

perform a normal authentication procedure when the timer expires and upon detecting that the UICC is not in the first status or the second status,

wherein when UICC processing is busy but the UICC is able to answer a request, the UICC is in the first status, and when the UICC interface is busy such that the UICC is not able to answer a request, the UICC is in the second status,

wherein the first set of authentication credentials is used for performing the fallback authentication procedure when the UICC of the mobile equipment is in the first status,

wherein the second set of authentication credentials is used for performing the fallback authentication procedure when the UICC of the mobile equipment is in the second status,

wherein the first set of authentication credentials has a higher security level than the second set of authentication credentials, and

wherein the first set and second set of authentication credentials are pre-calculated.

6. The mobile equipment of claim 5, wherein each of the first and second set of authentication credentials includes at least one of a reference number, a random number, a related result or location security level (LSL) information.

7. The mobile equipment of claim 5, wherein the processor is further configured to:

delete the first and second set of authentication credentials upon performing the fallback authentication procedure.