An authentication method

• US 20020164026A1
• Filed: 08/09/2001
• Published: 11/07/2002
• Est. Priority Date: 02/11/1999
• Status: Abandoned Application

• Current Assignee: Nokia Networks (Nokia Corporation)
• Original Assignee: Nokia Networks (Nokia Corporation)
• Inventors: Huima, Antti
• Application Number:
  US09/913,194
• Publication Number:
  US 20020164026A1
• Time in Patent Office: Days
• US Class Current: 380/247
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/06 Authentication

Abstract

An authentication method for authenticating communication between a first and a second party using a third party which is trusted by said first and second parties comprising the steps of calculating by the trusted third party the value of a first authentication output using a parameter of the first party and a second authentication output using the first authentication output and sending the second authentication output to the second party; calculating by the first party the first authentication output and sending the first authentication output to the second party; and calculating by the second party the second authentication output based on the first authentication output received from the first party and comparing the calculated second authentication output with the second authentication output received from the trusted third party whereby if the two second authentication outputs are the same, the first party is authenticated.

Claims

1. An authentication method for authenticating communication between a first and a second party using a third party which is trusted by said first and second parties comprising the steps of:

calculating by the trusted third party the value of a first authentication output using a parameter of the first party and a second authentication output using the first authentication output and sending the second authentication output to the second party;

calculating by the first party the first authentication output and sending the first authentication output to the second party; and

calculating by the second party the second authentication output based on the first authentication output received from the first party and comparing the calculated second authentication output with the second authentication output received from the trusted third party whereby if the two second authentication outputs are the same, the first party is authenticated.

2. A method as claimed in claim 1, wherein the method comprises the steps of calculating by the first party the value of the second authentication output, sending the value of the second authentication output calculated by the trusted third party to said first party and comparing at the first party the calculated value of the second authentication output calculated by the first party and the value of the second authentication output connected by the third party whereby second party is authenticated.

3. A method as claimed in claim 2, wherein the value of the second authentication output calculated by the trusted third party is sent to the first party via the second station.

4. A method as claimed in claim 1,2 or 3, wherein at least one of the first and second authentication outputs are the outputs of a hash function.

5. A method as claimed in claim 4, wherein both of said first and second authentication outputs are the outputs of a hash function and both of said hash functions are one way.

6. A method as claimed in claim 4 or 5, wherein at least one of said hash functions has a value of at least 160 bits in length.

7. A method as claimed in any of claim 4, 5 or 6, wherein one of the hash functions includes a secret which is shared by said first and second parties.

8. A method as claimed in claim 7, wherein said secret comprises a Diffie-Hellman function.

9. A method as claimed in claim 7 or 8, wherein the shared secret is used by at least one party to encrypt communications between the first and second parties.

10. A method as claimed in any one of claim 7, 8 or 9, wherein the shared secret is g^xymod n where g is a Diffie-Hellman function, x and y are random numbers and n is the modulus of the Diffie-Hellman function.

11. A method as claimed in any preceding claim, wherein at least one random number is used to encrypt communications between the first and second parties.

12. A method as claimed in claim 11, wherein rekeying of a encryption function occurs when the at least one random number is changed.

13. A method as claimed in any preceding claim, wherein the value of at least one parameter is sent from the first station to the second station.

14. A method as claimed in any preceding claim, wherein the value of at least one parameter is sent from the second station to the first station.

15. A method as claimed in any preceding claim, wherein the trusted third party has a secure connection with the second party.

16. A method as claimed in any preceding claim, wherein the identity of at least one of said first and second parties is only sent to the other of said f first and second parties in an encoded form.

17. A method as claimed in claim 16, wherein the identity is sent within one of said first and second authentication outputs.

18. A method as claimed in claim 16, wherein the identity is sent in an encrypted form.

19. A method as claimed in any one of the preceding claims, wherein the method is used in a telecommunications network.

20. A method as claimed in claim 19, wherein one of said first and second parties comprises a mobile station.

21. A method as claimed in claim 20 or 21, wherein one of said first and second parties comprises a base station.

22. A first station for communication with a second station using a third party which is trusted by said first station and said second station, said first station comprising:

receiving means for receiving a first authentication output from said second station and a second authentication output from said trusted third party;

calculation means for calculating the second authentication output from the first authentication output received from the second station; and

comparing means for comparing the calculated second authentication output with the second authentication output received from the trusted third party, whereby if the two second authentication outputs are the same, the first party is authenticated.

23. A first station as claimed in claim 22, wherein said first station is a mobile station.

24. A first station as claimed in claim 22, wherein said first station is a base transceiver station.

25. A first station as claimed in claim 22, 23 or 24, wherein said first station receives the second authentication output from the trusted third party via the second station.

26. A wireless telecommunications system comprising a first station as claimed in any of claims 22 to 25 and a second station, wherein said second station is arranged to calculate the first authentication output and to transmit the first authentication output to the first party.