Paired SIM card function

• US 20030220096A1
• Filed: 04/02/2003
• Published: 11/27/2003
• Est. Priority Date: 05/03/2002
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Smeets, Bernard
• Granted Patent: US 7,054,613 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Method and system for protecting an interface between a mobile device for a wireless telecommunications system and a smart card. A method according to the present invention comprises generating a first key in the mobile device and a second key in the smart card, generating a first authentication value in the mobile device using the first key and generating a second authentication value in the smart card using the second key, and comparing the generated first and second authentication values. Use of the mobile device and/or the smart card is enabled based on a result of the comparison.

Claims

1. A method for protecting an interface between a mobile device for a wireless telecommunications system and a smart card, comprising:

generating a first key in the mobile device and a second key in the smart card;

generating a first authentication value in the mobile device using the first key and generating a second authentication value in the smart card using the second key; and

comparing the generated first and second authentication values,

wherein use of at least one of the mobile device and the smart card is enabled based on a result of the comparison.

2. The method according to claim 1, wherein the step of generating the first key in the mobile device and the second key in the smart card comprises generating the first key and the second key from a Personal Identification Number entered into the mobile device and the smart card.

3. The method according to claim 1, wherein the step of generating a first authentication value in the mobile device using a first key and a second authentication value in the smart card using a second key comprises generating a first Message Authentication Code in the mobile device using the first key, and generating a second Message Authentication Code in the smart card using the second key.

4. The method according to claim 1, wherein use of the mobile device is enabled if the first authentication value equals the second authentication value.

5. The method according to claim 1, wherein the mobile device includes a first algorithm and the smart card includes a second algorithm, and wherein the first key is generated in the mobile device using the first algorithm and the second key is generated in the smart card using the second algorithm.

6. The method according to claim 5, wherein the first key is generated from the first algorithm using an input Personal Identification Number and an input key generated from a randomly generated value, and wherein the second key is generated from the second algorithm using the input Personal Identification Number, a key provided in the smart card and the randomly generated value.

7. The method according to claim 6, wherein the randomly generated value and the input key are provided by an operator of a wireless telecommunications network.

8. The method according to claim 6, wherein the second algorithm is installed in the smart card by a manufacturer of the smart card.

9. The method according to claim 6, wherein the second algorithm is downloaded in the smart card by an operator of a wireless telecommunications network.

10. The method according to claim 1, wherein the wireless telecommunications system comprises a GSM system and the smart card comprises a SIM card.

11. The method according to claim 1, wherein the wireless telecommunications system comprises a UMTS system and the smart card comprises a UICC card.

12. A system for protecting an interface between a mobile device for a wireless telecommunications system and a smart card, comprising:

a first key generator for generating a first key in the mobile device and a second key generator for generating a second key in the smart card;

a first authentication value generator in the mobile device for generating a first authentication value in the mobile device using the first key, and a second authentication value generator for generating a second authentication value in the smart card using the second key; and

a comparator for comparing the generated first and second authentication values, wherein use of at least one of the mobile device and the smart card is enabled based on a result of the comparison.

13. The system according to claim 12, wherein the first and second key generators generate the first key and the second key from a Personal Identification Number entered into the mobile device and the smart card.

14. The system according to claim 12, wherein the first and second authentication values comprise first and second Message Authentication Codes.

15. The system according to claim 12, wherein the use of the mobile device is enabled if the first authentication value and the second authentication value compared by the comparator are equal.

16. The system according to claim 12, wherein the first key generator includes a first algorithm and the second key generator includes a second algorithm, and wherein the first key is generated in the mobile device using the first algorithm and the second key is generated in the smart card using the second algorithm.

17. The system according to claim 16, wherein the first key is generated from the first algorithm using an input Personal Identification Number and an input key generated from a randomly generated value, and wherein the second key is generated from the second algorithm using the input Personal Identification Number, a key provided in the smart card and the randomly generated value.

18. The system according to claim 16, wherein the second algorithm is installed in the smart card by a manufacturer of the smart card

19. The system according to claim 16, wherein the second algorithm is downloaded in the smart card by an operator of a wireless telecommunications network.

20. The system according to claim 12, wherein the wireless telecommunications system comprises a GSM system and wherein the smart card comprises a SIM card.

21. The system according to claim 12, wherein the wireless telecommunications system comprises a UMTS system and wherein the smart card comprises a UICC card.