SINK AUTHENTICATION SYSTEM AND METHOD USING MOBILE COMMUNICATION NETWORK

• US 20110126015A1
• Filed: 11/24/2010
• Published: 05/26/2011
• Est. Priority Date: 11/25/2009
• Status: Abandoned Application

• Current Assignee: Korea Advanced Institute of Science and Technology, Samsung Electronics Co. Ltd.
• Original Assignee: Korea Advanced Institute of Science and Technology, Samsung Electronics Co. Ltd.
• Inventors: Kim, Jang-Seong, Han, Kyu-Suk, Kim, Kwang-Jo, SHON, Tae-Shik, Park, Yong-Suk
• Application Number:
  US12/954,279
• Publication Number:
  US 20110126015A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A system is provided for authentication between a mobile device (MD) and a sink using a mobile communication network. If a sink authentication request for the sink is received from the MD, a base station (BS) sends a sink authentication response including sink authentication information for the sink, to the MD. The MD forwards the sink authentication request for the sink to the BS, and if a sink authentication response is received from the BS, authenticates the sink using the received sink authentication information. The sink performs authentication with the MD.

Claims

1. A system for authentication between a mobile device (MD) and a sink using a mobile communication network, comprising:

a base station (BS) for sending, if a sink authentication request for the sink is received from the MD, a sink authentication response including sink authentication information for the sink, to the MD;

the MD for forwarding the sink authentication request for the sink to the BS, and if a sink authentication response is received from the BS, authenticating the sink using the received sink authentication information; and

the sink for performing authentication with the MD.

2. The system of claim 1, further comprising a mobile communication network (MCN) server for sending an authentication response upon an authentication request for the MD.

3. The system of claim 1, wherein upon a request for authenticating the sink, the MD determines whether the sink has previously been authenticated, and if the sink is an unauthenticated sink, sends a sink authentication request message for the sink to the BS.

4. The system of claim 2, wherein upon receiving a sink authentication request message from the MD, the BS determines whether the MD has previously been authenticated, and if the MD is an unauthenticated MD, sends an MD authentication request message for requesting authentication of the MD, to the MCN server.

5. The system of claim 4, wherein upon receiving an MD authentication request message from the BS, the MCN server generates an MD authentication response message including MD authentication information generated in advance through authentication with the MD, and sends the MD authentication response message to the BS.

6. The system of claim 5, wherein upon receiving the MD authentication response message from the MCN server, the BS authenticates the MD using the MD authentication information, generates a sink authentication response message including sink authentication information for the sink, and sends the sink authentication response message to the MD.

7. The system of claim 6, wherein upon receiving the sink authentication response message from the MCN server, the MD generates a shared key for authentication with the sink using the sink authentication information, and performs authentication with the sink using the generated shared key.

8. A method for authentication between a mobile device (MD) and a sink using a mobile communication network in an authentication system including the MD, the sink, a base station (BS), and a mobile communication network (MCN) server, comprising:

sending, by the MD, a sink authentication request for the sink to the BS;

sending, by the BS, a sink authentication response to the sink authentication request, to the MD; and

receiving, by the MD, the sink authentication response and performing authentication with the sink.

9. The method of claim 8, wherein sending a sink authentication request for the sink comprises:

upon a request for authenticating the sink, determining whether the sink has previously been authenticated; and

if the sink is an unauthenticated sink, sending a sink authentication request message for the sink to the BS.

10. The method of claim 9, wherein sending a sink authentication response to the sink authentication request comprises:

upon receiving a sink authentication request message from the MD, determining whether the MD has previously been authenticated;

if the MD is an unauthenticated MD, sending an MD authentication request message for requesting authentication of the MD, to the MCN server;

receiving, from the MCN server, an MD authentication response message including MD authentication information generated in advance through authentication with the MD;

authenticating the MD based on the received MD authentication information; and

generating a sink authentication response message including sink authentication information for the sink, and sending the sink authentication response message to the MD.

11. The method of claim 10, wherein receiving the sink authentication response and performing authentication with the sink comprises:

upon receiving the sink authentication response message from the MCN server, generating a shared key for authentication with the sink using the sink authentication information; and

performing authentication with the sink using the generated shared key.

12. A method for performing authentication with a sink by a mobile device (MD) using a mobile communication network, comprising:

upon a request for authenticating the sink, sending a sink authentication request for the sink to a base station (BS); and

upon receiving a sink authentication response for the sink from the BS, performing authentication with the sink.

13. The method of claim 12, wherein sending a sink authentication request for the sink comprises:

upon a request for authenticating the sink, determining whether the sink has previously been authenticated; and

if the sink is an unauthenticated sink, sending a sink authentication request message for the sink to the BS.

14. The method of claim 13, wherein performing authentication with the sink comprises:

upon receiving a sink authentication response message from the MCN server, generating a shared key for authentication with the sink using the sink authentication information; and

transmitting shared key generation information based on the generated shared key to the sink and performing authentication with the sink.