Cellular verification and validation system

• US 5,237,612 A
• Filed: 03/29/1991
• Issued: 08/17/1993
• Est. Priority Date: 03/29/1991
• Status: Expired due to Term

• Current Assignee: Ericsson, Inc. (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Raith, Alex K.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/677,232
• Time in Patent Office: 872 Days
• Field of Search: 380/21, 380/23, 380/43, 380/44, 380/49, 455/54, 455/33, 455/33.1-33.4, 455/54.1-54.2, 379/59, 379/60
• US Class Current: 380/247
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

A system for the validation and verification of base stations and mobile stations within a cellular radio communications network. The system includes a fixed key and a changeable key which are applied as inputs to an authentication algorithm. The algorithm generates key-dependent responses, at least one of which is independent of the changeable key. The responses generated by a particular mobile station are compared to the responses generated by the network and the presence of fraudulent users may be detected.

Claims

1. A method for the generation of parameters used in enhancing the security of communication in a communications network in which a mobile station is assigned a unique multi-digit permanent key and is also associated with a changeable multi-digit rolling key, said method comprising:

receiving at a location in each of the mobile station and the network a plurality of multi-digit input signals including a signal representative of an authentication inquiry by the network, along with the multi-digit permanent key of the mobile station and the multi-digit rolling key associated with said mobile station at that particular time;

arranging at least some of the digits of said input signals in a first grouping;

calculating from said first grouping of input signals and said permanent key digits a first output value in accordance with a first algorithm;

selecting from blocks of at least some of the digits comprising said first output value a first set of parameters used within said network including a first authentication response to be used by said mobile station to replay to the authentication inquiry by the network;

arranging at least some of the digits of said input signals in a second grouping;

calculating from said second grouping of input signals and said permanent and rolling key digits a second output value in accordance with a second algorithm;

selecting from blocks of at least some of the digits comprising said second output value a second set of parameters used within said network including a second authentication response used by the mobile station to reply to the authentication inquiry by the network; and

combining said first and second authentication responses into a single authentication response signal.

2. A method for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 1 wherein said first and second groupings include the same arrangement of digits.

3. A method for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 1 wherein said first and second algorithms are the same.

4. A method for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 1 wherein said first calculation includes, along with the digits of said permanent key, the digits of a preselected value having the same number of digits as said rolling key.

5. A method for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 1 wherein said single authentication response signal is formed by multiplexing said first and second authentication responses together.

6. A method for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 1 wherein said single authentication signal includes the same number of digits as both said first and second authentication responses.

7. A method for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 6 wherein said single authentication signal is formed by combining one half of the first authentication response and one half of the second authentication response.

8. A system for the generation of parameters used in enhancing the security of communication in a communications network in which a mobile station is assigned a unique multi-digit permanent key and is also associated with a changeable multi-digit rolling key, said system comprising:

means for receiving at a location in each of the mobile station and the network a plurality of multi-digit input signals including a signal representative of an authentication inquiry by the network, along with the multi-digit permanent key of the mobile station and the multi-digit rolling key associated with said mobile station at that particular time;

means for arranging at least some of the digits of said input signals in a first grouping;

means for calculating from said first grouping of input signals and said permanent key digits a first output value in accordance with a first algorithm;

means for selecting from blocks of at least some of the digits comprising said first output value a first set of parameters used within said network including a first authentication response to be used by said mobile station to reply to the authentication inquiry by the network;

means for arranging at least some of the digits of said input signals in a second grouping;

means for calculating from said second grouping of input signals and said permanent and rolling key digits a second output value in accordance with a second algorithm;

means for selecting from blocks of at least some of the digits comprising said second output value a second set of parameters used within said network including a second authentication response used by the mobile station to reply to the authentication inquiry by the network; and

means for combining said first and second authentication responses into a single authentication response signal.

9. A system for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 8 wherein said first and second groups include the same arrangement of digits.

10. A system for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 8 wherein said first and second algorithms are the same.

11. A system for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 8 wherein said first calculation includes, along with the digits of said permanent key, the digits of a preselected value having the same number of digits as said rolling key.

12. A system for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 8 wherein said single authentication response signal is formed by multiplexing said first and second authentication responses together.

13. A system for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 8 wherein said single authentication signal includes the same number of digits as both said first and second authentication responses.

14. A system for the generation of parameters used in enhancing the security of communication in a communications network as set forth in claim 13 wherein said single authentication signal is formed by combining one half of the first authentication response and one half of the second authentication response.

15. A method for the generation of parameters used in the authentication of a mobile station to a communications network wherein the mobile station is assigned a unique multi-digit permanent key and is also associated with a changeable multi-digit rolling key, both said permanent key and said rolling key being accessible to said mobile station and the network, and wherein a limited degree of authentication of the mobile station is achieved even when the value of said rolling key accessed by the mobile station is different from the value of the rolling key accessed by the network, said method comprising:

providing in each of the mobile station and the network a plurality of multi-digit input signals including a signal representative of an authentication inquiry by the network, along with the multi-digit permanent key of said mobile station and the multi-digit rolling key associated with said particular mobile station at that particular time;

arranging at least some of the digits of said input signals in a grouping;

calculating from said grouping of input signals and said permanent key digits a first output value in accordance with an algorithm;

selecting from blocks of at least some of the digits comprising said first output value a first set of parameters used within said network including a first authentication response to be used by said mobile station to reply to the authentication inquiry by the network;

calculating from said grouping of input signals and both said permanent key and said rolling key digits a second output value in accordance with said algorithm;

selecting from blocks of at least some of the digits comprising said second output value a second set of parameters used within said network including a second authentication response used by the mobile station to reply to the authentication inquiry by the network; and

grouping said first and second authentication responses into a single authentication response signal for enabling authentication of the mobile station to the network when both the permanent and rolling keys accessed by the mobile station and the network, respectively, are identical, and limited authentication when only the respective permanent keys are identical.

16. A method for the generation of parameters used in the authentication of a mobile station to a communications network as set forth in claim 15 wherein said calculation to obtain said first output value includes, along with the digits of said permanent key, the digits of a preselected value having the same number of digits as said rolling key.

17. A method for the generation of parameters used in the authentication of a mobile station to a communications network asset forth in claim 15 wherein said single authentication response signal is formed by multiplexing said first and second output values together.

18. A method for the generation of parameters used in the authentication of a mobile station to a communications network as set forth in claim 15 wherein said single authentication signal includes the same number of digits as both said first and second output values.

19. A method for the generation of parameters used in the authentication of a mobile station to a communications network as set forth in claim 18 wherein said single authentication signal is formed by combining one half of said first output value and one half of the second output value.

20. A system for the generation of parameters used in the authentication of a mobile station to a communications network wherein the mobile station is assigned a unique multi-digit permanent key and is also associated with a changeable multi-digit rolling key, both said permanent key and said rolling key being accessible to said mobile station and the network, and wherein a limited degree of authentication of the mobile station is achieved even when the value of said rolling key accessed by the mobile station is different from the value of the rolling key accessed by the network, said system comprising:

means for providing in each of the mobile station and the network a plurality of multi-digit input signals including a signal representative of an authentication inquiry by the network, along with the multi-digit permanent key of said mobile station and the multi-digit rolling key associated with said particular mobile station at that particular time;

means for arranging at least some of the digits of said input signals in a grouping;

means for calculating from said grouping of input signals and said permanent key digits a first output value in accordance with an algorithm;

means for selecting from blocks of at least some of the digits comprising said first output value a first set of parameters used within said network including a first authentication response used by said mobile station to reply to the authentication inquiry by the network;

means for calculating from said grouping of input signals and both said permanent key and said rolling key digits a second output value in accordance with said algorithm;

means for selecting from blocks of at least some of the digits comprising said second output value a second set of parameters used within said network including a second authentication response used by the mobile station to reply to the authentication inquiry by the network; and

means for grouping said first and second authentication responses into a single authentication response signal for enabling authentication of the mobile station to the network when both the permanent and rolling keys accessed by the mobile station and the network, respectively, are identical, and limited authentication when only the respective permanent keys are identical.

21. A system for the generation of parameters used in the authentication of a mobile station to a communications network as set forth in claim 20 wherein said calculation to obtain said first output value includes, along with the digits of said permanent key, the digits of a preselected value having the same number of digits as said rolling key.

22. A system for the generation of parameters used in the authentication of a mobile station to a communications network as set forth in claim 20 wherein said single authentication response signal is formed by multiplexing said first and second output values together.

23. A system for the generation of parameters used in the authentication of a mobile station to a communications network as set forth in claim 20 wherein said single authentication signal includes the same number of digits as both said first and second output values.

24. A system for the generation of parameters used in the authentication of a mobile station to a communications network as set forth in claim 23 wherein said single authentication signal is formed by combining one half of said first output value and one half of the second output value.

25. A method of authenticating a mobile station within a radio network by providing two degrees of authentication, a full authentication and a partial authentication, said method comprising:

providing in each of the mobile station and the network, a unique multi-digit permanent key and a multi-digit changeable rolling key;

sending an authentication inquiry signal from the network to the mobile station and an identification signal from the mobile station to the network;

calculating in each of the mobile station and the network a first authentication response value from an algorithm based upon input values which include the authentication inquiry signal, the identification signal, and the permanent key;

calculating in each of the mobile station and the network a second authentication response value from said algorithm based upon input values which include the authentication inquiry signal, the identification signal, and both the permanent key and the rolling key;

joining in each of the mobile station and the network at least some parts of each of said first and second authentication response values to form a composite authentication response signal having a first and a second portion;

sending the composite authentication response signal formed in the mobile station to the network;

comparing the composite authentication response signal formed in the mobile station with the composite authentication response signal formed in the network; and

detecting a full authentication of the mobile station to the network in response to an indication that both the first and second portions of the composite authentication response signals formed in each of the mobile station and the network, respectively, are identical, and detecting a partial authentication of the mobile station to the network in response to an indication that only the first portions of the composite authentication response signals formed in each of the mobile station and the network, respectively, are identical.

26. A method of authenticating a mobile station within a radio network as set forth in claim 25 wherein said calculation to obtain said first authentication response value includes, along with the digits of said permanent key, the digits of a preselected value having the same number of digits as said rolling key.

27. A method of authenticating a mobile station within a radio network as set forth in claim 25 wherein said composite authentication response signal is formed in each of the mobile station and the network by multiplexing said first and said second authentication response value together.

28. A method of authenticating a mobile station within a radio network as set forth in claim 25 wherein said composite authentication signal formed in each of the mobile station and the network includes the same number of digits as both said first and second authentication response values.

29. A method of authenticating a mobile station within a radio network as set forth in claim 25 wherein said composite authentication signal is formed in each of the mobile station and the network by combining one half of said first authentication response value and one half of the second authentication response value.

30. A method of authenticating a mobile station within a radio network as set forth in claim 25 wherein said mobile station is associated with a home network and said radio network is a visited network and wherein:

said calculating steps performed within said network are performed under control of the home network of said mobile station.

31. A method of authenticating a mobile station within a radio network as set forth in claim 25 in which said calculations to obtain said first authentication response value are performed with said permanent key along with a preselected value having the same number of digits as said rolling key and being incorporated into said algorithm in the same way the calculations to obtain said second authentication response value incorporate said rolling key.

32. A method of authenticating a mobile station within a radio network as set forth in claim 25 wherein the network identifies a mobile station as a possibly fraudulent clone in response to the detection of a partial authentication of the mobile station.

33. A system for authenticating a mobile station within a radio network by providing two degrees of authentication, a full authentication and partial authentication, said system comprising:

means for providing in each of the mobile station and the network, a unique multi-digit permanent key and a multi-digit changeable rolling key;

means for sending an authentication inquiry signal from the network to the mobile station and an identification signal from the mobile station to the network;

means for calculating in each of the mobile station and the network a first authentication response value from an algorithm based upon input values which include the authentication inquiry signal, the identification signal, and the permanent key;

means for calculating in each of the mobile station and the network a second authentication response value from said algorithm based upon input values which include the authentication inquiry signal, the identification signal, and both the permanent key and the rolling key;

means for joining in each of the mobile station and the network at least some parts of each of said first and second authentication response values to form a composite authentication response signal having a first and a second portion;

means for sending the composite authentication response signal formed in the mobile station to the network;

means for comparing the composite authentication response signal formed in the mobile station with the composite authentication response signal formed in the network; and

means for detecting a full authentication of the mobile station to the network in response to an indication that both the first and second portions of the composite authentication response signals formed in each of the mobile station and the network, respectively, are identical, and detecting a partial authentication of the mobile station to the network in response to an indication that only the first portions of the composite authentication response signal formed in each of the mobile station and the network, respectively, are identical.

34. A system for authenticating a mobile station within a radio network as set forth in claim 33 wherein said calculation to obtain said first authentication response value includes, along with the digits of said permanent key, the digits of a preselected value having the same number of digits as said rolling key.

35. A system for authenticating a mobile station within a radio network as set forth in claim 33 wherein said composite authentication response signal is formed in each of the mobile station and the network by multiplexing said first and second authentication response value together.

36. A system for authenticating a mobile station within a radio network as set forth in claim 33 wherein said composite authentication signal formed in each of the mobile station and the network includes the same number of digits as both said first and second authentication response values.

37. A system for authenticating a mobile station within a radio network as set forth in claim 33 wherein said composite authentication signal is formed in each of the mobile station and the network by combining one half of said first authentication response value and one half of the second authentication response value.

38. A system for authenticating a mobile station within a radio network as set forth in claim 33 wherein said mobile station is associated with a home network and said radio network is a visited network and wherein:

said means for calculating within said network are under control of the home network of said mobile station.

39. A system for authenticating a mobile station within a radio network as set forth in claim 33 in which said calculations to obtain said first authentication response value are performed with said permanent key along with a preselected value having the same number of digits as said rolling key and being incorporated into said algorithm in the same way the calculations to obtain said second authentication response value incorporate said rolling key.

40. A system for authenticating a mobile station within a radio network as set forth in claim 33 wherein the network identifies a mobile station as a possibly fraudulent clone in response to the detection of a partial authentication of the mobile station.

41. A method for the validation of a mobile station in a radio network in accordance with an authentication algorithm executed in each of said mobile station and said network, said method comprising the steps of:

transmitting a random challenge signal from said network to said mobile station;

applying to said authentication algorithm a set of inputs including said random challenge signal transmitted from said network to said mobile station, and a fixed key value and a changeable key value;

generating from said authentication algorithm a set of outputs including a first response signal which is dependent on said fixed key value and independent of said changeable key value, and a second response signal which is dependent on said changeable key value;

transmitting the first and second response signals from said mobile station to said network;

comparing said first and second response signals transmitted from said mobile station to said network with the first and second response signals generated in said network; and

determining the validity of said mobile station based on whether there is a full match, partial match or no match between said first and second response signals transmitted from said mobile station to said network and the first and second response signals generated in said network.

42. The method of claim 41 wherein said set of inputs further includes the electronic serial number of said mobile station.

43. The method of claim 41 wherein said set of inputs further includes the mobile identification number of said mobile station.

44. The method of claim 41 wherein said set of outputs further includes a temporary encryption key value which is used to encipher communications between said mobile station and said network.

45. The method of claim 41 wherein said first and second response signals generated in said mobile station are combined prior to being transmitted to said network.

46. The method of claim 45 wherein only a portion of each of said first and second response signals generated in said mobile station is selected for transmission to said network and wherein said portion of each is multiplexed with the other portion prior to being transmitted to said network.

47. The method of claim 41 wherein said set of outputs further includes a third response signal and said method further comprises the steps of:

transmitting the third response signal generated in said network to said mobile station;

comparing said third response signal generated in said network and received in said mobile station with the third response signal generated in said mobile station; and

transmitting said first and second response signals generated in said mobile station to said network only if said third response signal generated in said network and received in said mobile station matches said third response signal generated in said mobile station.

48. The method of claim 47 wherein said set of outputs further includes a new changeable key value and said method further comprises the steps of:

transmitting from said network to said mobile station a signal indicative of changeable key value update; and

replacing the current changeable key value with said new changeable key value in response to said update signal.

49. The method of claim 48 wherein said random challenge signal, said third response signal generated in said network and said update signal are transmitted together in one message to said mobile station.

50. The method of claim 41 wherein said set of outputs further includes a new changeable key value and said method further comprises the steps of:

transmitting from said network to said mobile station a signal indicative of changeable key value update; and

replacing the current changeable key value with said now changeable key value in response to said update signal.

51. A system for the validation of a mobile station in a radio network in accordance with an authentication algorithm executed in each of said mobile station and said network, said system comprising:

means for transmitting a random challenge signal from said network to said mobile station;

means for applying to said authentication algorithm a set of inputs including said random challenge signal transmitted from said network to said mobile station, and a fixed key value and a changeable key value;

means for generating from said authentication algorithm a set of outputs including a first response signal which is dependent on said fixed key value and independent of said changeable key value, and a second response signal which is dependent on said changeable key value;

means for transmitting the first and second response signals generated in said mobile station to said network;

means for comparing said first and second response signals generated in said mobile station and received in said network with the first and second response signals generated in said network; and

means for determining the validity of said mobile station based on whether there is a full match, partial match or no match between said first and second response signals transmitted from said mobile station to said network and the first and second response signals generated in said network.

52. The system of claim 51 wherein said set of inputs further includes the electronic serial number of said mobile station.

53. The system of claim 51 wherein said set of inputs further includes the mobile identification number of said mobile station.

54. The system of claim 51 wherein said set of outputs further includes a temporary encryption key value which is used to encipher communications between said mobile station and said network.

55. The system of claim 51 wherein said first and second response signals generated in said mobile station are combined prior to being transmitted to said network.

56. The system of claim 55 wherein only a portion of each of said first and second response signals generated in said mobile station is selected for transmission to said network and wherein said portion of each is multiplexed with the other portion prior to being transmitted to said network.

57. The system of claim 51 wherein said set of outputs further includes a third response signal and said system further comprises:

means for transmitting the third response signal generated in said network to said mobile station;

means for comparing said third response signal generated in said network and received in said mobile station with the third response signal generated in said mobile station; and

means for transmitting said first and second response signals generated in said mobile station to said network only if said third response signal generated in said network and received in said mobile station matches said third response signal generated in said mobile station.

58. The system of claim 57 wherein said set of outputs further includes a new changeable key value and said system further comprises:

means for transmitting from said network to said mobile station a signal indicative of changeable key value update; and

means for replacing the current changeable key value with said new changeable key value in response to said update signal.

59. The system of claim 58 wherein said random challenge signal, said third response signal generated in said network and said update signal are transmitted together in one message to said mobile station.

60. The system of claim 51 wherein said set of outputs further includes a new changeable key value and said system further comprises:

means for transmitting from said network to said mobile station a signal indicative of changeable key value update; and

means for replacing the current changeable key value with said new changeable key value in response to said update signal.

61. A method for validating a remote station to a radio network comprising the steps of:

generating in each of said station and said network a first validation value from a fixed key value and a second validation value from a changeable key value;

transmitting from said station to said network at least a portion of each of the first and second validation values generated in said station; and

comparing the transmitted portions of the first and second validation values generated in said station with corresponding portions of the first and second validation values generated in said network to determine the validity of said station.

62. The method of claim 61 wherein the second validation value is generated from both said fixed key value and said changeable key value.

63. The method of claim 61 wherein said transmitted portions are multiplexed into a composite validation value prior to transmission to said network.

64. The method of claim 61 wherein the first validation value is generated from other values in addition to said fixed key value.

65. The method of claim 61 wherein the second validation value is generated from other values in addition to said changeable key value.

66. A radio network comprising at least one exchange connected to at least one base station which communicates with at least one mobile station, and further comprising:

means for generating in each of said mobile station and said network a first validation value from a fixed key value and a second validation value from a changeable key value;

means for transmitting from said mobile station to said network at least a portion of each of the first and second validation values generated in said mobile station; and

means for comparing the transmitted portions of the first and second validation values generated in said mobile station; and

means for comparing the transmitted portions of the first and second validation values generated in said mobile station with corresponding portions of the first and second validation values generated in said network to determine the validity of said mobile station.

67. The network of claim 66 wherein the second validation value is generated from both said fixed key value and said changeable key value.

68. The network of claim 66 wherein said transmitted portions are multiplexed into a composite validation value prior to transmission to said network.

69. The network of claim 66 wherein the first validation value is generated from other values in addition to the fixed key value.

70. The network of claim 66 wherein the second validation value is generated from other values in addition to the changeable key value.