Method and apparatus for authenication and protection of subscribers in telecommunication systems

• US 5,239,294 A
• Filed: 12/07/1990
• Issued: 08/24/1993
• Est. Priority Date: 07/12/1989
• Status: Expired due to Term

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Puhl, Larry C., Finkelstein, Louis D., Flanders, Mary B.
• Primary Examiner(s): Yusko, Donald J.
• Assistant Examiner(s): ZIMMERMAN, BRIAN A
• Application Number:
  US07/626,227
• Time in Patent Office: 991 Days
• Field of Search: 340/825.33, 340/825.34, 340/825.69, 340/825.72, 340/825.3, 340/825.31, 340/825.44, 379/59, 379/62, 379/63, 379/60, 380/42, 380/43, 380/46, 380/49, 380/50
• US Class Current: 340/5.74
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

Radio frequency based cellular telecommuication systems often require a subscriber (10) to maintain a proprietary identifier (19) or serial number (18) which is transmitted to a fixed network communication unit (20) to verify the authenticity of the subscriber (10). An enciphering and call sequencing method and apparatus are provided which can decrease unauthorized detection of these proprietary ID'"'"'s (18, 19). This method and apparatus permit efficient roaming by allowing authentication variables for multiple calls to be sent from the "home" system (20) to the "visted" system and stored by the "visted" system for use with subsequent calls. Further, a method and apparatus are provided which force the authenticating mobile (10) to use information that only it has available to itself. Furthermore, a method and apparatus are provided which allow continued encryption integrity during handoffs by maintaining a record of pseudo random events between a subscriber unit (10) and any radio communication unit (20) and using that record as an encryption variable.

Claims

1. A method for maintaining secure communications through an encryption process between a subscriber unit and radio communication units of a telecommunication system, comprising:

maintaining a record of pseudo random events associated with the subscriber unit;

communicating the record to a particular target radio communication unit; and

continuing the encryption process occurring between the subscriber unit and the particular target radio communication unit by using the record as an encryption variable.

2. The method of claim 1 wherein:

secure communications are maintained through an encryption process between the subscriber unit and radio communication units of the telecommunication system during a communication channel handoff;

the record comprises a record of a number of pseudo random events occurring between the subscriber unit and at least one radio communication unit;

the subscriber unit and the at least one radio communication unit maintain the record; and

the at least one radio communication unit communicates the record to the target radio communication unit during the communication channel handoff.

3. The method of claim 1 wherein the record of pseudo random events comprises a record selected from the group consisting essentially of the number of channel handoffs attributed to the subscriber unit and a slot count assigned to the particular target radio communication unit.

4. The method of claim 1 wherein the encryption process comprises using the encryption variable to encode information selected from the group consisting essentially of speech information and data information.

5. A telecommunication device which maintains secure communications through an encryption process between a subscriber unit and radio communication units remotely located from the subscriber unit, comprising:

record means for maintaining a record of pseudo random events associated with the subscriber unit; and

communication means, operatively coupled to the record means, for communicating the record to a particular target radio communication unit on a communication channel such that the encryption process can be continued between the subscriber unit and the particular target radio communication unit by using the record as an encryption variable.

6. The telecommunication device of claim 5 wherein:

secure communications are maintained through an encryption process between the subscriber unit and radio communication units of the telecommunication system during a communication channel handoff;

the record comprises a record of a number of pseudo random events occurring between the subscriber unit and at least one radio communication unit;

the telecommunication device maintains the record; and

the telecommunication device communicates the record to the target radio communication unit during the communication channel handoff.

7. The telecommunication device of claim 5 wherein the record of pseudo random events comprises a record selected from the group consisting essentially of the number of channel handoffs attributed to the subscriber unit and a slot count assigned to the particular target radio communication unit.

8. The telecommunication device of claim 5 wherein the telecommunication device is selected from the group consisting essentially of the subscriber unit and a particular radio communication unit.

9. A telecommunication device which maintains secure communications through an encryption process between a subscriber unit and radio communication units remotely located from the subscriber unit, comprising:

receiving means for receiving a record of pseudo random events associated with the subscriber unit from over a communication channel; and

encrypting means, operatively coupled to the receiving means, for continuing the encryption process between the subscriber unit and the target radio communication unit by using the record as an encryption variable.

10. The telecommunication device of claim 9 wherein:

secure communications are maintained through an encryption process between the subscriber unit and radio communication units of the telecommunication system during a communication channel handoff;

the record comprises a record of a number of pseudo random events occurring between the subscriber unit and at least one radio communication unit;

the telecommunication device maintains the record; and

the telecommunication device communicates the record to the target radio communication unit during the communication channel handoff.

11. The telecommunication device of claim 9 wherein the record of pseudo random events comprises a record selected from the group consisting essentially of the number of channel handoffs attributed to the subscriber unit and a slot count assigned to the particular target radio communication unit.

12. The telecommunication device of claim 9 wherein the telecommunication device is selected from the group consisting essentially of the subscriber unit and a particular radio communication unit.

13. A method of authentication between a subscriber unit and a radio communication unit of a telecommunication system, comprising:

providing the subscriber unit with at least part of a telephone number which uniquely identifies a target communication unit;

generating an authentication message in the subscriber unit as a function of the at least part of the telephone number; and

transmitting the authentication message and the at least part of the telephone number from the subscriber unit to the radio communication unit.

14. The method of claim 13 wherein:

the subscriber unit is provided with an identification number; and

the authentication message is generated in the subscriber unit further as a function of the identification number.

15. The method of claim 13 wherein the authentication message is generated in the subscriber unit further as a function of a random number known to the subscriber unit.

16. The method of claim 15 wherein:

the subscriber unit is provided with an identification number; and

the authentication message is generated in the subscriber unit further as a function of the identification number.

17. The method of claim 13 wherein:

the subscriber unit maintains an historic non-arbitrary value;

a modified historic non-arbitrary value is generated in the subscriber unit by modifying the historic non-arbitrary value as a function of the at least part of the telephone number; and

the modified historic non-arbitrary value is transmitted from the subscriber unit to the radio communication unit.

18. The method of claim 17 wherein the historic non-arbitrary value comprises a record of pseudo random communication events associated with the subscriber unit selected from the group consisting essentially of the number of telephone calls attributed to the subscriber unit, the number of channel handoffs attributed to the subscriber unit, and a slot count assigned to the radio communication unit.

19. The method of claim 13 wherein the authentication message is transmitted during a communication session on a radio communication link.

20. A method of authentication between a subscriber unit and a radio communication unit of a telecommunication system, comprising:

receiving, at the subscriber unit, a random number from the radio communication unit;

providing the subscriber unit with an identification number and at least part of a telephone number which uniquely identifies a target radio communication unit;

generating an authentication message in the subscriber unit as a function of the random number, the identification number, and the at least part of the telephone number; and

transmitting the authentication message and the at least part of the telephone number from the subscriber unit to the radio communication unit.

21. A method of authentication between a subscriber unit and a radio communication unit of a telecommunication system, comprising:

receiving an authentication message and at least part of a telephone number which uniquely identifies a target radio communication unit, the authentication message being derived from at least part of a requested telephone number; and

determining in the radio communication unit, through the use of the received authentication message and the received at least part of the telephone number, whether a received service request is authentic.

22. The method of claim 21 wherein:

the radio communication unit is provided with information regarding an identification number; and

the determination in the radio communication unit of whether a received service request is authentic further occurs through the use of the information regarding the identification number.

23. The method of claim 22 wherein:

the radio communication unit is a home radio communication unit for the subscriber unit; and

the information regarding the identification number is substantially similar to the identification number.

24. The method of claim 22 wherein:

the ratio communication unit is a visited radio communication unit for the subscriber unit;

the step of providing the radio communication unit with information regarding the identification number, comprises the steps of;

determining if the visited radio communication unit has information regarding the identification number;

retrieving the information regarding the identification number, if the visited radio communication unit has the information regarding the identification number; and

communicating with a home radio communication unit for the subscriber unit, subsequently retrieving the information regarding the identification number, and subsequently storing the information regarding the identification number in the visited radio communication unit, if the visited radio communication unit does not have the information regarding the identification number.

25. The method of claim 24 wherein the information regarding the identification number only comprises data derived from the identification number.

26. The method of claim 21 wherein the authentication message is further derived from a random number known to the radio communication unit.

27. The method of claim 26 wherein:

the radio communication unit is provided with information regarding an identification number; and

the determination in the radio communication unit of whether a received service request is authentic further occurs through the use of the information regarding the identification number.

28. The method of claim 21 wherein:

the radio communication unit maintains an historic non-arbitrary value;

the radio communication unit receives a modified historic non-arbitrary value, the modified historic non-arbitrary value being derived from the at least part of the requested telephone number; and

the determination in the radio communication unit of whether a received service request is authentic further occurs through the use of the received modified historic non-arbitrary value and the maintained historic non-arbitrary value.

29. The method of claim 28 wherein the historic non-arbitrary value comprises a record of pseudo random communication events associated with the subscriber unit selected from the group consisting essentially of the number of telephone calls attributed to the subscriber unit, the number of channel handoffs attributed to the subscriber unit, and a slot count assigned to the radio communication unit.

30. The method of claim 21 wherein the authentication message is received during a communication session on a radio communication link.

31. The method of claim 21 wherein the step of determining further comprises:

granting communication between the subscriber unit and the target radio communication unit uniquely identified by the at least part of the received telephone number, if the received authentication message was substantially derived from the at least part of the received telephone number; and

providing output indicating that a multiple user is attempting to access the radiotelephone communication system, if the received authentication message was not substantially derived from the at least part of the received telephone number.

32. A method of authentication between a subscriber unit and a radio communication unit of a telecommunication system, comprising:

generating, in the subscriber unit, an authentication message as a function of a known random number, an identification number, and the at least part of a telephone number which uniquely identifies a target radio communication unit;

transmitting the authentication message and the at least part of the telephone number from the subscriber unit to the radio communication unit;

receiving, in the radio communication unit, the authentication message and at least part of the telephone number;

generating, in the radio communication unit, an expected authentication message as a function of the known random number, known information regarding the identification number, and the received at least part of the telephone number; and

determining, in the radio communication unit, whether the received service request is authentic by comparing the received authentication message and the expected authentication message.

33. A subscriber unit which authenticates communication with a radio communication unit of a telecommunication system, comprising:

input means for obtaining at least part of a telephone number which uniquely identifies a target radio communication unit;

processor means for generating an authentication message as a function of the at least part of the telephone number; and

transmitter means for transmitting the authentication message and the at least part of the telephone number to the radio communication unit.

34. The subscriber unit of claim 33:

further comprising memory means for providing an identification number; and

wherein the processor means comprises means for generating the authentication message further as a function of the identification number.

35. The subscriber unit of claim 33 wherein the processor means comprises means for generating the authentication message further as a function of a random number known to the subscriber unit.

36. The subscriber unit of claim 35:

further comprising memory means for providing an identification number; and

wherein the processor means comprises means for generating the authentication message further as a function of the identification number.

37. The subscriber unit of claim 33:

further comprising memory means for maintaining an historic non-arbitrary value;

wherein the processor means comprises means for generating a modified historic non-arbitrary value by modifying the historic non-arbitrary value as a function of the at least part of the telephone number; and

wherein the transmitter means comprises means for transmitting the modified historic non-arbitrary value to the radio communication unit.

38. The subscriber unit of claim 37 wherein the historic non-arbitrary value comprises a record of pseudo random communication events associated with the subscriber unit selected from the group consisting essentially of the number of telephone calls attributed to the subscriber unit, the number of channel handoffs attributed to the subscriber unit, and a slot count assigned to the radio communication unit.

39. The subscriber unit of claim 33 wherein the transmitter means transmits the authentication message during a communication session on a radio communication link.

40. A subscriber unit which authenticates communications with a radio communication unit of a telecommunication system, comprising:

receiver means for receiving a random number from the radio communication unit;

input means for obtaining at least part of a telephone number which uniquely identifies a target radio communication unit;

memory means for providing an identification number;

processor means for generating an authentication message as a function of the random number, the identification number, and the at least part of the telephone number; and

transmitter means for transmitting the authentication message and the at least part of the telephone number to the radio communication unit.

41. A radio communication unit of authentication between a subscriber unit and a radio communication unit of a telecommunication system, comprising:

memory means for providing a random number and information regarding an identification number;

receiver means for receiving an authentication message and at least part of a telephone number which uniquely identifies a target radio communication unit, the authentication message being derived from the random number, the identification number, and at least part of a requested telephone number; and

processor means for determining, through the use of the random number, the information regarding the identification number, the received authentication message, and the received at least part of the telephone number, whether a received service request is authentic.

42. A radio communication unit which authenticates communications with a subscriber unit of a telecommunication system, comprising:

receiver means for receiving an authentication message and at least part of a telephone number which uniquely identifies a target radio communication unit, the authentication message being derived from at least part of a requested telephone number; and

processor means for determining, through the use of the received authentication message and the received at least part of the telephone number, whether a received service request is authentic.

43. The radio communication unit of claim 42:

further comprising memory means for providing information regarding an identification number; and

wherein the processor means for determining whether the received service request is authentic further utilizes the information regarding the identification number.

44. The radio communication unit of claim 43 wherein:

the radio communication unit is a home radio communication unit for the subscriber unit; and

the information regarding the identification number is substantially similar to the identification number.

45. The radio communication unit of claim 43 wherein:

the radio communication unit is a visited radio communication unit for the subscriber unit;

the memory means, comprises;

means for determining if the visited radio communication unit has information regarding the identification number;

means for retrieving the information regarding the identification number, if the visited radio communication unit has the information regarding the identification number; and

means for communicating with a home radio communication unit for the subscriber unit, subsequently retrieving the information regarding the identification number, and subsequently storing the information regarding the identification number in the visited radio communication unit, if the visited radio communication unit does not have the information regarding the identification number.

46. The radio communication unit of claim 45 wherein the information regarding the identification number only comprises data derived from the identification number.

47. The radio communication unit of claim 42 wherein the received authentication message is further derived from a random number known to the radio communication unit.

48. The radio communication unit of claim 47:

further comprising memory means for providing information regarding an identification number; and

wherein the processor means for determining whether the received service request is authentic further utilizes the information regarding the identification number.

49. The radio communication unit of claim 42:

further comprising memory means for maintaining an historic non-arbitrary value;

wherein the receiver means further comprises means for receiving a modified historic non-arbitrary value, the modified historic non-arbitrary value being derived from the at least part of the requested telephone number; and

wherein the processor means for determining whether the received service request is authentic further utilizes the received modified historic non-arbitrary value and the maintained historic non-arbitrary value.

50. The radio communication unit of claim 49 wherein the historic non-arbitrary value comprises a record of pseudo random communication events associated with the subscriber unit selected from the group consisting essentially of the number of telephone calls attributed to the subscriber unit, the number of channel handoffs attributed to the subscriber unit, and a slot count assigned to the radio communication unit.

51. The radio communication unit of claim 42 wherein the receiver means receives the authentication message during a communication session on a radio communication link.

52. The radio communication unit of claim 42 wherein the processor means further comprises:

means for granting communication between the subscriber unit and the target radio communication unit uniquely identified by the at least part of the received telephone number, if the received authentication message was substantially derived from the at least part of the received telephone number; and

means for providing output indicating that a multiple user is attempting to access the radiotelephone communication system, if the received authentication message was not substantially derived from the at least part of the received telephone number.