Method and apparatus for efficient real-time authentication and encryption in a communication system

• US 5,689,563 A
• Filed: 06/01/1995
• Issued: 11/18/1997
• Est. Priority Date: 06/29/1993
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Brown, Daniel Peter, Smolinske, Jeffrey Charles, Finkelstein, Louis David
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/457,212
• Time in Patent Office: 901 Days
• Field of Search: 375/200, 380/23, 380/25, 380/34, 380/49, 455/33.1, 455/53.1, 455/54.1, 455/54.2, 379/58, 379/59, 379/60, 340/825.31, 340/825.34
• US Class Current: 380/247
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

Radio frequency based cellular telecommunication systems often require both subscriber units and communication units of a fixed network communication system to maintain secret data which may be used to verify authenticity as well as provide encrypting variables for message encryption processes. An efficient real-time authentication method and apparatus are provided which use a single message to provide authentication and communication link setup information. Further, an authentication method and apparatus are provided which uses instant-specific information such as a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, or a base site controller identifier to enhance the reliability of the authentication process. Furthermore, a method and apparatus are provided for maintaining secure packet data communications through an encryption process by utilizing a packetized message encryption key and a unique packet number as encryption variables.

Claims

1. A subscriber unit which generates authentication messages for authenticating communications with a communication unit of a communication system, comprising:

(a) memory means for maintaining instant-specific information;

(b) processor means for generating an authentication message as a function of the instant-specific information; and

(c) transmitter means for transmitting the authentication message to the communication unit.

2. The subscriber unit of claim 1 wherein the instant-specific information comprises information selected from the group consisting of a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, and a base site controller identifier.

3. A communication unit which authenticates communications with a subscriber unit of a communication system, comprising:

(a) receiver means for receiving an authentication message;

(b) memory means for maintaining instant-specific information; and

(c) processor means for authenticating the received authentication message by determining, through the use of the received authentication message and the maintained instant-specific information, whether the received authentication message is authentic.

4. The communication unit of claim 3 wherein the instant-specific information comprises information selected from the group consisting of a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, and a base site controller identifier.

5. The communication unit of claim 3 wherein the processor means further comprises:

(a) means for granting further communication between the subscriber unit and the communication unit, if the received authentication message was derived from the maintained instant-specific information; and

(b) means for providing output indicating that a multiple user is attempting to access the communication system, if the received authentication message was not derived from the maintained instant-specific information.

6. A communication unit which generates authentication messages for authenticating communications with a subscriber unit operating within a communication system, comprising:

(a) memory means for maintaining instant-specific information;

(b) processor means for generating an authentication message as a function of the instant-specific information; and

(c) transmitter means for transmitting the authentication message to the subscriber unit.

7. The communication unit of claim 6 wherein the instant-specific information comprises information selected from the group consisting of a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, and a base site controller identifier.

8. A subscriber unit which authenticates communications with a communication unit of a communication system, comprising:

(a) receiver means for receiving an authentication message;

(b) memory means for maintaining instant-specific information; and

(c) processor means for authenticating the received authentication message by determining, through the use of the received authentication message and the maintained instant-specific information, whether the received authentication message is authentic.

9. The subscriber unit of claim 8 wherein the instant-specific information comprises information selected from the group consisting of a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, and a base site controller identifier.

10. The subscriber unit of claim 8 wherein the processor means further comprises:

(a) means for granting further communication between the subscriber unit and the communication unit, if the received authentication message was derived from the maintained instant-specific information; and

(b) means for providing output indicating that a multiple user is attempting to access the communication system, if the received authentication message was not derived from the maintained instant-specific information.

11. A method of authentication between a subscriber unit and a communication unit of a communication system, comprising:

(a) providing instant-specific information to both the subscriber unit and the communication unit;

in a receiving one of the radio communication unit and subscriber unit;

(b) generating an authentication message as a function of the instant specific information;

(c) communicating the authentication message between the subscriber unit and the communication unit; and

in a receiving one of the radio communication unit and subscriber unit;

(d) generating an expected authentication message as a function of the instant-specific information; and

(e) determining whether the communicated authentication message is authentic by comparing the communicated authentication message and the expected authentication message.

12. The method of claim 11 wherein the instant-specific information comprises information selected from the group consisting of a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, and a base site controller identifier.

13. The method of claim 11 wherein:

(a) the step of generating an authentication message is performed by the subscriber unit;

(b) the step of communicating comprises communicating the authentication message from the subscriber unit to the communication unit;

(c) the step of generating the expected authentication message is performed by the communication unit; and

(d) the step of determining whether the communicated authentication message is authentic is performed by the communication unit.

14. The method of claim 11 wherein:

(a) the step of generating an authentication message is performed by the communication unit;

(b) the step of communicating comprises communicating the authentication message from the communication unit to the subscriber unit;

(c) the step of generating the expected authentication message is performed by the subscriber unit; and

(d) the step of determining whether the communicated authentication message is authentic is performed by the subscriber unit.

15. The method of claim 11 wherein the step of determining further comprises:

(a) granting further communication between the subscriber unit and the communication unit, if the communicated authentication message was derived from the instant-specific information; and

(b) providing output indicating that a multiple user is attempting to access the communication system, if the communicated authentication message was not derived from the instant-specific information.