Authentication and security in wireless communication system

• US 7,322,041 B2
• Filed: 07/24/2002
• Issued: 01/22/2008
• Est. Priority Date: 12/10/1997
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Bilgic, Izzet M., Menon, Narayan P.
• Primary Examiner(s): Revak; Christopher
• Assistant Examiner(s): Henning; Matthew T
• Application Number:
  US10/202,113
• Publication Number:
  US 20020176581A1
• Time in Patent Office: 2,008 Days
• Field of Search: 726/12, 713/176, 713/153, 455/422.1, 455/410, 455/426.2, 455/458, 455/461
• US Class Current: 726/12
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/18 Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/14 WLL [Wireless Local Loop]; RLL [Radio Local Loop]

Abstract

A communication system having a wireless trunk for connecting multiple phone lines over wireless communication links to a cellular network comprises a central telephone switch, such as a private branch exchange or key system, connected through one or more trunk lines to a wireless access communication unit. The wireless access communication unit preferably comprises a separate subscriber interface for each trunk line from the central telephone switch. The wireless access communication unit collects data from each of the subscriber interfaces, formats the data into a format compatible with an over-the-air protocol, and transmits the information over one or more wireless channels to a cellular base station. The wireless access communication unit thereby connects calls received from the central telephone switch'"'"'s trunk lines over a wireless trunk to a network. A controller within the wireless access communication unit interfaces the subscriber interfaces with a radio transceiver, and assists in the conversion of data from a format suitable for wireless transmission. Authentication is carried out separately for each of the subscriber interfaces, thereby allowing the wireless access communication unit to represent itself as multiple individual subscribers to the network. Upon each initial registration, each subscriber interface derives its own ciphering key from a stored user key and uses it thereafter for encryption and decryption.

Claims

1. A method comprising:

connecting a wireless access communication unit to a plurality of non-wireless communication devices;

establishing a wireless connection between the wireless access communication unit and a network;

transmitting a subscriber identifier from the wireless access communication unit to the network over the wireless connection, the subscriber identifier corresponding to one of a plurality of subscriber ports of the wireless access communication unit;

transferring, under supervision of a controller, information between a radio unit of the wireless access communication unit and the plurality of subscriber ports while the wireless access communication unit is wireless connected to the network;

receiving an authentication parameter from the network over the wireless connection at the wireless access communication unit; and

generating an authentication key at the wireless access communication unit based upon the authentication parameter and a locally stored user key value associated with the one of the plurality of subscriber ports of the wireless access communication unit.

2. The method of claim 1, wherein the authentication key comprises a signed response, the method further comprising transmitting the signed response from the wireless access communication unit to the network over the wireless connection.

3. The method of claim 1, wherein the authentication key comprises a ciphering key, the method further comprising encrypting and decrypting messages transmitted across the wireless connection using the ciphering key.

4. The method of claim 1, further comprising determining whether a connection is to be established via the wireless access communication unit or a public switched telephone network (PSTN).

5. A wireless access communication unit comprising:

a plurality of subscriber ports to connect to a customer premises telephone switch to establish a plurality of communication paths between the wireless access communication unit and a plurality of non-wireless communication devices connected to the customer premises telephone switch;

a plurality of subscriber interfaces, each subscriber interface connected to one of the subscriber ports;

a radio transceiver to transmit and receive information over a wireless connection to a base station;

a controller connected to the radio transceiver and the subscriber interfaces, the controller to manage transfer of ongoing call information between the radio transceiver and the subscriber interfaces; and

a subscriber identity module connected to one of the subscriber interfaces, the subscriber identity module having a non-volatile memory to store a subscriber identifier and a user key value, the subscriber identity module to output a signed response value in response to an authentication parameter received by the radio transceiver over the wireless connection.

6. The wireless access communication unit of claim 5, wherein the authentication parameter comprises a random numeric value.

7. The wireless access communication unit of claim 5, wherein the subscriber identity module is to output a ciphering key in response to the authentication parameter.

8. The wireless access communication unit of claim 5, wherein the controller is to utilize the ciphering key to encrypt and decrypt information transferred between the radio transceiver and the one of the subscriber interfaces.