US5377267A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method of authentication with improved security for secrecy of authentication key
Assignee: NTT Inc
•
Filing: 1993-08-16
•
Granted: 1994-12-27
•
Expires: 2013-08-16
Abstract
Abstract A method of subscriber authentication suitable for a roaming service in a telecommunication capable of realizing an improved security for the secrecy of the authentication key. In this method, an authentication data Indicative of a tentative authentication key to be used only in the authentication at the second network is transmitted from the second network to the first network, and the first network enciphers this authentication data by using a permanent authentication key shared between the first network and the mobile subscriber, and transmits this enciphered authentication data to the mobile subscriber via the second network, such that the mobile subscriber can decipher this enciphered authentication data by using the permanent authentication key to obtain the tentative authentication key and subsequently carry out the authentication at the second network by using the obtained tentative authentication key, wlthout explicitly disclosing the permanent authentication key to the second service provider.
Inventors
- 👤 Shigefusa Suzuki
- 👤 Tatsuo Nohara
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 16:31
CPC Classifications
H; H04; H04W; H04W12/00; H04W12/06; H04L; H04L9/00; H04L9/32; H04L9/3271; H04L2209/00; H04L2209/80; H04W12/04; H04W12/60; H04W12/69; H04W12/72
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
232 words
A method of authentication for a mobile subscriber to receive a roaming service by moving from a first communication network owned by a first service provider to a second communication network owned by a second service provider, comprising the steps of: (a) transmitting a mobile station identifier uniquely assigned to the mobile subscriber by the first service provider, from the mobile subscriber to the second communication network, when the mobile subscriber moved from the first communication network to the second communication network; (b) transmitting the mobile station identifier transmitted at the step (a) along with an authentication data indicative of a tentative authentication key to be used only in an authentication at the second communication network, from the second communication network to the first communication network; (c) transmitting an enciphered authentication data obtained at the first communication network by enciphering the authentication data transmitted at the step (b) by using a permanent authentication key shared by the first communication network and the mobile subscriber, from the first communication network to the mobile subscriber via the second communication network; (d) deciphering the enciphered authentication data transmitted at the step (c) by using the permanent authentication key to obtain the tentative authentication key at the mobile subscriber; and (e) carrying out the authentication at the second communication network by using the tentative authentication key obtained at the step (d) on the mobie subscriber side.
Claim 2
Independent Claim
232 words
A method of authentication for a mobile subscriber to receive a roaming service by moving from a first communication network owned by a first service provider to a second communication network owned by a second service provider, comprising the steps of: (a) transmitting a mobile station identifier uniquely assigned to the mobile subscriber by the first service provider, from the mobile subscriber to the second communication network, when the mobile subscriber moved from the first communication network to the second communication network; (b) transmitting the mobile station identifier transmitted at the step (a) along with an authentication data indicative of a tentative authentication key to be used only in an authentication at the second communication network, from the second communication network to the first communication network; (c) transmitting an enciphered authentication data obtained at the first communication network by enciphering the authentication data transmitted at the step (b) by using a permanent authentication key shared by the first communication network and the mobile subscriber, from the first communication network to the mobile subscriber via the second communication network; (d) deciphering the enciphered authentication data transmitted at the step (c) by using the permanent authentication key to obtain the tentative authentication key at the mobile subscriber; and (e) carrying out the authentication at the second communication network by using the tentative authentication key obtained at the step (d) on the mobie subscriber side.
Claim 3
Dependent Claim
20 words
The method of claim 1, wherein the authentication data transmitted at the step (b) comprises the tentative authentication key itself.
Claim 4
Dependent Claim
77 words
The method of claim 1, wherein the authentication data transmitted at the step (b) comprises the tentative authentication key enciphered by a temporal key, and the second communication network transmits the temporal key along with the the enciphcred authentication data to the mobile subscriber at the step (c), such that the tentative authentication key is obtained at the step (d) by deciphering the enciphered authentication data by using both the permanent authentication key and the temporal key.
Claim 5
Dependent Claim
104 words
The method of claim 1, wherein at the step (e), the authentication at the second communication network is carried out by: transmitting a random number generated at the second communication network to the mobile subscriber along with the enciphered authentication data at the step (c); transmitting an enciphered random number obtained at the mobile subscriber by enciphering the transmitted random number by using the tentative authentication key obtained at the step (d) from the mobile subscriber to the second communication network; and verifying the coincidence of the random number enciphered at the mobile subscriber and the random number generated at the second communication network.
Claim 6
Dependent Claim
57 words
The method of claim 4, wherein the coincidence of the random number enciphered at the mobile subscriber and the random number generated at the second communication network is verified by deciphering the enciphered random number to obtain a deciphered random number and comparing the deciphered random number with the random number generated at the second communication network.
Claim 7
Independent Claim
65 words
The method of clalm 4, wherein the coincidence of the random number enciphered at the mobile subscriber and the random number generated at the second communication network is verified by enciphering the random number generated at the second communication network by using the tentative authentication key to obtain an enciphered original random number and comparing the enciphered random number with the enciphered origlnal random number.
Claim 8
Independent Claim
65 words
The method of clalm 4, wherein the coincidence of the random number enciphered at the mobile subscriber and the random number generated at the second communication network is verified by enciphering the random number generated at the second communication network by using the tentative authentication key to obtain an enciphered original random number and comparing the enciphered random number with the enciphered origlnal random number.
Claim 9
Dependent Claim
54 words
The method of claim 1, wherein at the step (a), the second communication network checks whether the mobile station identifier transmitted from the mobile subscriber is one of pre-reglstered mobile station identifiers of those mobile subscribers of the first service provider which are capable of receiving the roaming service from the second communication network.
Claim 10
Dependent Claim
54 words
The method of claim 1, wherein at the step (c), the first communication network checks whether the mobile subscriber is one of formal subscribers of the first service provider according to the transmitted mobile station identifier, and enciphers the authentication data by using the permanent authentication key corresponding to the transmitted mobile station identifier.
Claim 11
Dependent Claim
32 words
The method of claim 1, wherein the mobile subscriber memorizes the tentative authentication key obtained at the step (d) in order to subsequently carry out the authentication at the second communication network.
Claim 12
Independent Claim
51 words
The method of clalm 1, whereln the second communication network memorizes a correspondence between the tentative authentication key indicated by the authentication data transmitted at the step (b) and the mobile station identifier received at the step (a) in order to subsequently carry out the authentication at the second communication network.
Claim 13
Independent Claim
51 words
The method of clalm 1, whereln the second communication network memorizes a correspondence between the tentative authentication key indicated by the authentication data transmitted at the step (b) and the mobile station identifier received at the step (a) in order to subsequently carry out the authentication at the second communication network.
References Cited (Backward Citations)
WO1990003290A1
Cited
WO1991000066A1
Cited
WO1991004970A1
Cited
US5233656A
Cited
EP0480833A1
Cited
US5241598A
Cited
US5153919A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-12-26 | 1998-06-27 | 1998-12-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-12-26 | 2002-06-27 | 2002-12-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-12-26 | 2006-06-27 | 2006-12-27 | $7700.00 | Window Closed / Lapsed |