US5991407A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Subscriber authentication in a mobile communications system
Assignee: Nokia Solutions and Networks Oy
•
Filing: 1995-10-17
•
Granted: 1999-11-23
•
Expires: 2015-10-17
Abstract
Abstract An authentication procedure in a Global System for Mobile Communications (GSM)-based mobile communications system relies on a challenge and response principle. A 32-bit Signed Response (SRES) parameter is calculated by an A3 algorithm from a 128-bit random number (RAND) and a 128-bit authentication key K i in a mobile station, and in an authentication center, and the SRES values are compared. A Cellular Authentication and Voice Encryption (CAVE) algorithm having a 152-bit input parameter and a 18-bit output parameter is employed as the A3 algorithm. Parameter adaptation functions are provided between the input parameter of the CAVE algorithm and the GSM-type input parameters, namely the random number RAND and the authentication key K i , as well as between the output parameter of the CAVE algorithm and the GSM output parameter, namely the signed response SRES.
Inventors
- 👤 Juhani Murto
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 11:47
CPC Classifications
H; H04; H04W; H04W12/00; H04W12/06; H04L; H04L9/00; H04L9/08; H04L9/0861; H04L9/0869; H04L9/32; H04L9/321; H04L9/3271; H04W12/04; H04W12/041; H04W12/043; H04W12/0431; H04L2209/00; H04L2209/20; H04L2209/80
Claims Analysis
Total Claims: 6
Claim 1
Independent Claim
222 words
An authentication center for a mobile communications network, comprising a database storing an authentication key for each subscriber of said mobile communications network as a first input parameter for calculation of a ciphering key and an authentication response parameter in a first format required by a given first authentication procedure, a source for providing a random number as a second input parameter for calculation of said ciphering key and said authentication response parameter in said first format, an encryption key calculation unit arranged for having an authentication key provided from said database and a random number provided from said source of random numbers, respectively as first and second input parameters thereto, and for outputting a ciphering key which is in said first format, an authentication response parameter-calculation unit requiring a single input parameter for outputting an authentication response parameter which is in a second format which is different from said first format, a first adaptation unit responsive to input thereto of an authentication key from said database and a random number from said source, as input parameters, for providing said single input parameter to said authentication response parameter-calculation unit, and a second adaptation unit responsive to input thereto of said authentication response parameter outputted by said authentication response parameter-calculation unit, for providing said authentication response parameter according to said first authentication procedure.
Claim 2
Dependent Claim
222 words
An authentication center for a mobile communications network, comprising a database storing an authentication key for each subscriber of said mobile communications network as a first input parameter for calculation of a ciphering key and an authentication response parameter in a first format required by a given first authentication procedure, a source for providing a random number as a second input parameter for calculation of said ciphering key and said authentication response parameter in said first format, an encryption key calculation unit arranged for having an authentication key provided from said database and a random number provided from said source of random numbers, respectively as first and second input parameters thereto, and for outputting a ciphering key which is in said first format, an authentication response parameter-calculation unit requiring a single input parameter for outputting an authentication response parameter which is in a second format which is different from said first format, a first adaptation unit responsive to input thereto of an authentication key from said database and a random number from said source, as input parameters, for providing said single input parameter to said authentication response parameter-calculation unit, and a second adaptation unit responsive to input thereto of said authentication response parameter outputted by said authentication response parameter-calculation unit, for providing said authentication response parameter according to said first authentication procedure.
Claim 3
Dependent Claim
224 words
An authentication parameter processing unit in a mobile station, comprising a memory storing an authentication key for a mobile subscriber using said mobile station as a first input parameter for calculation of a ciphering key and an authentication response parameter in a first format required by a given, first authentication procedure, a source for providing a random number as a second input parameter for calculation of said ciphering key and said authentication response parameter in said first format, an encryption key calculation unit arranged for having an authentication key provided from said database and a random number provided from said source of random numbers, respectively as first and second input parameters thereto, and for outputting a ciphering key which is in said first format, an authentication response parameter calculation unit requiring a single input parameter for outputting an authentication response parameter which is in a second format which is different from said first format, a first adaptation unit responsive to input thereto of an authentication key from said database and a random number from said source, as input parameters, for providing said single input parameter to said authentication response parameter-calculation unit, and a second adaptation unit responsive to input thereto of said authentication response parameter outputted by said authentication response parameter-calculation unit, for providing said authentication response parameter according to said first authentication procedure.
Claim 4
Dependent Claim
224 words
An authentication parameter processing unit in a mobile station, comprising a memory storing an authentication key for a mobile subscriber using said mobile station as a first input parameter for calculation of a ciphering key and an authentication response parameter in a first format required by a given, first authentication procedure, a source for providing a random number as a second input parameter for calculation of said ciphering key and said authentication response parameter in said first format, an encryption key calculation unit arranged for having an authentication key provided from said database and a random number provided from said source of random numbers, respectively as first and second input parameters thereto, and for outputting a ciphering key which is in said first format, an authentication response parameter calculation unit requiring a single input parameter for outputting an authentication response parameter which is in a second format which is different from said first format, a first adaptation unit responsive to input thereto of an authentication key from said database and a random number from said source, as input parameters, for providing said single input parameter to said authentication response parameter-calculation unit, and a second adaptation unit responsive to input thereto of said authentication response parameter outputted by said authentication response parameter-calculation unit, for providing said authentication response parameter according to said first authentication procedure.
Claim 5
Dependent Claim
159 words
An authentication method for a mobile communications network, a given authentication procedure having a given authentication response format comprising the steps of: providing an authentication key compatible with a given first authentication response-calculation method but incompatible with a second authentication response-calculation method, for each subscriber of said mobile communications network, generating a random number compatible with said first authentication response-calculation method but incompatible with said second authentication response-calculation method, deriving an input parameter compatible with said second authentication response calculation method from said authentication key and said random number, calculating, by using said second authentication response-calculation method, an authentication response having a format which is incompatible with said given authentication response format of said given authentication procedure utilized in said mobile communications network, modifying said authentication response into modified authentication response having a format compatible with said given authentication response format of said given authentication procedure, and transferring and storing said modified authentication response in said mobile communications network.
Claim 6
Dependent Claim
159 words
An authentication method for a mobile communications network, a given authentication procedure having a given authentication response format comprising the steps of: providing an authentication key compatible with a given first authentication response-calculation method but incompatible with a second authentication response-calculation method, for each subscriber of said mobile communications network, generating a random number compatible with said first authentication response-calculation method but incompatible with said second authentication response-calculation method, deriving an input parameter compatible with said second authentication response calculation method from said authentication key and said random number, calculating, by using said second authentication response-calculation method, an authentication response having a format which is incompatible with said given authentication response format of said given authentication procedure utilized in said mobile communications network, modifying said authentication response into modified authentication response having a format compatible with said given authentication response format of said given authentication procedure, and transferring and storing said modified authentication response in said mobile communications network.
References Cited (Backward Citations)
US5319710A
Cited
US5400390A
Cited
US5551073A
Cited
US5642401A
Cited
US5557676A
Cited
EP0675615A1
Cited
US5513245A
Cited
US5629974A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-11-22 | 2003-05-24 | 2003-11-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-11-22 | 2007-05-24 | 2007-11-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-11-22 | 2011-05-24 | 2011-11-23 | $7700.00 | Window Closed / Lapsed |