US6014085A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Strengthening the authentication protocol
Assignee: Nokia of America Corp
•
Filing: 1997-10-27
•
Granted: 2000-01-11
•
Expires: 2017-10-27
Abstract
Abstract The invention strengthens authentication protocols by making it more difficult for handset impersonators to gain system access using replay attacks. This goal is accomplished using challenge codes as a parameter for determining authentication codes, whereby different challenge codes cause different authentication codes to be generated. In one embodiment, the challenge codes are functions of challenge types (e.g., global or unique challenges) and/or handset states (e.g., call origination, page response, registration, idle, and SSD-A update). This embodiment prevents handset impersonators from successfully utilizing replay attacks to impersonate a legitimate handset if the legitimate handset is in a different state than the handset impersonator, or if the legitimate handset is responding to a different challenge type than the handset impersonator.
Inventors
- 👤 Sarvar Patel
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 14:16
CPC Classifications
H; H04; H04W; H04W12/00; H04W12/06; H04L; H04L63/00; H04L63/14; H04L63/1441; H04L63/1466; H04L9/00; H04L9/32; H04L9/3226; H04L9/3271; H04L2209/00; H04L2209/80; H04W12/60; H04W12/69; H04W12/71; H04W12/72
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
73 words
A method of authentication comprising the steps of: receiving a first authentication code from a user; and authenticating the user using the first authentication code and a second authentication code, the second authentication code determined using a challenge code and information associated with the user, wherein the challenge code is a function of at least a type associated with an issued challenge and a state of a mobile-transmitter responding to the issued challenge.
Claim 2
Independent Claim
73 words
A method of authentication comprising the steps of: receiving a first authentication code from a user; and authenticating the user using the first authentication code and a second authentication code, the second authentication code determined using a challenge code and information associated with the user, wherein the challenge code is a function of at least a type associated with an issued challenge and a state of a mobile-transmitter responding to the issued challenge.
Claim 3
Dependent Claim
22 words
The method of claim 1, wherein the user is authenticated if the first authentication code is identical to the second authentication code.
Claim 4
Dependent Claim
24 words
The method of claim 1, wherein the user is not authenticated if the first authentication code is not identical to the second authentication code.
Claim 5
Independent Claim
99 words
A method for authenticating a mobile-transmitter at a network comprising the steps of: issuing a challenge to the mobile-transmitter; receiving a response to the challenge from the mobile-transmitter, the response having a first authentication code and information associated with the mobile-transmitter; determining a second authentication code using the information associated with the mobile-transmitter and a challenge code, wherein the challenge code is a function of at least a type associated with an issued challenge and a state of a mobile-transmitter responding to the issued challenge; and authenticating the mobile-transmitter using the first authentication code and the second authentication code.
Claim 6
Independent Claim
99 words
A method for authenticating a mobile-transmitter at a network comprising the steps of: issuing a challenge to the mobile-transmitter; receiving a response to the challenge from the mobile-transmitter, the response having a first authentication code and information associated with the mobile-transmitter; determining a second authentication code using the information associated with the mobile-transmitter and a challenge code, wherein the challenge code is a function of at least a type associated with an issued challenge and a state of a mobile-transmitter responding to the issued challenge; and authenticating the mobile-transmitter using the first authentication code and the second authentication code.
Claim 7
Dependent Claim
19 words
The method of claim 4, wherein the challenge code is a function of a location associated with the mobile-transmitter.
Claim 8
Dependent Claim
17 words
The method of claim 4, wherein the challenge code is a function of time at the mobile-transmitter.
Claim 9
Dependent Claim
25 words
The method of claim 4, wherein the information associated with the mobile-transmitter includes a portion of a mobile-transmitter identification number and an electronic serial number.
Claim 10
Dependent Claim
17 words
The method of claim 4, wherein the information associated with the mobile-transmitter includes a dialed telephone number.
Claim 11
Dependent Claim
23 words
The method of claim 4, wherein the challenge includes a random number for the mobile-transmitter to use in determining the first authentication code.
Claim 12
Dependent Claim
16 words
The method of claim 9, wherein the second authentication code is determined using the random number.
Claim 13
Dependent Claim
28 words
The method of claim 4, wherein the step of determining the authentication code includes providing the challenge code and information associated with the mobile-transmitter to a cryptographic function.
Claim 14
Dependent Claim
18 words
The method of claim 11, wherein the cryptographic function is the well-known Cellular Authentication and Voice Encryption algorithm.
Claim 15
Independent Claim
71 words
A method for authenticating a user comprising the steps of: determining an authentication code using a challenge code and a first set of information associated with the user, wherein the challenge code is a function of at least a type associated with an issued challenge and a state of a mobile-transmitter responding to the issued challenge; and transmitting the authentication code and a second set of information associated with the user.
Claim 16
Independent Claim
71 words
A method for authenticating a user comprising the steps of: determining an authentication code using a challenge code and a first set of information associated with the user, wherein the challenge code is a function of at least a type associated with an issued challenge and a state of a mobile-transmitter responding to the issued challenge; and transmitting the authentication code and a second set of information associated with the user.
Claim 17
Dependent Claim
19 words
The method of claim 13, wherein the challenge code is a function of a location associated with the mobile-transmitter.
Claim 18
Dependent Claim
17 words
The method of claim 13, wherein the challenge code is a function of time at the mobile-transmitter.
Claim 19
Dependent Claim
18 words
The method of claim 13, wherein the second set includes at least a portion of the first set.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-01-10 | 2003-07-12 | 2004-01-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-01-10 | 2007-07-12 | 2008-01-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-01-10 | 2011-07-12 | 2012-01-11 | $7700.00 | Window Closed / Lapsed |