US6317830B1 — Process and device for authenticating subscribers…

Claim 1

Independent Claim 121 words

A system for authenticating a subscriber to an exchange of a digital communication network, the digital communication network including a subscriber-side network terminator for connecting a data terminal, the system comprising: an authentication module arranged at the subscriber for receiving a first identification carrier containing a subscriber-specific cryptographic key, the authentication module including: means for encoding information by using the subscriber-specific cryptographic key to provide encoded information, and means for transmitting the encoded information; and another authentication module, arranged at one of the exchange and a location upstream from the exchange, for receiving another identification carrier containing the subscriber-specific cryptographic key, including: means for decoding the encoded information by using the subscriber-specific cryptographic key to authenticate the subscriber to the exchange.

Claim 2

Independent Claim 121 words

A system for authenticating a subscriber to an exchange of a digital communication network, the digital communication network including a subscriber-side network terminator for connecting a data terminal, the system comprising: an authentication module arranged at the subscriber for receiving a first identification carrier containing a subscriber-specific cryptographic key, the authentication module including: means for encoding information by using the subscriber-specific cryptographic key to provide encoded information, and means for transmitting the encoded information; and another authentication module, arranged at one of the exchange and a location upstream from the exchange, for receiving another identification carrier containing the subscriber-specific cryptographic key, including: means for decoding the encoded information by using the subscriber-specific cryptographic key to authenticate the subscriber to the exchange.

Claim 3

Dependent Claim 58 words

The system as recited in claim 1 , further comprising: means for establishing a connection between the network terminator and the exchange after the functions of encoding, transmitting encoded information, and decoding have been performed; and means for causing the exchange to request at least one of establishment information and service information if the subscriber has been authenticated.

Claim 4

Independent Claim 150 words

A method for authenticating subscribers to at least one exchange of a digital communication network, the digital communication network including at least one subscriber-side network terminator for connecting at least one data terminal, at least one authentication module arranged at a subscriber for receiving a first identification carrier containing a subscriber-specific cryptographic key, and at least one second authentication module arranged at one of the exchange and a location immediately upstream from the exchange for receiving a second identification carrier containing the subscriber-specific cryptographic key, the method comprising the steps of: transmitting information from the second authentication module to the first authentication module, encoding the information received with the subscriber-specific cryptographic key in the first authentication module, and transmitting the encoded information back to the second authentication module, and decoding the encoded information in the second authentication module with the subscriber-specific cryptographic key to authenticate the subscriber to the exchange.

Claim 5

Independent Claim 150 words

A method for authenticating subscribers to at least one exchange of a digital communication network, the digital communication network including at least one subscriber-side network terminator for connecting at least one data terminal, at least one authentication module arranged at a subscriber for receiving a first identification carrier containing a subscriber-specific cryptographic key, and at least one second authentication module arranged at one of the exchange and a location immediately upstream from the exchange for receiving a second identification carrier containing the subscriber-specific cryptographic key, the method comprising the steps of: transmitting information from the second authentication module to the first authentication module, encoding the information received with the subscriber-specific cryptographic key in the first authentication module, and transmitting the encoded information back to the second authentication module, and decoding the encoded information in the second authentication module with the subscriber-specific cryptographic key to authenticate the subscriber to the exchange.

Claim 6

Dependent Claim 51 words

The method as recited in claim 3 further comprising the step of establishing a connection between the network terminator and the exchange after the steps of transmitting information, encoding, and decoding, and upon successful authentication of the subscriber, causing the exchange to request at least one of establishment and service information.

Claim 7

Dependent Claim 63 words

The method as recited in claim 3 further comprising the step of establishing a connection between the network terminator and the exchange, and upon establishing the connection the exchange performs the transmitting of information step, the transmitting of information step including transmitting a connection establishment confirmation signal and information to the data terminal, and then the steps of encoding and decoding are performed.

Claim 8

Dependent Claim 34 words

The method as recited in claim 3 further comprising the step establishing a connection between the network terminator and the exchange after authenticating the subscriber and thereafter periodically checking the authenticity of the subscriber.

Claim 9

Dependent Claim 77 words

The method as recited in claim 3 further comprising the steps of: transmitting information from the first authentication module to the second authentication module, encoding the information received in the second authentication module with the help of the subscriber-specific cryptographic key and transmission of the coded information back to the first authentication module, decoding the information in the first authentication module with the help of the subscriber-specific cryptographic key for authentication of the exchange to the subscriber.

Claim 10

Dependent Claim 25 words

The method as recited in claim 3 wherein the information used to authenticate the subscriber is transmitted over a D channel of an ISDN network.

Claim 11

Independent Claim 110 words

A device for authentication of subscribers to at least one exchange of a digital communication network with at least one subscriber-side network terminator for connecting at least one data terminal, the device comprising: at least one first authentication module for receiving a first identification carrier, the first authentication module arranged at each subscriber; and at least one second authentication module for receiving a second identification carrier being arranged one of at and immediately upstream from the exchange, with the first and second authentication modules capable of at least one of encoding and decoding with a subscriber-specific key and of exchanging information for at least one of unilateral and bilateral authentication.

Claim 12

Independent Claim 110 words

A device for authentication of subscribers to at least one exchange of a digital communication network with at least one subscriber-side network terminator for connecting at least one data terminal, the device comprising: at least one first authentication module for receiving a first identification carrier, the first authentication module arranged at each subscriber; and at least one second authentication module for receiving a second identification carrier being arranged one of at and immediately upstream from the exchange, with the first and second authentication modules capable of at least one of encoding and decoding with a subscriber-specific key and of exchanging information for at least one of unilateral and bilateral authentication.

Claim 13

Dependent Claim 30 words

The device as recited in claim 9 further comprising an additional device arranged between the network terminator and the exchange, the second authentication module being arranged in said additional device.

Claim 14

Dependent Claim 44 words

The device as recited in claim 9 further comprising the at least one data terminal, the at least one data terminal being connected to the network terminator and wherein the first authentication module is arranged in each of the at least one data terminal.

Claim 15

Dependent Claim 45 words

The device as recited in claim 9 further comprising the at least one data terminal and a security device, the security device containing at least the first authentication module and being located between the network terminator and each of the at least one data terminal.

Claim 16

Dependent Claim 18 words

The device as recited in claim 9 wherein the first authentication module is arranged in the network terminator.

Claim 17

Dependent Claim 27 words

The device as recited in claim 9 wherein the information to be exchanged contains the address of a subscriber connection, a command sequence, and a random number.

Claim 18

Dependent Claim 35 words

The device as recited in claim 9 wherein the digital communication network is an ISDN network and the information used for authentication to be exchanged is exchanged via a D channel of the ISDN network.

Claim 19

Dependent Claim 24 words

The device as recited in claim 9 wherein the first identification carrier and second identification carrier are one of smart cards and software modules.

Claim 20

Dependent Claim 49 words

The device as recited in claim 9 wherein the first authentication module is capable of encoding at least one of confidential connection establishment and confidential service information, and the second authentication module is capable of decoding at least one of the encoded connection establishment and the encoded service information.

Claim 21

Dependent Claim 50 words

The device as recited in claim 9 further comprising a security module for receiving an identification carrier and of at least one of encoding and decoding at least one of connection establishment and service information, the security module capable of being installed separately for each first and second authentication module.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2004-11-12	2005-05-14	2005-11-13	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2008-11-12	2009-05-14	2009-11-13	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2012-11-12	2013-05-14	2013-11-13	$7700.00	Window Closed / Lapsed

Process and device for authenticating subscribers to digital exchanges

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag