WO2000011835A9 - Secure processing for authentication of a wireless communications device - Google Patents

Secure processing for authentication of a wireless communications device

Info

Publication number
WO2000011835A9
WO2000011835A9 PCT/US1999/019199 US9919199W WO0011835A9 WO 2000011835 A9 WO2000011835 A9 WO 2000011835A9 US 9919199 W US9919199 W US 9919199W WO 0011835 A9 WO0011835 A9 WO 0011835A9
Authority
WO
WIPO (PCT)
Prior art keywords
authentication
secure processor
wireless communications
key
processor
Prior art date
Application number
PCT/US1999/019199
Other languages
French (fr)
Other versions
WO2000011835A1 (en
Inventor
Phil J Bostley Iii
Raghavan Srinivasan
Andrew D Eckhardt
Original Assignee
Qualcomm Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qualcomm Inc filed Critical Qualcomm Inc
Priority to EP99948053A priority Critical patent/EP1106000B1/en
Priority to DE69925920T priority patent/DE69925920T2/en
Priority to AU61305/99A priority patent/AU6130599A/en
Priority to JP2000566990A priority patent/JP4772959B2/en
Publication of WO2000011835A1 publication Critical patent/WO2000011835A1/en
Publication of WO2000011835A9 publication Critical patent/WO2000011835A9/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/08—Access point devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0838—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
    • H04L9/0841—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/041—Key generation or derivation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80—Wireless

Definitions

  • the present invention relates to the field of wireless co ⁇ imunications. More particularly, the present invention relates to a novel and improved system that encrypts the information used to authenticate a wireless communications device.
  • a major security threat to wireless communications systems is the cloning of wireless communications devices.
  • Each wireless communications device has an authentication key (A-Key).
  • A-Key authentication key
  • the wireless communications system uses the A-key along with other information to authenticate the wireless communications device, and the wireless communications device may be denied service without proper authentication.
  • the A-key is the one piece of information that should remain absolutely secret within the wireless communications device and the wireless communications system. If the A-Key is obtained, then the legitimate wireless communications device can be readily cloned given the available access to the other information. The wireless communications system is unable to differentiate between the legitimate wireless communications device and the clone.
  • the wireless communications system has an authentication system to authenticate wireless communications devices.
  • the authentication system and the wireless communications device each use the A-key and a shared random number to generate identical Shared Secret Data (SSD).
  • the authentication system and the wireless communications device periodically update the SSD.
  • the authentication system and the wireless communications device share another random number.
  • the authentication system and the wireless communications device each use the SSD and this other random number to generate an authentication result.
  • the wireless communications device is authenticated if it transfers a mat iing authentication result to the autiientication system.
  • it is not computationally feasible to derive the A-Key from the authentication result considering the vast amount of computing power and time required.
  • the authentication system maintains large databases of A-Keys for millions of wireless communications devices. The mass storage of A-Keys poses a great risk. If a person obtains access to the authentication system, then that person can potentially clone large numbers of wireless communications devices and seriously undermine the security and integrity of the wireless communications system.
  • the wireless communications system would be greatly improved by a technology that improves the security of A-Keys in a wireless communications svstem.
  • the present invention is a novel and improved system that provides security for the A-Keys in a wireless communications system.
  • the system effectively prevents any human access to the A-Keys and eliminates cloning.
  • the system improves the security and integrity of the wireless communications system.
  • the invention allows the authentication system to store only encrypted A-Keys.
  • the decryption key for the encrypted A-Keys is stored in a secure processor.
  • the authentication system uses the secure processor for A-key operations.
  • the secure processor can be physically isolated to prevent human access to the A-Keys and the A-key decryption key.
  • the secure processor can be encased in concrete or placed in a vault.
  • the decrypted authentication keys only exist momentarily in the secure processor, and the authentication system only stores encrypted A-keys.
  • the invention eliminates the storage of large numbers of decrypted A-Keys.
  • the secure processor exchanges random numbers with the wireless communications device to generate the A-Key.
  • the secure processor then encrypts the A-Key and transfers the encrypted A-Key to the authentication system.
  • the authentication system transfers the encrypted A-Key and other information to the secure processor.
  • the secure processor decrypts the A-Key and calculates the SSD.
  • the secure processor transfers the SSD to the authentication system for use in authenticating the wireless communications device.
  • the A-Key is generated in the secure processor and it is not transferred from the secure processor unless it is encrypted.
  • the decrypted A-Key is only present in the secure processor momentarily during its actual use and is not permanently stored.
  • the invention eliminates the need for a database of non-encrypted A-Keys.
  • the invention also restricts human access to the A-key decryption key.
  • FIG. 1 is a block diagram of a wireless communications system in an embodiment of the invention
  • FIG. 2 is a block diagram of an authentication system and a secure processor in an embodiment of the invention
  • FIG. 3 is process diagram illustrating A-Key generation in an embodiment of the invention
  • FIG. 4 is process diagram illustrating SSD generation or update in an embodiment of the invention
  • FIG. 5 is process diagram illustrating wireless communications device authentication in an embodiment of the invention.
  • FIG. 6 is process diagram illustrating A-Key generation using Diffie- Hellman in an embodiment of the invention.
  • FIG. 7 is process diagram illustrating SSD generation or update using CAVE in an embodiment of the invention
  • FIG. 8 is process diagram illustrating wireless communications device authentication using CAVE in an embodiment of the invention
  • FIG. 9 is process diagram illustrating wireless communications device authentication in an alternative embodiment of the invention.
  • FIG. 10 is a block diagram of an authentication system and redundant secure processors in an embodiment of the invention.
  • FIG. 11 is a block diagram of an authentication system and a secure processor coupled to another secure processor at a wireless communications device manufacturing facility in an embodiment of the invention.
  • Authentication in a wireless communications system is discussed in the IS-95 standard approved by the Telecommunications Industry Association and in the 41(d) standard of the American National Standards Institute (ANSI). Authentication relies on a secret Authentication Key (A-Key) that is stored in both the wireless device and the communications system.
  • A-Key secret Authentication Key
  • the wireless device and the communications system use the A-Key and other data to generate Shared Secret Data (SSD).
  • SSD Shared Secret Data
  • the wireless device and the communications system use the SSD and other data to generate an authentication result.
  • the authentication result generated by wireless device should be the same as the authentication result generated by the communications system.
  • the two authentication results are compared, and the wireless device is authenticated if they match.
  • the A-Key is not transmitted and typically remains the same.
  • the SSD is periodically updated because it may be transmitted over the signaling network, such as Signaling System # 7.
  • the SSD is not typically transmitted over the air between the wireless communications device and the wireless communications system.
  • the SSD is used with other information to generate the authentication result that is transmitted over the air between the wireless communications device and the wireless communications system.
  • FIG. 1 depicts a wireless communications device 100 that communicates with a wireless communications system 101.
  • the wireless communications system 101 comprises a base station 102, an authentication system 103, and a secure processor 104.
  • a wireless communications system includes multiple base stations and base station controllers that support numerous wireless communications devices.
  • FIG. 1 has been simplified for clarity and omits some conventional elements known to those skilled in the art.
  • the wireless communications device 100 exchanges wireless communications signals with the base station 102 over the air interface.
  • the wireless communications device 100 could be any wireless communications device that requires authentication, such as a mobile phone, wireless terminal, or computer.
  • the wireless communications device 100 stores authentication information and authentication instructions for execution by an internal processor. T e instructions direct the wireless communications device 100 to generate and store an A-Key, SSD, and authentication results.
  • the instructions also direct the wireless communications device 100 to exchange information with the authentication system 103 to facilitate authentication.
  • the base station 102 exchanges wireless communications signals with the wireless communications device 100 over the air interface.
  • the base station 102 also exchanges communications signals with other communications network elements, such as controllers, switches, and databases.
  • the base station 102 is operationally coupled to the authentication system 103, typically through a base station controller.
  • the wireless communications device 100 and the base station 102 are Code Division Multiple Access (CDMA) devices.
  • CDMA Code Division Multiple Access
  • the IS-95 standard approved by the Telecommunication Industry Association, provides a specification for CDMA in a wireless communication system.
  • the authentication system 103 provides an authentication service to the wireless communications device 100 and the base station 102.
  • the authentication system 103 forms a sub-system of a Home Location Register (HLR).
  • the authentication system 103 is a computer system that stores authentication information and operating instructions for execution by an internal processor.
  • the operating instructions direct the authentication system 103 to store encrypted A-Keys and SSD from the secure processor 104 and to generate authentication results.
  • the operating instructions also direct the authentication system 103 to exchange information with the wireless communications device 100 and the secure processor 104 to authenticate the wireless communications device 100.
  • the secure processor 104 provides an encryption capability to the authentication system 103. Physical and electronic access to the secure processor 104 is typically heavily restricted. For example, the secure processor 104 may be placed in a vault or encased in concrete.
  • the secure processor 104 stores and executes operating instructions. The operating instructions direct the secure processor 104 to generate and encrypt A-Keys for storage in the authentication system 103. The operating instructions also direct the secure processor 104 to generate SSD for storage and use in the authentication system 103.
  • FIG. 2 depicts the authentication system 103 and the secure processor 104 in greater detail.
  • the authentication system 103 comprises a processor 210, an interface 211, and an authentication information database 212.
  • the secure processor 104 comprises a processor 220, an interface 221, and a memory 222.
  • the interfaces 211 and 221 are connected by a data link and comprise any system that supports data transfer between the authentication system 103 and the secure processor 104.
  • the interfaces 211 and 221 could support conventional communications, such as serial communications or Ethernet.
  • the authentication information database 212 stores the SSD and encrypted A-Keys.
  • the authentication information database 212 may also store operating instructions for the processor 210.
  • the memory 222 is a storage medium that stores operating instructions and decryption keys for the processor 220.
  • the processors 210 and 220 could be conventional microprocessors, or groups of microprocessors, that execute operating instructions.
  • the processor 210 executes instructions that cause the authentication system to interact with the wireless communications device 100 and the secure processor 104 to authenticate the wireless communications device 100.
  • the processor 220 executes instructions that cause the secure processor 104 to interact with the authentication system 103 to generate an encrypted A-Key and to subsequently decrypt the encrypted A-Key and generate the SSD.
  • the operating instructions stored in the secure processor 104, the authentication system 103, and the wireless communications device 100 could be software stored on conventional storage medium.
  • the storage medium could be a conventional memory, disk, or integrated circuit.
  • the processors in the secure processor 104, the authentication system 103, and the wireless communications device 100 execute the software. When executed, the software directs the processors to operate in accord with the invention. This operation will become readily apparent to those skilled in the art in the following discussion of FIGS. 3-8. System Operation - FIGS. 3-8
  • FIGS. 3-8 Those skilled in the art will recognize that processing and messages depicted on FIGS. 3-8 have been simplified, and that some conventional aspects of authentication have been omitted for clarity. In addition, the base station and the base station controller that are typically located between the wireless device and the authentication system have been omitted for clarity. Those skilled in the art will appreciate the operation of these devices within the context of FIGS.3-8.
  • FIG. 3 depicts A-Key generation.
  • the A-key is typically generated when service to the wireless communications device 100 is initially provisioned, such as during an Over-The-Air Service Provisioning (OTASP) operation.
  • the A- Key generation process begins when the authentication system 103 generates an A-Key order and transmits the A-Key order to the device 100 and the secure processor 104.
  • the A-Key order contains parameters for A-Key generation.
  • the device 100 and the secure processor 104 generate an A-Key.
  • A- Key generation between remote devices requires an exchange of random numbers to jointly calculate the A-Key.
  • the device 100 stores the A-Key.
  • the secure processor 104 encrypts the A-Key and transfers the encrypted A-Key to the authentication system 103.
  • the authentication system 103 stores the encrypted A-Key.
  • FIG. 4 depicts SSD generation or SSD update.
  • the authentication system 103 generates a random number RANDSSD.
  • the authentication system 103 sends an SSD update to the device 100 and the secure processor 104.
  • the SSD update contains parameters for SSD generation, such as the RANDSSD.
  • the SSD update to the secure processor 104 includes the encrypted A-Key.
  • the secure processor 104 decrypts the A-Key.
  • the secure processor 104 uses the A- Key to generate the SSD and sends the SSD to the authentication system 103.
  • the authentication system 103 stores the SSD.
  • the device 100 uses the A-Key to generate and store the SSD. After the A-Keys are stored, the device 100 and the authentication system 103 may execute a base station challenge to confirm the validity of the SSD generation.
  • FIG. 5 depicts one example of authentication in the form of a unique challenge, but the invention is not restricted to this particular form of authentication.
  • the authentication system 103 sends an authentication challenge to the device 100.
  • the mobile switching center may broadcast the authentication challenge to the device 100 and provide the authentication challenge to the authentication system 103.
  • the authentication challenge contains parameters for generation of an authentication result (AUTH).
  • the device 100 and the authentication system 103 each use their internally stored SSD and a random number from the challenge message to generate AUTH.
  • the device 100 transfers the AUTH to the authentication system 103 where the two AUTHs are compared.
  • the authentication system 103 authenticates the device 100 if the AUTHs match.
  • FIGS. 6-8 depict a specific embodiment of the operation depicted in FIGS. 3-5, but the invention is not restricted to this specific embodiment.
  • FIG. 6 depicts A-Key generation using the Diffie-Hellman algorithm and Blowfish encryption.
  • Diffie-Hellman is a known algorithm for two remote systems to agree on a secret key.
  • Blowfish is a known encryption technique.
  • Diffie- Hellman discussed in United States Patent 4,200,770 entitled “Cryptographic Apparatus and Method.”
  • Diffie-Hellman and Blowfish are also discussed in the book Applied Cryptography by Bruce Schneier, 2nd edition, published by John Wiley & Sons of New York, ISBN 0-471-11709-9.
  • the secure processor 104 generates and stores a Blowfish encryption key, typically upon installation.
  • the authentication system 103 generates two integers N and G and transfers N and G to the device 100 and the secure processor 104.
  • the device 100 generates a large random integer A, and the secure processor 104 generates a large random integer B.
  • the device 100 and the secure processor 104 exchange X and Y.
  • the two A-Keys should be the same.
  • the device 100 stores the A-Key, typically using flash Read Only Memory (ROM).
  • the secure processor 104 applies Blowfish to encrypt the A-Key and transfers the encrypted A-Key to the authentication system 103.
  • the authentication system 103 stores the encrypted A-Key. It should be noted that the A-Key is generated in the secure processor
  • the authentication system 103 only stores the encrypted A-Key. Therefore, the communications system does not have a large list of non-encrypted A-Keys.
  • the decryption key for the encrypted A-Key is generated and stored only within the secure processor.
  • FIG. 7 depicts SSD generation or update using the Cellular Authentication Voice Encryption (CAVE) algorithm.
  • the CAVE algorithm is a known one-way hash function. Two remote systems can each input the same secret ID into the CAVE algorithm and publicly share their respective output. The outputs are the same if the secret IDs are the same, yet the secret ID is impossible to derive from the output from a practical standpoint.
  • the CAVE algorithm is discussed in Appendix A of the IS-54 standard approved by the Telecommunications Industry Association.
  • the authentication system 103 sends an SSD update to the device 100 and the secure processor 104.
  • the SSD update to the device 100 contains the random number RANDSSD that was generated by the authentication system 103.
  • the SSD update to the secure processor 104 includes the RANDSSD, encrypted A-Key, and other Identification Information (ID INFO).
  • ID INFO typically includes data such as an Electronic Serial Number (ESN) and a Mobile Identification Number (MLN) or an International Mobile Station Identity (IMSI).
  • ESN Electronic Serial Number
  • MSN Mobile Identification Number
  • IMSI International Mobile Station Identity
  • the secure processor 104 applies Blowfish to decrypt the A-Key using its internally stored Blowfish key.
  • the secure processor 104 inputs RANDSSD, A- Key and ID INFO into CAVE to generate the SSD.
  • the secure processor 104 sends the SSD to the authentication system 103 where it is stored.
  • the device 100 also inputs RANDSSD, A-Key, and ID INFO into CAVE to generate and store the SSD.
  • the device 100 and the authentication system 103 then execute a base station challenge to confirm proper SSD generation.
  • the device 100 generates a random number (RANDBS) and transfers RANDBS to the authentication system 103.
  • RANDBS random number
  • Both the device 100 and the authentication system 103 input RANDBS, SSD, and ID INFO into CAVE to generate an SSD authentication result (AUTH).
  • the authentication system 103 transfers AUTH to the device 100 where the two AUTHs are compared.
  • the device 100 confirms the successful SSD generation with the authentication system 103 if the two AUTHs match.
  • FIG. 8 depicts one example of authentication using CAVE.
  • the authentication system 103 sends an authentication challenge to the device 100.
  • the authentication challenge includes a random number (RANDU) for use in authentication.
  • the device 100 and the authentication system 103 each input RANDU, SSD, and ID INFO into CAVE to generate an authentication result (AUTH).
  • the device 100 transfers AUTH to the authentication system 103 where the two AUTHs are compared.
  • the authentication system 103 authenticates the device 100 if the two AUTHs match.
  • FIG. 9 depicts an alternative system operation where the secure processor generates the authentication result and other data.
  • the authentication system 103 transfers an authentication challenge with a random number to the device 100 and the secure processor 104.
  • the authentication challenge to the secure processor 104 also includes the SSD.
  • the secure processor 104 generates an authentication result (AUTH) from the SSD and the random number. This could be accomplished using the CAVE algorithm as described above.
  • the device 100 also generates AUTH from the SSD and the random number.
  • the device 100 transfers its AUTH to the secure processor 104.
  • the secure processor 104 compares the AUTHs and instructs the authentication system 103 if the two AUTHs match.
  • the authentication system 103 transfers an authentication challenge with a random number to the device 100 and the secure processor 104.
  • the authentication challenge to the secure processor 104 also includes the SSD.
  • the secure processor 104 generates an authentication result (AUTH) from the SSD and the random number. This could be accomplished using the CAVE algorithm as described above.
  • the secure processor 104 authenticates the device 100 based on the match indicated by the secure processor 104.
  • the device 100 and the secure processor 104 each transfer their respective AUTH to the authentication system 103 for comparison.
  • the secure processor 104 also generates either the Signaling Message
  • SME Secure Encryption
  • CMEA Cellular Message Encryption Algorithm
  • Either key is used by the wireless communications system to encrypt signaling messages.
  • the keys are typically generated by inputting results from the AUTH generation, the SSD, and the random number into CAVE.
  • the secure processor 104 transmits the key to the authentication system 103. After the secure processor 104 generates the SME key or the CMEA key, it generates either a Voice Privacy Mask (VPM) or a CDMA Private Long Code Mask (PLCM).
  • VPM Voice Privacy Mask
  • PLCM CDMA Private Long Code Mask
  • the masks are used to encode wireless voice conversations. The masks are typically generated by executing additional iterations of the CAVE algorithm used to generate the above keys.
  • the secure processor 104 transfers the mask to the authentication system 103.
  • the secure processor 104 can generate AUTH, SME key, CMEA key, VPM, or CDMA PLCM values. This allows the CAVE algorithm to be located in the secure processor 104 and not in the authentication system 103. The removal of the CAVE algorithm from the authentication system 103 simplifies system design, distribution, and exportation.
  • FIG. 10 depicts authentication system 103 and secure processor 104.
  • An additional secure processor 105 has been added and is connected to the authentication system 103 and the secure processor 104.
  • the addition of the secure processor 105 provides better reliability and faster performance to the authentication system 103. If the secure processor 104 has not responded to an earlier authentication task, and the authentication system 103 must authenticate another user, then the authentication system 103 can send the new authentication task to the secure processor 105.
  • the secure processors 104 and 105 must each store the same encryption key, such as the same Blowfish key.
  • the secure processors 104 and 105 could use either Diffie-Hellman or conventional public /private encryption techniques to agree on the same encryption key. If secure processor 104 fails and is replaced, the authentication system 103 can command the secure processor 105 to send its encryption key to the new secure processor using conventional encryption techniques.
  • FIG. 11 depicts the authentication system 103 and the secure processor 104.
  • An additional secure processor 106 is placed at the facility where the device 100 is manufactured.
  • the secure processor 104 and the secure processor 106 agree on an encryption key in a secure manner. This agreement could be accomplished using conventional techniques.
  • the secure processor 106 exchanges information with the wireless communications device 100 to generate an A-Key.
  • the secure processor 106 encrypts the A-Key using the encryption key.
  • the secure processor 106 transfers the encrypted A-Key onto a storage medium, such as a disk.
  • the encrypted A-Keys are then loaded from the disk into the authentication system 103.
  • secure processor 106 may transfer the encrypted A-Keys to authentication system 103 over a data link.
  • the authentication system 103 receives the encrypted A-key and transfers the encrypted A-key to the secure processor 104.
  • the secure processor 104 receives the encryption key from the secure processor 106 and receives the encrypted A-Key from the authentication system 103.
  • the secure processor 104 decrypts the encrypted A-Key using the encryption key and generates the SSD using the decrypted A-Key.
  • the secure processor 104 transfers SSD to the authentication system 103.
  • the authentication system 103 receives and stores the SSD from the secure processor 104.

Abstract

The invention provides technology that improves the security of the A-Keys in a wireless communication system (101). The technology effectively prevents any human access to the A-Keys and eliminates cloning. The invention improves the security and integrity of the wireless communication system (101). A secure processor (104) exchanges random numbers with a wireless communication device (100) to generate the A-Key. The secure processor (104) then encrypts the A-Key and transfers the encrypted A-Key to an authentication system (103). When the authentication system (103) generates or updates the SSD, the authentication system transfers the encrypted A-Key and other information to the secure processor (104). The secure processor (104) decrypts the A-Key and calculates the SSD. The secure processor (104) transfers the SSD to the authentication system (103) for use in authenticating system (103) the wireless communication device (100).

Description

SECURE PROCESSING FOR AUTHENTICATION OF A WIRELESS COMMUNICATIONS DEVICE
BACKGROUND OF THE INVENTION
I. Field of the Invention
The present invention relates to the field of wireless coπimunications. More particularly, the present invention relates to a novel and improved system that encrypts the information used to authenticate a wireless communications device.
II. Description of the Related Art
The security of a wireless communications system is an important factor in determining the quality of the system. A major security threat to wireless communications systems is the cloning of wireless communications devices. Each wireless communications device has an authentication key (A-Key). The wireless communications system uses the A-key along with other information to authenticate the wireless communications device, and the wireless communications device may be denied service without proper authentication.
This other information used with the A-key to authenticate the wireless communications device is typically broadcast over the air and is relatively easy to obtain. The A-key is the one piece of information that should remain absolutely secret within the wireless communications device and the wireless communications system. If the A-Key is obtained, then the legitimate wireless communications device can be readily cloned given the available access to the other information. The wireless communications system is unable to differentiate between the legitimate wireless communications device and the clone.
Unfortunately, the user of the legitimate wireless communications device is improperly billed for calls made with the clone. The wireless communications system typically forgives the fraudulent bills, but the reputation of the wireless communications system is damaged. The wireless communications system must also increase capacity to handle fraudulent calls without obtaining any associated revenue. The cost of the increased capacity is typically passed on to legitimate wireless conτmunications device users. The wireless communications system has an authentication system to authenticate wireless communications devices. The authentication system and the wireless communications device each use the A-key and a shared random number to generate identical Shared Secret Data (SSD). The authentication system and the wireless communications device periodically update the SSD. To authenticate a wireless communications device, the authentication system and the wireless communications device share another random number. The authentication system and the wireless communications device each use the SSD and this other random number to generate an authentication result. The wireless communications device is authenticated if it transfers a mat iing authentication result to the autiientication system. Although technically possible, it is not computationally feasible to derive the A-Key from the authentication result considering the vast amount of computing power and time required. The authentication system maintains large databases of A-Keys for millions of wireless communications devices. The mass storage of A-Keys poses a great risk. If a person obtains access to the authentication system, then that person can potentially clone large numbers of wireless communications devices and seriously undermine the security and integrity of the wireless communications system. The wireless communications system would be greatly improved by a technology that improves the security of A-Keys in a wireless communications svstem.
SUMMARY OF THE INVENTION
The present invention is a novel and improved system that provides security for the A-Keys in a wireless communications system. The system effectively prevents any human access to the A-Keys and eliminates cloning. The system improves the security and integrity of the wireless communications system.
The invention allows the authentication system to store only encrypted A-Keys. The decryption key for the encrypted A-Keys is stored in a secure processor. The authentication system uses the secure processor for A-key operations. The secure processor can be physically isolated to prevent human access to the A-Keys and the A-key decryption key. For example, the secure processor can be encased in concrete or placed in a vault. Thus, the decrypted authentication keys only exist momentarily in the secure processor, and the authentication system only stores encrypted A-keys. The invention eliminates the storage of large numbers of decrypted A-Keys.
The secure processor exchanges random numbers with the wireless communications device to generate the A-Key. The secure processor then encrypts the A-Key and transfers the encrypted A-Key to the authentication system. When the authentication system generates or updates the SSD, the authentication system transfers the encrypted A-Key and other information to the secure processor. The secure processor decrypts the A-Key and calculates the SSD. The secure processor transfers the SSD to the authentication system for use in authenticating the wireless communications device.
The A-Key is generated in the secure processor and it is not transferred from the secure processor unless it is encrypted. The decrypted A-Key is only present in the secure processor momentarily during its actual use and is not permanently stored. Thus, the invention eliminates the need for a database of non-encrypted A-Keys. The invention also restricts human access to the A-key decryption key.
BRIEF DESCRIPTION OF THE DRAWINGS
The features, objects, and advantages of the present invention will become more apparent from the detailed description set forth below when taken ir. conjunction with the drawings in which like reference characters identity correspondingly throughout and wherein:
FIG. 1 is a block diagram of a wireless communications system in an embodiment of the invention;
FIG. 2 is a block diagram of an authentication system and a secure processor in an embodiment of the invention;
FIG. 3 is process diagram illustrating A-Key generation in an embodiment of the invention; FIG. 4 is process diagram illustrating SSD generation or update in an embodiment of the invention;
FIG. 5 is process diagram illustrating wireless communications device authentication in an embodiment of the invention;
FIG. 6 is process diagram illustrating A-Key generation using Diffie- Hellman in an embodiment of the invention;
FIG. 7 is process diagram illustrating SSD generation or update using CAVE in an embodiment of the invention; FIG. 8 is process diagram illustrating wireless communications device authentication using CAVE in an embodiment of the invention;
FIG. 9 is process diagram illustrating wireless communications device authentication in an alternative embodiment of the invention;
FIG. 10 is a block diagram of an authentication system and redundant secure processors in an embodiment of the invention; and
FIG. 11 is a block diagram of an authentication system and a secure processor coupled to another secure processor at a wireless communications device manufacturing facility in an embodiment of the invention.
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
Authentication in a wireless communications system is discussed in the IS-95 standard approved by the Telecommunications Industry Association and in the 41(d) standard of the American National Standards Institute (ANSI). Authentication relies on a secret Authentication Key (A-Key) that is stored in both the wireless device and the communications system. The wireless device and the communications system use the A-Key and other data to generate Shared Secret Data (SSD). The wireless device and the communications system use the SSD and other data to generate an authentication result. The authentication result generated by wireless device should be the same as the authentication result generated by the communications system. The two authentication results are compared, and the wireless device is authenticated if they match.
The A-Key is not transmitted and typically remains the same. The SSD is periodically updated because it may be transmitted over the signaling network, such as Signaling System # 7. The SSD is not typically transmitted over the air between the wireless communications device and the wireless communications system. The SSD is used with other information to generate the authentication result that is transmitted over the air between the wireless communications device and the wireless communications system. The terms and operations described in the above two paragraphs are known in the art.
System Configuration — FIGS. 1-2
FIG. 1 depicts a wireless communications device 100 that communicates with a wireless communications system 101. The wireless communications system 101 comprises a base station 102, an authentication system 103, and a secure processor 104. Typically, a wireless communications system includes multiple base stations and base station controllers that support numerous wireless communications devices. FIG. 1 has been simplified for clarity and omits some conventional elements known to those skilled in the art. The wireless communications device 100 exchanges wireless communications signals with the base station 102 over the air interface. The wireless communications device 100 could be any wireless communications device that requires authentication, such as a mobile phone, wireless terminal, or computer. The wireless communications device 100 stores authentication information and authentication instructions for execution by an internal processor. T e instructions direct the wireless communications device 100 to generate and store an A-Key, SSD, and authentication results. The instructions also direct the wireless communications device 100 to exchange information with the authentication system 103 to facilitate authentication. The base station 102 exchanges wireless communications signals with the wireless communications device 100 over the air interface. The base station 102 also exchanges communications signals with other communications network elements, such as controllers, switches, and databases. The base station 102 is operationally coupled to the authentication system 103, typically through a base station controller. In some embodiments, the wireless communications device 100 and the base station 102 are Code Division Multiple Access (CDMA) devices. The IS-95 standard, approved by the Telecommunication Industry Association, provides a specification for CDMA in a wireless communication system. The authentication system 103 provides an authentication service to the wireless communications device 100 and the base station 102. In some embodiments, the authentication system 103 forms a sub-system of a Home Location Register (HLR). The authentication system 103 is a computer system that stores authentication information and operating instructions for execution by an internal processor. The operating instructions direct the authentication system 103 to store encrypted A-Keys and SSD from the secure processor 104 and to generate authentication results. The operating instructions also direct the authentication system 103 to exchange information with the wireless communications device 100 and the secure processor 104 to authenticate the wireless communications device 100.
The secure processor 104 provides an encryption capability to the authentication system 103. Physical and electronic access to the secure processor 104 is typically heavily restricted. For example, the secure processor 104 may be placed in a vault or encased in concrete. The secure processor 104 stores and executes operating instructions. The operating instructions direct the secure processor 104 to generate and encrypt A-Keys for storage in the authentication system 103. The operating instructions also direct the secure processor 104 to generate SSD for storage and use in the authentication system 103.
FIG. 2 depicts the authentication system 103 and the secure processor 104 in greater detail. The authentication system 103 comprises a processor 210, an interface 211, and an authentication information database 212. The secure processor 104 comprises a processor 220, an interface 221, and a memory 222. The interfaces 211 and 221 are connected by a data link and comprise any system that supports data transfer between the authentication system 103 and the secure processor 104. The interfaces 211 and 221 could support conventional communications, such as serial communications or Ethernet. The authentication information database 212 stores the SSD and encrypted A-Keys. The authentication information database 212 may also store operating instructions for the processor 210. The memory 222 is a storage medium that stores operating instructions and decryption keys for the processor 220. The processors 210 and 220 could be conventional microprocessors, or groups of microprocessors, that execute operating instructions. The processor 210 executes instructions that cause the authentication system to interact with the wireless communications device 100 and the secure processor 104 to authenticate the wireless communications device 100. The processor 220 executes instructions that cause the secure processor 104 to interact with the authentication system 103 to generate an encrypted A-Key and to subsequently decrypt the encrypted A-Key and generate the SSD.
The operating instructions stored in the secure processor 104, the authentication system 103, and the wireless communications device 100 could be software stored on conventional storage medium. The storage medium could be a conventional memory, disk, or integrated circuit. The processors in the secure processor 104, the authentication system 103, and the wireless communications device 100 execute the software. When executed, the software directs the processors to operate in accord with the invention. This operation will become readily apparent to those skilled in the art in the following discussion of FIGS. 3-8. System Operation - FIGS. 3-8
Those skilled in the art will recognize that processing and messages depicted on FIGS. 3-8 have been simplified, and that some conventional aspects of authentication have been omitted for clarity. In addition, the base station and the base station controller that are typically located between the wireless device and the authentication system have been omitted for clarity. Those skilled in the art will appreciate the operation of these devices within the context of FIGS.3-8.
FIG. 3 depicts A-Key generation. The A-key is typically generated when service to the wireless communications device 100 is initially provisioned, such as during an Over-The-Air Service Provisioning (OTASP) operation. The A- Key generation process begins when the authentication system 103 generates an A-Key order and transmits the A-Key order to the device 100 and the secure processor 104. The A-Key order contains parameters for A-Key generation. The device 100 and the secure processor 104 generate an A-Key. Typically, A- Key generation between remote devices requires an exchange of random numbers to jointly calculate the A-Key. The device 100 stores the A-Key. The secure processor 104 encrypts the A-Key and transfers the encrypted A-Key to the authentication system 103. The authentication system 103 stores the encrypted A-Key.
FIG. 4 depicts SSD generation or SSD update. The authentication system 103 generates a random number RANDSSD. The authentication system 103 sends an SSD update to the device 100 and the secure processor 104. The SSD update contains parameters for SSD generation, such as the RANDSSD. The SSD update to the secure processor 104 includes the encrypted A-Key. The secure processor 104 decrypts the A-Key. The secure processor 104 uses the A- Key to generate the SSD and sends the SSD to the authentication system 103. The authentication system 103 stores the SSD. The device 100 uses the A-Key to generate and store the SSD. After the A-Keys are stored, the device 100 and the authentication system 103 may execute a base station challenge to confirm the validity of the SSD generation.
FIG. 5 depicts one example of authentication in the form of a unique challenge, but the invention is not restricted to this particular form of authentication. The authentication system 103 sends an authentication challenge to the device 100. In another form of authentication, the mobile switching center may broadcast the authentication challenge to the device 100 and provide the authentication challenge to the authentication system 103. In either case, the authentication challenge contains parameters for generation of an authentication result (AUTH). The device 100 and the authentication system 103 each use their internally stored SSD and a random number from the challenge message to generate AUTH. The device 100 transfers the AUTH to the authentication system 103 where the two AUTHs are compared. The authentication system 103 authenticates the device 100 if the AUTHs match.
FIGS. 6-8 depict a specific embodiment of the operation depicted in FIGS. 3-5, but the invention is not restricted to this specific embodiment. FIG. 6 depicts A-Key generation using the Diffie-Hellman algorithm and Blowfish encryption. Diffie-Hellman is a known algorithm for two remote systems to agree on a secret key. Blowfish is a known encryption technique. Diffie- Hellman discussed in United States Patent 4,200,770 entitled "Cryptographic Apparatus and Method." Diffie-Hellman and Blowfish are also discussed in the book Applied Cryptography by Bruce Schneier, 2nd edition, published by John Wiley & Sons of New York, ISBN 0-471-11709-9. The secure processor 104 generates and stores a Blowfish encryption key, typically upon installation. The authentication system 103 generates two integers N and G and transfers N and G to the device 100 and the secure processor 104. The device 100 generates a large random integer A, and the secure processor 104 generates a large random integer B. The device 100 calculates X = GA mod N, and the secure processor 104 calculates Y = GB mod N. The "mod" operation is a known modulo calculation, such as that used with conventional time keeping at modulo 12 where 10:00 + 13 hours = 23 mod 12 = 11:00. The device 100 and the secure processor 104 exchange X and Y. The device 100 then calculates A-Key = YΛ mod N, and the secure processor 104 calculates A-Key = XB mod N. The two A-Keys should be the same. The device 100 stores the A-Key, typically using flash Read Only Memory (ROM). The secure processor 104 applies Blowfish to encrypt the A-Key and transfers the encrypted A-Key to the authentication system 103. The authentication system 103 stores the encrypted A-Key. It should be noted that the A-Key is generated in the secure processor
104, but is not stored in the secure processor 104. In addition, the authentication system 103 only stores the encrypted A-Key. Therefore, the communications system does not have a large list of non-encrypted A-Keys. The decryption key for the encrypted A-Key is generated and stored only within the secure processor.
FIG. 7 depicts SSD generation or update using the Cellular Authentication Voice Encryption (CAVE) algorithm. The CAVE algorithm is a known one-way hash function. Two remote systems can each input the same secret ID into the CAVE algorithm and publicly share their respective output. The outputs are the same if the secret IDs are the same, yet the secret ID is impossible to derive from the output from a practical standpoint. The CAVE algorithm is discussed in Appendix A of the IS-54 standard approved by the Telecommunications Industry Association.
The authentication system 103 sends an SSD update to the device 100 and the secure processor 104. The SSD update to the device 100 contains the random number RANDSSD that was generated by the authentication system 103. The SSD update to the secure processor 104 includes the RANDSSD, encrypted A-Key, and other Identification Information (ID INFO). The ID INFO typically includes data such as an Electronic Serial Number (ESN) and a Mobile Identification Number (MLN) or an International Mobile Station Identity (IMSI). Those skilled in the art are familiar with the types of ID INFO and their respective use. Although the term "mobile" is used in the MIN and the IMSI, these values and the invention can be used in the context of fixed wireless systems.
The secure processor 104 applies Blowfish to decrypt the A-Key using its internally stored Blowfish key. The secure processor 104 inputs RANDSSD, A- Key and ID INFO into CAVE to generate the SSD. The secure processor 104 sends the SSD to the authentication system 103 where it is stored. The device 100 also inputs RANDSSD, A-Key, and ID INFO into CAVE to generate and store the SSD.
The device 100 and the authentication system 103 then execute a base station challenge to confirm proper SSD generation. The device 100 generates a random number (RANDBS) and transfers RANDBS to the authentication system 103. Both the device 100 and the authentication system 103 input RANDBS, SSD, and ID INFO into CAVE to generate an SSD authentication result (AUTH). The authentication system 103 transfers AUTH to the device 100 where the two AUTHs are compared. The device 100 confirms the successful SSD generation with the authentication system 103 if the two AUTHs match.
FIG. 8 depicts one example of authentication using CAVE. The authentication system 103 sends an authentication challenge to the device 100. The authentication challenge includes a random number (RANDU) for use in authentication. The device 100 and the authentication system 103 each input RANDU, SSD, and ID INFO into CAVE to generate an authentication result (AUTH). The device 100 transfers AUTH to the authentication system 103 where the two AUTHs are compared. The authentication system 103 authenticates the device 100 if the two AUTHs match.
Alternative System Operation - FIG. 9 FIG. 9 depicts an alternative system operation where the secure processor generates the authentication result and other data. The authentication system 103 transfers an authentication challenge with a random number to the device 100 and the secure processor 104. The authentication challenge to the secure processor 104 also includes the SSD. The secure processor 104 generates an authentication result (AUTH) from the SSD and the random number. This could be accomplished using the CAVE algorithm as described above. The device 100 also generates AUTH from the SSD and the random number. The device 100 transfers its AUTH to the secure processor 104. The secure processor 104 compares the AUTHs and instructs the authentication system 103 if the two AUTHs match. The authentication system
103 authenticates the device 100 based on the match indicated by the secure processor 104. Alternatively, the device 100 and the secure processor 104 each transfer their respective AUTH to the authentication system 103 for comparison. The secure processor 104 also generates either the Signaling Message
Encryption (SME) key or the Cellular Message Encryption Algorithm (CMEA) key. Either key is used by the wireless communications system to encrypt signaling messages. The keys are typically generated by inputting results from the AUTH generation, the SSD, and the random number into CAVE. The secure processor 104 transmits the key to the authentication system 103. After the secure processor 104 generates the SME key or the CMEA key, it generates either a Voice Privacy Mask (VPM) or a CDMA Private Long Code Mask (PLCM). The masks are used to encode wireless voice conversations. The masks are typically generated by executing additional iterations of the CAVE algorithm used to generate the above keys. The secure processor 104 transfers the mask to the authentication system 103.
In FIG. 9, the secure processor 104 can generate AUTH, SME key, CMEA key, VPM, or CDMA PLCM values. This allows the CAVE algorithm to be located in the secure processor 104 and not in the authentication system 103. The removal of the CAVE algorithm from the authentication system 103 simplifies system design, distribution, and exportation. The secure processor
104 can also be adapted to perform other tasks involving CAVE. Redundant Secure Processors - FIG. 10
FIG. 10 depicts authentication system 103 and secure processor 104. An additional secure processor 105 has been added and is connected to the authentication system 103 and the secure processor 104. The addition of the secure processor 105 provides better reliability and faster performance to the authentication system 103. If the secure processor 104 has not responded to an earlier authentication task, and the authentication system 103 must authenticate another user, then the authentication system 103 can send the new authentication task to the secure processor 105. The secure processors 104 and 105 must each store the same encryption key, such as the same Blowfish key. The secure processors 104 and 105 could use either Diffie-Hellman or conventional public /private encryption techniques to agree on the same encryption key. If secure processor 104 fails and is replaced, the authentication system 103 can command the secure processor 105 to send its encryption key to the new secure processor using conventional encryption techniques.
A-Key Generation at the Manufacturing Facility - FIG. 11
FIG. 11 depicts the authentication system 103 and the secure processor 104. An additional secure processor 106 is placed at the facility where the device 100 is manufactured. The secure processor 104 and the secure processor 106 agree on an encryption key in a secure manner. This agreement could be accomplished using conventional techniques.
During manufacture of the device 100, the secure processor 106 exchanges information with the wireless communications device 100 to generate an A-Key. The secure processor 106 encrypts the A-Key using the encryption key. The secure processor 106 transfers the encrypted A-Key onto a storage medium, such as a disk. The encrypted A-Keys are then loaded from the disk into the authentication system 103. Alternatively, secure processor 106 may transfer the encrypted A-Keys to authentication system 103 over a data link. The authentication system 103 receives the encrypted A-key and transfers the encrypted A-key to the secure processor 104.
The secure processor 104 receives the encryption key from the secure processor 106 and receives the encrypted A-Key from the authentication system 103. The secure processor 104 decrypts the encrypted A-Key using the encryption key and generates the SSD using the decrypted A-Key. The secure processor 104 transfers SSD to the authentication system 103. The authentication system 103 receives and stores the SSD from the secure processor 104.
The previous description of the preferred embodiments is provided to enable any person skilled in the art to make or use the present invention. The various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without the use of the inventive faculty. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for operating a wireless communications system, the method comprising: receiving an encrypted authentication key from an authentication system into a secure processor; decrypting the encrypted authentication key in the secure processor; and generating shared secret data in the secure processor using the decrypted authentication key.
2. The method of claim 1 further comprising transferring the shared secret data from the secure processor to the authentication system.
3. The method of claim 2 further comprising: generating an authentication result in the authentication system using the shared secret data; receiving another authentication result into the authentication system from the wireless communications device; and in the authentication system, authenticating the wireless communications device if the authentication result generated in the authentication system matches the other authentication result from the wireless communications device.
4. The method of claim 3 further comprising: generating the shared secret data in the wireless communications device using the authentication key;
generating the other authentication result in the wireless communications device using the shared secret data; and transferring the other authentication result from the wireless communications device to the authentication system.
5. The method of claim 1 further comprising: generating the authentication key in the secure processor; encrypting the authentication key in the secure processor; and transferring the encrypted authentication key from the secure processor to the authentication system.
6. The method of claim 5 further comprising: receiving the encrypted authentication key from the secure processor into the authentication system; and storing the encrypted authentication key in the authentication system.
7. The method of claim 1 further comprising generating an authentication result in the secure processor using the shared secret data.
8. The method of claim 7 further comprising: receiving another authentication result into the secure processor from the wireless communications device; and in the secure processor, comparing the authentication result generated in the authentication system to the other authentication result from the wireless communications device.
9. The method of claim 1 further comprising generating a Signaling Message Encryption key in the secure processor using the shared secret data.
10. The method of claim 1 further comprising generating a Cellular Message Encryption Algorithm key in the secure processor using the shared secret data.
11. The method of claim 1 further comprising generating a Voice Privacy Mask in the secure processor using the shared secret data.
12. The method of claim 1 further comprising generating a Code Division Multiple Access Private Long Code Mask in the secure processor using the shared secret data.
13. The method of claim 1 further comprising restricting physical access to the secure processor.
14. The method of claim 1 wherein the wireless communications device is a Code Division Multiple Access device.
15. The method of claim 1 wherein the authentication system comprises a home location register.
16. A method for generating an authentication key for use by a wireless communications system in authenticating a wireless communications device, wherein the wireless communications system includes an authentication system and a secure processor, the method comprising: generating the authentication key in the secure processor; encrypting the authentication key in the secure processor; and transferring the encrypted authentication key from the secure processor to the authentication system.
17. The method of claim 16 further comprising: receiving the encrypted authentication key from the secure processor into the authentication system; and storing the encrypted authentication key in the authentication system.
18. The method of claim 16 wherein generating the authentication key further comprises: generating a first number in the secure processor; generating a second number in the secure processor using the first number; transferring the second number from the secure processor to the wireless communications device; receiving a third number into the secure processor from the wireless communications device; and generating the authentication key in the secure processor using the first number and the third number.
19. The method of claim 18 wherein generating the authentication key further comprises: generating a fourth number in the wireless communications device; generating the third number in the wireless communications device using the fourth number; transferring the third number from the wireless communications device to the secure processor; receiving the second number into the wireless communications device from the secure processor; and generating the authentication key in the wireless communications device using the second number and the fourth number.
20. A system for authenticating a wireless communications device that stores an authentication key, the system comprising: a secure processor operational to receive an encrypted authentication key, to decrypt the encrypted authentication key, to generate shared secret data using the decrypted authentication key, and to transfer the shared secret data; and an authentication system operationally coupled to the secure processor and operational to generate an authentication result using the shared secret data, to receive another authentication result from the wireless communications device, and to authenticate the wireless communications device if the authentication result generated in the authentication system matches the other authentication result from the wireless communications device.
21. The system of claim 20 further comprising the wireless communications device and wherein the wireless communications device is operational to generate the shared secret data using the authentication key, to generate the other authentication result using the shared secret data, and to transfer the other authentication result to the authentication system.
22. The system of claim 21 wherein the wireless communications device is operational to generate the authentication key.
23. The system of claim 21 further comprising a base station operational to transfer information between the wireless communications device and the authentication system.
24. The system of claim 20 wherein the secure processor is further operational to generate the authentication key, to encrypt the authentication key, and to transfer the encrypted authentication key to the authentication system.
25. The system of claim 24 wherein the authentication system is further operational to receive and store the encrypted authentication key from the secure processor.
26. The system of claim 20 wherein the secure processor is further operational to generate a Signaling Message Encryption key using the shared secret data.
27. The system of claim 20 wherein the secure processor is further operational to generate a Cellular Message Encryption Algorithm key using the shared secret data.
28. The system of claim 20 wherein the secure processor is further operational to generate a Voice Privacy Mask using the shared secret data.
29. The system of claim 20 wherein the secure processor is further operational to generate a Code Division Multiple Access Private Long Code
Mask using the shared secret data.
30. The system of claim 20 wherein the wireless communications device is a Code Division Multiple Access device.
31. The system of claim 20 wherein the authentication system comprises a home location register.
32. A system for authenticating a wireless comrnunications device that stores an authentication key, the system comprising: a first secure processor operational to receive an encrypted authentication key, to decrypt the encrypted authentication key, to generate shared secret data using the decrypted authentication key, and to transfer the shared secret data; a second secure processor operational to receive the encrypted authentication key, to decrypt the encrypted authentication key, to generate the shared secret data using the decrypted authentication key, and to transfer the shared secret data; and an authentication system operationally coupled to the first secure processor and the second secure processor and operational to generate an authentication result using the shared secret data, to receive another authentication result from the wireless communications device, and to authenticate the wireless communications device if the authentication result generated in the authentication system matches the other authentication result from the wireless communications device.
33. The system of claim 32 wherein the first secure processor and the second secure processor are operationally coupled and operational to generate an encryption key for decrypting the encrypted authentication key.
34. The system of claim 32 wherein the first secure processor and the second secure processor are operational to send the encryption key to a third secure processor.
35. A system for generating an authentication key and shared secret data for a wireless communications system, the system comprising: a first secure processor operational to receive an encrypted authentication key, to decrypt the encrypted authentication key using an encryption key, to generate shared secret data using the decrypted authentication key, and to transfer the shared secret data; an authentication system operationally coupled to the first secure processor and operational to receive the encrypted authentication key, to transfer the encrypted authentication key to the first secure processor, and to receive and store the shared secret data from the first secure processor; and a second secure processor operational to exchange information with a wireless communications device to generate the authentication key, and to encrypt the authentication key using the encryption key.
36. The system of claim 35 wherein the second secure processor is operational to transfer the encrypted authentication key to the authentication system.
37. The system of claim 35 wherein the second secure processor is operational to transfer the encrypted authentication key to a storage medium.
38. The system of claim 35 further comprising the wireless communications device and wherein the wireless communications device is operational to store the authentication key.
39. The system of claim 35 wherein the second secure processor is located at a facility where the wireless communications device is manufactured.
40. A product storing software for execution by a processor in a wireless communications system, the product comprising: interface software operational when executed by the processor to direct the processor to receive an encrypted authentication key and to transfer the shared secret data; encryption software operational when executed by the processor to direct the processor to decrypt the encrypted authentication key; data generation software operational when executed by the processor to direct the processor to generate the shared secret data using the decrypted authentication key; and a software storage medium operational to store the interface software, the encryption software, and the data generation software.
41. The product of claim 40 wherein: the data generation software is further operational when executed by the processor to direct the processor to generate the authentication key; the encryption software is further operational when executed by the processor to direct the processor to encrypt the authentication key; and the interface software is further operational when executed by the processor to direct the processor to transfer the encrypted authentication key from the processor.
42. The product of claim 40 wherein the encryption software is further operational when executed by the processor to direct the processor to generate an encryption key.
43. The product of claim 40 wherein: the interface software is further operational when executed by the processor to direct the processor to receive the shared secret data; and the data generation software is further operational when executed by the processor to direct the processor to generate an authentication result using the shared secret data.
PCT/US1999/019199 1998-08-19 1999-08-19 Secure processing for authentication of a wireless communications device WO2000011835A1 (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
EP99948053A EP1106000B1 (en) 1998-08-19 1999-08-19 Secure processing for authentication of a wireless communications device
DE69925920T DE69925920T2 (en) 1998-08-19 1999-08-19 SAFE PROCESSING FOR THE AUTHENTICATION OF A WIRELESS COMMUNICATION DEVICE
AU61305/99A AU6130599A (en) 1998-08-19 1999-08-19 Secure processing for authentication of a wireless communications device
JP2000566990A JP4772959B2 (en) 1998-08-19 1999-08-19 Secure processing for authentication of wireless communication devices

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US09/136,894 US6201871B1 (en) 1998-08-19 1998-08-19 Secure processing for authentication of a wireless communications device
US09/136,894 1998-08-19

Publications (2)

Publication Number Publication Date
WO2000011835A1 WO2000011835A1 (en) 2000-03-02
WO2000011835A9 true WO2000011835A9 (en) 2000-08-17

Family

ID=22474879

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US1999/019199 WO2000011835A1 (en) 1998-08-19 1999-08-19 Secure processing for authentication of a wireless communications device

Country Status (8)

Country Link
US (1) US6201871B1 (en)
EP (1) EP1106000B1 (en)
JP (2) JP4772959B2 (en)
KR (1) KR100674390B1 (en)
CN (1) CN1312991A (en)
AU (1) AU6130599A (en)
DE (1) DE69925920T2 (en)
WO (1) WO2000011835A1 (en)

Families Citing this family (44)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6201871B1 (en) * 1998-08-19 2001-03-13 Qualcomm Incorporated Secure processing for authentication of a wireless communications device
GB9903123D0 (en) * 1999-02-11 1999-04-07 Nokia Telecommunications Oy Method of securing communication
US6801941B1 (en) * 1999-08-12 2004-10-05 Sarnoff Corporation Dynamic wireless internet address assignment scheme with authorization
US6983366B1 (en) * 2000-02-14 2006-01-03 Safenet, Inc. Packet Processor
US6950521B1 (en) * 2000-06-13 2005-09-27 Lucent Technologies Inc. Method for repeated authentication of a user subscription identity module
US7043635B1 (en) * 2000-09-15 2006-05-09 Swivel Secure Limited Embedded synchronous random disposable code identification method and system
US6876747B1 (en) 2000-09-29 2005-04-05 Nokia Networks Oy Method and system for security mobility between different cellular systems
CA2441010A1 (en) * 2001-03-16 2002-09-26 Qualcomm Incorporated Method and apparatus for providing secure processing and data storage for a wireless communication device
US7263063B2 (en) 2001-07-06 2007-08-28 Sri International Per hop behavior for differentiated services in mobile ad hoc wireless networks
US7006437B2 (en) * 2001-07-06 2006-02-28 Sri International Scheduling mechanisms for use in mobile ad hoc wireless networks for achieving a differentiated services per-hop behavior
US7158776B1 (en) 2001-09-18 2007-01-02 Cisco Technology, Inc. Techniques for voice-based user authentication for mobile access to network services
US20030061488A1 (en) * 2001-09-25 2003-03-27 Michael Huebler Cloning protection for electronic equipment
US7076797B2 (en) * 2001-10-05 2006-07-11 Microsoft Corporation Granular authorization for network user sessions
US6792534B2 (en) * 2002-03-22 2004-09-14 General Instrument Corporation End-to end protection of media stream encryption keys for voice-over-IP systems
US7529933B2 (en) * 2002-05-30 2009-05-05 Microsoft Corporation TLS tunneling
FR2842376B1 (en) * 2002-07-10 2004-09-24 Somfy SELECTIVE COMMUNICATION BETWEEN OBJECTS
US7343011B2 (en) * 2002-07-15 2008-03-11 Conexant, Inc. Secure telecommunications system for wireless local area networks
US20040228360A1 (en) * 2003-05-13 2004-11-18 Samsung Electronics Co., Ltd Security method for broadcasting service in a mobile communication system
CN100539521C (en) * 2003-05-16 2009-09-09 华为技术有限公司 A kind of method that realizes radio local area network authentication
US7693172B2 (en) 2003-05-29 2010-04-06 Lg Electronics Inc. Apparatus and method for determining public long code mask in a mobile communications system
US7508797B2 (en) * 2003-06-13 2009-03-24 Samsung Electronics Co. Ltd. Method and system for providing a base station-assigned public long code mask
CN1601958B (en) * 2003-09-26 2010-05-12 北京三星通信技术研究有限公司 HRPD network access authentication method based on CAVE algorithm
CN100493247C (en) * 2004-02-27 2009-05-27 北京三星通信技术研究有限公司 Access authentication method in data packet network at high speed
CN1661960B (en) * 2004-02-27 2010-04-07 北京三星通信技术研究有限公司 Authentication method of separation between device and card by using CAVE as access authentication algorithm and equipment
EP1870814B1 (en) 2006-06-19 2014-08-13 Texas Instruments France Method and apparatus for secure demand paging for processor devices
US8112618B2 (en) * 2004-04-08 2012-02-07 Texas Instruments Incorporated Less-secure processors, integrated circuits, wireless communications apparatus, methods and processes of making
US7940932B2 (en) * 2004-04-08 2011-05-10 Texas Instruments Incorporated Methods, apparatus, and systems for securing SIM (subscriber identity module) personalization and other data on a first processor and secure communication of the SIM data to a second processor
US20060046690A1 (en) * 2004-09-02 2006-03-02 Rose Gregory G Pseudo-secret key generation in a communications system
KR100843072B1 (en) * 2005-02-03 2008-07-03 삼성전자주식회사 Wireless network system and communication method using wireless network system
US20070101409A1 (en) * 2005-11-01 2007-05-03 Microsoft Corporation Exchange of device parameters during an authentication session
KR100750153B1 (en) 2006-01-03 2007-08-21 삼성전자주식회사 Method and apparatus for providing session key for WUSB security, method and apparatus for obtaining the session key
US8934865B2 (en) * 2006-02-02 2015-01-13 Alcatel Lucent Authentication and verification services for third party vendors using mobile devices
US7957532B2 (en) * 2006-06-23 2011-06-07 Microsoft Corporation Data protection for a mobile device
US8032764B2 (en) * 2006-11-14 2011-10-04 Texas Instruments Incorporated Electronic devices, information products, processes of manufacture and apparatus for enabling code decryption in a secure mode using decryption wrappers and key programming applications, and other structures
US8515080B2 (en) * 2007-12-19 2013-08-20 International Business Machines Corporation Method, system, and computer program product for encryption key management in a secure processor vault
US9166799B2 (en) * 2007-12-31 2015-10-20 Airvana Lp IMS security for femtocells
CN101960888B (en) * 2008-02-27 2013-09-11 费希尔-罗斯蒙德系统公司 Join key provisioning of wireless devices
CN101674574B (en) * 2008-09-10 2013-03-27 中兴通讯股份有限公司 User authentication method and user authentication device
CN101754197B (en) * 2008-12-15 2012-06-13 中兴通讯股份有限公司 Terminal authentication method and home location register/authentication center
JP5568067B2 (en) * 2011-09-13 2014-08-06 株式会社日立製作所 Inter-system cooperation device in distributed systems
CN102684877B (en) * 2012-03-31 2016-03-30 北京奇虎科技有限公司 A kind of method and device carrying out user profile process
US9152577B2 (en) * 2012-08-17 2015-10-06 Broadcom Corporation Security central processing unit management of a transcoder pipeline
GB2505211B (en) * 2012-08-22 2014-10-29 Vodafone Ip Licensing Ltd Communications device authentication
CN110199073A (en) * 2017-02-08 2019-09-03 阿尔卑斯阿尔派株式会社 Verification System, portable equipment, register method and program

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4908861A (en) * 1987-08-28 1990-03-13 International Business Machines Corporation Data authentication using modification detection codes based on a public one way encryption function
JP2834450B2 (en) * 1987-09-16 1998-12-09 日本電信電話株式会社 Encryption device
JPH01122227A (en) * 1987-11-06 1989-05-15 Konica Corp Transmission equipment
US5153919A (en) * 1991-09-13 1992-10-06 At&T Bell Laboratories Service provision authentication protocol
US5172414A (en) * 1991-09-13 1992-12-15 At&T Bell Laboratories Speech and control message encrypton in cellular radio
US5323464A (en) * 1992-10-16 1994-06-21 International Business Machines Corporation Commercial data masking
JP2902249B2 (en) * 1993-01-21 1999-06-07 富士通株式会社 How to prevent unauthorized use of mobile phone terminals
JP2531354B2 (en) * 1993-06-29 1996-09-04 日本電気株式会社 Authentication method
US5410602A (en) * 1993-09-27 1995-04-25 Motorola, Inc. Method for key management of point-to-point communications
US5371794A (en) * 1993-11-02 1994-12-06 Sun Microsystems, Inc. Method and apparatus for privacy and authentication in wireless networks
US5467398A (en) * 1994-07-05 1995-11-14 Motorola, Inc. Method of messaging in a communication system
US5537474A (en) * 1994-07-29 1996-07-16 Motorola, Inc. Method and apparatus for authentication in a communication system
US5604801A (en) * 1995-02-03 1997-02-18 International Business Machines Corporation Public key data communications system under control of a portable security device
JPH103256A (en) * 1995-10-16 1998-01-06 Sony Corp Ciphering method and device therefor, recording method, decoding method and device therefor and recording medium
US6108424A (en) * 1997-01-09 2000-08-22 U.S. Philips Corporation Mobile radio telephone station comprising a protection system for at least one authentication number and method of protecting an authentication number
US6201871B1 (en) * 1998-08-19 2001-03-13 Qualcomm Incorporated Secure processing for authentication of a wireless communications device
JP2000269950A (en) * 1999-03-12 2000-09-29 Matsushita Electric Ind Co Ltd Copyright protection system
JP4043669B2 (en) * 1999-10-15 2008-02-06 日本放送協会 Related information processing device in conditional access system
JP4524829B2 (en) * 2000-01-25 2010-08-18 ソニー株式会社 Data processing system, recording device, data processing method, and program providing medium
JP4321837B2 (en) * 2000-09-07 2009-08-26 大日本印刷株式会社 Portable recording medium with encryption processing function
JP3695526B2 (en) * 2001-10-01 2005-09-14 学校法人慶應義塾 Encryption key update method

Also Published As

Publication number Publication date
CN1312991A (en) 2001-09-12
EP1106000A1 (en) 2001-06-13
EP1106000B1 (en) 2005-06-22
JP2011155650A (en) 2011-08-11
AU6130599A (en) 2000-03-14
US6201871B1 (en) 2001-03-13
KR100674390B1 (en) 2007-01-26
DE69925920T2 (en) 2006-05-11
DE69925920D1 (en) 2005-07-28
JP2002523975A (en) 2002-07-30
WO2000011835A1 (en) 2000-03-02
JP4772959B2 (en) 2011-09-14
KR20010072172A (en) 2001-07-31

Similar Documents

Publication Publication Date Title
US6201871B1 (en) Secure processing for authentication of a wireless communications device
JP4634612B2 (en) Improved subscriber authentication protocol
US7233664B2 (en) Dynamic security authentication for wireless communication networks
US6192474B1 (en) Method for establishing a key using over-the-air communication and password protocol and password protocol
JP4263384B2 (en) Improved method for authentication of user subscription identification module
US6249867B1 (en) Method for transferring sensitive information using initially unsecured communication
US20050177723A1 (en) SIM-based authentication method capable of supporting inter-AP fast handover
US7131006B1 (en) Cryptographic techniques for a communications network
KR20000011999A (en) Method for updating secret shared data in a wireless communication system
CA2282942A1 (en) Efficient authentication with key update
US8230218B2 (en) Mobile station authentication in tetra networks
WO2017188895A1 (en) Method and system for authentication with asymmetric key
CN111641498B (en) Key determination method and device
KR100658301B1 (en) Public key based mutual authentication method in wireless communication system
JP2000115161A (en) Method for protecting mobile object anonymity
CN110012467B (en) Grouping authentication method of narrow-band Internet of things
CN1964259B (en) A method to manage secret key in the course of switch-over
CN108271154B (en) Authentication method and device
KR100330418B1 (en) Authentication Method in Mobile Communication Environment
Walker Security in mobile and cordless telecommunications
Ou et al. TK‐AKA: using temporary key on Authentication and Key Agreement protocol on UMTS
WO2001037477A1 (en) Cryptographic techniques for a communications network
KR20100054191A (en) Improved 3gpp-aka method for the efficient management of authentication procedure in 3g network
WO2018126750A1 (en) Key delivery method and device
Zheng Enhancing Security in GSM

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 99809783.7

Country of ref document: CN

AK Designated states

Kind code of ref document: A1

Designated state(s): AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CU CZ DE DK EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW SD SL SZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
AK Designated states

Kind code of ref document: C2

Designated state(s): AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CU CZ DE DK EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: C2

Designated state(s): GH GM KE LS MW SD SL SZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

COP Corrected version of pamphlet

Free format text: PAGES 1/11-11/11, DRAWINGS, REPLACED BY NEW PAGES 1/11-11/11; DUE TO LATE TRANSMITTAL BY THE RECEIVING OFFICE

WWE Wipo information: entry into national phase

Ref document number: 1999948053

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 1020017001380

Country of ref document: KR

WWP Wipo information: published in national office

Ref document number: 1999948053

Country of ref document: EP

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

WWP Wipo information: published in national office

Ref document number: 1020017001380

Country of ref document: KR

WWG Wipo information: grant in national office

Ref document number: 1999948053

Country of ref document: EP

WWG Wipo information: grant in national office

Ref document number: 1020017001380

Country of ref document: KR