Nokia Corporation

Nokia Telecommunications Oy

Jari Juopperi

Kari Kurronen

Tapani Larikka

A method to authenticate a mobile station B in a mobile network, so that the mobile station B is authenticated and an encryption key is agreed between mobile stations A and B using user data exchange during call setup. More specifically the mobile station B is authenticated by the mobile station A constructing and sending to the mobile station B a message M, the mobile station B receiving the message M, constructing and sending a message Mto the mobile station A, the mobile station A receiving the message M, checking the validity of the information in the message M, if the information is verified valid the mobile station A accepting to share a shared encryption key K with mobile station B, the mobile station A constructing and sending the message Mto the mobile station B, the mobile station B receiving the message Mand verifying the validity of the information, if the information is valid the mobile station B accepting the sharing of the shared encryption key K with the mobile station A.

Method to authenticate a mobile station, a communications system and a mobile station

A technique for transferring a data message between a first terminal device and a second terminal device via an intermediate terminal device includes: entering a data message into the first terminal device; transmitting the data message from the first terminal device to the intermediate terminal device; formatting the data message into at least one SMS (Short Message Service) message in the intermediate terminal device; and transmitting the at least one SMS message from the intermediate terminal device to the second terminal device. Formatting the data message may include formatting the data in a SyncML format. The intermediate terminal device may include a mobile terminal and the data message may be transferred from the first terminal device to the intermediate terminal device via a short range communication link which may include an IR or Bluetooth communication link.

Message transfer from a source device via a mobile terminal device to a third device

In known telecommunications systems using multiple access the terminal equipment assumes that the network element is genuine while the network element assumes that the terminal equipment is genuine. This allows false terminal equipment, a false network element or a third party to penetrate the system. The proposed commitment protocol applies bit block commitment known from cryptography and a shared encryption key and the authentication is divided into two parts, whereby one part of it is done by the terminal equipment and the other part is done by the network. The terminal equipment (MS) sends to the network element (BTS) a pseudo identifier (AMSI) which it has formed, whereupon encryption keys (MKEY, BKEY) are exchanged. Only when the network element has revealed its true identity, will the terminal equipment send the required information (IMSI, RND,, RND,) encrypted with a combination of the keys. Finally, the network element authenticates the terminal equipment by using the identity information which it has revealed. Only then can operation commence.

Growing community of inventors

Kirkkonummi, Finland

Jari Juopperi