Nokia Corporation

Intellectual Ventures I LLC

Nokia Mobile Phones Limited

Jukka-Pekka Honkanen

Juha Ala-Laurila

Jyri Rinnemaa

Jan-Erik Gustav Ekberg

Henry Haverinen

Raimo Vuonnala

Nadarajah Asokan

Jouni Mikkonen

Patrik Flykt

Petri Aalto

Seppo Kalevi Honkanen

Timo Takamäki

Timo Takamaki

Tommi Mikkonen

Antti Kuikka

Harri Halminen

Pekko Orava

Markku Niemi

Mika Erola

Arranging data ciphering in a telecommunication system comprising at least one wireless terminal, a wireless local area network and a public land mobile network. At least one first ciphering key according to the mobile network is calculated in the mobile network and in the terminal for a terminal identifier using a specific secret key for the identifier. Data transmission between the mobile network and the terminal is carried out through the wireless local area network. A second ciphering key is calculated in the terminal and in the mobile network using said at least one first ciphering key. The second ciphering key is sent from the mobile network to the wireless local area network. The data between the terminal and the network is ciphered using said second ciphering key.

Arranging data ciphering in a wireless telecommunication system

Method for storing data in the memory () of an electronic device (), wherein the data to be stored is encrypted with an encryption key (Ks). The electronic device () is provided with an identification card () equipped with a cryptographic algorithm and an individual identifier (ID). In the electronic device (), at least one seed value (RAND, RAND, RAND) is generated, and the at least one seed value is transmitted to the identification card (). The cryptographic algorithm is performed on the identification card (), with the seed value (RAND, RAND, RAND) being used as the input, wherein at least one derived value (Kc, Kc, Kc) is produced in the algorithm. The at least one derived value (Kc, Kc, Kc) is transmitted to the electronic device (), wherein the at least one derived value (Kc, Kc, Kc) is used in the formation of the encryption key (Ks). The invention also relates to an electronic device (), module, and computer software product.

Storing of data in a device

A method for billing in a packet data network (WISP1) comprising at least one user's terminal (MN), comprising the steps of:

Billing in a packet data network

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

Authentication in a packet data network

A method for billing in a packet data network (WISP) comprising at least one user's terminal (MN), comprising the steps of:

The invention relates to a method of transferring required messages for acquiring a temporary MAC address in a wireless local area network. In a first device in the local area network, a first identifier is determined to identify the first device. A message comprising the first identifier is transmitted from the first device to a second device to arrange a temporary MAC address. A response message relating to the acquisition of the MAC address and comprising the first identifier is transmitted from the second device to the first device. The first device identifies on the basis of the first identifier that the response message is intended for it.

Addressing in wireless local area networks

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication center. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

The method according to the invention can be used for conveying low-level SIM card commands from an external apparatus (12) of a mobile station (1) to a SIM card (2) connected to the mobile station. The invention is based on locking the SIM card (2) solely for a particular control element (10) for the duration of the exchange of low-level commands. The mobile station according to the invention advantageously includes two SIM card control elements (4, 10) the first of which (4) is intended for executing commands issued by internal blocks of the mobile station and the second of which (10) is intended for conveying low-level commands from an external apparatus (12) connected to the mobile station. Said first control element (4) receives high-level commands from the various blocks (6) of the mobile station and conveys to the SIM card (2) the corresponding low-level command sequences. Said second control element (10) reserves the SIM card (2) for itself, when necessary, whereafter the external apparatus (12) connected to the mobile station can issue low-level commands which are conveyed by said second control element (10) to the SIM card (2). Said second control element (10) frees the SIM card only when the external apparatus (12) indicates that the command sequence has ended. If said first control element (4) receives a command during the command sequence of the external apparatus, the first control element (4) remains waiting and executes the operations required by the command after the SIM card (2) has been released and is no more used by said second control element (10).

Growing community of inventors

Tampere, Finland

Jukka-Pekka Honkanen