Nokia Corporation

Nokia Networks Oy

Tommi Mikkonen

Jan-Erik Gustav Ekberg

Nadarajah Asokan

Henry Haverinen

Juha Ala-Laurila

Patrik Flykt

Jukka-Pekka Honkanen

Juha Lindfors

Mikko Ohvo

Jyri Rinnemaa

Petri Aalto

Timo Takamäki

Raimo Vuonnala

Seppo Kalevi Honkanen

Antti Kuikka

Juhapekka Niemi

Eero Lahde

Juha RÄSÄNEN

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

Authentication in a packet data network

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication center. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

A method for describing software architecture utilizes a service concept to provide a map of the software system's features from top-level functionalities to actual code through all intermediate abstractions. The services are defined as logical and physical services. Physical services are bound to a given level of abstraction by the actual implementation, whereas logical services can be hierarchically divided into smaller logical services. A suitable abstraction level can be used for the logical services so that the best match between physical and logical services can be achieved. Linking physical services to logical services is done so that the set of physical services that implement a set of logical services can be found in a top-down fashion. Also the set of logical services that is implemented by a set of physical services can be found in the bottom-up fashion. The logical service structure can be used as a reference software architecture.

Method for describing software architecture

Growing community of inventors

Tampere, Finland

Tommi Mikkonen