Method for producing authentication information

A method in a network element of a communication system, the method comprising the steps of:

• determining if a security module of a mobile station is able to produce authentication information for use in a predetermined authentication procedure to be performed between a communication system and the mobile station, and if not,
• generating key material using a method that said security module is able to perform, and
• generating the authentication information based on at least the key material for use in said predetermined authentication procedure.

A mobile station for a communication system, the mobile station having an interface for a security module, comprising:

• determining means for determining if a security module connected to an interface is able to produce authentication information for use in a predetermined authentication procedure with a communication system,
• causing means for causing key material to be generated by the security module and for receiving generated first key material, and
• generating means for generating the authentication information based on at least the key material for use in said predetermined authentication procedure with the communication system.

A mobile station for a communication system, the mobile station having an interface for a security module, comprising at least

• a first controller configured to determine if a security module connected to an interface is able to produce authentication information for use in a predetermined authentication procedure with a communication system,
• a second controller configured to cause key material to be generated by the security module and to receive generated first key material,
• a key material generator configured to generate the authentication information based on at least said key material for use in the predetermined authentication procedure with the communication system.

An authentication system in a network element of a communication system, comprising:

• determining means for determining if a security module of a mobile station is able to produce authentication information for use in a predetermined authentication procedure to be performed between a communication system and the mobile station,
• first generating means for generating key material using a method which the security module is able to perform, and
• second generating means for generating the authentication information based on at least the key material for use in said predetermined authentication procedure.

An authentication system in a network element of a communication system, comprising:

• a controller configured to determine if a security module of a mobile station is able to produce authentication information for use in a predetermined authentication procedure to be performed between a communication system and the mobile station,
• a first key generator configured to generate key material using a method that the security module is able to perform, and
• a second key generator configured to generate the authentication information based on at least said key material for use in said predetermined authentication procedure.

A network element of a communication system comprising:

• determining means for determining if a security module of a mobile station is able to produce authentication information for use in a predetermined authentication procedure to be performed between a communication system and the mobile station,
• first generating means for generating key material using a method that the security module is able to perform, and
• second generating means for generating the authentication information based on at least the key material for use in said predetermined authentication procedure.

A network element of a communication system comprising:

• a controller configured to determine if a security module of a mobile station is able to produce authentication information for use in a predetermined authentication procedure to be performed between the communication system and the mobile station,
• a first key generator configured to generate key material using a method that the security module is able to perform, and
• a second key generator configured to generate the authentication information based on at least said key material for use in said predetermined authentication procedure.

A computer embodied on a computer-readable medium, the computer program configured to control a processor to perform the steps of:

• determining if a security module installed in a mobile station is able to produce authentication information for use in predetermined authentication information for use in predetermined authentication procedure with a communication system, and if not,
• generating key material using the security module, and
• generating the authentication information based on at least said key material for use in said predetermined authentication procedure with the communication system.

A computer program embodied on a computer-readable medium, the computer program configured to control a processor to perform the steps of:

• determining if a security module of a mobile station is able to procedure authentication information for use in a predetermined authentication procedure to be performed between a communication system and the mobile station, and, if not,
• generating key material using a method that said security module is able to perform, and
• generating the authentication information based on at least the key material for use in said predetermined authentication procedure.