Two-phase SIM authentication
AssigneeStarHome GmbH
InventorGuy Lev
Life of this patent
Estimating the term…
Abstract
A method for challenge-based authentication of a communication entity to an access network. The access network uses a password-based communication protocol. The method comprises a) pre-supplying to the communication entity a challenge, thereby allowing the communication entity to provide a challenge response, b) supplying to the communication entity a password request, c) receiving the challenge response via the password request, and d) authenticating the communication entity if the challenge response is correct. Presupplying may be during a previous IP session, wherein communication entities are simply given challenges for next time they connect to the hotspot. Alternatively presupplying could be during a brief probationary connection that the access network gives to its users.
Claims27
A method for challenge-based authentication of a communication entity to an access network, the access network using a password-based communication protocol, the method comprising:
- a) pre-supplying to the communication entity a challenge, thereby allowing the communication entity to provide a challenge response;
- b) supplying to the communication entity a password request;
- c) receiving via said password request said challenge response;
- and
- d) authenticating the communication entity if said challenge response is correct.
An authentication server for managing challenge based authentication from a cellular network on access networks configured for password-based authentication, the server comprising:
- a pre-supply unit for pre-supplying a challenge to a communication entity;
- a credential-receiving unit for receiving data sent as a password to the access network as a response to said pre-supplied challenge;
- and
- an authorization unit for authorizing the authorization unit if the credentials correctly correspond to the pre-supplied challenge.
A subscriber information module (SIM)-card based client for acquiring a network access, said SIM-card based client comprising:
- a challenge request module for acquiring a GSM challenge;
- a challenge response module configured for generating a challenge response;
- and
- a response module for sending said challenge response as a password in a post request, thereby carrying out bi-directional authentication over a password-enabled access connection.
An access point for authenticating an access network for a communication entity, the access point comprising:
- a temporary access module for:
- a) communicating with a cellular authorization authority to provide said communication entity with a temporary connection, and
- b) to allow uploading a challenge to said communication entity during said temporary connection.
Dependencies are inferred from the claim text.