Authentication Module
AssigneeEseye Limited
InventorIan MARSDEN
Life of this patent
Estimating the term…
Abstract
A device 2 is connected to server 34 using encryption exposed at the application layer of device 2. The encryption takes place using a mobile telephony standard encryption. An authentication module is provided in device 2 comprising an IMSI and software to connect to a mobile telephony-like home location register using conventional mobile telephony protocols, except that the mobile telephony-like home location register is adapted simply to authenticate the device 2 and deliver a communication key Kc using the mobile telephony standard without also authorising access to a mobile telephone network.
Claims15
A remote device arranged to communicate with a handling server, the remote device comprising:
- an authentication module for providing authentication and/or encryption according to a mobile telephony standard through the use of an IMSI, a secret key, and one or more authentication algorithms for carrying out authentication and key generation according to the mobile telephony standard using at least the secret key;
- and
- a processor connected to the authentication module,
- wherein the processor executes program code that accesses the authentication module and uses one or more of said one or more authentication algorithms to encrypt communications and provide end-to-end encryption for communication with the handling server independently of the physical transport structure used.
A system for authenticating a remote device using authentication and/or encryption according to a mobile telephony standard for communication between the remote device and a handling server, the system comprising:
- the remote device having a processor and an authentication module, the authentication module comprising an IMSI, one or more authentication algorithms and a secret key;
- the handling server;
- a home server;
- a network for routing messages between the remote device and the home server, the home server being located at a location on the network indicated as the location of the home location register corresponding to the IMSI;
- an authentication centr in communication with the home server, the authentication center operative to maintain code to authenticate the remote device and provide at least one communication key for the remote device according to the mobile telephony standard;
- and
- program code, resident in the remote device, to generate the same at least one communication key with the authentication module and to deliver the authentication and/or encryption functionality according to the mobile telephony standard to the application layer in the processor in the remote device to provide end to end encryption using the authentication algorithms between the remote device and the handling server independently of the physical transport structure used for communication between the remote device and the handling server.
A method for authenticating a remote device using authentication and/or encryption according to a mobile telephony standard for communication between the remote device and a handling server, the method comprising:
- sending an authentication message through a network from a remote device having a processor and an authentication module, the authentication module comprising an IMSI, a secret key, and one or more authentication algorithms for carrying out authentication and key generation according to the mobile telephony standard;
- forwarding the authentication message to a home server located at location on the network indicated as the location of the home location register corresponding to the IMSI;
- receiving the authentication message at an authentication centre connected to the home server;
- authenticating the remote device according to the mobile telephony standard on the basis of the received authentication message;
- delivering a communication key from the authentication centre to a handling server;
- generating a communication key in the remote device that is identical to the delivered communication key;
- and
- encoding data transferred between the handling server and the remote device using the communication key to provide end to end encryption between the remote device and the handling server independently of the physical transport structure used for communication between the remote device and the handling server.
(canceled)
Dependencies are inferred from the claim text.