Network node, device and methods for providing an authentication module
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorGustavo Tanoni
Life of this patent
Estimating the term…
Abstract
The invention relates to a method, for providing an Authentication Module (AM) to a device. The method comprises computing an authentication parameter to be stored in the AM, using an identifier (ID) associated with the device, authentication data associated with the device and an encryption parameter associated with the device. The method also comprises providing the AM to the device. The invention also relates to a method, for updating an AM and to a method to authenticate a device using an AM. The invention further relates to a device and network node executing the methods.
Claims41
A method, executed in a network node, for providing an Authentication Module (AM) to a device, comprising the steps of:
- computing an authentication parameter to be stored in the AM, using an identifier (ID) associated with the device, authentication data associated with the device and an encryption parameter associated with the device;
- and
- providing the AM to the device.
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
A method, executed in a device, for authenticating the device using an Authentication Module (AM), comprising the steps of:
- sending an authentication request to a network node;
- receiving a response comprising a random string and a verification code;
- computing an expected verification code using the random string and an authentication parameter stored in the AM;
- and
- authenticating the device responsive to determining that the received verification code corresponds to the expected verification code;
- wherein the authentication parameter stored in the AM is computed using an identifier (ID) associated with the device, authentication data associated with the device and an encryption parameter associated with the device.
(canceled)
(canceled)
(canceled)
A method for generating an authentication parameter for an Authentication Module (AM), comprising the step of:
- computing an authentication parameter to be stored in the AM, using an identifier (ID) associated with a device, authentication data associated with the device and an encryption parameter associated with the device.
(canceled)
(canceled)
A network node for providing an Authentication Module (AM) to a device comprising:
- a processor;
- and a memory, said memory containing instructions executable by said processor, whereby said network node is operative to:
- compute an authentication parameter to be stored in the AM, using an identifier (ID) associated with the device, authentication data associated with the device and an encryption parameter associated with the device;
- and
- provide the AM to the device.
A device using an Authentication Module (AM) comprising:
- a processor;
- and a memory, said memory containing instructions executable by said processor, whereby said device is operative to:
- send an authentication request to a network node;
- receive a response comprising a random string and a verification code;
- compute an expected verification code using the random string and an authentication parameter stored in the AM;
- and
- authenticate the device responsive to determining that the received verification code corresponds to the expected verification code;
- wherein the authentication parameter stored in the AM is computed using an identifier (ID) associated with the device, authentication data associated with the device and an encryption parameter associated with the device.
(canceled)
(canceled)
Dependencies are inferred from the claim text.