Method for authentication of a radio communications network with a mobile station, and radio communications network and a mobile station

A method for authentication of a radio communications network with a mobile station having an identity module, comprising:

• producing stacks of authentication vectors at the network end, each authentication vector including an authentication token with a sequence number and a mode parameter, wherein unique mode parameters are allocated to each stack such that the mode parameter has an identical value for all authentication tokens in the same stack, and wherein the mode parameters are allocated to the stacks on a circulating basis;
• selecting an unused authentication vector from the respective stack for each new authentication;
• sending an authentication token, sequence number, and mode parameter of the selected unused authentication vector to the mobile station;
• and
• determining at the mobile station end by the identity module whether the received sequence number is accepted or rejected for the authentication, wherein the identity module is informed by the radio communications network as to which authentication tokens with an associated sequence number are located in the same stack, and wherein at least one sequence number is stored for each stack by the identity module, and wherein the identity module accepts the received sequence number if it is greater than the at least one stored sequence number which corresponds to the received mode parameter.

A method for authentication of a radio communications network with a mobile station having an identity module, comprising:

• producing stacks of authentication vectors at the network end, each authentication vector including an authentication token with a sequence number and a mode parameter, wherein unique mode parameters are allocated to each stack such that the mode parameter has an identical value for all authentication tokens in the same stack, and wherein at least one specific mode parameter is reserved, and is allocated when an urgent request for an individual authentication vector occurs;
• selecting an unused authentication vector from the respective stack for each new authentication;
• sending an authentication token, sequence number, and mode parameter of the selected unused authentication vector to the mobile station;
• and
• determining at the mobile station end by the identity module whether the received sequence number is accepted or rejected for the authentication, wherein the identity module is informed by the radio communications network as to which authentication tokens with an associated sequence number are located in the same stack, and wherein at least one sequence number is stored for each stack by the identity module, and wherein the identity module accepts the received sequence number if it is greater than the at least one stored sequence number which corresponds to the received mode parameter.

A method for authentication of a radio communications network with a mobile station having an identity module, comprising:

• producing multiple stacks of multiple authentication vectors at the network end, each authentication vector including an authentication token with a sequence number;
• allocating a different mode parameter value to each of the multiple stacks such that each stack has a unique mode parameter value, such that the multiple authentication tokens in each stack correspond to the same mode parameter value;
• selecting an unused authentication vector from a particular one of the multiple stacks for a new authentication, the particular stack having a particular mode parameter value allocated thereto;
• sending an authentication token, sequence number, and the particular mode parameter value of the selected unused authentication vector to the mobile station;
• storing at the mobile station end a reference sequence number corresponding to each mode parameter value;
• and
• determining at the mobile station end by the identity module whether the received sequence number is accepted or rejected for the authentication, including:
• identifying the particular mode parameter from the received authentication vector;
• identifying the reference sequence number corresponding to the particular mode parameter value;
• comparing the received sequence number to the reference sequence number corresponding to the particular mode parameter value;
• and
• accepting the received sequence number if it is greater than the reference sequence number corresponding to the particular mode parameter value.