Authentication method for the mobile terminal and a system thereof

A system for authenticating a mobile terminal, the system comprising:

• an authentication device at a network side and a mobile terminal, wherein said mobile terminal includes:
• a subscriber information management unit and a subscriber identification information storage unit;
• wherein said subscriber information management unit is usable for obtaining a subscriber information file from said subscriber identification information storage unit, and for using a pre-set password P to decrypt a key A stored in the subscriber information file to obtain a key Ki which is used in authentication;
• and in a process of authentication, said subscriber information management unit is further usable for using said key Ki and a random number sent by said authentication device at the network side to generate encrypted authentication response data, and for sending the encrypted authentication response data to the authentication device at the network side;
• said authentication device at the network side is usable for verifying the encrypted authentication response data sent by said subscriber information management unit, and for sending an authentication success acknowledgement to said subscriber information management unit after the verification succeeds;
• wherein said subscriber identification information storage unit is equipped in a local memory of said mobile terminal, or a mobile memory device connected with said mobile terminal;
• said subscriber information management unit is also useable for sending an International Mobile Subscriber Identity (IMSI) stored in the subscriber information file to said authentication device at the network side;
• after verifying the encrypted authentication response data sent by said subscriber information management unit successfully, said authentication device at the network side is configured to judge whether there is another mobile terminal using the same IMSI to access the network, if yes, the system is configured to break a connection with an accessed mobile terminal;
• and/or to send a notification message that there is another mobile terminal using the same IMSI to access the network to said subscriber information management unit;
• wherein said subscriber information file further includes an identification number which is usable for uniquely identifying different subscriber information files belonging to the same IMSI;
• said authentication device at the network side is configured to record a corresponding relationship between said identification number and the IMSI when the mobile terminal accesses the network;
• said subscriber information management unit is configured to send said identification number together with said encrypted authentication response data to said authentication device at the network side, and said authentication device at the network side is configured to judge whether there is another mobile terminal using the same IMSI to access the network according to the identification number.