# US 8,787,198 B2 · System, method, and computer-readable medium for authentication center-initiated authentication procedures for a mobile station attached with an IP-femtocell system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,787,198 B2 - Document ID: US8787198B2 - Status: Granted - Kind: B2 - Application number: 13/970,326 - Filed: 2013-08-19 - Published: 2013-12-12 - Granted: 2014-07-22 - Earliest claimed: 2007-11-15 - Assignees: Ubeeairwalk, Inc. - Applicants: Ubeeairwalk, Inc. - Inventors: Christopher Martin Edward Osborn - Web page: https://patentgrep.com/patent/US8787198B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/164: {at the network layer} - H04W 12/069: using certificates or pre-shared keys - H04W 76/10: Connection setup - H04W 84/045: {using private Base Stations, e.g. femto Base Stations, home Node B} - H04W 88/085: {Access point devices with remote components} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system, method, and computer readable medium that facilitate authentication center-initiated authentication procedures for a mobile station attached with a femtocell system are provided. A femtocell system may generate a registration identification of a mobile station from one or more mobile station authentication parameters. A convergence server located in a core network receives an authentication procedure request from an authentication center for the mobile station attached with the femtocell system and generates an authentication procedure request message that includes the registration identification assigned to the mobile station. The convergence server then transmits the authentication procedure request message to the femtocell system and receives a response to the authentication procedure request message from the femtocell system. The authentication procedure request may comprise a unique challenge, a shared secret data update procedure, or a call history count update procedure. ## Claims ### Claim 1 A method, comprising: receiving, by a convergence server located in a core network, an authentication procedure request from an authentication center for a mobile station attached with a femtocell system; generating, by the convergence server, an authentication procedure request message that includes a registration identifier assigned to the mobile station, the registration identifier comprising a pseudo-electronic serial number derived from a mobile equipment identifier for the mobile station; transmitting, by the convergence server, the authentication procedure request message to the femtocell system; and receiving, by the convergence server, a response to the authentication procedure request message from the femtocell system; wherein the authentication procedure request comprises a unique challenge, and wherein the authentication procedure request message comprises an authentication request that includes a pseudo-randomly generated value; wherein the response includes an authentication result generated by the mobile station using the pseudo-randomly generated value and a shared secret data key. ### Claim 2 (depends on 1) The method of claim 1, wherein the femtocell system maps the authentication procedure to the mobile station using the registration identifier. ### Claim 3 (depends on 1) The method of claim 1, wherein the authentication procedure request comprises a shared secret data update procedure, and wherein the authentication procedure request message comprises a shared secret data update request message. ### Claim 4 (depends on 3) The method of claim 3, further comprising transmitting, by the femtocell system, an update order to the mobile station that includes a random number seed. ### Claim 5 (depends on 4) The method of claim 4, further comprising receiving, by the convergence server, a base station challenge request message from the femtocell system including a pseudo-random value selected by the mobile station. ### Claim 6 (depends on 5) The method of claim 5, further comprising: engaging, by the convergence server, the authentication center in a base station challenge process; and transmitting, by the convergence server, a base station challenge response to the femtocell system including a base station authentication result received from the authentication center. ### Claim 7 (depends on 6) The method of claim 6, further comprising updating, by the mobile station, a shared secret data key in the event the base station authentication result in the base station challenge response matches a base station authentication result produced by the mobile station. ### Claim 8 (depends on 1) The method of claim 1, wherein the authentication procedure request comprises a call history count update procedure, and wherein the authentication procedure request message comprises a count update message. ### Claim 9 A non-transitory computer-readable medium having computer-executable instructions tangibly embodied thereon for execution by a processing system, the computer-executable instructions, when executed, cause the processing system to: receive, by a convergence server located in a core network, an authentication procedure request from an authentication center for the mobile station attached with the femtocell system; generate, by the convergence server, an authentication procedure request message that includes a registration identifier assigned to the mobile station, the registration identifier comprising a pseudo-electronic serial number derived from a mobile equipment identifier for the mobile station; map the authentication procedure to the mobile station using the registration identifier; transmit, by the convergence server, the authentication procedure request message to the femtocell system; and receive, by the convergence server, a response to the authentication procedure request message from the femtocell system; wherein the authentication procedure request comprises a unique challenge, the authentication procedure request message comprises an authentication request that includes a pseudo-randomly generated value, and the response includes an authentication result generated by the mobile station using the pseudo-randomly generated value and a shared secret data key. ### Claim 10 (depends on 9) The non-transitory computer-readable medium of claim 9, wherein the authentication procedure request comprises a shared secret data update procedure and the authentication procedure request message comprises a shared secret data update request message, the non-transitory computer-readable medium further comprising instructions that, when executed by the processing system, cause the processing system to transmit, by the femtocell system, an update order to the mobile station that includes a random number seed. ### Claim 11 (depends on 10) The non-transitory computer-readable medium of claim 10, further comprising instructions that, when executed by the processing system, cause the processing system to: receive, by the convergence server, a base station challenge request message from the femtocell system including a pseudo-random value selected by the mobile station; engage, by the convergence server, the authentication center in a base station challenge process; and transmit, by the convergence server, a base station challenge response to the femtocell system including a base station authentication result received from the authentication center. ### Claim 12 (depends on 11) The non-transitory computer-readable medium of claim 11, further comprising instructions that, when executed by the processing system, cause the processing system to update, by the mobile station, a shared secret data key in the event the base station authentication result in the base station challenge response matches a base station authentication result produced by the mobile station. ### Claim 13 (depends on 9) The non-transitory computer-readable medium of claim 9, wherein the authentication procedure request comprises a call history count update procedure, and wherein the authentication procedure request message comprises a count update message. ### Claim 14 A system, comprising: a core network that includes a convergence server; a mobile core network that includes an authentication center; an Internet Protocol-based femtocell system that provides a radio access point for a mobile station, wherein the convergence server receives an authentication procedure request from the authentication center for the mobile station, generates an authentication procedure request message that includes a registration identifier assigned to the mobile station, the registration identifier comprising a pseudo-electronic serial number derived from a mobile equipment identifier for the mobile station, and wherein the femtocell system maps the authentication procedure to the mobile station using the registration identifier; transmit the authentication procedure request message to the femtocell system; and receives a response to the authentication procedure request message from the femtocell system; wherein the authentication procedure request comprises a unique challenge, the authentication procedure request message comprises an authentication request that includes a pseudo-randomly generated value, and the response includes an authentication result generated by the mobile station using the pseudo-randomly generated value and a shared secret data key. ### Claim 15 (depends on 14) The system of claim 14, wherein the authentication procedure request comprises a shared secret data update procedure and the authentication procedure request message comprises a shared secret data update request message, wherein the femtocell system transmits an update order to the mobile station that includes a random number seed. ### Claim 16 (depends on 15) The system of claim 15, wherein the convergence server receives a base station challenge request message from the femtocell system including a pseudo-random value selected by the mobile station, engages the authentication center in a base station challenge process, and transmits a base station challenge response to the femtocell system including a base station authentication result received from the authentication center.