CN1953615A - A method and device to perfect the terminal authentication - Google Patents
A method and device to perfect the terminal authentication Download PDFInfo
- Publication number
- CN1953615A CN1953615A CNA2006101531003A CN200610153100A CN1953615A CN 1953615 A CN1953615 A CN 1953615A CN A2006101531003 A CNA2006101531003 A CN A2006101531003A CN 200610153100 A CN200610153100 A CN 200610153100A CN 1953615 A CN1953615 A CN 1953615A
- Authority
- CN
- China
- Prior art keywords
- user terminal
- callhistorycount
- authentication
- network side
- terminal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Telephonic Communication Services (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention relates to a method for using call history count to check the priority of terminal in CDMA system. Wherein, it comprises following steps that the network process call history count priority check on user terminal with access request, rejects the access of fail user, and obtains personal recognize code; the network judges the personal recognize code, if it is right, processes call history count synchronous refresh, or else, not processes refresh. The invention also discloses a relative device, which comprises priority checker, synchronous refresh checking unit, call history count memory unit, PIN code memory unit and synchronous refresh processor. The invention sets the check condition of call history count synchronous refresh between user terminal and network, to improve the mechanism of terminal priority check via call history count.
Description
Technical field
The present invention relates to the communications field, relate in particular to a kind of improving and utilize CallHistoryCount to carry out the implementation method and the device of terminal authentication.
Background technology
CDMA (Code Division Multiple Access, code division multiple access) is a kind of brand-new and ripe wireless communication technology that grows up on the digital spread spectrum communication infrastructure.Because it has unique advantages such as power system capacity is big, speech quality is good, the networking cost is low, message transmission rate height, cdma system has obtained application more and more widely.CDMA terminal commonly used comprises: CDMA mobile phone, cdma wireless landline telephone, CDMA onboard wireless phone, CDMA on-vehicle positioning terminal, cdma wireless data terminal, CDMA multi-user radio landline telephone and CDMA high-power wireless landline telephone etc.
In order to prevent to have no right the safety that subscriber access system communicates by letter with the mobile subscriber who guarantees by wave point, authentication techniques is widely used in the communication network.Also taked special safety measure in cdma system, for example subscription authentication, the speech on the wave point, data and signal message are maintained secrecy etc.The purpose of these safety measures is to guarantee that the safety of user resources and protection user privacy communication's right are inviolable.
And use in the terminal of cdma system at all, one of the largest source that the private privacy of user is caused infringement is clone's mobile phone and clone SIM (Subscriber identification Module, subscriber identification module) card, its ESN (Electronic Serial Number, electronics string number)/IMSI (InternationalMobile Station Identify, international mobile station identity number) etc. identity code is with real handset, truly the ESN/IMSI of SIM card is just the same, the AKEY (Authentication Key, authentication password) of part is also just the same.
At present, the CallHistoryCount authentication can realize the measuring ability to illegal CDMA terminal (as clone's mobile phone and clone SIM card etc.) as an important component part of cdma system authentication.CallHistoryCount is the call meter of agreement regulation, an initial CallHistoryCount is arranged in the user terminal when opening an account, simultaneously at HLR (Home Location Register, Home Location Register) in, also specify an identical CallHistoryCount among the AC (Authentication Centre, AUC).In calling out access procedure, also can preserve the current CallHistoryCount of user terminal (when public enciphered data is shared, preserve, otherwise in AC, preserve) among the VLR (Visitor Location Register, VLR Visitor Location Register) at VLR.Simultaneously, in calling out access procedure, network side AC/VLR also can be as required by COUNT more new technological process refresh CallHistoryCount on the user terminal, for example each location registers or make the CallHistoryCount on the user terminal add 1 when calling out.
When sending to insert, user terminal can carry the inner CallHistoryCount that preserves of user terminal when asking at every turn, whether consistent during the network side authentication with the CallHistoryCount of AC/VLR preservation according to the CallHistoryCount that judges user terminal to send up, if unanimity then think authentication success, otherwise think failed authentication.
Because the identity code such as IMSI/ESN/AKEY in the user terminal all are fixedly to write deadly, illegal terminal (as cloning mobile phone etc.) is just can't be detected by network side after duplicating fully.But CallHistoryCount is a variable value of preserving at user terminal, illegal terminals such as clone's mobile phone can't duplicate, even also can't guarantee after duplicating to upgrade synchronously,, CallHistoryCount can effectively solve illegal terminal problems such as clone's mobile phone so participating in authentication with network side.
Yet also there is defective in the existing technology of utilizing CallHistoryCount to participate in authentication work, with this modal user terminal of mobile phone is example, in the user mobile phone calling procedure, network side is CallHistoryCount in the new cell-phone more all at any time, and some abnormal conditions may cause the inconsistent of the CallHistoryCount that preserves in the mobile phone and network side.For example: mobile phone has been received A interface parameters update request and the CallHistoryCount that self preserves has been added 1, reported normal response, but because the signaling link failure of network side has caused AC/VLR not receive the parameter update response that mobile phone reports, what will cause that the CallHistoryCount of network side and mobile phone preserve is inconsistent.Just relate to the problem that CallHistoryCount recovers in this case.If network side simply upgrades with the CallHistoryCount that mobile phone reports, real handset can't insert in the time of can causing cloning the mobile phone access, thereby makes the authentication functions of CallHistoryCount lose meaning.
Summary of the invention
The problem to be solved in the present invention provides a kind of implementation method and device that improves terminal authentication, utilizes CallHistoryCount to carry out the method for terminal authentication in the prior art to improve, and the user can normally be inserted.
For achieving the above object, the invention provides a kind of implementation method of improving terminal authentication, may further comprise the steps:
A, network side carry out the CallHistoryCount authentication to user terminal, and the user terminal of refusal failed authentication inserts;
B, described network side obtain the PIN of the user terminal of described failed authentication;
C, described network side judge whether described PIN is correct, if correct, then carry out the synchronous renewal of CallHistoryCount, otherwise do not upgrade synchronously.
Also comprise before the steps A:
D, user terminal report the request of access and the current CallHistoryCount of described user terminal to network side.
Steps A specifically comprises the steps:
A1, network side carry out the CallHistoryCount authentication, the CallHistoryCount of more described user terminal to send up and the CallHistoryCount of network side preservation;
A2, described two CallHistoryCount then failed authentication inequality, described network side are refused described user terminal and are inserted.
Also comprise between steps A and the step B:
E1, described network side send update notification and update method to the user terminal of described failed authentication;
The user terminal of E2, described failed authentication sends the current CallHistoryCount of user terminal of synchronous update request of CallHistoryCount and described failed authentication to mobile switching centre;
E3, described mobile switching centre are sent to network side with the current C allHistoryCount of the user terminal of described failed authentication, and request is upgraded synchronously.
Synchronous update request sends by special service number or condition code mode described in the step e 2.
The user terminal current C allHistoryCount of failed authentication described in the step e 3 sends by FEATUREREQUEST or ORIGINAL REQUEST mode.
Step B specifically comprises the steps:
B1, described network side notify the user terminal of described failed authentication to send PIN;
The user terminal of B2, described failed authentication is sent to network side with described PIN.
Step C specifically comprises the steps:
The described PIN that C1, network side will receive sends to AUC;
C2, described AUC judge whether described PIN is correct, if correctly then go to step C3, otherwise go to step C4;
C3, described network side are updated to the CallHistoryCount of described user terminal to send up with the CallHistoryCount of its current preservation, send synchronous renewal to described user terminal and successfully notify and finish;
C4, described network side send to described user terminal and upgrade failure notification and end synchronously.
The present invention also provides a kind of device that improves terminal authentication, comprises authenticating unit, upgrades authentication unit, CallHistoryCount memory cell, PIN code memory cell and upgrade processing unit synchronously synchronously;
Wherein, authenticating unit is used for user terminal is carried out the CallHistoryCount authentication, refuses to insert and report synchronous renewal authentication unit for the user terminal of failed authentication;
Upgrade synchronously authentication unit and be used for the PIN code that PIN code that the user terminal from described failed authentication is got access to and PIN code memory cell user terminal set in advance and compare, and comparative result is sent to synchronous renewal processing unit;
The CallHistoryCount memory cell provides the CallHistoryCount of the described user terminal of network side of its storage on the one hand to authenticating unit; On the other hand, accept to upgrade synchronously the operation for the CallHistoryCount of its storage of processing unit;
The PIN code memory cell is used for the PIN code that the described user terminal with its storage sets in advance and offers synchronous renewal authentication unit;
Upgrade the Synchronous Processing that processing unit is used for carrying out according to the PIN code comparative result that synchronous renewal authentication unit sends CallHistoryCount synchronously.
The Synchronous Processing of described CallHistoryCount is to send renewal failure notification and end to user terminal when described two PIN code are inconsistent; Comparative result be described two PIN code when consistent CallHistoryCount with user terminal uploads cover the current CallHistoryCount of network side that stores in the CallHistoryCount memory cell, and send to upgrade successfully to user terminal and notify.
Compared with prior art, the present invention has the following advantages:
The present invention is by setting user terminal and the synchronous verification condition of network side CallHistoryCount, the synchronous safety of having realized CallHistoryCount upgrades, perfect utilize CallHistoryCount to carry out the mechanism of terminal authentication, efficiently solve the detection problem of illegal terminal in the cdma system, make the terminal authentication that utilizes CallHistoryCount to carry out become possibility.
Description of drawings
Fig. 1 is the flow chart that the present invention improves implementation method first embodiment of terminal authentication;
Fig. 2 is the flow chart that the present invention improves another embodiment of implementation method of terminal authentication;
Fig. 3 is the structure drawing of device that the present invention improves terminal authentication.
Embodiment
Below in conjunction with drawings and Examples, the specific embodiment of the present invention is described in further detail:
The present invention is a kind of improve terminal authentication implementation method first embodiment as shown in Figure 1, may further comprise the steps:
Step s101, user terminal reports the request of access to network side, and carries the current CallHistoryCount of user terminal.
Step s102, network side carries out the CallHistoryCount authentication to user terminal, the CallHistoryCount of more described user terminal to send up and the CallHistoryCount of network side preservation; Described the two when not matching, network side refusing user's terminal inserts.
Step s103, network side sends notice to the user terminal of failed authentication, requires the user to import PIN; Described user imports PIN and confirms on its user terminal; User terminal sends described PIN to network side.
Step s104, whether the described PIN that network side AUC checking gets access to is correct, if checking correctly then go to step s105, otherwise goes to step s106.
Step s105, described network side is updated to the CallHistoryCount of described user terminal to send up with the CallHistoryCount of its current preservation, sends synchronous renewal to described user terminal and successfully notifies and finish.
Step s106, described network side does not upgrade the CallHistoryCount of its current preservation, and sends renewal failure notification and end synchronously to described user terminal.
The present invention is a kind of improve terminal authentication implementation method another embodiment as shown in Figure 2, may further comprise the steps:
Step s201, user terminal reports the request of access to network side, and carries the current CallHistoryCount of user terminal.
Step s202, network side carries out the CallHistoryCount authentication to user terminal, the CallHistoryCount of more described user terminal to send up and the CallHistoryCount of network side preservation; Described the two when not matching, network side refusing user's terminal inserts.
Step s203, network side sends update notification to the user terminal of failed authentication by short message, FLASH or FEATURE NOT mode, and informs update method.
Step s204, described user terminal sends the synchronous update request of CallHistoryCount with special service number or condition code mode to mobile switching centre, and reports described user terminal currency.
Step 205, mobile switching centre is uploaded to network side with the CallHistoryCount of described user terminal to send up by FEATURE REQUEST or ORIGINAL REQUEST mode, and request is upgraded synchronously.
Step s206, described network side sends notice to described user terminal, requires the user to import PIN; Described user imports PIN and confirms on its user terminal; User terminal sends described PIN to network side.
Step s207, whether the described PIN that network side AUC checking gets access to is correct, if checking correctly then go to step s208, otherwise goes to step s209.
Step s208, described network side is updated to the CallHistoryCount of described user terminal to send up with the CallHistoryCount of its current preservation, sends synchronous renewal to described user terminal and successfully notifies and finish.
Step s209, described network side does not upgrade the CallHistoryCount of its current preservation, and sends renewal failure notification and end synchronously to described user terminal.
The present invention also provides a kind of device that improves terminal authentication, as shown in Figure 3, comprising: authenticating unit 10, upgrade authentication unit 20, CallHistoryCount memory cell 30, PIN code memory cell 40 and upgrade processing unit 50 synchronously synchronously.
Wherein, authenticating unit 10 links to each other with CallHistoryCount memory cell 30 with synchronous renewal authentication unit 20, be used for when receiving the access request of user terminal transmission, from CallHistoryCount memory cell 30, obtain the user terminals stored CallHistoryCount of network side institute, then it is compared with its current C allHistoryCount that receives from user terminal, failed authentication when inconsistent, user terminal to failed authentication sends update notification and update method, refuses its access and reports synchronous renewal authentication unit 20; User for the authentication success allows to insert;
Upgrade synchronously authentication unit 20 with authenticating unit 10, upgrade processing unit 50 synchronously and link to each other with PIN code memory cell 40, be used for behind the user terminal of the failed authentication that receives authenticating unit 10 transmissions, its user terminal is sent the synchronous update notification of CallHistoryCount, and obtain the PIN code of its user input, then this PIN code is compared with the PIN code that the user of the storage in advance that gets access to from network side PIN code memory cell 40 is provided with, at last comparative result is sent to synchronous renewal processing unit 50;
PIN code memory cell 40 links to each other with synchronous renewal authentication unit 20, be used to store the PIN code that user terminal sets in advance, when synchronously upgrading authentication unit 20 and need the PIN code of checking user terminal, provide its PIN code that inner user terminal of preserving sets in advance to synchronous renewal authentication unit 20;
More than disclosed only be several specific embodiment of the present invention, still, the present invention is not limited thereto, any those skilled in the art can think variation all should fall into protection scope of the present invention.
Claims (10)
1, a kind of implementation method of improving terminal authentication is characterized in that, may further comprise the steps:
A, network side carry out the CallHistoryCount authentication to user terminal, and the user terminal of refusal failed authentication inserts;
B, described network side obtain the PIN of the user terminal of described failed authentication;
C, described network side judge whether described PIN is correct, if correct, then carry out the synchronous renewal of CallHistoryCount, otherwise do not upgrade synchronously.
2, improve the implementation method of terminal authentication according to claim 1, it is characterized in that, also comprise before the steps A:
D, user terminal report the request of access and the current CallHistoryCount of described user terminal to network side.
3, improve the implementation method of terminal authentication according to claim 1, it is characterized in that, steps A specifically comprises the steps:
A1, network side carry out the CallHistoryCount authentication, the CallHistoryCount of more described user terminal to send up and the CallHistoryCount of network side preservation;
A2, described two CallHistoryCount then failed authentication inequality, described network side are refused described user terminal and are inserted.
4, improve the implementation method of terminal authentication according to claim 1, it is characterized in that, also comprise between steps A and the step B:
E1, described network side send update notification and update method to the user terminal of described failed authentication;
The user terminal of E2, described failed authentication sends synchronous update request of CallHistoryCount and the current CallHistoryCount of described user terminal to mobile switching centre;
E3, described mobile switching centre are sent to network side with the current C allHistoryCount of the user terminal of described failed authentication, and request is upgraded synchronously.
5, as improving the implementation method of terminal authentication as described in the claim 4, it is characterized in that, described in the step e 2 synchronously update request send by special service number or condition code mode.
6, as improving the implementation method of terminal authentication as described in the claim 4, it is characterized in that the current C allHistoryCount of failed authentication user terminal described in the step e 3 sends by FEATURE REQUEST or ORIGINAL REQUEST mode.
7, improve the implementation method of terminal authentication according to claim 1, it is characterized in that, step B specifically comprises the steps:
B1, described network side notify the user terminal of described failed authentication to send PIN;
The user terminal of B2, described failed authentication is sent to network side with described PIN.
8, improve the implementation method of terminal authentication according to claim 1, it is characterized in that, step C specifically comprises the steps:
The described PIN that C1, network side will receive sends to AUC;
C2, described AUC judge whether described PIN is correct, if correctly then go to step C3, otherwise go to step C4;
C3, described network side are updated to the CallHistoryCount of described user terminal to send up with the CallHistoryCount of its current preservation, send synchronous renewal to described user terminal and successfully notify and finish;
C4, described network side send to described user terminal and upgrade failure notification and end synchronously.
9, a kind of device that improves terminal authentication is characterized in that, comprises authenticating unit, upgrades authentication unit, CallHistoryCount memory cell, PIN code memory cell and upgrade processing unit synchronously synchronously;
Wherein, authenticating unit is used for user terminal is carried out the CallHistoryCount authentication, refuses to insert and report synchronous renewal authentication unit for the user terminal of failed authentication;
Upgrade synchronously authentication unit and be used for the PIN code that PIN code that the user terminal from described failed authentication is got access to and PIN code memory cell user terminal set in advance and compare, and comparative result is sent to synchronous renewal processing unit;
The CallHistoryCount memory cell provides the CallHistoryCount of the described user terminal of network side of its storage on the one hand to authenticating unit; On the other hand, accept to upgrade synchronously the operation for the CallHistoryCount of its storage of processing unit;
The PIN code memory cell is used for the PIN code that the described user terminal with its storage sets in advance and offers synchronous renewal authentication unit;
Upgrade the Synchronous Processing that processing unit is used for carrying out according to the PIN code comparative result that synchronous renewal authentication unit sends CallHistoryCount synchronously.
As improving the device of terminal authentication as described in the claim 9, it is characterized in that 10, the Synchronous Processing of described CallHistoryCount is, when described two PIN code are inconsistent, send and upgrade failure notification and finish to user terminal; Comparative result be described two PIN code when consistent CallHistoryCount with user terminal uploads cover the current CaillHistoryCount of network side that stores in the CallHistoryCount memory cell, and send to upgrade successfully to user terminal and notify.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNB2006101531003A CN100536612C (en) | 2006-09-22 | 2006-09-22 | A method and device to perfect the terminal authentication |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNB2006101531003A CN100536612C (en) | 2006-09-22 | 2006-09-22 | A method and device to perfect the terminal authentication |
Publications (2)
Publication Number | Publication Date |
---|---|
CN1953615A true CN1953615A (en) | 2007-04-25 |
CN100536612C CN100536612C (en) | 2009-09-02 |
Family
ID=38059662
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CNB2006101531003A Active CN100536612C (en) | 2006-09-22 | 2006-09-22 | A method and device to perfect the terminal authentication |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN100536612C (en) |
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2010148872A1 (en) * | 2009-11-17 | 2010-12-29 | 中兴通讯股份有限公司 | Network authentication system and terminal access method |
CN102014388A (en) * | 2010-11-18 | 2011-04-13 | 中兴通讯股份有限公司 | Method and system for determining legal terminal |
CN102036246A (en) * | 2010-12-17 | 2011-04-27 | 中兴通讯股份有限公司 | Call historical count (abbreviated as count) updating method and device |
WO2013007139A1 (en) * | 2011-07-13 | 2013-01-17 | 中兴通讯股份有限公司 | Authentication method and home location register |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO1995015066A1 (en) * | 1993-11-24 | 1995-06-01 | Telefonaktiebolaget Lm Ericsson | Authentication for analog communication systems |
US5799084A (en) * | 1996-05-06 | 1998-08-25 | Synacom Technology, Inc. | System and method for authenticating cellular telephonic communication |
AU3348599A (en) * | 1998-03-25 | 1999-10-18 | Telefonaktiebolaget Lm Ericsson (Publ) | System and method of authenticating a mobile station's identity and handling authentication failures in a radio telecommunications network |
DE19818846A1 (en) * | 1998-04-28 | 1999-11-04 | Bernhard Walke | Method of protecting mobile telephone services from misuse using duplicated GSM-SIM cards |
GB2337668A (en) * | 1998-05-21 | 1999-11-24 | Ericsson Telefon Ab L M | Mobile station authentication |
-
2006
- 2006-09-22 CN CNB2006101531003A patent/CN100536612C/en active Active
Cited By (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2010148872A1 (en) * | 2009-11-17 | 2010-12-29 | 中兴通讯股份有限公司 | Network authentication system and terminal access method |
CN101707771B (en) * | 2009-11-17 | 2014-03-12 | 中兴通讯股份有限公司 | Network authentication system and method for network side receiving terminal access |
CN102014388A (en) * | 2010-11-18 | 2011-04-13 | 中兴通讯股份有限公司 | Method and system for determining legal terminal |
WO2012065405A1 (en) * | 2010-11-18 | 2012-05-24 | 中兴通讯股份有限公司 | Method and system for judging legal terminal |
CN102014388B (en) * | 2010-11-18 | 2014-11-05 | 中兴通讯股份有限公司 | Method and system for determining legal terminal |
CN102036246A (en) * | 2010-12-17 | 2011-04-27 | 中兴通讯股份有限公司 | Call historical count (abbreviated as count) updating method and device |
WO2012079438A1 (en) * | 2010-12-17 | 2012-06-21 | 中兴通讯股份有限公司 | Method and apparatus for updating call history count |
CN102036246B (en) * | 2010-12-17 | 2014-12-10 | 中兴通讯股份有限公司 | Call historical count (abbreviated as count) updating method and device |
WO2013007139A1 (en) * | 2011-07-13 | 2013-01-17 | 中兴通讯股份有限公司 | Authentication method and home location register |
Also Published As
Publication number | Publication date |
---|---|
CN100536612C (en) | 2009-09-02 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US10050657B2 (en) | System and method for pairing a UICC card with a particular mobile communications device | |
US6427073B1 (en) | Preventing misuse of a copied subscriber identity in a mobile communication system | |
US6463276B1 (en) | Mobile terminal having conditional blocking of outgoing call requests | |
US6236852B1 (en) | Authentication failure trigger method and apparatus | |
CN104735606B (en) | Communication means and system based on wearable device | |
US20080090548A1 (en) | Method for tracking mobile communication terminal | |
US20070270127A1 (en) | Method and Radio Communication Network For Detecting The Presence Of Fraudulent Subscriber Identity Modules | |
KR20160143333A (en) | Method for Double Certification by using Double Channel | |
CN101711023B (en) | Method and system for realizing interlocking of phone and card | |
CN106792709B (en) | Method, device and terminal for preventing pseudo base station | |
CN100499900C (en) | Method for authentication of access of wireless communication terminal | |
CN100536612C (en) | A method and device to perfect the terminal authentication | |
CN105430738B (en) | A kind of method and device for initiating registration | |
US8583081B2 (en) | Method for calculating a first identifier of a secure element of a mobile terminal according to a second identifier of said secure element | |
CN105188046A (en) | SIM-card-free mobile phone and SIM-card-free mobile phone network registration method and device | |
CN102014388B (en) | Method and system for determining legal terminal | |
US8380165B1 (en) | Identifying a cloned mobile device in a communications network | |
CN100415032C (en) | Interaction method for mobile terminal and network side in mobile communication system | |
US8515455B2 (en) | Method and apparatus for location update in mobile communication system | |
CN116405955A (en) | Terminal communication service method, device and system | |
GB2365687A (en) | Authentication process using sequence numbers | |
CN104254057A (en) | Short message transmission method, system and equipment | |
CN1984491A (en) | Method for eliminating same wireless terminal | |
KR101156044B1 (en) | A method for processing an authentication fail of a mobile phone | |
KR101485137B1 (en) | Method, terminal, smart card for distinguished illegal use of the terminal and computer readable record-medium on which program for executing method thereof |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant |