KR0160354B1 - Apparatus for and method of generating code to identify user in digital mobile communication system - Google Patents

Abstract

The present invention relates to an apparatus and a method for generating a subscriber authentication code in a digital mobile communication system. In the mobile station call authentication, a random number (RAND) generated by a base station (2) and a memory (76,85) of a mobile station and an authentication center are provided. When inputting the stored shared secret data (SDD), and receiving the shared secret data (RANDBS) generated in the authentication center (5) and the secret key (A_Key) stored in the memory of the authentication center and the mobile station, and receives the shared secret data When the update is confirmed, an operation key generation means 100 for receiving a random number generated by the mobile station and newly generated shared secret data (SSD_NEW) and performing non-linear conversion into random number data (RAND, RANDSSD, RANDBS) to generate an operation key. ; In the mobile station call authentication, a digit (DIGITS) consisting of a random number (RANDSDD) generated by the base station 2, the device serial number (ESN) of the mobile station stored in the memory 82 and 74, and the last dial number input from the subscriber are received. When generating the shared secret data, the random number (RANDSDD) generated by the authentication center 5 and the device serial number (ESN) of the mobile station stored in the memories 82 and 74 are inputted. Random number (RANDBS) generated from the CDMA, the device serial number (ESN) and the mobile station identification number (MIN) of the mobile station stored in the memory (82, 74) are received and randomized using random number data (RAND, RANDSSD, RANDBS). Initial random number generating means for generating initial random number data; And a hash for generating an authentication code or shared secret data by receiving an output of the operation key generating means 100 and an output of the initial random number generating means 200 and converting buffer values using different Boolean functions. By providing the value generating means 300, the mobile operator can protect the legitimate subscribers, prevent illegal use of the user's call, and prevent the loss of billing due to the theft of the mobile operator.

Description

Apparatus and method for generating subscriber authentication code in digital mobile communication system.

1 is a configuration diagram of a digital mobile communication system to which the present invention is applied.

2 is a flowchart of mobile station call authentication in a digital mobile communication system to which the present invention is applied.

3 is a flowchart for updating a shared secret data of a digital mobile communication system to which the present invention is applied.

4 is a data input / output relationship diagram of an authentication code generator during authentication of a mobile station call in a digital mobile communication system to which the present invention is applied.

5 is a data input / output relationship diagram of an authentication code generator in generating shared secret data of a digital mobile communication system to which the present invention is applied.

6 is a data input / output relationship diagram of an authentication code generator when verifying a unique secret data update of a digital mobile communication system to which the present invention is applied.

7 is a system configuration diagram of a mobile station of a digital mobile communication system to which the present invention is applied.

8 is a system configuration diagram of a mobile station of a digital mobile communication system to which the present invention is applied.

9 is an overall configuration diagram of an authentication code generating apparatus according to an embodiment of the present invention.

10 is a detailed block diagram of an operation key generation unit according to an embodiment of the present invention.

Figure 11 is a detailed block diagram of the initial random number generator according to an embodiment of the present invention.

12 is a detailed block diagram of a hash value generator according to an embodiment of the present invention.

13 is a detailed block diagram of a buffer converter according to an embodiment of the present invention.

14 is a block diagram of a rotator according to an embodiment of the present invention.

15 is a block diagram of a Boolean function converter according to an embodiment of the present invention.

16 is an overall flow chart in accordance with one embodiment of the present invention.

17 is a detailed flowchart of an operation key generation step according to an embodiment of the present invention.

18 is a detailed flowchart of an initial random number generation step according to an embodiment of the present invention.

* Explanation of symbols for the main parts of the drawings

100: operation key generation unit 200: initial random number generation unit

300: hash value generation unit

The present invention relates to an apparatus and a method for generating a subscriber authentication code in a digital mobile communication system. In particular, the present invention relates to an incoming call authentication process of a mobile station in order to prevent illegal toll fraud by a user and to protect a valid subscriber. The present invention relates to an apparatus and a method for generating a subscriber authentication code for a digital mobile communication system required for updating secret data.

Since there is no subscriber authentication procedure in the currently used mobile communication system, the spread of mobile phones has led to the theft of call fraud by illegal users as a social problem. For example, in the United States, mobile operators lost $ 500 million in 1994 due to illegal toll fraud.

Accordingly, in the United States, Europe and Japan, subscriber authentication procedures are introduced in the mobile communication system to prevent illegal toll fraud, and are provided to users.

The rapid increase in mobile phone users in our country makes it impossible to accommodate new users in the current analog mobile communication system, so the digital mobile communication using the protection division multiple access method can increase the frequency usage efficiency 10 times than the current method. The system will be developed and commercially available from 1996.

In the new digital divisional communication system based on the code division multiple access method, a subscriber authentication process is defined to prevent illegal users from stealing the phone and protect the legitimate subscribers. Therefore, there is an urgent need for a device for generating an authentication code which is the core of the subscriber authentication process.

The present invention devised to solve the above problems of the prior art is easy to implement in hardware or software, and by the 32-bit microprocessor to reduce the burden required to generate the authentication code in the authentication center operated by the mobile carrier The present invention provides an apparatus and method for generating a subscriber authentication code of a digital mobile communication system, which is suitable for processing and can be easily processed by a 16-bit microprocessor used in a mobile phone to prevent illegal user fraud. There is this.

In order to achieve the above object, the present invention provides a random number (RAND) generated by a base station and shared secret data (SDD) stored in a memory of a mobile station and an authentication center. Receives random number (RANDSSD) generated in the system and a secret key (A_Key) stored in the memory of the authentication center and the mobile station.When confirming the update of the shared secret data, the random number generated by the mobile station (RANDBS) and the newly generated shared secret data (SSD_NEW) Means for generating an operation key by non-linear conversion into random number data (RAND, RANDSSD, RANDBS), and when generating mobile station call authentication, random number generated by the base station (RANDSDD) and device serial number (ESN) of the mobile station stored in memory ) And DIGITS consisting of the last number of dials entered from the subscriber. The number (RANDSDD) and the device serial number (ESN) of the mobile station stored in the memory are inputted, and the random number generated by the mobile station (RANDBS) and the device serial number (ESN) of the mobile station stored in the memory and the mobile station identification when the shared secret data update is confirmed. Initial random number generating means for generating initial random number data by randomizing the number MIN by using random number data RAND, RANDSSD, and RANDBS, inputting the output of the operation key generating means and the output of the initial random number generating means And a hash value generating means for generating an authentication code or shared secret data by converting a buffer value by using different Boolean functions.

In addition, a method for generating an authentication code of a digital mobile communication system including an authentication center that manages a mobile station and a key for mobile station authentication and generates a random number required for subscriber authentication, wherein the data is inputted, non-linear conversion to random data. To generate the operation key data, and to randomize the random key data to generate and output the initial random number data. After performing the first step, the operation key data and the initial random data are different from each other using a Boolean function. And a second step of generating and outputting an authentication code or shared secret data by converting the buffer value.

Hereinafter, with reference to the accompanying drawings will be described an embodiment of the present invention;

1 is a block diagram of a digital mobile communication system to which the present invention is applied. Reference numeral 6 denotes a visit position registration register, respectively.

The mobile station 1 is a mobile telephone owned by a mobile subscriber and includes portable and in-vehicle equipment. The base station 2 is installed at a certain place and wirelessly connects between the mobile station 1 and the mobile communication exchange 3.

The mobile communication switch 3 provides a management function such as radio frequency or channel, a mobile station location tracking function, a handover function, etc. in association with a fixed telephone network.

The primary location registration register 4 permanently maintains a record of the current operating data of the mobile station 1, such as the service profile, the current location of the mobile station 1, and the like.

The visited location registration register 6 temporarily maintains a record of operation data of subscribers at other locations not registered in the main location registration register 4.

The authentication center 5 manages a key for authentication of the mobile station 1 and generates a random number necessary for the subscriber authentication process.

2 is a flowchart of a mobile station call authentication of a digital mobile communication system to which the present invention is applied.

When the mobile station 1 requests a call, the authentication center 5 and the mobile station 1 perform a call authentication procedure for the mobile station 1 which authenticates the legitimacy of the mobile station 1 that requested the call through the base station 2, (1) If the calling authentication procedure is successful, i.e., if the authentication center 5 and the mobile station 1 have the same shared secret data (hereinafter referred to as SSD), the base station 2 selects a channel for the call. Assign to (1).

In more detail, when the mobile station 1 attempts to make a call, the base station 2 sends 32-bit random data (hereinafter referred to as RAND) to the mobile station 1 (10). The mobile station 1 receiving the 32-bit RAND includes a digital serial number consisting of the received RAND and the device serial number (hereinafter referred to as ESN) of the mobile station 1, the last dial number input from the subscriber, The authentication code generator 11 receives the shared secret data SSD_A and generates an 18-bit authentication code (AUTHR) (12).

The mobile station 1 which generated the 18-bit authentication code sends the RANDC and the authentication code, which are the upper 8 bits of the RAND, to the base station 2 (13). The base station 2, which has received the RANDC and the authentication code, compares the RANDC with the upper 8 bits of the RAND transmitted to the mobile station 1, verifies (14) the received RANDC, and if the base station 2 matches, Calling authentication of the mobile station 1 is requested while transmitting the authentication code received in (1) to the authentication center 5 (15).

The authentication center 5 inputs the RAND received from the base station 2 and the ESN, SSD, and DIGITS corresponding to the mobile station 1 requesting the call to the authentication code generator 16, thereby providing an authentication code (AUTHR '). Create The authentication center 5 compares the authentication code (AUTHR ') calculated by the mobile station 1 with the authentication code (AUTHR') generated by the mobile station 1 received through the base station 2 (18). If it does not match (20), and if it does not match, performs the identification request response procedure or shared secret data update process (19).

The base station 2 assigns a channel to the mobile station 1 when an authorization message is input from the authentication center 5 (21).

3 is a flowchart of a shared secret data update of a digital mobile communication system to which the present invention is applied.

The update of the shared secret data may be performed when a legitimate subscriber fails to authenticate due to a mismatch of the shared secret data between the mobile station 1 and the authentication center 5, or when the shared secret data is found to be stolen. For this purpose, the procedure performed by the authentication center 5 includes a shared secret data generation procedure and a shared secret data update confirmation procedure.

The mobile station 1 shares the 64-bit secret key (A_Key) with the authentication center 5 when registering with the mobile communication service provider. When the mobile station 1 receives a shared secret data update command from the authentication center 5 (30), the mobile station 1 receives the 56-bit random number (RANDSSD) and the mobile station 1 received from the authentication center 5; The new 64-bit long shared secret data SSD_A_NEW and SSD_B_NEW are generated using the 64 bit long secret key A_Key and the ESN of the mobile station 1 as inputs to the authentication code generator 31.

The authentication center 5 similarly inputs the same data as the mobile station 1 into the authentication code generator 32 to generate SSD_A_NEW and SSD_B_NEW.

The shared secret data update confirmation process is performed to confirm whether the respective shared secret data generated by the mobile station 1 and the authentication center 5 match. The mobile station 1 selects (33) a 32-bit long random number (RANDBS) and sends it to the authentication center 5 (34).

The mobile station 1 then uses the 32-bit random number (RANDBS) selected by itself, the newly created shared secret data SSD_A_NEW, the ESN of the mobile station 1, and MIN1 consisting of 24 bits of the mobile station identification number (MIN). (18) generates an authentication code (AUTHBS) of 18 bits in length (38).

The authentication center 5 generates a 32-bit long random number (RANDBS) received from the mobile station 1, MIN1 composed of 24 bits of the ESN and mobile station identification number (MIN) of the mobile station 1, generated by the authentication center 5. Among the new 64-bit shared secret data, SSD_A_NEW is input to the authentication code generator 36 to generate an 18-bit long authentication code (AUTHBS ') and transmitted to the mobile station 1 (37).

The mobile station 1 compares the authentication code (AUTHBS ') received from the authentication center 5 with the authentication code (AUTHBS) generated by itself (39). If the two values match, the mobile station 1 shares the existing share. It replaces the secret data SSD_A_NEW and SSD_B_NEW, and transmits the shared secret data update confirmation result to the authentication center 5 (40).

When the success message is input, the authentication center 5 replaces the shared secret data corresponding to the mobile station 1 with the newly generated shared secret data.

4 is a data input / output relationship diagram of an authentication code generator in authentication of a mobile station call in a digital mobile communication system to which the present invention is applied.

Data input to the authentication code generator 45 at the time of mobile station call authentication is received from the 32-bit long random number (RAND) 41, the mobile station device serial number (ESN) 42, and the subscriber inputted from the base station 2. A 24-bit long digit (DIGITS) 43 and shared secret data (SSD_A) composed of the last number of dials to be input, and the output is an 18-bit long authentication code (AUTHR) 46.

5 is a data input / output relationship diagram of an authentication code generator when generating shared secret data in a digital mobile communication system to which the present invention is applied.

Data input to the authentication code generator 54 at the time of generating the shared secret data is a 5-bit random number (RANDSSD) 51 generated by the authentication center 5, and a 32-bit mobile station device serial number (ESN) 52. ) Is a 64-bit long secret key (A_Key), and the output is a 64-bit SSD_A_NEW 55 and an SSD_B_NEW 56 having two bits of shared secret data.

6 is a data input / output relationship diagram of an authentication code generator in confirming shared secret data update of a digital mobile communication system to which the present invention is applied.

The input data of the authentication code generator 65 at the time of confirming the shared secret data update is a 24-bit random number (RANDBS) 61 generated by the mobile station, the ESN 62 of the 32-bit mobile station, and 24 bits of the mobile station identification number. The configured MIN1 63, a newly generated 64 bit SSD_A_NEW 64, and the output data is an 18 bit long authentication code (AUTHRS) 66.

7 is a system configuration diagram of a mobile station of a digital mobile communication system to which the present invention is applied. In the drawing, reference numeral 71 denotes a transceiver device, 72 denotes a system control device, 73 denotes an input / output control device, 74 denotes a memory, and 75 denotes an authentication code generation device. 76 denotes a memory, 77 a keypad, and 78 a display window.

The mobile station 1 includes a transceiver 71 for transmitting and receiving data through an antenna, a memory 74 for storing a device serial number (ESN) and a mobile station identification number (MIN) of the mobile station, and receiving data from a user. A keypad 77, an output window 78 for outputting data on the screen, an input / output control device 73 connected to the keypad 77 and the display window 78 to control input / output data, and generating authentication codes or shared secret data. The authentication code generating device 75, the memory 76 for storing the secret key (A_Key), the shared secret data (SSD_A, SSD_B) connected to the authentication code generating device 75, the overall operation of the mobile station (1) It consists of the system control apparatus 72 to control.

8 is a configuration diagram of an authentication center system of a digital mobile communication system to which the present invention is applied, where reference numeral 81 is a central processing unit, 82 is a memory, 83 is a peripheral device, 84 is an authentication code generation device, and 85 is a memory. Represent each.

The authentication center 5 includes a central processing unit 81 for carrying out the present invention, various peripheral devices 83 including input / output devices, a memory 82 for storing a device serial number (ESN), a mobile station identification number and a program, and the like. And a memory 85 in which the data to be protected associated with the authentication code generation device 84, such as the authentication code generation device 84 of the present invention, a secret key (A_Key) of each mobile station, secret shared data, and the like, is recorded. .

9 is an overall configuration diagram of an authentication code generation device according to an embodiment of the present invention.

The authentication code generation device includes an operation key generation unit 100, an initial random number generation unit 200, and a hash value generation unit 300.

First, five 32-bit data K0, K1, RAN, M0, and M1 inputted to the authentication code generator depend on the function of the authentication code generator in the digital mobile communication system.

For example, when used in the mobile station call authentication procedure of FIG. 2, RAN = RAND, K1 = upper 32 bits of SSD_A, K0 = lower 32 bits of SSD_A, M0 = ESN, M1 = DIGITS, and FIG. When used in the data update procedure, RAN = lower 32 bits of RANDSSD, K0 = lower 32 bits of A_Key, K1 = upper 32 bits of A_Key, M0 = upper 24 bits of RANDSSD, M1 = ESN When the shared secret data update is confirmed, RAN = RANDBS, K0 = lower 32 bits of SSD_A_NEW, K1 = upper 32 bits of SSD_A_NEW, and M0 = ESN, M1 = MIN1.

First, the operation key generator 100 non-linearly converts input 64-bit key data K0 and K1 into 32-bit random data RAN to generate four 32-bit operation keys used in the hash value generator 300.

The initial random number generation unit 200 uses the 32-bit random number data RAN to initially randomize M0 and M1 having values such as the device serial number ESN, which is not changed as unique data of each mobile station, and MIN1 composed of a part of the mobile station identification number. Is converted into four 32-bit data.

The hash value generator 300 is composed of four buffer converters and performs four times to generate an 18-bit authentication code or 128-bit shared secret data.

10 is a detailed block diagram of the operation key generation unit 100 of FIG.

The output of the operation key generator 100 is WK0, WK1, WK2, and WK3. The process for generating them is as follows.

First, the first exclusive logical OR gate 101 receives three logical bit ORs from three 32-bit data RAN, K0, and K1 input to the operation key generation unit 100, and performs an exclusive logical OR on each bit to perform a first OR 102. )

The first rotator 102 rotates the input data n bits to the right and outputs the second full adder 106 and the fifth full adder 111.

The second full adder 106 receives the rotated output of the first rotator 102 and an external input K1 and performs 32-bit full addition to output to the third full adder 107.

The second exclusive OR gate 103 receives K1 and RAN and performs an exclusive OR on each bit to output the first exclusive adder 104 and the sixth full adder 112.

The first full adder 104 receives the output of the external K0 and the second exclusive OR gate 103 and performs 32-bit full addition to the second rotator 105.

The second rotator 105 rotates the data input from the first full adder 104 by n bits to the third full adder 107 and the fourth full adder 109.

The third full adder 107 receives the output of the second full adder 106 and the rotated data of the second rotator 105 and performs 32-bit full addition to the third rotate adder 108. do.

The third rotator 108 rotates the data input from the third full adder 107 by n bits to the right, and this value becomes 32 bits WK2.

The fifth full adder 111 receives the output of the first rotator 102 and the output WK2 of the third rotator 108, performs 32-bit full addition, and outputs the result.

The fourth full adder 109 receives the output WK2 of the third rotator 108 and the output of the second rotator 105, performs 32-bit full addition, and outputs the result to the fourth rotator 1110.

The fourth rotator 110 receives the output of the fourth full adder 109 and rotates the n-bit right to output the result. The value becomes WK1.

The sixth full adder 112 receives the output WK1 of the fourth rotator 110 and the output of the second exclusive OR gate 103, and adds the 32-bit full sum to output the WK0.

FIG. 11 is a detailed configuration diagram of an initial random number generation unit 200 for randomizing M0 and M1 by 32-bit random number data RAN.

First, the first exclusive OR gate 201 receives M1 and a 32 bit random data RAN and performs an exclusive OR on each bit to output MR1.

The second exclusive OR gate 202 receives M0 and the 32-bit random data RAN and performs an exclusive OR to output MR0.

The third exclusive-OR gate 203 receives 32-bit data in which the lower 16-bit data of M0 is the upper 16 bits, receives the 32-bit data in which the upper 16-bit data of M1 is the lower 16 bits, receives the 32-bit random data RAN, and performs an exclusive OR. Output MR3.

The fourth exclusive OR gate 204 receives 32-bit data having the upper 16-bit data of M0 as the lower 16 bits, the lower 16-bit data of the M1 as the upper 16 bits, and receives the 32-bit random data RAN. Output MR2.

12 is an overall configuration diagram of the hash value generator 300 according to an embodiment of the present invention.

The input of the hash value generator 300 is the 32-bit data WK0, WK1, WK2, WK3, which are the outputs of the operation key generator 100, and the 32-bit data MR0, MR1, MR2, which are the outputs of the initial random number generator 200. MR3, the hash value generator 300 is composed of four buffer converters 301 to 304 and performs four times, thus performing the buffer buffer 16 times.

The first buffer converter 301 newly sets the buffer B0 value by MR0 of the initial WK0 random number among the operation keys among the internal 32-bit buffer values B0, B1, B2, and B3 of the hash value generator 300.

The second buffer converter 302 newly sets the buffer B1 value by the operation key WK1 and the initial random number MR1.

The third buffer converter 303 newly sets the buffer B2 value by the operation key WK2 and the initial random number MR2.

The fourth buffer converter 304 newly sets the buffer B3 value by the operation key WK3 and the initial random number MR3.

FIG. 13 is a detailed block diagram of each buffer converter 301-304 according to an embodiment of the present invention.

Each buffer converter 301-304 used in the hash value generator 300 is configured in the same manner.

One buffer conversion unit inputs six 32-bit data I1, I2, I3, I4, I5, and I6 to output four 32-bit data O1, O2, O3, and O4.

Each input corresponds to one of the internal buffers B0, B1, B2, and B3 of the hash value generator 300, one of the operation keys WK0, WK1, WK2, and WK3, and one of the initial random numbers MR0, MR1, MR2, and MR3.

More specifically, in each step, I1, I2, I3, and I4 correspond to any one of B0, B1, B2, and B3, respectively, I5 is one of WK0, WK1, WK2, WK3, I6 is MR0, MR1, MR2, Corresponds to one of MR3.

Each output O1, O2, O3, O4 also corresponds to any one of the internal buffers B0, B1, B2, and B3.

In order to generate outputs O1, O2, O3, and O4, first, a Boolean function converter 321 that inputs five 32-bit data of I2, I3, I4, I5, and I6 is input to output 32-bit data. The first rotator 322 receives the output of the Boolean function converter 321 and rotates the n bit left to output to the first full adder 323.

The first full adder 323 receives the output of the first rotator 322 and the output of the Boolean function converter 321, performs 32-bit full addition, and outputs the result to the second full adder 324.

The second full adder 324 receives the output of I1 and the first full adder 323, performs 32-bit full addition, and then outputs the result to the second rotator 325.

The second rotator 325 rotates the output of the second full adder 324 by n bits and outputs O4.

In the buffer conversion units 301 to 304 of the authentication code generator, I1, I2, I3, I4, I5, I6, O1, O2, O3, and O4 are set as follows.

In the first buffer converter 301, I1 = B0, I2 = B1, I3 = B2, I4 = B3, I5 = WK0, I6 = MR0, O1 = B1, O2 = B2, O3 = B3, O4 = B0 do.

In the second buffer converter 302, I1 = B1, I2 = B2, I3 = B3, I4 = B0, I5 = WK1, I6 = MR1, O1 = B2, O2 = B3, O3 = B0, O4 = B1 do.

In the third buffer converter 303, I1 = B2, I2 = B3, I3 = B0, I4 = B1, I5 = WK2, I6 = MR2, O1 = B3, O2 = B0, O3 = B1, O4 = B2 do.

In the fourth buffer converter 304, I1 = B3, I2 = B0, I3 = B1, I4 = B2, I5 = WK3, I6 = MR3, O1 = B0, O2 = B1, O3 = B2, O4 = B3 do.

14 is a block diagram of a rotator according to the present invention.

The rotator receives a 32-bit input and outputs 32-bit data obtained by rotating the 32-bit input to the right (or left) by n bits, which is the number of rotate bits, according to the rotation direction and the number of rotate bits.

For example, if a 12-bit right rotator has 1234abcd as its input, with 16 representations, the output will be bcd1234a with 12-bit rotated to the right.

15 is a block diagram of a Boolean function converter 321 according to the present invention.

It takes five 32-bit inputs A, B, C, D, and E and outputs 32-bit data Z converted by a Boolean converter consisting of AND and exclusive OR.

The content of the concrete output Z is the Boolean function used. (a, b, c, d, e is 0 or 1) and the five input 32 bits are A = A ₃₁ A ₃₀ . A ₁ A ₀ , B ₃₁ B ₃₀ . B ₁ B ₀ , C ₃₁ C ₃₀ . C ₁ C ₀ , D ₃₁ D ₃₀ . D ₁ D ₀ , E ₃₁ E ₃₀ . If E ₁ E ₀ , output Z ₃₁ Z ₃₀ . Z ₁ Z ₀ is as follows.

16 is an overall flowchart according to an embodiment of the present invention.

First, when 152-bit data is input (400), non-linear conversion of the input 64-bit key data K0, K1 to 32-bit random number data RAN generates four 32-bit operation keys used in the hash value generation unit, and 32-bit random number data. Using RAN, M0 and M1 having values such as device serial number ESN and MIN1 composed of a part of mobile station identification number, which are not changed as unique data of each mobile station, are initially randomized, converted into four 32-bit data, and outputted. In operation 500, the generated operation key and the initial random number are generated by outputting 18 bits of authentication code or 128 bits of shared secret data through four buffer conversion processes using four different Boolean functions (700).

17 is a detailed flowchart of an operation key generation step according to an embodiment of the present invention.

First, when three 32-bit data RAN, K0, and K1 are input (501), a first exclusive OR process is performed for each bit of K0 and RAN in the input data (502), and a first bit rotation process is performed (503). In operation 504, a second exclusive OR operation is performed on the input K1 and the RAN bit by bit.

The second bit rotation process may be performed by full-adding the data 503 having performed the first bit rotation process and the input K1 (505), and adding the data 504 having performed the second exclusive OR with the input K0. (506).

The full-added data 505 and the second-bit rotated data 506 are further added again to perform a third bit rotation process to output the output data WK2 (507).

The third bit rotated data 507 and the first bit rotated data 503 are added together to output the output data WK3 (508).

The second bit rotated data 506 and the third bit rotated data 507 are subjected to full addition to perform a fourth bit rotation process to output the output data WK1 (509), and to rotate the fourth bit. The output data WK0 is output by summing one data 509 and the data 9504 having performed the second exclusive OR.

18 is a detailed flowchart of an initial random number generation step according to an embodiment of the present invention.

First, when M0, M1, and RAN are input (511), the first exclusive OR process is performed on M0 and M1 by the RAN (512), and after rearranging data of the input M0 and M1 (513), the second exclusive OR is performed. In operation 514, the output data MR0, MR1, MR2, and MR3 are output (515).

The present invention constructed and operated as described above is applied to the subscriber authentication process of the digital mobile communication system using the new code division multiple access method (CDMA) to protect the right subscribers and prevent illegal user from stealing the call. In addition, there is an effect that can prevent the loss of billing due to the theft of the mobile operator.

Claims (12)

In the mobile station call authentication, the random number (RANDSSD) generated by the base station 2 and the shared secret data (SSD) stored in the memory of the mobile station and the authentication center are input. Input random number (RANDSSD) and secret key (A_Key) stored in the memory of authentication center and mobile station.When checking shared secret data update, random number (RANDSSD) generated in mobile station and newly generated shared secret data (SSD_NEW) Operation key generating means (100) for receiving an input and non-linearly converting the random number data (RAND, RANDSSD, RANDBS) to generate an operation key; In the mobile station call authentication, a digit (DIGITS) including a random number (RANDSSD) generated by the base station 2, the device serial number (ESN) of the mobile station stored in the memory 82 and 74, and the last dial number input from the subscriber is received. When generating the shared secret data, the random number (RANDSSD) generated by the authentication center 5 and the device serial number (ESN) of the mobile station stored in the memories 82 and 74 are inputted. Random number (RANDSSD) generated from the CDMA) and the device serial number (ESN) and the mobile station identification number (MIN) of the mobile station stored in the memory (82,74) are received and randomized using random number data (RANDSDD, RANDSSD, RANDBS). Initial random number generating means for generating initial random number data; And a hash for generating an authentication code or shared secret data by receiving an output of the operation key generating means 100 and an output of the initial random number generating means 200 and converting buffer values using different Boolean functions. Apparatus for generating a subscriber authentication code in a digital mobile communication system, comprising: a value generating means. The method of claim 1, wherein the operation key generating means (100) comprises: first exclusive OR gate means (101) for performing an exclusive OR on the bit basis of the input data K0 and RAN; the first exclusive OR gate means (101); First rotator means (102) for bit-rotating the output of " Second full addition means (106) for performing a full addition on the output of the first rotator means (102) and an external input K1; Second exclusive OR gate means 103 which receives an external input K1 and RAN and performs an exclusive OR on each bit and outputs the exclusive OR; A first full adder (104) that receives an output of an external input K0 and the output of the second exclusive OR gate means (103) and adds it to the output; Second rotator means (105) for bit-rotating the output of said first full-add means (104); A third full adder (107) which receives the output of the second full adder (106) and the output of the second rotator means (105) and adds it to the full adder; Third rotator means (108) for bit-rotating the output of said third full addition means (107) to output an operation key WK2; Fifth full adding means (111) for receiving the output of the first rotator means (102) and the output of the third rotator means (108) and outputting the WK3; Fourth full adder means (109) for receiving the output of the third rotator means (108) and the output of the second rotator means (105), and totally adding the outputs; Fourth rotator means (110) which receives the output of the fourth full adder (109) and bit rotates it to output the operation key WK1; And a sixth full adder 112 which receives the output of the fourth rotator means 110 and the output of the second exclusive OR gate means 103 and totally adds it to output the operation key WK0. Subscriber authentication code generation device in a digital mobile communication system. 3. The apparatus of claim 2, wherein the rotator means is an arbitrary value N-bit right rotator. 3. The apparatus of claim 2, wherein the full add means is a 32 bit full add means. The first exclusive logical sum gate means 201 of claim 1, wherein the initial random number generating unit 200 receives an input M1 and a 32-bit random number data RAN and performs an exclusive OR on each bit to output an initial random number MR1. ; Second exclusive OR gate means 202 for receiving the input M0 and the 32-bit random number data RAN and performing an exclusive OR to output an initial random number MR0; The first 16-bit data of the lower 16-bit data of the input M0 and the lower 16-bit of the 16-bit data of the input M1 are input, and the 32-bit random data RAN is received exclusively, and the initial random number MR3 is output. Triple exclusive-OR gate means 203; And receiving 32-bit data having the upper 16-bit data of the input M0 as the upper 16 bits and the lower 16-bit data of the input M1 as the upper 16 bits, receiving 32-bit random data RAN, and performing an exclusive OR to output an initial random number MR2. And a fourth exclusive logical sum gate means (204). The method of claim 1, wherein the hash value generating means 300, subscriber authentication code in the digital mobile communication system, characterized in that it comprises at least one buffer conversion means for performing a conventional buffer value conversion of different Boolean functions Generating device. The buffer changing means according to claim 6, wherein the buffer changing means is further configured to newly set the buffer B0 value by the operation key WK0 and the initial random number MR0 among the internal 32-bit buffers B0, B1, B2, and B3 of the hash value generating means 300. A second buffer conversion means for newly setting a buffer B1 value by an operation key WK1 and an initial random number MR1 among the internal 32-bit buffers B0, B1, B2, and B3 values of the hash value generating means 300; 302; A third buffer converting means 303 for newly setting a buffer B2 value by an operation key WK2 and an initial random number MR2 among the internal 32-bit buffers B0, B1, B2, and B3 of the hash value generating means 300; and the hash value And a fourth buffer converting means 304 for newly setting the buffer B3 value by the operation key WK3 and the initial random number MR3 among the internal 32-bit buffers B0, B2, and B3 values of the generating means 300. Apparatus for generating subscriber authentication code in a system. The buffer converting means of any one of the first to fourth buffer converting means (301 to 304) is any one of the internal buffers B0, B1, B2, and B3 of the hash value generating means (300). Boolean function that receives data from any one of WK0, WK1, WK2, and WK3, and any one of the initial random numbers MR0, MR1, MR2, and MR3. Conversion means 321; First rotator means (322) for receiving the output of the Boolean function converting means (321) and bit-rotating the output of the output; First full adding means (323) for receiving the output of the first rotator means (322) and the output of the Boolean function converting means (321) and performing 32-bit full addition; The second electronic device that receives any one of the internal buffers B0, B1, B2, and B3 of the hash value generating means 300 and the output of the first full adding means 323 and performs 32-bit full addition to output the second electric power. Adding means 324; And second rotator means (325) for bit-rotating and outputting the output of said second full-add means (324). 9. The apparatus of claim 8, wherein the rotator means is any N-bit left rotator. A method for generating an authentication code of a digital mobile communication system including a mobile station, which is a mobile phone, and an authentication center that manages keys for mobile station authentication and generates a random number required for subscriber authentication, wherein the data is inputted and nonlinearly converted into random data. A first step (400, 500) of generating key data, randomizing the same using random data, and generating and outputting initial random data; And a second step (600,700) of generating and outputting an authentication code or shared secret data through a process of converting a buffer value by using a Boolean function after performing the first step (400,500). Subscriber authentication code generation method in a digital mobile communication system, characterized in that. 12. The method of claim 10, wherein the operation key generation process of the first step 400, 500, when 32-bit data RAN, K0, K1 is input from the outside, performs a first exclusive logical OR process on the input data K0 and RAN bit by bit. A third step (501 to 504) of performing a first bit rotation process and performing a second exclusive OR process on the input K1 and RAN bit by bit; The data obtained by performing the first bit rotation process of the third step (501 to 504) and the external input K1 are added together, and the data performing the second exclusive logical sum of the external input K0 and the third step (501 to 504). A fourth step of performing a third bit rotation process by performing a second bit rotation process, and then performing a third bit rotation process to perform a third bit rotation process again. Steps 505 to 507; A fifth step (508) of outputting the output data WK3 by totally adding the third bit rotated data of the fourth step (505 to 507) and the first bit rotated data of the third step (501 to 504); A sixth step 509 of outputting the output data WK1 by performing a fourth bit rotation process by performing a full addition of the second bit rotated data and the third bit rotated data of the fourth steps 505 to 507; And a seventh step (510) of outputting the output data WK0 by adding the fourth bit rotated data of the sixth step 509 and the data performed by the second exclusive logical sum of the third steps 501 to 504. Subscriber authentication code generation method in a digital mobile communication system comprising a. 11. The method of claim 10, wherein the initial random number generation process of the first step (400,500), when the external input data M0, M1, RAN is input, performs a first exclusive logical OR process for M0, M1 by the RAN, input M0 And rearranging the data of M1 and performing a second exclusive OR process to output initial random number data MR0, MR1, MR2, and MR3 (511 to 515). Code generation method.