KR100241214B1 - Authorization method in mobile telecommunication - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to an authentication key verification method and an authentication key generation method.

2. The technical problem to be solved by the invention

An object of the present invention is to provide an authentication key generation method for generating an authentication key using a terminal serial number and an authentication key verification method for verifying whether an authentication key is correctly input by checking an error of an input authentication key.

3. Summary of Solution to Invention

The present invention provides a mobile communication terminal that receives an authentication key input value from a subscriber, comprising: a first step of extracting an authentication key from the authentication key input value; Calculating a parity bit, an exclusive sum and a checksum of the extracted authentication key, and then comparing the authentication key input value with the calculation value of the authentication key to determine whether the authentication key is normally input; A third step of re-entering the authentication key input value by displaying a re-entry message if the authentication key is not normally input; And a fourth step of storing the authentication key A_Key and setting the authentication key as an input value of the authentication algorithm when the authentication key is normally input.

4. Important uses of the invention

The present invention is used to verify the authentication key in a mobile communication system.

Description

Authentication key verification method in mobile communication terminal and authentication key generation method in authentication key generation device

The present invention provides an authentication key verification method for verifying an authentication key inputted by a mobile communication terminal in a code division multiple access (CDMA) method, and an authentication key generation method for generating an authentication key for an authentication key generation device to input into a mobile communication terminal. It is about.

First, when the terms used in the present invention are defined, an authentication key (A_Key) is generated in the authentication key generation device in association with an ESN (Electronic Serial Number), which is a unique serial number of the mobile communication terminal, and moves when inputted to the corresponding mobile communication terminal. The communication terminal verifies that the authentication key is correctly input by checking an error of the input authentication key. Accordingly, the ESN can prevent a subscriber having another mobile communication terminal from illegally copying an authentication key (A_Key) and making a call.

In the code division multiple access (CDMA) mobile communication system, the authentication service includes a terminal serial number (ESN), a mobile identification number (MIN) and an authentication key, which are basic terminal identifiers. The validity of the mobile communication system and the terminal is verified by using the. Authentication methods include registration authentication, call authentication, call authentication, and the like, and a call is made only to a legitimate mobile communication terminal.

In the mobile communication system, an authentication method is introduced to prevent illegal subscriber calls. In this authentication method, an authentication key value is a critical parameter and should be entered without error. However, until now, no method for generating an authentication key and inputting the authentication key correctly into a mobile communication terminal has been proposed.

Accordingly, an object of the present invention is to provide an authentication key generation method for generating an authentication key in an authentication key generation device using a unique serial number (ESN) of a mobile communication terminal.

In addition, another object of the present invention, when the generated authentication key is input to the mobile communication terminal, the mobile communication terminal checks the error of the input authentication key to verify that the authentication key is entered correctly, if the input error occurs, the corresponding message is displayed. The present invention provides a method for verifying an authentication key for correctly inputting an authentication key by displaying and requesting re-entry.

1 is a configuration diagram of a mobile communication system for an authentication service.

2 is an external structural diagram of a mobile communication terminal to which the present invention is applied;

3 is a structural diagram of an authentication key (A_Key) generated by the authentication key generation device and injected into the mobile communication terminal.

4 is an exemplary view of an A-Key composed of 64-bits.

5 is an example of an authentication key (A_Key) configured in units of bytes.

6 is a structural diagram of an 8-bit terminal serial number (ESN).

7 is a flowchart illustrating an authentication key verification method according to the present invention.

8 is a flowchart illustrating a method for generating an authentication key according to the present invention.

* Explanation of symbols for main parts of the drawings

1: public communication network 2: mobile communication exchange / visitor location register

3: Home Location Register (HLR) 4: Authentication Center (AC)

5: base station / base international controller 8: mobile communication terminal

9 antenna 10 display unit

11: keypad

In order to achieve the above object, the present invention provides an authentication key generating apparatus comprising: a first step of calculating a parity bit by classifying an authentication key into a first predetermined unit when receiving an authentication key value consisting of random numbers from a user; Calculating an exclusive sum by classifying the authentication key into a second predetermined unit; A third step of calculating a checksum using an exclusive sum of the authentication key and a serial number (ESN) of the terminal; And setting the authentication key, the parity bit, the checksum, etc. as an authentication key input value and outputting the same to the user.

In order to achieve the above object, the present invention provides a mobile communication terminal that receives an authentication key input value from a subscriber, comprising: extracting an authentication key (A_Key) from the authentication key input value; Calculating a parity bit, an exclusive sum and a checksum of the extracted authentication key, and then comparing the authentication key input value with the calculation value of the authentication key to determine whether the authentication key is normally input; A third step of re-entering the authentication key input value by displaying a re-entry message if the authentication key is not normally input as a result of the determination of the second step; And a fourth step of storing the authentication key (A_Key) and setting the authentication key as an input value of the authentication algorithm when the authentication key is normally input as the determination result of the second step.

Hereinafter, with reference to the accompanying drawings will be described an embodiment according to the present invention;

1 is a configuration diagram of a mobile communication system for an authentication service.

In order to implement the authentication service, an authentication center (AC) 4 must be separately installed in the mobile communication system.

Here, the call registration (mobile subscriber receives a call) as an example, when the caller wants to talk to the mobile subscriber using a public switching telephone network (PSTN) (1) mobile communication switch (MSC: Mobile Switching Center (2), and the mobile communication switchboard 2 reads its Visitor Location Register (VLR) and uses the subscriber's location and registration information. Authentication Center (4) will require authentication. At this time, the mobile communication switch 2 obtains subscriber information from a Home Location Register (HLR) 3 of a subscription area for a newly registered subscriber.

Through this authentication process, the mobile communication switch 2 permits a call in the case of a legitimate subscriber and, in the case of an illegal subscriber, disconnects the call and stops the call.

2 is an external structural diagram of a mobile communication terminal to which the present invention is applied.

The mobile communication terminal 8 is connected to an antenna 9 which transmits and receives a high frequency to and from the base station 5, to the display unit 10 configured using a liquid crystal display (LCD), information input and terminal control. The keypad 11 etc. which are used are provided.

Hereinafter, the principles of the authentication key generation method and the authentication key verification method will be described in detail with reference to FIGS. 3 to 6.

First, an authentication key (A_Key) is a parameter that is a key point for performing code division multiple access (CDMA) authentication defined in ″ IS-95-A ″ and is registered in the authentication center and the mobile terminal in the same way. Should be. In addition, the authentication key (A_Key) is an important value for accessing the mobile communication terminal to the mobile communication system, so it must be accurately injected into the mobile communication terminal. This authentication key (A_Key) is composed of 64 bits binary, 20 digits in decimal.

When the authentication key is input to the mobile communication terminal, a total of 84 bits (26 digits) are input by adding a linear block code (20 bits) in addition to the authentication key (64 bits). Normally, the authentication key (A_Key) is not 26 digits long, so fill the rest with ″ 0 ″. In order to use the method as described above, the mobile communication terminal manufacturer sets the authentication key to its own default value or set all to ″ 0 ″.

On the other hand, when a random random authentication key is input to the authentication key generation device, the input random number is calculated with the serial number (ESN) of the mobile communication terminal, and a new authentication key (A_Key) for input into the mobile communication terminal. Is generated.

That is, the authentication key generating apparatus generates an authentication key A_Key, a parity bit, and a checksum so that the authentication key can be injected into the mobile communication terminal and inputted to the authentication center. In this way, the authentication key (A_Key) is generated by the generation algorithm (same principle as the authentication key verification algorithm) in the authentication key generating device, and the authentication center receives and stores it and uses it as the authentication key.

When the authentication key A_Key is generated by the given generation algorithm and input to the mobile communication terminal, the authentication key is verified by the verification algorithm in the reverse order of the generation algorithm. Re-input is indicated on the display, and if it is entered correctly, pressing a specific button displays the input status.

3 is a structural diagram of an authentication key (A_Key) generated by the authentication key generation device and injected into the mobile communication terminal.

For injection of the authentication key, 84-bit data (26 digits) consisting of a 64-bit authentication key (A_Key), an additional 4-bit parity bit, and a 16-bit checksum are input. At this time, the authentication key (A_Key) is processed as a unit of 32 bits (unsigned long integer) divided into two 64 bits in order to prevent the overflow of the program.

4 is an exemplary view of an A-Key composed of 64-bits.

Referring to FIG. 4, a method of generating parity bits P3, P2, P1, and P0 is described. First, an authentication key A_Key is converted into a binary number. The conversion method starts from the top right corner with A0 to A63 in 16-bit units.

Thereafter, parity bit P0 uses Even parity from A0 to A47, parity bit P1 uses Even parity from A16 to A63, and parity bit P2 is from A32 to A63 and A0 to A15. Even parity up to is used, and finally, parity bit P3 is fixed at ″ 0 ″ so that no overflow occurs when converting to decimal. That is, the parity bits are all created to be 7 or less so that decimal and hexadecimal numbers are the same number.

5 is an example of an authentication key A_Key configured in units of bytes.

First, referring to FIG. 5, a method of calculating S0 and S1, which are exclusive sums of authentication keys used to generate a checksum, is classified and configured in units of bytes (8 bits) as shown in FIG. 5. Next, when an exclusive sum of bytes in each column is calculated, S0 = A0 + A2 + A4 + A6, which is an exclusive sum of bytes of the authentication key, and S1 = A1 + A3 + A5, which is an exclusive sum of bytes of the authentication key. Becomes + A7.

6 is a structural diagram of an 8-bit terminal serial number (ESN).

To generate checksums C0 and C1, the terminal-specific serial number (ESN) and the authentication key (A_Key) are used simultaneously. This is because the authentication key (A_Key) is associated with the mobile communication terminal, so that the authentication key (A_Key) can not be duplicated and used by any mobile communication terminal.

가 되고,

가 된다. 이때, C1=c15, c14,.....,c8의 8비트로 구성되고, C0=c7, c6,.....,c0의 8비트로 구성된다.Looking at the checksum calculation method, first, the serial number (ESN) of the terminal is composed of 32 bits, and when configured in units of 8 bits (bytes), 4 bytes are calculated. As shown in FIG. 6, the serial numbers (ESN) of terminals classified in 8 bit units are E3, E2, E1, and E0. Here, the checksum is an exclusive sum of S1 and E3 and an exclusive sum of SO and EO by using exclusive sum (S1, S0) of the authentication key (A_Key) and E3, E0 of the serial number (ESN) of the terminal. Calculate. In other words,

Become,

Becomes At this time, it consists of 8 bits of C1 = c15, c14, ....., c8, and consists of 8 bits of C0 = c7, c6, ....., c0.

Next, an example of an authentication key generation method will be described in detail.

If a random number such as 3445E26F B5A73533 (decimal number 876995183 3047634227) is inputted to the authentication key generation device to generate the authentication key, it is converted to a 64-bit binary number and classified from A0 to 8-bit by 16-bit unit. That is, the upper right end is A0, the upper left end is A15, the lower right end is A48, and the lower left end is A63.

If the parity bits P0, P1, P2, and P3 are calculated, P0 = 0, P1 = 0, P2 = 0, and P3 = 0. If S1 and S0, which are exclusive sums of the authentication keys, are calculated, S1 = 01010110 (HEX). 56), and S0 = 10111110 (HEX BE). On the other hand, if the serial number (ESN) of the terminal is C900 7509, the checksum C1 = 10011111 (9F), and the checksum C0 = 10110111 (B7).

Accordingly, since the keypad value input to the mobile communication terminal is configured in the order of an authentication key (A_Key), a parity bit, and a checksum, the result is 876995183 3047634227 0 40887.

Next, the authentication key verification method configured in the reverse order of the authentication key generation method described above will be described.

As described above, when the authentication key generated by the authentication key generation device is converted into a decimal number and input to the mobile communication terminal, the authentication key verification algorithm of the mobile communication terminal verifies whether the authentication key is correctly input without error.

If the keypad input value is 876995183 3047634227 0 40887 (decimal) and the terminal serial number (ESN) is C900 7509, first convert 876995183 3047634227, the authentication key (A_Key), to hexadecimal 3445E26F B5A73533. If A_Key) is classified, the upper right is A0, the upper left is A15, the lower right is A48, and the lower left is A63.

If the parity bits P0, P1, P2, and P3 are calculated, P0 = 0, P1 = 0, P2 = 0, and P3 = 0. If S1 and S0, which are exclusive sums of the authentication keys, are calculated, S1 = 01010110 (HEX). 56), and S0 = 10111110 (HEX BE). Then, the checksum C1 = 10011111 (9F), and the checksum C0 = 10110111 (B7).

Accordingly, since the keypad value input to the mobile communication terminal is configured in the order of an authentication key (A_Key), a parity bit, and a checksum, the result is 876995183 3047634227 0 40887.

Therefore, the keypad value entered is the correct value.

7 is a flowchart illustrating an authentication key verification method according to the present invention.

First, after turning on the power of the mobile communication terminal (71) and enters the authentication key (A_Key) input mode (72). At this time, to enter the input mode, press ** 758353266 ## in order. Thereafter, the mobile communication terminal transitions to the input standby state after displaying a message to input the authentication key (A_Key) (73). When the subscriber inputs an authentication key (A_Key) input value in sequence by using the keypad of the mobile communication terminal, the mobile communication terminal performs an authentication key verification algorithm after receiving an authentication key input value of 26 digits (74).

First, the mobile communication terminal extracts an authentication key A_Key from the inputted 26-digit authentication key input value (75). That is, 20 digits except for the last 6 digits of the inputted 26 digit authentication key are extracted as authentication keys, classified in 16 bit units to calculate parity bits (76), and the authentication keys are classified in 8 bit units for exclusive use. The sum is calculated (77), the checksum is calculated using the exclusive sum of the authentication key and the serial number (ESN) of the terminal (78), and the authentication key input value is compared with the calculation value of the authentication key. If it is determined that the authentication key has not been normally input (79), a re-entry message is displayed to re-enter the authentication key input value (80), and then the authentication key input message display process (73) is repeated.

On the other hand, when the authentication key is normally input, the mobile communication terminal stores the authentication key (A_Key) in the nonvolatile memory (81), sets the authentication algorithm input value of the mobile communication terminal (82), and sets this value at every authentication request. Make it available. Thereafter, the mobile communication terminal enters a normal reception standby state, and the authentication key verification ends.

Instead of transmitting the authentication key to the authentication center after generating the authentication key in the authentication key generating device, the authentication key may be directly transmitted from the mobile communication terminal to the authentication center after performing the authentication key verification algorithm. have.

8 is a flowchart illustrating a method for generating an authentication key according to the present invention.

First, when the authentication key generation device receives an authentication key value consisting of random numbers from the user (91), the authentication key is classified into 16-bit units to calculate parity bits (92), and the authentication key is classified into 8-bit units to be exclusive. Calculate the sum (93), calculate the checksum using the exclusive sum of the authentication key and the serial number (ESN) of the terminal (94), and then set the authentication key input values in the order of authentication key, parity bit, and checksum. Next, the authentication key input value is output to the user (95). In this case, the order of the authentication key input values may be changed only because the authentication key, the parity bit, the checksum, and the like need to be arranged according to a predetermined rule.

Meanwhile, the user who obtained the authentication key input value inputs the authentication key input value to the mobile communication terminal and transmits the authentication key input value to the authentication center.

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes can be made in the art without departing from the technical spirit of the present invention. It will be apparent to those of ordinary knowledge.

The present invention as described above, when the generated authentication key is input through the keypad of the mobile communication terminal by checking the error of the input authentication key in the mobile communication terminal, if the input error occurs, by displaying the corresponding message and requesting re-entry, This method has the effect of accurately entering the authentication key.

Claims (6)

A first step of extracting an authentication key (A_Key) from the authentication key input value, the mobile terminal receiving the authentication key input value from the subscriber; Calculating a parity bit, an exclusive sum and a checksum of the extracted authentication key, and then comparing the authentication key input value with the calculation value of the authentication key to determine whether the authentication key is normally input; A third step of re-entering the authentication key input value by displaying a re-entry message if the authentication key is not normally input as a result of the determination of the second step; And A fourth step of storing the authentication key (A_Key) and setting the authentication key as an input value of the authentication algorithm when the authentication key is normally input as a result of the determination of the second step; Authentication key verification method comprising a. The method of claim 1, A fifth step of transmitting the authentication key to the authentication center after the mobile terminal performs verification of the authentication key; Authentication key verification method further comprises. The method according to claim 1 or 2, The first step is, A sixth step of, when the subscriber selects an authentication key (A_Key) input mode after turning on the mobile terminal, the mobile communication terminal transitions to an input standby state after displaying a message for inputting an authentication key (A_Key); And A seventh step of extracting an authentication key (A_Key) from the authentication key input value after receiving the authentication key input value when the subscriber inputs the authentication key input value using the keypad of the mobile communication terminal; Authentication key verification method comprising a. The method according to claim 1 or 2, The second step, Calculating a parity bit by classifying the extracted authentication key into a first predetermined unit; A seventh step of classifying the extracted authentication key into a second predetermined unit and calculating an exclusive sum; And An eighth step of calculating a checksum using the exclusive fit of the authentication key and the serial number (ESN) of the terminal; Authentication key verification method comprising a. The method of claim 4, wherein The storing of the authentication key (A_Key) of the fourth step, Authentication key verification method, characterized in that for storing the authentication key (A_Key) in a nonvolatile memory. The apparatus for generating an authentication key includes: a first step of classifying an authentication key into a first predetermined unit and calculating a parity bit when receiving an authentication key value consisting of random numbers from a user; Calculating an exclusive sum by classifying the authentication key into a second predetermined unit; A third step of calculating a checksum using an exclusive sum of the authentication key and a serial number (ESN) of the terminal; And A fourth step of setting the authentication key, parity bit, checksum, etc. as an authentication key input value and outputting the same to the user; Authentication key generation method comprising a.

Images