KR20030087691A - Method of authenticating user on the basis of peculiar information of user and cdma system using the same in cdma network using user identity module - Google Patents

Abstract

PURPOSE: A subscriber authentication method based on intrinsic subscriber information in a CDMA mobile network using a UIM(User Identity Module) and a CDMA system using the same are provided to precisely execute subscriber authentication and to prevent MEs(Mobile Equipments) from being illegally used. CONSTITUTION: A UIM card is inserted into a subscriber's ME(S101). If the subscriber turns on the power of the ME, a VLR(Visitor Location Register) composes an authentication value(AUTH) and an authentication random number(RAND) into an overhead message train. The overhead message train(omt£AUTH=1,RAND|) is received to a base station via an MSC(Mobile Switching Center) and a BSC(Base Station Controller), and then is sent to the ME(S102). Receiving the overhead message train(omt£AUTH=1,RAND|), the ME starts subscriber authentication procedures and transmits an authentication random number(RANDC) to the UIM card(S103). The UIM card creates an authentication result value(AUTHR) for subscriber authentication and transmits it to the ME(S104). Receiving the authentication result value(AUTHR), the ME puts a UIMID, an MSID(Mobile Subscriber ID), and the authentication random number(RAND) into a location registration message with the authentication result value(AUTHR) and transmits the message(Register£MSID,UIMID,AUTHR,RAND|) to the base station. The message(Register£MSID,UIMID,AUTHR,RAND|) is transferred to the VLR via the BSC and the MSC(S105).

Description

Subscriber authentication method based on subscriber's unique information in code division multiple access mobile communication network using subscriber identification module, and code division multiple access system using the same {METHOD OF AUTHENTICATING USER ON THE BASIS OF PECULIAR INFORMATION OF USER AND CDMA SYSTEM USING THE SAME IN CDMA NETWORK USING USER IDENTITY MODULE}

The present invention relates to a subscriber authentication method based on subscriber's unique information and a code division multiple access system used in a code division multiple access mobile communication network using a subscriber identity module that accurately authenticates subscribers and prevents illegal use of a mobile terminal. .

The Global System for Mobile Communications (hereinafter, referred to as "GSM") subscriber may install a SIM card in which his / her subscriber profile is stored in a mobile device (ME) to connect with the SIM card. Any mobile terminal capable of interfacing can receive mobile communication services. Therefore, a GSM mobile communication subscriber rents a mobile terminal capable of interfacing with a SIM card, and if his SIM card is attached to the terminal, the mobile communication service can be used anywhere in a country that provides GSM service using its own number. Can be provided.

In contrast, a code division multiple access scheme (Code Division Multiple Access: " CDMA ") is based on a subscriber based on an ESN (electric serial number: " ESN ") uniquely assigned to each mobile terminal. By performing the authentication procedure, the subscriber's validity is confirmed. The ESN is a terminal identification serial number assigned to each terminal differently. In other words, the CDMA method confirms subscribers by checking the unique information of the terminal, rather than using the subscriber specific information.

Recently, the international standard "EIA / TIA IS-808 or 3GPP2 N.S0003" of the CDMA method has a subscriber identity module (User Identity Module) in which subscriber-specific information (hereinafter referred to as "UIMID") can be stored similarly to the GSM method. In the following, a standard for using a card has been adopted. The UIM card stores subscriber-specific information (UIMID) and the subscriber's telephone number. In addition, in consideration of compatibility with the GSM scheme, the UIM card stores the subscriber information of the CDMA scheme and the subscriber information of the GSM scheme.

1 shows a CDMA system in which a conventional UIM card is introduced.

Referring to FIG. 1, a CDMA system in which a conventional UIM card is introduced includes a mobile terminal 1 into which a UIM card 10 is inserted, and a mobile switching center 20 for subscriber authentication and location registration of the mobile terminal 1. ).

The mobile terminal 1 is a CDMA terminal, which stores an ESN. The mobile terminal 1 has a built-in interface circuit that allows it to interface with the UIM card 2.

The UIM card 2 stores subscriber-specific identification information and the ESN received from the mobile terminal 1 and is detachably inserted into the mobile terminal 1.

The mobile switching center 20 includes a base station (BS) 2 for wireless two-way communication with the mobile terminal 1, a base station controller 3 for controlling the base station 2, subscriber authentication and location registration. Visitor location register (VLR) (5), home location register (HLR) (6) and authentication center (AUC) (7), base station controller (3) And a mobile switching center (MSC) 4 for controlling the transmission and reception of messages between the visitor location register 5 and the home location register 6.

The base station 2 transmits a radio frequency signal received from the mobile terminal 1 to the base station controller 3, converts the signal received from the base station controller 3 into a high frequency signal, and transmits it to the mobile terminal 1.

The base station controller 3 relays the communication between the base station 2 and the mobile switching center 4. In addition, the base station controller 3 determines whether to initiate a handover according to the reception strength or signal power of the signal received by the base station 3.

The mobile switching center 4 transmits the message received from the visitor location register 5 or the home location register 6 to the base station controller 3 and also sends the message received from the base station controller 3 to the visitor location register 5. Or to the home location register 6. In addition, the mobile switch 4 is connected to a public switched telephone network (PSTN) 8 to relay communications between the CDMA subscriber and the wired subscriber.

The authentication center 7 stores subscriber authentication information, and compares subscriber and terminal information inputted from the home location register 6 with previously stored subscriber authentication information when a subscriber authentication request of the home location register 6 is performed. It is determined whether the subscriber authentication is successful.

2 and 3 will be described in detail the subscriber authentication and location registration process in the conventional CDMA system.

2 shows a signal flow when successful subscriber authentication and location registration in a conventional CDMA system.

Referring to FIG. 2, the UIM card 10 is inserted into the mobile terminal 1 (step S11).

When the subscriber turns on the mobile terminal 1 while the UIM card 10 is inserted into the mobile terminal 1, the visitor location register 5 generates an authentication value (AUTH) and a random variable (Random Variable :). RAND) is configured as an overhead message train (OMT). The authentication value (AUTH) is a value indicating whether to perform the authentication procedure. If the value is '1', the authentication procedure is normally performed. If the value is '0', the authentication procedure is omitted. The overhead message train message omt [AUTH = 1, RAND] of the subscriber authentication request generated from the visitor location register 5 is received by the base station 2 via the mobile switch 4 and the base station controller 3. Next, the base station 2 transmits the message to the mobile terminal 1 (step S12).

When the overhead message train (omt [AUTH = 1, RAND]) is received by the mobile terminal 1, the mobile terminal 1 initiates the subscriber authentication procedure and sends the ESN along with the authentication random number (RANDC) to the UIM card (10). (Step S13).

When the UIM card 10 receives the RANDC and the ESN from the mobile terminal 1, the received ESN, the mobile station ID (MSID), and the shared secret data (Shared Secret data) previously stored. (Authentication Response: AUTHR) is generated using the SSD and transmitted to the mobile terminal 1. (Step S14) The subscriber unique identifier (MSID) is an international mobile station identification number (SID). It consists of International mobile station identity (IMSI) and Mobile identification number (MIN). It is used as telephone number.

When the mobile terminal 1 receives the authentication response value (AUTHR) from the UIM card 10, the mobile terminal 1 locates the subscriber unique identifier (MSID), the ESN, and the authentication random number (RAND) together with the authentication result value (AUTHR). The message (Register [MSID, ESN, AUTHR, RAND]) is included in the message for registration and sent to the base station 2. The location registration message (Register [MSID, ESN, AUTHR, RAND]) is transmitted to the visitor location register 5 via the base station controller 3 and the mobile switchboard 4 (step S15).

When the visitor location register 5 receives a location registration message (Register [MSID, ESN, AUTHR, RAND]), the visitor location register 5 verifies the random number for authentication (RAND) and generates a subscriber authentication request generated when the mobile terminal 1 is turned on. If you are identified as a subscriber of the initial location registration, the subscriber unique identifier (MSID), ESN, authentication result value (AUTHR), and authentication random number (RAND) are included in the authentication request message (AUTHREQ), and the message (AUTHREQ [MSID) , ESN, AUTHR, RAND]) is transmitted to the home location register 6. The home location register 6 transmits the received authentication request message (AUTHREQ [MSID, ESN, AUTHR, RAND]) to the authentication center 7. (Step S16).

The authentication center 7 stores the parameters included in the authentication request message (AUTHREQ [MSID, ESN, AUTHR, RAND]) in advance in response to the authentication request message (AUTHREQ [MSID, ESN, AUTHR, RAND]). Generate authentication result value (AUTHR). Then, the authentication center 7 compares the authentication result value (AUTHR) and the authentication result value (AUTHR) of the received message (AUTHREQ) to determine whether they are the same, and determines the authentication result value (AUTHR) and the received message (AUTHREQ). When the authentication result value (AUTHR) is the same, an authentication response message (authreq) is configured to deliver authentication success. This authentication response message (authreq [Encryption information]) is sent to the home location register (6), and the home location register (6) sends the authentication response message (authreq [Encryption information]) to the mobile switching center (4) and the visitor location register ( 5). (Step S17)

If it is determined that authentication is successful according to the authentication response message (authreq [Encryption information]), the mobile switching center (4) and the visitor location register (5), the subscriber unique identifier (MSID), ESN, mobile The exchange identifier (MSCID) is included in the location notification message (REGNOT), and the location registration message (REGNOT [MSID, ESN, MSCID]) is transmitted to the home location register 6 (step S18).

When the home location register 6 receives the location registration message REGNOT [MSID, ESN, MSCID] from the mobile switchboard 4 and the visitor location register 5, the home location register 6 updates the subscriber location information of the corresponding subscriber, Profile information is included in the location registration response message (regnot [Profile]). This location registration response message regnot [Profile] is transmitted to the visitor location register 5 and the mobile switchboard 4 (step S19).

The visitor location register 5 and the mobile switch 4 transmit the registration acceptance message to the mobile terminal 1 in response to the registration registration response message regnot [Profile] received as the subscriber authentication succeeds. (Step S20)

If the subscriber authentication is successful, the service provider provides the service desired by the subscriber.

3 illustrates a signal flow when subscriber authentication and location registration fail in a conventional CDMA system.

Referring to FIG. 3, even when subscriber authentication and location registration fail, the above-described steps S11 to S16 are performed in the same manner as when the subscriber succeeds.

When the authentication request message (AUTHREQ [MSID, ESN, AUTHR, RAND]) generated in step S16 is received by the authentication center 7, the authentication center 7 receives the authentication request message (AUTHREQ [MSID, ESN, AUTHR, RAND]). The authentication result value (AUTHR) is generated by comparing the parameters included in the 1) with the previously stored subscriber information. Then, the authentication center 7 compares the authentication result value (AUTHR) and the authentication result value (AUTHR) of the received message (AUTHREQ) to determine whether they are the same, and determines the authentication result value (AUTHR) and the received message (AUTHREQ). If the authentication result value (AUTHR) is different, an authentication response message (authreq) is configured together with the encryption information to inform the authentication failure. An authentication response message (authreq [Auth_Fail]) indicating an authentication failure is transmitted to the home location register 6, and the home location register 6 moves the authentication response message (authreq [Auth_Fail]) with the visitor location register 5. Transfer to switch 4 (step S21).

When the authentication failure message is received by the visitor location register 5 and the mobile switch 4, the visitor location register 5 and the mobile switch 4 fail to register the location via the base station controller 3 and the base station 2. Send a message (Registration Reject) to the mobile terminal (1).

As a result, the conventional CDMA system in which the UIM card is introduced will process the subscriber authentication and location registration process based on the ESN as described above because of the compatibility with the existing CDMA equipment. In the case of processing subscriber authentication and verification process based on ESN while introducing UIM card, subscriber authentication is not only difficult, but it also makes it difficult to protect the property of subscribers by encouraging theft of mobile terminal, thereby distributing the distribution order of mobile terminal. There are bound to be problems such as confusion. For example, if a legitimate CDMA subscriber attaches a UIM card to a mobile terminal other than his mobile terminal and requests a service from his / her phone number using the mobile terminal, the legitimate CDMA subscriber may normally receive a service from a service provider as a legitimate subscriber. At the same time, if someone other than the legitimate CDMA subscriber acquires the mobile terminal of the legitimate CDMA subscriber and requests the service from the legitimate CDMA subscriber's telephone number, the subscriber is identified as the legitimate subscriber in the subscriber authentication and location registration process, and the service is provided from the same service provider. Can be provided. This is because a conventional CDMA system can use a single ESN by multiple subscribers while introducing a UIM card, and a subscriber provides a service so that a user can use multiple ESNs only with a UIM card.

Accordingly, it is an object of the present invention to provide a subscriber authentication method based on subscriber's unique information and a CDMA system used in a CDMA mobile communication network using UIM to accurately authenticate subscribers and prevent illegal use of mobile terminals.

1 is a diagram schematically showing a conventional code division multiple access system.

FIG. 2 is a signal flow diagram illustrating messages generated upon successful subscriber authentication and location registration in the CDMA system shown in FIG.

FIG. 3 is a signal flow diagram illustrating messages generated when subscriber authentication and location registration fail in the CDMA system shown in FIG.

4 is a diagram schematically illustrating a code division multiple access system according to an embodiment of the present invention.

FIG. 5 is a signal flow diagram illustrating messages generated upon successful subscriber authentication and location registration in the CDMA system shown in FIG. 4.

FIG. 6 is a signal flow diagram illustrating messages generated when subscriber authentication and location registration fail in the CDMA system shown in FIG. 4.

<Short description of the symbols in the drawings>

1,31: Mobile terminal 2,32: Base station (BS)

3,33: base station controller (BSC) 4,34: mobile switching center (MSC)

5,35: Visitor Location Register (VLR) 6,36: Home Location Register (HLR)

7,38: Authentication Center (AUC) 8,39: General Telephone Switching Network (PSTN)

10,40: UIM card 32: terminal identifier register (EIR)

20,50: Mobile switching center

In order to achieve the above object, the subscriber authentication method based on the unique information of the subscriber in the CDMA mobile communication network using the UIM according to an embodiment of the present invention is inserted into the card in which the subscriber specific information is stored in the mobile terminal in which the terminal unique information is stored; Determining, by the mobile terminal, the mobile switching station for controlling subscriber authentication and location registration of the mobile terminal by receiving the subscriber specific information from the mobile terminal and confirming the validity of the subscriber unique information. The mobile switching center receives the terminal specific information from the mobile terminal and checks the validity of the mobile terminal and determines whether to register the location according to the result.

In the subscriber authentication method based on the unique information of the subscriber in the CDMA mobile communication network using the UIM according to an embodiment of the present invention, the step of determining whether to register the location blacklist the terminal-specific information of the mobile terminal lost and stolen And if the terminal sharing information received from the mobile terminal at the time of location registration is determined to exist on the black list, rejecting the location registration of the mobile terminal.

In the subscriber authentication method based on the unique information of the subscriber in the CDMA mobile communication network using the UIM according to an embodiment of the present invention, the step of determining whether to register the location blacklist the terminal-specific information of the mobile terminal lost and stolen And registering the location and allowing the location registration of the mobile terminal if the terminal sharing information received from the mobile terminal does not exist on the black list.

In the CDMA mobile communication network using the UIM according to an embodiment of the present invention, a subscriber authentication method based on subscriber's unique information includes a UIM stored in a mobile terminal in which a terminal specific information (ESN) is stored. Recognizing whether the card is inserted, receiving the authentication value (AUTH) and the first authentication random number (RAND) generated from the mobile switching station for controlling subscriber authentication and location registration of the mobile terminal, Generating a second authentication random number (RANDC) from the mobile terminal in response to the received authentication value (AUTH) and the first authentication random number (RAND); and an authentication result value in response to the second authentication random number (RANDC). Generating an AUTHR from the baby EMB card, and including a subscriber unique identifier (MSID), a subscriber unique information (UIMID), and an authentication random number (RAND) in response to the authentication result value (AUTHR) received from the baby EMB card. First message (Regi ster []) from the mobile terminal, and in response to the first message (Register []), a second message including subscriber unique identifier (MSID), subscriber unique information (UIMID), and authentication random number (RAND). Generating (AUTHREQ []) from the mobile switching center, generating a third message (authreq []) specifying the authentication result together with encryption information in response to the second message (AUTHREQ []), In response to the third message (authreq []), generating a fourth message (REGNOT []) from the mobile switching center, comprising a subscriber unique identifier (MSID), a subscriber unique information (UIMID), and a mobile switching identifier (MSCID); And generating a fifth message regnot [] in response to the fourth message REGNOT [] from the mobile switching center to determine whether to authenticate the subscriber.

In the subscriber authentication method based on the unique information of the subscriber in the CDMA mobile communication network using the UIM according to an embodiment of the present invention, the authentication value (AUTH) and the first random number for authentication (RAND) from the visitor location register of the mobile switching center. It is generated and received by the mobile terminal via the mobile switch, the base station controller and the base station.

In the subscriber authentication method based on the subscriber's unique information in the CDMA mobile communication network using the UIM according to an embodiment of the present invention, the second message (AUTHREQ []) is generated from the visitor location register of the mobile switching center to the home location register. It is characterized in that received via the authentication center via.

In the subscriber authentication method based on the subscriber's unique information in the CDMA mobile communication network using the UIM according to an embodiment of the present invention, the fourth message (REGNOT []) is generated from the visitor location register of the mobile switching center to the home location register. Characterized in that received ..

In the subscriber authentication method based on the unique information of the subscriber in the CDMA mobile communication network using the UIM according to an embodiment of the present invention, the third message (authreq []) is generated from the authentication center of the mobile switching center and via the home location register. To be received by the visitor location register.

In a subscriber authentication method based on subscriber's unique information in a CDMA mobile communication network using a UIM according to an embodiment of the present invention, the fifth message regnot [] is generated from a home location register of a mobile switching center and transmitted to a visitor location register. Characterized in that it is received.

In a CDMA mobile communication network using a UIM according to an embodiment of the present invention, a subscriber authentication method based on subscriber's unique information may include a sixth message requesting terminal specific information (ESN) in response to a fifth message (regnot []). Generating a Status Request [] from the mobile terminal and generating a seventh message (Status Response []) including the terminal specific information (ESN) in response to the sixth message (Status Request []) from the mobile terminal. Generating an eighth message (QULREQ []) specifying a request for verification of the terminal specific information (ESN) from the mobile switching station in response to a seventh message (Status Response []), and an eighth message (QULREQ). Generating a ninth message (qulreq []) specifying the verification result of the terminal specific information (ESN) in response to []) from the mobile switching center, and specifying whether to register the location in response to the ninth message (qulreq []). Message 10 (Registration Accept, Re gistration Reject) from the mobile switching center to determine whether to register the location.

In a subscriber authentication method based on subscriber's unique information in a CDMA mobile communication network using a UIM according to an embodiment of the present invention, the sixth message (Status Request []) and the tenth message (Registration Accept, Registration Reject) are moved. And is received from the visitor location register of the switching center and received by the mobile terminal via the mobile switchboard, the base station controller and the base station.

In the subscriber authentication method based on the subscriber's unique information in the CDMA mobile communication network using the UIM according to an embodiment of the present invention, the eighth message (QULREQ []) is generated from the visitor location register of the mobile switching center to the terminal identifier register. Characterized in that it is received.

In a subscriber authentication method based on subscriber's unique information in a CDMA mobile communication network using a UIM according to an embodiment of the present invention, the ninth message (qulreq []) is generated from the terminal identifier of the mobile switching center to the visitor location register. Characterized in that it is received.

The CDMA system according to an embodiment of the present invention is a card for storing subscriber-specific information, a mobile terminal in which the card is detachably inserted and the terminal-specific information is stored, and receives the subscriber-specific information to verify the validity of the subscriber-specific information to authenticate the subscriber. In addition to determining whether or not to receive the terminal-specific information from the mobile terminal, a mobile switching station for checking the validity of the mobile terminal and determines whether to register the location according to the result.

In the CDMA system according to an embodiment of the present invention, the mobile switching center generates a subscriber authentication request message in response to subscriber specific information received from the mobile terminal during subscriber authentication, and also provides a location registration request message and terminal unique information for location registration. The visitor location register that generates the authorization check request message for verification of the subscriber and the subscriber unique information received in advance in response to the subscriber authentication request message and the subscriber unique information received from the visitor location register, and the subscriber authentication result message according to the comparison result The authentication center that generates a message, the home location register that updates the location information of the subscriber in response to the location registration request message from the visitor location register, and generates the location registration response message, and blacks the terminal unique information of the stolen and lost mobile terminal. Save as a list and respond to the authorization request message The terminal identifier register that compares the terminal specific information received from the visitor location register with the terminal specific information on the black list and generates an authorization confirmation response message specifying the comparison result, and the message generated from the visitor register, home location register, and terminal identifier register. It is provided with a mobile switch to deliver a message from the mobile terminal to the visitor location register, the home location register and the terminal identifier register as well as delivering to the mobile terminal.

In the CDMA system according to an embodiment of the present invention, the visitor registrar generates a message indicating whether the location registration is successful in response to the authorization confirmation response message, and supplies the message to the mobile terminal via the mobile exchange. .

In a CDMA system according to an embodiment of the present invention, a mobile switching center receives a high frequency signal from a mobile terminal, converts a message into a high frequency signal, and transmits the message to a mobile terminal, and is located between the base station and the mobile switching center. And a base station controller for relaying signal transmission and reception between mobile switching centers.

Other objects and advantages of the present invention in addition to the above object will be apparent from the detailed description of the embodiments with reference to the accompanying drawings.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to FIGS. 4 to 6.

4, a CDMA system according to an embodiment of the present invention is a mobile terminal 31 into which a UIM card 40 is inserted, and a mobile switching center 50 for subscriber authentication and location registration of the mobile terminal 31. ).

The mobile terminal 31 is a CDMA terminal, each of which has its own serial number, that is, the ESN. The mobile terminal 31 has a built-in interface circuit for interfacing with the UIM card 32.

The UIM card 32 stores both the subscriber's own identification information and the UIMID uniquely assigned to each UIM card, and also stores the subscriber's unique identifier (MSID) and the shared secret data (SSD). In addition, the UIM card 32 stores the subscriber information of the GSM method. The UIM card 32 has a built-in interface circuit for interfacing with the mobile terminal 31, and is detachably inserted into the mobile terminal 31.

After determining whether to authenticate the subscriber based on the UIMID, the mobile switching center 50 determines whether the mobile terminal 1 is justified based on the ESN and determines whether to register the location. The mobile switching center 50 includes a base station 32 for two-way wireless communication with the mobile terminal 31, a mobile switch 34 for relaying communication between a CDMA mobile communication subscriber and a wired subscriber, and a base station 32. And a base station controller 33 connected between a mobile station and a mobile switch 34, a visitor location register 35, a home location register 36, and an authentication connected to the mobile switch 4 to process subscriber authentication and location registration procedures. A center 38 and an equipment identity register (EIR) 37 for registering and managing stolen and lost mobile terminals connected to the mobile switching center 34 are provided.

The base station 32 transmits a radio frequency signal received from the mobile terminal 31 to the base station controller 33, converts the signal received from the base station controller 33 into a high frequency signal, and transmits the signal to the mobile terminal 31.

The base station controller 33 relays the communication between the base station 32 and the mobile switching center 34. In addition, the base station controller 33 determines whether to initiate a handover according to the received strength or signal power of the signal received by the base station 33.

The mobile switch 34 transmits a message received from the visitor location register 35, the home location register 36, or the terminal identifier register 37 to the base station controller 33, and also receives the message from the base station controller 33. Is selectively transmitted to the visitor location register 35, home location register 36 or the terminal identifier register (37). In addition, the mobile switching center 4 is connected to a general telephone switching network (PSTN) 39 to relay communication between the CDMA subscriber and the wired subscriber.

The authentication center 38 stores subscriber authentication information, and compares subscriber and terminal information input from the home location register 36 with pre-stored subscriber authentication information when the subscriber authentication request of the home location register 6 is performed. Therefore, the success of subscriber authentication is decided.

The terminal identifier register 37 stores the information of the stolen and lost mobile terminal, and compares the mobile terminal information received from the mobile switching unit 34 with the information of the mobile terminal previously stored when the subscriber authentication and location registration request are made. Theft and loss of the terminal 31 is determined. To this end, the terminal identifier register 37 stores a black list in which ESNs of stolen and lost terminals are stored.

Meanwhile, the home location register 36 and the terminal identifier register 37 may be integrated into one system.

5 and 6 will be described in detail the subscriber authentication and location registration process of the CDMA system according to an embodiment of the present invention.

5 shows a signal flow when subscriber authentication and location registration are successfully performed in the CDMA system according to the present invention.

Referring to FIG. 5, the UIM card 40 is inserted into the mobile terminal 31 (step S101).

When the subscriber turns on the mobile terminal 31 while the UIM card 40 is inserted into the mobile terminal 31, the visitor location register 3 overheads the authentication value AUTH and the authentication random number RAND. It consists of a message train (omt). The authentication value (AUTH) is a value indicating whether to perform the authentication procedure. If the value is '1', the authentication procedure is normally performed. If the value is '0', the authentication procedure is omitted. The overhead message train omt [AUTH = 1, RAND] of the subscriber authentication request generated from the visitor location register 35 is received by the base station 32 via the mobile switch 34 and the base station controller 33. , And is sent to the mobile terminal 31 (step S102).

When the overhead message train (omt [AUTH = 1, RAND]) is received by the mobile terminal 31, the mobile terminal 31 initiates a subscriber authentication procedure and transmits an authentication random number (RANDC) to the UIM card 40. (Step S103)

When the authentication random number (RANDC) is received from the mobile terminal 31, the UIM card 40 receives the received authentication random number (RANDC), a subscriber unique identifier (MSID), UIMID, and shared secret data (SSD) previously stored. It generates an authentication result value (AUTHR) for the subscriber authentication, and transmits it to the mobile terminal 31 (step S104). The subscriber unique identifier (MSID) is an international mobile station identification number (IMSI) and a mobile station identification number. It consists of (MIN) and is used as telephone number. Meanwhile, the UIN card 40 does not need to store the ESN since subscriber authentication is performed based on the UIMID.

When the mobile terminal 31 receives the authentication result value (AUTHR) from the UIM card 10, the mobile terminal 31, along with the authentication result value (AUTHR), the location registration message of the UIMID, subscriber unique identifier (MSID), authentication random number (RAND) (Register), the message (Register [MSID, UIMID, AUTHER, RAND]) is transmitted to the base station 32. At this time, the UIMID is delivered using an existing ESN parameter. The location registration message (Register [MSID, UIMID, AUTHR, RAND]) is transmitted to the visitor location register 35 via the base station controller 33 and the mobile switch 34 (step S105). Here, the UIMID is a UIM card. It is the identification information of the UIM card uniquely assigned to every 31 and the subscriber unique information that can identify the subscriber since the subscriber owns only one UIM card 31.

When the visitor location register 35 receives a location registration message (Register [MSID, UIMID, AUTHR, RAND]), the subscriber authentication request generated when the mobile terminal 31 is turned on by verifying a random number for authentication. If the subscriber is identified as a location registration subscriber, the subscriber unique identifier (MSID), UIMID, authentication result value (AUTHR), and authentication random number (RAND) are included in the authentication request message (AUTHREQ), and the message (AUTHREQ [MSID, UIMID, AUTHR) is included. , RAND]) to the home location register 36. At this time, the UIMID is delivered using an existing ESN parameter. The home location register 36 transmits the received authentication request message (AUTHREQ [MSID, UIMID, AUTHR, RAND]) to the authentication center 38 (step S106).

The authentication center 38 stores the parameters included in the authentication request message (AUTHREQ [MSID, UIMID, AUTHR, RAND]) in advance in response to the authentication request message (AUTHREQ [MSID, UIMID, AUTHR, RAND]). And generate authentication result value (AUTHR). Then, the authentication center 38 compares the authentication result value (AUTHR) and the authentication result value (AUTHR) of the received message (AUTHREQ) to determine whether the same, and determines the authentication result value (AUTHR) and the received message (AUTHREQ). If the authentication result value (AUTHR) is the same, an authentication response message (authreq) is configured together with the encryption information to inform the authentication success. This authentication response message (authreq [Encryption information]) is sent to the home location register 36, and the home location register 36 sends the authentication response message (authreq [Encryption information]) to the mobile switch 34 and the visitor location register ( 35). (S107).

If it is determined that the authentication is successful according to the authentication response message (authreq [Encryption information]), the mobile exchanger 34 and the visitor location register 35 perform a subscriber unique identifier (MSID), a UIMID, and a move. The exchange identifier MSCID is included in the location registration message REGNOT, and the location registration message REGNOT [MSID, UIMID, MSCID] is transmitted to the home location register 36. At this time, the UIMID is delivered using an existing ESN parameter (step S108).

When the home location register 36 receives the location registration message (REGNOT [MSID, UIMID, MSCID]) from the mobile switch 34 and the visitor location register 35, the home location register 36 updates the subscriber location information of the corresponding subscriber, Profile information is included in the location registration response message (regnot [Profile]). The location registration response message regnot [Profile] is transmitted to the visitor location register 35 and the mobile switchboard 34 (step S109).

When the visitor location register 35 and the mobile switch 34 determine the power-on location registration using the UIMID in response to the location registration response message (regnot [Profile]) received from the home location register 36, For ESN verification, an ESN request message (Status Request []) indicating an ESN information request is transmitted to the mobile terminal 31 (step S110).

When receiving the ESN Request Message (Status Request []), the mobile terminal 31 reads the stored ESN and generates an ESN Request Response message including the ESN. The ESN request response message (Status Response [ESN]) is transmitted to the mobile switch 34 and the visitor location register 35 via the base station 32 and the base station controller 33 (step S111).

When the mobile switch 34 and the visitor location register 35 receive an ESN request response message (ESN), a subscriber unique identifier (MSID) and an ESN authorization confirmation request message (QULREQ) for ESN verification. ), And transmits the authority confirmation request message (QULREQ [MSID, ESN, QIC = Validation Only]) to the terminal ID register 37 (step S112).

Upon receiving the authorization request message (QULREQ [MSID, ESN, QIC = Validation Only]), the terminal identifier register 37 searches for the pre-stored blacklist and requests the authorization confirmation message (QULREQ [MSID, ESN, QIC = Validation Only]). If the ESN included in the) is not present on the blacklist, the result is specified in the authorization response message (qulreq []), and the authorization response message (qulreq []) is added to the visitor location register 35 and the mobile exchanger 34. (Step S113).

The visitor location register 35 and the mobile switch 34 allow registration indicating that the location registration procedure was successful in response to an authorization confirmation response message (qulreq []) specifying that the mobile terminal 31 requesting location registration is a legitimate mobile terminal. The message (Registration Accept) is transmitted to the mobile terminal 31 (step S114).

If the subscriber authentication is successful, the service provider provides the service desired by the subscriber.

On the other hand, in the code division multiple access system according to the embodiment of the present invention, after the subscriber authentication procedure based on the UIMID, a process of confirming the ESN for the validity verification of the mobile terminal 31 at the time of registration is more necessary, but the subscriber Since only the location registration at the time of turn on is performed, the network load increase of the CDMA system can be almost ignored.

6 illustrates a signal flow when subscriber authentication and location registration fail in a CDMA system according to an embodiment of the present invention.

Referring to FIG. 6, even when subscriber authentication fails, the above-described steps S101 to S112 are performed in the same manner as when the subscriber succeeds.

The terminal identifier register 37 that has received the authorization check request message (QULREQ [MSID, ESN, QIC = Validation Only]) generated in step S112 searches for a blacklist and requests the authorization check request message (QULREQ [MSID, ESN, QIC =). Validation Only]) determines whether the ESN included in the blacklist and the ESN present on the blacklist are the same. If the ESN included in the authorization confirmation request message (QULREQ [MSID, ESN, QIC = Validation Only]) exists on the blacklist, the terminal identifier register 37 denys authorization of the authorization response response message (qulreq []). : AuthDenied specifies the stolen and lost mobile terminal, and transmits the message (qulreq [AuthDenied]) to the visitor location register 35 and the mobile switch 34 (step S120).

When the visitor location register 35 and the mobile switch 34 receive the authentication rejection message (qulreq [AuthDenied]), the mobile terminal 31 requesting location registration is determined to be a lost or stolen mobile terminal, and thus the location registration procedure fails. It sends a registration reject message (Registration Reject) to the mobile terminal 31 (step S121).

On the other hand, since the size and system of the ESN and the UIMID are the same, the existing ESN parameter can be used when delivering the UIMID, and thus the CDMA system according to the embodiment of the present invention can use the conventional CDMA system without any significant change in hardware and software. . In addition, in the CDMA system according to the embodiment of the present invention, since the subscriber information of the GSM type is embedded in the UIM card 40, subscriber authentication and location registration are possible in the GSM system, thereby allowing global roaming between the CDMA system and the GSM system. ) Becomes possible.

As described above, in the CDMA mobile communication network using the UIM according to the present invention, the subscriber authentication method based on the unique information of the subscriber and the CDMA system using the same reduce the possibility of duplication of the UIM card because the subscriber is authenticated based on the UIMID. Of course, subscriber authentication can be done correctly. The subscriber authentication method based on the subscriber's unique information and the CDMA system using the same according to the present invention authenticate the subscriber based on the UIMID, manage the lost or stolen mobile terminal as a blacklist, and register the ESN received from the mobile terminal during location registration. By comparing the ESNs on the blacklist, it is possible to fundamentally prevent illegal use of illegally copied or lost or stolen mobile terminals, thereby protecting legitimate subscribers from illegal use of mobile terminals and properly establishing the distribution order of mobile terminals.

Those skilled in the art will appreciate that various changes and modifications can be made without departing from the technical spirit of the present invention. Therefore, the technical scope of the present invention should not be limited to the contents described in the detailed description of the specification but should be defined by the claims.

Claims (17)

Recognizing, by the mobile terminal, whether a card in which subscriber unique information is stored is inserted into a mobile terminal in which terminal specific information is stored; Receiving, by the mobile switching station for controlling subscriber authentication and location registration of the mobile terminal, the subscriber unique information from the mobile terminal to determine validity of the subscriber unique information, and determining whether to authenticate the subscriber; Receiving, by the mobile switching center, the terminal specific information from the mobile terminal, and confirming the validity of the mobile terminal, and determining whether to register the location according to the result. Subscriber authentication method based on subscriber's unique information in access mobile communication network. The method of claim 1, Determining whether or not the location registration, If the terminal unique information of the mobile terminal lost and stolen is listed in the blacklist, and the terminal sharing information received from the mobile terminal is present on the blacklist when the location is registered, the mobile terminal rejects the location registration of the mobile terminal. Subscriber authentication method based on the unique information of the subscriber in a code division multiple access mobile communication network using a subscriber identity module comprising a step. The method of claim 1, Determining whether or not the location registration, Blacklisting the terminal-specific information of the lost and stolen mobile terminal and allowing the terminal to register the location of the mobile terminal if the terminal sharing information received from the mobile terminal does not exist on the blacklist when registering the location; Subscriber authentication method based on the unique information of the subscriber in a code division multiple access mobile communication network using a subscriber identification module comprising a. Recognizing whether the UIM card is stored in the mobile terminal in which the terminal specific information (ESN) is stored; Receiving, at the mobile terminal, an authentication value (AUTH) and a first authentication random number (RAND) generated from a mobile switching center for controlling subscriber authentication and location registration of the mobile terminal; Generating a second authentication random number (RANDC) from the mobile terminal in response to the received authentication value (AUTH) and a first authentication random number (RAND); Generating an authentication result value (AUTHR) from the infant EMB card in response to the second authentication random number (RANDC); A first message (Register []) including a subscriber unique identifier (MSID), the subscriber unique information (UIMID), and the authentication random number (RAND) in response to the authentication result value (AUTHR) received from the infant M card. Generating from the mobile terminal, In response to the first message (Register []), a second message (AUTHREQ []) including the subscriber unique identifier (MSID), the subscriber unique information (UIMID), and the authentication random number (RAND) is transmitted to the MS. Generating from, Generating a third message (authreq []) specifying the authentication result together with encryption information from the mobile switching center in response to the second message (AUTHREQ []); In response to the third message (authreq []), a fourth message (REGNOT []) including a subscriber unique identifier (MSID), the subscriber unique information (UIMID), and a mobile switch identifier (MSCID) is generated from the mobile switching center. Making a step, And generating a fifth message (regnot []) in response to the fourth message (REGNOT []) from the mobile switching center to determine whether to authenticate the subscriber. Subscriber authentication method based on subscriber's unique information in multi-access mobile communication network. The method of claim 4, wherein The authentication value (AUTH) and the first authentication random number (RAND) is generated from a visitor location register of the mobile switching center and received by the mobile terminal via a mobile switch, a base station controller and a base station. Subscriber authentication method based on the unique information of the subscriber in a code division multiple access mobile communication network using a. The method of claim 4, wherein The second message (AUTHREQ []) is generated from the visitor location register of the mobile switching center and received by the authentication center via the home location register of the subscriber in the code division multiple access mobile communication network. Subscriber authentication method based on unique information. The method of claim 4, wherein The fourth message (REGNOT []) is generated from the visitor location register of the mobile switching center and received at the home location register based on the unique information of the subscriber in the code division multiple access mobile communication network using the subscriber identification module. Subscriber Authentication Method. The method of claim 4, wherein The third message (authreq []) is generated from the authentication center of the mobile switching center and is received by the visitor location register via a home location register of the subscriber in a code division multiple access mobile communication network using a subscriber identification module. Subscriber authentication method based on unique information. The method of claim 4, wherein The fifth message regnot [] is generated from a home location register of the mobile switching center and received at a visitor location register based on the unique information of the subscriber in a code division multiple access mobile communication network using a subscriber identification module. Subscriber Authentication Method. The method of claim 4, wherein Generating a sixth message (Status Request []) requesting the terminal specific information (ESN) from the mobile switching center in response to the fifth message (regnot []); Generating a seventh message (Status Response []) including the terminal specific information (ESN) from the mobile terminal in response to the sixth message (Status Request []); Generating an eighth message (QULREQ []) specifying the request for verification of the terminal specific information (ESN) from the mobile switching station in response to the seventh message (Status Response []); Generating a ninth message (qulreq []) specifying the verification result of the terminal specific information (ESN) from the mobile switching station in response to the eighth message (QULREQ []); And generating a tenth message (Registration Accept, Registration Reject) indicating whether to register the location in response to the ninth message (qulreq []) to determine whether to register the location. Subscriber authentication method based on the unique information of the. The method of claim 10, The sixth message (Status Request []) and the tenth message (Registration Accept, Registration Reject) are generated from the visitor location register of the mobile switching center and received by the mobile terminal via the mobile switching center, the base station controller and the base station. Subscriber authentication method based on unique information of subscriber in code division multiple access mobile communication network using subscriber identification module. The method of claim 10, The eighth message (QULREQ []) is generated from the visitor location register of the mobile switching center and received by the terminal identification register based on the unique information of the subscriber in the code division multiple access mobile communication network. Subscriber Authentication Method. The method of claim 10, The ninth message (qulreq []) is generated from the terminal identifier register of the mobile switching center and received at the visitor location register based on the unique information of the subscriber in the code division multiple access mobile communication network using the subscriber identification module. Subscriber Authentication Method. A card that stores subscriber-specific information, A mobile terminal in which the card is detachably inserted and in which terminal specific information is stored; Receiving the unique information of the subscriber and confirming the validity of the unique information of the subscriber to determine whether to authenticate the subscriber, and receiving the unique information of the terminal from the mobile terminal to confirm the validity of the mobile terminal and location registration according to the result A code division multiple access system, comprising: a mobile switching center for determining a &quot; The method of claim 14, The mobile switching center, A visitor for generating a subscriber authentication request message in response to the subscriber specific information received from the mobile terminal and for generating a location registration request message for location registration and an authorization confirmation request message for verifying the terminal unique information during subscriber authentication. Location register, An authentication center for comparing the subscriber specific information previously stored in response to the subscriber authentication request message with the subscriber specific information received from the visitor location register and generating a subscriber authentication result message according to the comparison result; A home location register for updating the location information of the subscriber and generating a location registration response message in response to the location registration request message from the visitor location register; The terminal unique information of the stolen and lost mobile terminal is stored as a black list, and the terminal specific information received from the visitor location register is compared with the terminal specific information on the black list in response to the authorization confirmation request message. A terminal identifier register that generates a specified authorization confirmation message; The message generated from the visitor register, the home location register and the terminal identifier register is transferred to the mobile terminal, and the message from the mobile terminal is selectively sent to the visitor location register, the home location register and the terminal identifier register. Code division multiple access system, characterized in that it comprises a mobile switch for transmitting. The method of claim 15, And the visitor registrar generates a message indicating whether the location registration is successful in response to the authorization confirmation response message, and supplies the message to the mobile terminal via the mobile switching center. The method of claim 15, The mobile switching center, A base station which receives a high frequency signal from a mobile terminal and converts the message into a high frequency signal and sends the message to the mobile terminal; And a base station controller positioned between the base station and the mobile switch to relay signal transmission / reception between the base station and the mobile switch.