New! View global litigation for patent families

US20020034301A1 - Network authentication - Google Patents

Network authentication Download PDF

Info

Publication number
US20020034301A1
US20020034301A1 US09928491 US92849101A US2002034301A1 US 20020034301 A1 US20020034301 A1 US 20020034301A1 US 09928491 US09928491 US 09928491 US 92849101 A US92849101 A US 92849101A US 2002034301 A1 US2002034301 A1 US 2002034301A1
Authority
US
Grant status
Application
Patent type
Prior art keywords
authentication
device
communications
user
token
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US09928491
Inventor
Stefan Andersson
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Telefonaktiebolaget LM Ericsson
Original Assignee
Telefonaktiebolaget LM Ericsson
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/32User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/42User authentication using separate channels for security data
    • G06F21/43User authentication using separate channels for security data wireless channels
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATIONS NETWORKS
    • H04W12/00Security arrangements, e.g. access security or fraud detection; Authentication, e.g. verifying user identity or authorisation; Protecting privacy or anonymity
    • H04W12/06Authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2103Challenge-response
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • H04L63/083Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network using passwords
    • H04L63/0838Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network using passwords using one-time-passwords
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • H04L63/0853Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network using an additional device, e.g. smartcard, SIM or a different communication terminal
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/16Implementing security features at a particular protocol layer
    • H04L63/166Implementing security features at a particular protocol layer at the transport layer
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATIONS NETWORKS
    • H04W12/00Security arrangements, e.g. access security or fraud detection; Authentication, e.g. verifying user identity or authorisation; Protecting privacy or anonymity
    • H04W12/08Access security

Abstract

An existing communications device, such as a WAP-enabled mobile phone or other device, can be used as an authentication token.
This has the advantage that WAP-enabled devices include components which are used in public key/private key cryptographic systems as a part of their standard communication functions. These components therefore advantageously allow the device to be used as an authentication token when communicating with a remote server.

Description

    TECHNICAL FIELD OF THE INVENTION
  • [0001]
    This invention relates to the field of computer security, and in particular to the authentication of a user over a computer network.
  • BACKGROUND OF THE INVENTION
  • [0002]
    It is desirable to be able to transmit confidential and personal information over unsecured public computer networks, such as the internet. To allow this, it is necessary to provide a secure registration system, which allows an individual user to have confidence that personal information transmitted over the network will remain confidential. Conversely, a service provider may wish to ensure that only some computer users are able to access specific information.
  • [0003]
    U.S. Pat. No. 5,784,463 describes a system in which a computer system is secured against authorized access, while date exchanged by a user with the computer system is encrypted when it is sent over the public network.
  • [0004]
    More specifically, U.S. Pat. No. 5,784,463 describes the use of an authentication token, which may be a hardware device or which may be a software module, which allows the user to authenticate himself to the remote computer. In this prior art system, shared secret keys provide mutual authentication between the two users. The shared secret keys are generated only at the time of registration, and are distributed using a public key/private key cryptographic system.
  • [0005]
    This system has the disadvantage that, before a computer user can take part in secure online transactions using the described system, he must obtain a separate authentication token. Further there is a cost associated with the distribution of such tokens, either to pay for the additional hardware, or to supply information for the software module.
  • SUMMARY OF THE INVENTION
  • [0006]
    In accordance with a preferred aspect of the invention, an existing communications device can be used as an authentication token.
  • [0007]
    In a preferred embodiment of the invention, a communications device which has a cryptographic module for use in mobile communications, can be used as an authentication token. For example, the device may be a device which can operate under the Wireless Application Protocol, that is, a WAP-enabled device, such as a mobile phone. This has the advantage that WAP-enabled devices include components which are used in public key/private key cryptographic systems as a part of their standard communication functions. These components therefore advantageously allow the device to be used as an authentication token when communicating with a remote server. Advantageously, the device can use Wireless Transport Layer Security (WTLS) for mobile communications, and employs its cryptographic module when in use as an authentication token.
  • [0008]
    It should be emphasised that the term “comprises/comprising” when used in this specification is taken to specify the presence of stated features, integers, steps or components but does not preclude the presence or addition of one or more other features, integers, steps, components or groups thereof.
  • BRIEF DESCRIPTION OF DRAWINGS
  • [0009]
    [0009]FIG. 1 is a schematic illustration of a network in which the present invention can be implemented.
  • [0010]
    [0010]FIG. 2 is a flow chart showing a first authentication method in accordance with the invention.
  • [0011]
    [0011]FIG. 3 is a flow chart showing a second authentication method in accordance with the invention.
  • DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS
  • [0012]
    [0012]FIG. 1 shows a system in accordance with the invention, which allows a user to communicate securely over the internet. As is conventional, the user has a WAP-enabled device, for example, a mobile phone 10. The mobile phone 10 communicates over a wireless interface through a wireless modem 15 with a WAP Gateway 20. The WAP Gateway 20, for example, converts signals between different protocols used over the wireless network and over the wired networks which are involved.
  • [0013]
    As an example, the WAP Gateway 20 has an interface for connection to a Wireless Telephony Application (WTA) server 30, which provides telephony-related functions, such as handling voice calls or text messages.
  • [0014]
    One specific use of WAP-enabled devices is to access the internet, and in particular to access the information on web pages which are specifically designed for that purpose.
  • [0015]
    Thus, the WAP Gateway 20 also includes an interface for connection to a Wireless Applications Environment (WAE) server 40. The WAE server 40 is in turn connected to the internet 50. Data which may be accessed by a WAP-enabled device are stored on a web server 52. As is well known, the internet is made up of very many servers of this type, storing such information.
  • [0016]
    As is known, content on web pages which are intended to be accessed by web-enabled devices is conventionally written using Wireless Markup Language (WML), a language which is designed to meet the constraints which typically apply in this environment, namely the relatively low bandwidth available in the wireless interface, and the generally small available display sizes on the handheld WAP-enabled devices such as mobile phones.
  • [0017]
    In order to enhance services written in WML, a scripting language WMLScript, can be used.
  • [0018]
    In order to provide security between the WAP-enabled client device 10 and the WAP Gateway 20, Wireless Transport Layer Security (WTLS) can be used. This provides confidentiality for users, by encrypting messages which are transmitted over the wireless interface, and also provides authentication, by means of digital certificates.
  • [0019]
    In order to provide this WTLS functionality, the WAP-enabled device 10 includes a cryptographic module, which uses an embedded public key and private key on handshake for authentication, then generates symmetric session keys, which are used to encode messages before transmission and to decode received messages,
  • [0020]
    For example, the cryptographic module can be realised in hardware or in software in the phone 10, or may be provided on an external smart card, or the phone 10 may also include a Wireless Identity Module (WIM) card, which is used to identify the subscriber.
  • [0021]
    In accordance with preferred embodiments of the present invention, the cryptographic module of the phone, and other features which are used to provide secure communication using the Wireless Application Protocol, also allow the phone 10 to be used as an authentication token for other communications.
  • [0022]
    In the case where the cryptographic module is embodied in hardware, the necessary information is provided on an integrated circuit in the device. Where the Wireless Public Key Infrastructure (WPKI) is used to distribute the parameters for WTLS, it can also be used to distribute the parameters required for use as an authentication token.
  • [0023]
    When communicating in the WAP environment, for example, authentication can take place at the WAP Gateway 20 using the device 10 as an authentication token, and can also take place at the modem 15 and/or at the web server 52. Thus, the modem can have an associated authentication server 17, the WAP Gateway can have an associated authentication server 22, and a web server 52 can have an associated authentication server 54. The authentication server 54 associated with a web server 52 can be directly connected thereto, or (as shown in FIG. 1) can be connected thereto over the internet.
  • [0024]
    Carrying out additional authentications in this way can provide additional security. In addition, using the device as an authentication token to carry out authentications at the WAP Gateway avoids the need for the user to enter a password, which increases the convenience for the user.
  • [0025]
    [0025]FIG. 2 shows the operation of the device 10 as an authentication token in the WAP environment. This operation will be described here with reference to a situation in which the device 10 is authenticated to the authentication server 17 associated with the modem 15. However, as mentioned above, authentication can take place in a similar way at many points in the network.
  • [0026]
    At step 70, the user starts the WAP browser software in the device 10, and attempts to communicate through the modem 15. In this case, the modem 15 requires authentication, and the device 10 detects this requirement at step 72.
  • [0027]
    At step 74, the device verifies the identity of the user. As part of this procedure, the device gives a prompt to the user, asking the user to identify himself. One possibility is to require the user to enter a Personal Identification Number (PIN). However, to provide an additional layer of security, the device 10 can also use a form of biometrics to provide user authentication. Thus, for example, the device 10 can include means for examining a physical feature which uniquely or nearly uniquely identifies a user, such as his fingerprints or voice recognition or another biometric technique, and allowing the user access to the system only if that physical feature is found to match the intended user.
  • [0028]
    Once the user has authenticated himself to the token, the token can authenticate itself to the modem 15, at step 76. Thus, using a selected authentication protocol, the token performs the necessary calculations, and, at step 78, information is provided to the WAP browser software, for example allowing it to respond to challenges from the authentication server 17, or to generate a password based on offline information.
  • [0029]
    More details about an authentication protocol which may be used can be found in the document “Entity Authentication Using Public Key Cryptography”, Federal Information Processing Standards Publication FIPS PUB 196 of February 1997.
  • [0030]
    Such an authentication procedure may be used in the WAP environment in many situations. For example, the user may use the device 10 to authenticate himself to a bank machine, or to a further device which controls access to a building or area.
  • [0031]
    In an alternative embodiment of the invention, the device 10 can be used as an authentication token when a user wishes to access the internet 50 using a personal computer 60.
  • [0032]
    As is well known, a personal computer has the advantage, compared with current mobile devices, that it has a wider range of input options (such as a full size keyboard and a mouse), and has a larger display for retrieved data. Further, the personal computer 60 is provided with a wired broadband connection to the internet 50. Possible uses of a personal computer 60, in conjunction with the internet 50, include retrieving data from servers to which there is intended to be restricted access, and carrying out online transactions, which may include transmitting confidential user information to a third party computer. As described above, the third party computer, from which information is to be retrieved, or to which information is to be transmitted, has an associated authentication server 54.
  • [0033]
    Also, FIG. 2 shows the PC connected to the internet 50 through a modem 56, which has an associated authentication server 58. The description below refers to authentication towards the authentication server, but the same procedure can be used to authenticate towards the authentication server 58.
  • [0034]
    Secure communications between the personal computer 60 and the authentication server 54 can then be achieved using an authentication token, as is generally known. In accordance with the invention, the authentication token can use the cryptographic components of a device, which also uses those components in, for example, WTLS communications.
  • [0035]
    [0035]FIG. 3 shows the operation of the device 10 as an authentication token in conjunction with the PC 60.
  • [0036]
    At step 80, the user starts the application which requires authentication, and the authentication functionality of the device 10 is started.
  • [0037]
    At step 82, the device verifies the identity of the user. As described with reference to FIG. 2, the user may be required to enter a Personal Identification Number (PIN), while, to provide an additional layer of security, the device 10 can also use a form of biometrics to provide user authentication.
  • [0038]
    Once the user has authenticated himself to the token, the token can authenticate itself to the web server, at step 84. Using the selected authentication protocol, the token performs the necessary calculations to generate the required passwords, and, at step 86, information is sent to the authentication server 54.
  • [0039]
    Again, a suitable authentication protocol is described in the document “Entity Authentication Using Public Key Cryptography”, Federal Information Processing Standards Publication FIPS PUB 196 of February 1997.
  • [0040]
    In outline, when the user first contacts the authentication server 54, the authentication server issues a challenge to the user. The authentication token encrypts the challenge with the user's private key, and returns it to the authentication server. The returned challenge is then decrypted by the authentication server with the user's public key, and the authentication server verifies that the decrypted challenge is the same as the original challenge.
  • [0041]
    Thus, there is no requirement for a user to enter a password to be able to access confidential information which is on the authentication server 54. The necessary password can in effect be generated automatically by the WAP-enabled device 10, using the public key infrastructure provided by the cryptographic module of the device, on the basis of the identity of the user confirmed by the wireless identity module in the device.
  • [0042]
    In this way, the WAP-enabled device 10 can be used an authentication token for multiple authentication servers, including authentication servers from multiple manufacturers. All that is necessary is for an authentication server and the device 10 to be able to operate the same authentication protocols.
  • [0043]
    It will be appreciated that, for example with appropriate software in the device, it can use any suitable authentication algorithm. The cryptographic module in the device can be used in any suitable method for generating passwords and encrypting communications, although use of Wireless Public Key Infrastructure is preferred.
  • [0044]
    The WAP-enabled device allows the use of digital signatures, for the purposes of non-repudiation. This same functionality can also be re-used when the device is being used as an authentication token.
  • [0045]
    In the case where the device 10 is used as an authentication token for a personal computer, described above with reference to FIG. 3, there is preferably a connection between the personal computer 60 and the WAP-enabled mobile phone 10. The connection may be wired, or, advantageously, communications between the personal computer 60 and mobile phone 10 can take place using the Bluetooth short-range radio transmission protocol.
  • [0046]
    When there is a connection between the personal computer 50 and the WAP-enabled mobile phone 10, whether this is wireless or wired, and the personal computer requires to use the phone 10 as an authentication token, this functionality of the phone must be started. This can be carried out automatically by means of a specific command sent from the personal computer to the phone, and may alternatively or additionally be carried out in response to a specific keypress on the keyboard of the phone.
  • [0047]
    When used with a personal computer in this way, commands may be transferred to and from the device using the AT protocol. Thus, for example, passwords which are generated in the mobile phone 10 acting a the authentication token are transferred to the personal computer 60, and can be automatically sent to the authentication server.
  • [0048]
    However, a manual operation is also possible, in which the necessary authentication calculations are carried out in the authentication token, and the required password or passwords are displayed on a screen of the device, and can be manually entered by the user through the keyboard of the personal computer, and can then be sent to the authentication server.
  • [0049]
    There is thus disclosed an authentication token which is readily available, since it re-uses functionality and infrastructure which already exist for WAP-enabled devices.

Claims (27)

  1. 1. A method of authenticating communications, the method comprising:
    using a mobile communications device, which includes a cryptographic module for use in mobile communication, as an authentication token.
  2. 2. A method of authenticating communications as claimed in claim 1, wherein the mobile communications device is a WAP-enabled device.
  3. 3. A method of authenticating communications as claimed in claim 1 or 2, wherein the use of the mobile communications device as an authentication token includes using public key encryption of communications.
  4. 4. A method of authenticating communications as claimed in claim 1, 2 or 3, wherein the mobile communications device uses the cryptographic module for Wireless Transport Layer Security communications.
  5. 5. A method of authenticating communications as claimed in claim 1, 2, 3 or 4, wherein the mobile communications device is used as an authentication token for a computer, and authenticates communications between the computer and an authentication server.
  6. 6. A method of authenticating communications as claimed in claim 5, comprising providing a wired connection between the mobile communications device and the computer.
  7. 7. A method of authenticating communications as claimed in claim 5, comprising providing a wireless connection between the mobile communications device and the computer.
  8. 8. A mobile communications device, comprising a cryptographic module, the cryptographic module being usable:
    (a) for encoding wireless communications from the device;
    (b) for authenticating a user of the device towards an authentication server.
  9. 9. A mobile communications device as claimed in claim 8, the cryptographic module being usable for authenticating a user of a separate computer towards the authentication server.
  10. 10. A mobile communications device as claimed in claim 9, having a short-range wireless communications transceiver, for sending signals to and receiving signals from the computer.
  11. 11. A mobile communications device as claimed in claim 10, wherein the short-range wireless communications transceiver uses Bluetooth wireless technology.
  12. 12. A mobile communications device as claimed in one of claims 8-11, wherein the cryptographic module is usable to support wireless communications using Wireless Transport Layer Security.
  13. 13. A mobile communications device as claimed in one of claims 8-12, having means for allowing biometric identification of a user.
  14. 14. A mobile communications device as claimed in one of claims 8-13, wherein the cryptographic module uses public key cryptography.
  15. 15. A mobile communications device as claimed in one of claims 8-14, comprising means for sending and transmitting data using WAP.
  16. 16. A mobile communications device as claimed in one of claims 8-15, wherein the cryptographic module is realised in hardware in the device.
  17. 17. A mobile communications device as claimed in one of claims 8-15, wherein the cryptographic module is realised in software in the device
  18. 18. A mobile communications device as claimed in one of claims 8-15, wherein the cryptographic module is provided on an external smart card.
  19. 19. A mobile communications device as claimed in one of claims 8-15, wherein the cryptographic module comprises a Wireless Identity Module (WIM) card.
  20. 20. A mobile communications device as claimed in claim 19, wherein the cryptographic module comprises a Wireless Identity Module (WIM) card which allows communications using Wireless Transport Layer Security.
  21. 21. A WAP-enabled mobile communications device, which is capable of use as an authentication token.
  22. 22. A communications network, comprising:
    at least one WAP gateway, which is enabled to encrypt communications on the basis of Wireless Transport Layer Security;
    at least one authentication server operable in a first authentication protocol; and
    a WAP-enabled client device, including a cryptographic module, the cryptographic module being usable for encrypting communications with the WAP gateway using Wireless Transport Layer Security, and the cryptographic module being further usable as an authentication token for authenticating a user of the device towards the authentication server, using the first authentication protocol.
  23. 23. A network as claimed in claim 22, wherein the cryptographic module is realised in hardware in the client device.
  24. 24. A network as claimed in claim 22, wherein the cryptographic module is realised in software in the client device.
  25. 25. A network as claimed in claim 22, wherein the cryptographic module is provided on an external smart card.
  26. 26. A network as claimed in claim 22, wherein the cryptographic module comprises a Wireless Identity Module (WIM) card.
  27. 27. A network as claimed in any of claims 22-26, comprising a computer, the client device having a connection to the computer such that it acts as an authentication token therefor.
US09928491 2000-08-15 2001-08-14 Network authentication Abandoned US20020034301A1 (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
GB0020095A GB2366139B (en) 2000-08-15 2000-08-15 Network authentication
GB0020095.6 2000-08-15
US22689500 true 2000-08-23 2000-08-23
US09928491 US20020034301A1 (en) 2000-08-15 2001-08-14 Network authentication

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US09928491 US20020034301A1 (en) 2000-08-15 2001-08-14 Network authentication
US11261177 US8165299B2 (en) 2000-08-15 2005-10-28 Network authentication

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US11261177 Division US8165299B2 (en) 2000-08-15 2005-10-28 Network authentication

Publications (1)

Publication Number Publication Date
US20020034301A1 true true US20020034301A1 (en) 2002-03-21

Family

ID=26244841

Family Applications (2)

Application Number Title Priority Date Filing Date
US09928491 Abandoned US20020034301A1 (en) 2000-08-15 2001-08-14 Network authentication
US11261177 Active 2024-11-05 US8165299B2 (en) 2000-08-15 2005-10-28 Network authentication

Family Applications After (1)

Application Number Title Priority Date Filing Date
US11261177 Active 2024-11-05 US8165299B2 (en) 2000-08-15 2005-10-28 Network authentication

Country Status (3)

Country Link
US (2) US20020034301A1 (en)
EP (1) EP1323323A1 (en)
WO (1) WO2002015626A1 (en)

Cited By (35)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020035699A1 (en) * 2000-07-24 2002-03-21 Bluesocket, Inc. Method and system for enabling seamless roaming in a wireless network
US20020078367A1 (en) * 2000-10-27 2002-06-20 Alex Lang Automatic configuration for portable devices
US20020085719A1 (en) * 2000-07-24 2002-07-04 Bluesocket, Inc. Method and system for enabling centralized control of wireless local area networks
US20020114303A1 (en) * 2000-12-26 2002-08-22 Crosbie David B. Methods and systems for clock synchronization across wireless networks
US20020194499A1 (en) * 2001-06-15 2002-12-19 Audebert Yves Louis Gabriel Method, system and apparatus for a portable transaction device
US20020197979A1 (en) * 2001-05-22 2002-12-26 Vanderveen Michaela Catalina Authentication system for mobile entities
US20030087629A1 (en) * 2001-09-28 2003-05-08 Bluesocket, Inc. Method and system for managing data traffic in wireless networks
US20030093671A1 (en) * 2001-11-13 2003-05-15 International Business Machines Corporation Method and system for authentication of a user
US20030126271A1 (en) * 2001-12-27 2003-07-03 Mowry Kevin Curtis Method and apparatus for enabling an external function from a WAP environment
WO2004066219A1 (en) * 2003-01-22 2004-08-05 Francotyp-Postalia Ag & Co. Kg Mobile data transmission method and system
US20040267665A1 (en) * 2003-06-24 2004-12-30 Lg Telecom, Ltd. System for providing banking services by use of mobile communication
US20050053241A1 (en) * 2003-04-04 2005-03-10 Chen-Huang Fan Network lock method and related apparatus with ciphered network lock and inerasable deciphering key
US20050166263A1 (en) * 2003-09-12 2005-07-28 Andrew Nanopoulos System and method providing disconnected authentication
US20050250515A1 (en) * 2004-05-10 2005-11-10 Mitsubishi Denki Kabushiki Kaisha Local public information system
US20050268096A1 (en) * 2004-05-28 2005-12-01 Roger Kilian-Kehr Client authentication using a challenge provider
US20060090197A1 (en) * 2004-10-22 2006-04-27 Software Ag Authentication method and devices
WO2006049520A1 (en) * 2004-11-02 2006-05-11 Oracle International Corporation Systems and methods of user authentication
US20070136796A1 (en) * 2005-12-13 2007-06-14 Microsoft Corporation Wireless authentication
WO2007071009A1 (en) * 2005-12-23 2007-06-28 Bce Inc. Wireless device authentication between different networks
EP1832998A1 (en) * 2006-03-07 2007-09-12 Hitachi, Ltd. Method of interfacing between electronic devices, method of operating a portable storage device, electronic device and electronic system
US20080086424A1 (en) * 2006-10-05 2008-04-10 Sivakumar Jambunathan Guest Limited Authorization For Electronic Financial Transaction Cards
EP2061244A1 (en) * 2007-09-27 2009-05-20 Vodafone Group PLC Protection of broadcast content with key distribution using telecommunications network
US20090289757A1 (en) * 2008-05-23 2009-11-26 Ballard Claudio R System for remote control using a wap-enabled device
US20090320118A1 (en) * 2005-12-29 2009-12-24 Axsionics Ag Security Token and Method for Authentication of a User with the Security Token
US8254734B2 (en) 2008-03-07 2012-08-28 Veedims, Llc Virtual electronic switch system
US8303337B2 (en) 2007-06-06 2012-11-06 Veedims, Llc Hybrid cable for conveying data and power
US20130138716A1 (en) * 2011-11-28 2013-05-30 At&T Intellectual Property I, Lp Apparatus and method for providing activity monitoring and analysis
US8526311B2 (en) 2007-06-06 2013-09-03 Veedims, Llc System for integrating a plurality of modules using a power/data backbone network
US20130282400A1 (en) * 2012-04-20 2013-10-24 Woundmatrix, Inc. System and method for uploading and authenticating medical images
US20140282958A1 (en) * 2001-08-21 2014-09-18 Bookit Oy Ajanvarauspalvelu Multi-factor authentication techniques
US8976541B2 (en) 2011-08-31 2015-03-10 Potens Ip Holdings Llc Electrical power and data distribution apparatus
US20150271159A1 (en) * 2014-03-18 2015-09-24 Em Microelectronic-Marin S.A. Authentication by use of symmetric and asymmetric cryptography
US9178880B1 (en) * 2012-06-30 2015-11-03 Emc Corporation Gateway mediated mobile device authentication
US9250660B2 (en) 2012-11-14 2016-02-02 Laserlock Technologies, Inc. “HOME” button with integrated user biometric sensing and verification system for mobile device
US9485236B2 (en) 2012-11-14 2016-11-01 Verifyme, Inc. System and method for verified social network profile

Families Citing this family (26)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030131114A1 (en) * 2001-10-12 2003-07-10 Scheidt Edward M. Portable electronic authenticator cryptographic module
US8466773B2 (en) * 2004-02-24 2013-06-18 Mikael Willgert Method of authorization
DE102004051403B4 (en) * 2004-10-21 2007-03-08 Siemens Ag Mobile communication terminal with authentication device, such a device containing network configuration and authentication methods
KR20060069611A (en) * 2004-12-17 2006-06-21 한국전자통신연구원 User authentication method in other network using digital signature made by mobile terminal
US8543814B2 (en) * 2005-01-12 2013-09-24 Rpx Corporation Method and apparatus for using generic authentication architecture procedures in personal computers
FR2895186A1 (en) * 2005-12-20 2007-06-22 France Telecom Method and update system of access conditions for telecommunication device to services delivered by a network of telecommunication
US8046596B2 (en) * 2007-06-21 2011-10-25 Emc Corporation Reset-tolerant authentication device
GB0801395D0 (en) 2008-01-25 2008-03-05 Qinetiq Ltd Network having quantum key distribution
JP5631743B2 (en) 2008-01-25 2014-11-26 キネテイツク・リミテツド Quantum cryptographic device
GB0801408D0 (en) 2008-01-25 2008-03-05 Qinetiq Ltd Multi-community network with quantum key distribution
GB0801492D0 (en) 2008-01-28 2008-03-05 Qinetiq Ltd Optical transmitters and receivers for quantum key distribution
USD638033S1 (en) 2008-03-07 2011-05-17 Ballard Claudio R Air intake assembly
US8111145B2 (en) 2008-03-07 2012-02-07 Veedims, Llc Starter control and indicator system
US20090260071A1 (en) * 2008-04-14 2009-10-15 Microsoft Corporation Smart module provisioning of local network devices
GB0809038D0 (en) 2008-05-19 2008-06-25 Qinetiq Ltd Quantum key device
GB0809044D0 (en) 2008-05-19 2008-06-25 Qinetiq Ltd Multiplexed QKD
GB0809045D0 (en) 2008-05-19 2008-06-25 Qinetiq Ltd Quantum key distribution involving moveable key device
GB0819665D0 (en) 2008-10-27 2008-12-03 Qinetiq Ltd Quantum key dsitribution
GB0822253D0 (en) 2008-12-05 2009-01-14 Qinetiq Ltd Method of establishing a quantum key for use between network nodes
GB0822254D0 (en) 2008-12-05 2009-01-14 Qinetiq Ltd Method of performing authentication between network nodes
GB0822356D0 (en) 2008-12-08 2009-01-14 Qinetiq Ltd Non-linear optical device
EP2404255A1 (en) * 2009-03-02 2012-01-11 Encap AS Method and computer program for generation and verification of otp between server and mobile device using multiple channels
GB0917060D0 (en) 2009-09-29 2009-11-11 Qinetiq Ltd Methods and apparatus for use in quantum key distribution
US8887250B2 (en) * 2009-12-18 2014-11-11 Microsoft Corporation Techniques for accessing desktop applications using federated identity
USD662869S1 (en) 2010-06-01 2012-07-03 Ballard Claudio R Automotive wheel center nut
GB201020424D0 (en) 2010-12-02 2011-01-19 Qinetiq Ltd Quantum key distribution

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5280527A (en) * 1992-04-14 1994-01-18 Kamahira Safe Co., Inc. Biometric token for authorizing access to a host system
US5778071A (en) * 1994-07-12 1998-07-07 Information Resource Engineering, Inc. Pocket encrypting and authenticating communications device
US5784463A (en) * 1996-12-04 1998-07-21 V-One Corporation Token distribution, registration, and dynamic configuration of user entitlement for an application level security system and method
US5907815A (en) * 1995-12-07 1999-05-25 Texas Instruments Incorporated Portable computer stored removable mobile telephone
US5943423A (en) * 1995-12-15 1999-08-24 Entegrity Solutions Corporation Smart token system for secure electronic transactions and identification
US6041409A (en) * 1997-04-25 2000-03-21 Zunquan; Liu Device and method for data integrity and authentication
US6061346A (en) * 1997-01-17 2000-05-09 Telefonaktiebolaget Lm Ericsson (Publ) Secure access method, and associated apparatus, for accessing a private IP network
US6463534B1 (en) * 1999-03-26 2002-10-08 Motorola, Inc. Secure wireless electronic-commerce system with wireless network domain

Family Cites Families (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1995016238A1 (en) * 1993-12-06 1995-06-15 Telequip Corporation Secure computer memory card
US5668876A (en) * 1994-06-24 1997-09-16 Telefonaktiebolaget Lm Ericsson User authentication method and apparatus
DE19630920C1 (en) * 1996-07-31 1997-10-16 Siemens Ag Subscriber authentication and/or data encryption method
EP0898397A2 (en) 1997-08-22 1999-02-24 Nokia Mobile Phones Ltd. Method for sending a secure communication in a telecommunications system
GB9800443D0 (en) 1998-01-10 1998-03-04 Ncipher Corp Limited Cryptographic token
FI980427A (en) * 1998-02-25 1999-08-26 Ericsson Telefon Ab L M Method, arrangement and apparatus for the verification of
FR2785119B1 (en) 1998-10-27 2000-12-08 Gemplus Card Int Method and risk management system in a mobile telephony network of
US20020124176A1 (en) 1998-12-14 2002-09-05 Michael Epstein Biometric identification mechanism that preserves the integrity of the biometric information
CA2359685A1 (en) 1999-01-29 2000-08-03 General Instrument Corporation Authentication enforcement using decryption and authentication in a single transaction in a secure microprocessor
FI990601A0 (en) * 1999-03-17 1999-03-17 Sonera Oy A method and system in a communication system
GB9914262D0 (en) 1999-06-18 1999-08-18 Nokia Mobile Phones Ltd WIM Manufacture certificate
CN1385051A (en) * 1999-08-31 2002-12-11 艾利森电话股份有限公司 GSM security for packet data networks
FI110224B (en) * 1999-09-17 2002-12-13 Nokia Corp Monitoring system
US6993658B1 (en) * 2000-03-06 2006-01-31 April System Design Ab Use of personal communication devices for user authentication
US7310734B2 (en) * 2001-02-01 2007-12-18 3M Innovative Properties Company Method and system for securing a computer network and personal identification device used therein for controlling access to network components
US20020141586A1 (en) * 2001-03-29 2002-10-03 Aladdin Knowledge Systems Ltd. Authentication employing the bluetooth communication protocol
US20040203800A1 (en) * 2002-10-24 2004-10-14 John Myhre System and method for content delivery using alternate data paths in a wireless network
US20040123152A1 (en) * 2002-12-18 2004-06-24 Eric Le Saint Uniform framework for security tokens

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5280527A (en) * 1992-04-14 1994-01-18 Kamahira Safe Co., Inc. Biometric token for authorizing access to a host system
US5778071A (en) * 1994-07-12 1998-07-07 Information Resource Engineering, Inc. Pocket encrypting and authenticating communications device
US5907815A (en) * 1995-12-07 1999-05-25 Texas Instruments Incorporated Portable computer stored removable mobile telephone
US5943423A (en) * 1995-12-15 1999-08-24 Entegrity Solutions Corporation Smart token system for secure electronic transactions and identification
US5784463A (en) * 1996-12-04 1998-07-21 V-One Corporation Token distribution, registration, and dynamic configuration of user entitlement for an application level security system and method
US6061346A (en) * 1997-01-17 2000-05-09 Telefonaktiebolaget Lm Ericsson (Publ) Secure access method, and associated apparatus, for accessing a private IP network
US6041409A (en) * 1997-04-25 2000-03-21 Zunquan; Liu Device and method for data integrity and authentication
US6463534B1 (en) * 1999-03-26 2002-10-08 Motorola, Inc. Secure wireless electronic-commerce system with wireless network domain

Cited By (60)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7260638B2 (en) 2000-07-24 2007-08-21 Bluesocket, Inc. Method and system for enabling seamless roaming in a wireless network
US20020035699A1 (en) * 2000-07-24 2002-03-21 Bluesocket, Inc. Method and system for enabling seamless roaming in a wireless network
US20020085719A1 (en) * 2000-07-24 2002-07-04 Bluesocket, Inc. Method and system for enabling centralized control of wireless local area networks
US7146636B2 (en) 2000-07-24 2006-12-05 Bluesocket, Inc. Method and system for enabling centralized control of wireless local area networks
US7373656B2 (en) * 2000-10-27 2008-05-13 Sandisk Il Ltd. Automatic configuration for portable devices
US20020078367A1 (en) * 2000-10-27 2002-06-20 Alex Lang Automatic configuration for portable devices
US20020114303A1 (en) * 2000-12-26 2002-08-22 Crosbie David B. Methods and systems for clock synchronization across wireless networks
US7126937B2 (en) 2000-12-26 2006-10-24 Bluesocket, Inc. Methods and systems for clock synchronization across wireless networks
US20020197979A1 (en) * 2001-05-22 2002-12-26 Vanderveen Michaela Catalina Authentication system for mobile entities
US20020194499A1 (en) * 2001-06-15 2002-12-19 Audebert Yves Louis Gabriel Method, system and apparatus for a portable transaction device
US9578022B2 (en) * 2001-08-21 2017-02-21 Bookit Oy Ajanvarauspalvelu Multi-factor authentication techniques
US20140282958A1 (en) * 2001-08-21 2014-09-18 Bookit Oy Ajanvarauspalvelu Multi-factor authentication techniques
US20060234678A1 (en) * 2001-09-28 2006-10-19 Bluesocket, Inc. Method and system for managing data traffic in wireless networks
US7042988B2 (en) 2001-09-28 2006-05-09 Bluesocket, Inc. Method and system for managing data traffic in wireless networks
US20030087629A1 (en) * 2001-09-28 2003-05-08 Bluesocket, Inc. Method and system for managing data traffic in wireless networks
US7360238B2 (en) * 2001-11-13 2008-04-15 International Business Machines Corporation Method and system for authentication of a user
US20030093671A1 (en) * 2001-11-13 2003-05-15 International Business Machines Corporation Method and system for authentication of a user
US20030126271A1 (en) * 2001-12-27 2003-07-03 Mowry Kevin Curtis Method and apparatus for enabling an external function from a WAP environment
WO2003058461A1 (en) * 2001-12-27 2003-07-17 Motorola Inc. Method and apparatus for enabling an external function from a wap environment
WO2004066219A1 (en) * 2003-01-22 2004-08-05 Francotyp-Postalia Ag & Co. Kg Mobile data transmission method and system
US7471794B2 (en) * 2003-04-04 2008-12-30 Qisda Corporation Network lock method and related apparatus with ciphered network lock and inerasable deciphering key
US20050053241A1 (en) * 2003-04-04 2005-03-10 Chen-Huang Fan Network lock method and related apparatus with ciphered network lock and inerasable deciphering key
US20040267665A1 (en) * 2003-06-24 2004-12-30 Lg Telecom, Ltd. System for providing banking services by use of mobile communication
US7885870B2 (en) * 2003-06-24 2011-02-08 Lg Uplus Corp. System for providing banking services by use of mobile communication
US20050166263A1 (en) * 2003-09-12 2005-07-28 Andrew Nanopoulos System and method providing disconnected authentication
US8966276B2 (en) * 2003-09-12 2015-02-24 Emc Corporation System and method providing disconnected authentication
US20050250515A1 (en) * 2004-05-10 2005-11-10 Mitsubishi Denki Kabushiki Kaisha Local public information system
US7421267B2 (en) * 2004-05-10 2008-09-02 Kenichiro Oka Local public information system
US20050268096A1 (en) * 2004-05-28 2005-12-01 Roger Kilian-Kehr Client authentication using a challenge provider
US7673141B2 (en) * 2004-05-28 2010-03-02 Sap Aktiengesellschaft Client authentication using a challenge provider
US20060090197A1 (en) * 2004-10-22 2006-04-27 Software Ag Authentication method and devices
US8028331B2 (en) 2004-10-22 2011-09-27 Software Ag Source access using request and one-way authentication tokens
US20110214172A1 (en) * 2004-10-22 2011-09-01 Eckehard Hermann Authentication Over a Network Using One-Way Tokens
US8312525B2 (en) 2004-10-22 2012-11-13 Software Ag Authentication over a network using one-way tokens
US20080016347A1 (en) * 2004-11-02 2008-01-17 Oracle International Corporation Systems and Methods of User Authentication
US8601264B2 (en) 2004-11-02 2013-12-03 Oracle International Corporation Systems and methods of user authentication
WO2006049520A1 (en) * 2004-11-02 2006-05-11 Oracle International Corporation Systems and methods of user authentication
US8191161B2 (en) * 2005-12-13 2012-05-29 Microsoft Corporation Wireless authentication
US20070136796A1 (en) * 2005-12-13 2007-06-14 Microsoft Corporation Wireless authentication
US20090217048A1 (en) * 2005-12-23 2009-08-27 Bce Inc. Wireless device authentication between different networks
US8959598B2 (en) 2005-12-23 2015-02-17 Bce Inc. Wireless device authentication between different networks
WO2007071009A1 (en) * 2005-12-23 2007-06-28 Bce Inc. Wireless device authentication between different networks
US20090320118A1 (en) * 2005-12-29 2009-12-24 Axsionics Ag Security Token and Method for Authentication of a User with the Security Token
US8341714B2 (en) * 2005-12-29 2012-12-25 Axsionics Ag Security token and method for authentication of a user with the security token
EP1832998A1 (en) * 2006-03-07 2007-09-12 Hitachi, Ltd. Method of interfacing between electronic devices, method of operating a portable storage device, electronic device and electronic system
US7739197B2 (en) * 2006-10-05 2010-06-15 International Business Machines Corporation Guest limited authorization for electronic financial transaction cards
US20080086424A1 (en) * 2006-10-05 2008-04-10 Sivakumar Jambunathan Guest Limited Authorization For Electronic Financial Transaction Cards
US8303337B2 (en) 2007-06-06 2012-11-06 Veedims, Llc Hybrid cable for conveying data and power
US8526311B2 (en) 2007-06-06 2013-09-03 Veedims, Llc System for integrating a plurality of modules using a power/data backbone network
EP2061244A1 (en) * 2007-09-27 2009-05-20 Vodafone Group PLC Protection of broadcast content with key distribution using telecommunications network
US8254734B2 (en) 2008-03-07 2012-08-28 Veedims, Llc Virtual electronic switch system
US20090289757A1 (en) * 2008-05-23 2009-11-26 Ballard Claudio R System for remote control using a wap-enabled device
US8976541B2 (en) 2011-08-31 2015-03-10 Potens Ip Holdings Llc Electrical power and data distribution apparatus
US20130138716A1 (en) * 2011-11-28 2013-05-30 At&T Intellectual Property I, Lp Apparatus and method for providing activity monitoring and analysis
US20130282400A1 (en) * 2012-04-20 2013-10-24 Woundmatrix, Inc. System and method for uploading and authenticating medical images
US9178880B1 (en) * 2012-06-30 2015-11-03 Emc Corporation Gateway mediated mobile device authentication
US9250660B2 (en) 2012-11-14 2016-02-02 Laserlock Technologies, Inc. “HOME” button with integrated user biometric sensing and verification system for mobile device
US9485236B2 (en) 2012-11-14 2016-11-01 Verifyme, Inc. System and method for verified social network profile
US20150271159A1 (en) * 2014-03-18 2015-09-24 Em Microelectronic-Marin S.A. Authentication by use of symmetric and asymmetric cryptography
US9774576B2 (en) * 2014-03-18 2017-09-26 Em Microelectronic-Marin S.A. Authentication by use of symmetric and asymmetric cryptography

Also Published As

Publication number Publication date Type
EP1323323A1 (en) 2003-07-02 application
WO2002015626A1 (en) 2002-02-21 application
US8165299B2 (en) 2012-04-24 grant
US20060053281A1 (en) 2006-03-09 application

Similar Documents

Publication Publication Date Title
US7100200B2 (en) Method and apparatus for transmitting authentication credentials of a user across communication sessions
US6986040B1 (en) System and method of exploiting the security of a secure communication channel to secure a non-secure communication channel
US7188360B2 (en) Universal authentication mechanism
US20130262857A1 (en) Secure authentication in a multi-party system
US20040102183A1 (en) Mobile wireless communications device enablement and methods therefor
US7293176B2 (en) Strong mutual authentication of devices
US20030196084A1 (en) System and method for secure wireless communications using PKI
US20120124651A1 (en) Secure and efficient authentication using plug-in hardware compatible with desktops, laptops and/or smart mobile communication devices such as iphones
US8763097B2 (en) System, design and process for strong authentication using bidirectional OTP and out-of-band multichannel authentication
US20060189298A1 (en) Method and software program product for mutual authentication in a communications network
US20050069137A1 (en) Method of distributing a public key
US20040128509A1 (en) Method and system for establishing a wireless communication link
US6075860A (en) Apparatus and method for authentication and encryption of a remote terminal over a wireless link
US20060070116A1 (en) Apparatus and method for authenticating user for network access in communication system
US20060262929A1 (en) Method and system for identifying the identity of a user
US20020187808A1 (en) Method and arrangement for encrypting data transfer at an interface in mobile equipment in radio network, and mobile equipment in radio network
US20030140235A1 (en) Method for biometric encryption of email
US20070118891A1 (en) Universal authentication token
US20090300738A1 (en) Authentication Methods and Systems
EP1102157A1 (en) Method and arrangement for secure login in a telecommunications system
EP1383265A1 (en) Method for generating proxy signatures
US6732278B2 (en) Apparatus and method for authenticating access to a network resource
US20080022089A1 (en) Security system for handheld wireless devices using-time variable encryption keys
US20030131244A1 (en) Method and system for identifying users and authenticating digital documents on data communications networks
US20030159031A1 (en) Method for establishing the authenticity of the identity of a service user and device for carrying out the method

Legal Events

Date Code Title Description
AS Assignment

Owner name: TELEFONAKTIEBOLAGET LM ERICSSON (PUBL), SWEDEN

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ANDERSSON, STEFAN;REEL/FRAME:012353/0088

Effective date: 20011121