US20060288407A1 - Security and privacy enhancements for security devices - Google Patents

Security and privacy enhancements for security devices Download PDF

Info

Publication number
US20060288407A1
US20060288407A1 US10530293 US53029305A US2006288407A1 US 20060288407 A1 US20060288407 A1 US 20060288407A1 US 10530293 US10530293 US 10530293 US 53029305 A US53029305 A US 53029305A US 2006288407 A1 US2006288407 A1 US 2006288407A1
Authority
US
Grant status
Application
Patent type
Prior art keywords
security
aka
application
tamper
security device
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US10530293
Inventor
Mats Naslund
Karl Norman
Tomas Goldbeck-Lowe
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Telefonaktiebolaget LM Ericsson AB
Original Assignee
Telefonaktiebolaget LM Ericsson AB
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • H04L63/0853Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network using an additional device, e.g. smartcard, SIM or a different communication terminal
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/02Details
    • H04L12/06Answer-back mechanisms or circuits
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communication
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0838Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
    • H04L9/0841Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols
    • H04L9/0844Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communication
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3234Cryptographic mechanisms or cryptographic arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communication
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271Cryptographic mechanisms or cryptographic arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATIONS NETWORKS
    • H04W12/00Security arrangements, e.g. access security or fraud detection; Authentication, e.g. verifying user identity or authorisation; Protecting privacy or anonymity
    • H04W12/06Authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATIONS NETWORKS
    • H04W12/00Security arrangements, e.g. access security or fraud detection; Authentication, e.g. verifying user identity or authorisation; Protecting privacy or anonymity
    • H04W12/12Fraud detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80Wireless
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATIONS NETWORKS
    • H04W74/00Wireless channel access, e.g. scheduled or random access

Abstract

The invention generally relates to a tamper-resistant security device, such as a subscriber identity module or equivalent, which has an AKA (Authentication and Key Agreement) module for performing an AKA process with a security key stored in the device, as well as means for external communication. The idea according to the invention is to provide the tamper-resistant security device with an application adapted for cooperating with the AKA module and means for interfacing the AKA module and the application. The application cooperating with the AKA module is preferably a security and/or privacy enhancing application. The application is advantageously a software application implemented in an application environment of the security device. For increased security, the security device may also be adapted to detect whether it is operated in its normal secure environment or a foreign less secure environment, and set access rights to resident files or commands that could expose the AKA process or corresponding parameters accordingly.

Description

    TECHNICAL FIELD OF THE INVENTION
  • The present invention generally relates to Authentication and Key Agreement (AKA) procedures in communication systems, and more particularly to the use and configuration of tamper-resistant security devices in such procedures.
  • BACKGROUND OF THE INVENTION
  • In general, Authentication and Key Agreement (AKA) includes mutual authentication, which means that each of the communicating parties, such as a user and an associated operator, can be certain that the other party is the alleged party, but may also include preserved privacy, which for example means that the initiating party, normally the user, can use a pseudonym for his/her identity. The operator will then be able to determine the user's true identity, whereas no third party will be able to. Naturally, there is usually no point in performing authentication, unless some subsequent actions and/or procedures involving the authenticated parties are performed. Typically, the authentication therefore finally results in a key agreement from which one or more keys are obtained that are used to protect further communication between the parties, and to ensure that each consecutive message originates from the other party.
  • Many network services are based on storing user credentials (typically a secret key k, and possibly also user identities and pseudonyms) on a tamper-resistant “security device”, e.g. a GSM SIM (Subscriber Identity Module), a UMTS SIM or an ISIM (IP Multimedia SIM) card, and letting the network interact with this device through a user terminal in a challenge-response protocol to perform (subscriber) Authentication and Key Agreement (AKA). In the remainder, we simply refer to such a protocol as an AKA protocol. For example, this includes the GSM and UMTS AKA protocols.
  • Typically the protocol works as follows, as schematically illustrated in FIG. 1. In a subscriber database/authentication center, commonly referred to as an AuC in the context of mobile communication systems, an expected response XRES is generated based on knowledge of the secret key and a generated challenge RAND. The AKA protocol may, and typically will, involve an AAA (Authorization, Authentication and Accounting) server, which may or may not be physically co-located with the AuC. The challenge RAND and the expected response XRES are normally transferred to the AAA server. The challenge is sent to the terminal ME (Mobile Equipment), which assisted by the security device computes the response RES. The response is sent back to the AAA server, and if it matches the expected response, the user is authenticated. In FIG. 1, only the challenge response protocol is shown. In reality, for example session keys for encryption are also generated.
  • A problem is that in some cases (again e.g. GSM SILMs, using the COMP128 algorithm) the cryptographic algorithms used in the AKA protocol are not very strong, and by obtaining a relatively small number of challenge-response pairs, an attacker can reverse-engineer the security device (and find out what k is).
  • This problem gets worse by the fact that there are several suggested solutions, where, to gain different types of accesses and services, the security device needs to be pulled out of its normal environment (e.g. a mobile phone) and put into a foreign environment. For instance, the security device is put into a card-reader connected over a USB (Universal Serial Bus) port to a PC (Personal Computer). Since a PC, compared to a mobile phone, is relatively vulnerable to infections by viruses and Trojans, it is possible that malicious software is planted that, unbeknownst to the user, “pulls” challenge-response values from the device and (possibly later) forwards them to an attacker for analysis. This is a serious threat in cases where there is no authentication of the challenges (e.g. legacy GSM systems), or when the challenges are authenticated, but a security flaw in that authentication is found. The analysis for attacks can be based on passive eavesdropping (indicated in FIG. 1 by “ATTACK” and solid lines), or by active injection of adaptively chosen challenges (indicated in FIG. 1 by “ATTACK” and dashed lines).
  • Even if the security card remains in the terminal/phone all the time, there are cases where security could be compromised. For instance, there are suggestions to reuse the AKA protocol over another interface, e.g. Bluetooth or IRDA, in order to be able to use the credentials on the card to authenticate to other services besides network access. For example, the phone could communicate with a cash register in a shop to pay for purchased goods, acting as an “electronic wallet”. Since, for example, GSM SIMs cannot by default authenticate the device that requests authentication (i.e. the authentication is not mutual) there is a risk that malicious devices are put up in public places with the intent to attack weak algorithms on the cards. A probably worse threat is that of an adversary installing a malicious agent in the terminal. Such an agent may then be activated remotely when an attacker wants to authenticate for a server, providing the attacker with AKA parameters from the infected terminal. This severely restricts the business cases in which, for example, SIM based authentication can be used.
  • RELATED ART
  • In the very specific case of GSM SIMs, there is work in progress in IETF, [1], to enhance the security by encapsulating the GSM A3/A8 responses in a more secure algorithm such as the MD5 or SHA1 algorithms, [2]. More precisely, rather than returning the values of the A3/A8 algorithms directly, they are used as input to a stronger function, and the result of that function is returned instead. This prevents direct analysis of the outputs of A3/A8. This work, which can be referred to as a SIM profile of the Extensible Authentication Protocol (EAP-SIM), also provides a partial solution to the fact that more than the standard 64-bits of GSM keying material might be needed. This is accomplished by querying the A3/A8 algorithms sequentially on different RAND-values, concatenating the results into a longer key.
  • FIG. 2 illustrates the conventional extended authentication protocol EAP-SIM. The mobile equipment (ME) or other user terminal relays the challenge to the SIM, and computes the response RES and then a hash of the response. This hash is then sent to the AAA server as the new response RES′. The AAA server naturally implements the same hash function. An attacker that sniffs the traffic between the AAA server and the ME will in this case not get access to the output, RES, from A3/A8 directly, but only to the hash, RES′, of the A3/A8 output. It can be noted that similar work is also in progress for UMTS AKA, [3].
  • While the EAP SIM proposal addressed the theoretical problems with the GSM A3/A8 algorithms, or specifically the COMP128 implementations thereof, it has several shortcomings. To start with, the solution will only solve the specific problems related to COMP128/GSM. If the EAP encapsulation is implemented in the terminal, e.g. a laptop, the SIM-ME interface, indicated by an encircled “1” in FIG. 2, is also available to viruses and Trojans. This implies that chosen challenges and corresponding responses will still be available to an attacker. Preferably, any solution to this particular problem should not require changing the SIM-ME interface standard as specified in reference [4]. It will take time to change the standard, and it might not even be possible before standard UMTS USIMs, which are stronger and do not need the extra protection, are available on the market. Also, as noted in the introduction, it has been suggested that GSM phones/networks compliant with UMTS Release 99 (R99) should support the stronger UMTS AKA. Hence, such a standardization effort is questionable. In addition, it cannot be excluded that the EAP SIM proposal itself has some weakness and may later need to be “tweaked”. In fact, the approach of using several RAND values in sequence to derive longer keys was recently discovered to have some flaws. For instance, by issuing the same RAND value repeated n times, rather than n distinct RAND values, the effective security obtained may still only be equivalent to that obtained from a single RAND value.
  • SUMMARY OF THE INVENTION
  • The present invention overcomes these and other drawbacks of the prior art arrangements.
  • It is a general object of the invention to provide enhanced security and/or privacy in connection with authentication and/or key agreement.
  • It is an object to provide an improved SIM or similar tamper-resistant security device. In this respect, it is particularly desirable to extend the functionality of the tamper-resistant security device for the purpose of enhanced security and/or privacy.
  • It is also an object of the invention to maintain the overall security even if a tamper-resistant security device such as a SIM is used in an insecure environment or when reusing the AKA protocol over a less secure interface.
  • Another object is to provide a user terminal adapted for enhanced security and/or privacy.
  • Still another object of the invention is to provide a network server supporting security and/or privacy enhancements in tamper-resistant security devices installed in user terminals.
  • As indicated above, the invention generally relates to a tamper-resistant security device, such as a subscriber identity module or equivalent, which has means for storing user credentials, including at least a security key, an AKA (Authentication and Key Agreement) module for performing an AKA process with the security key, as well as means for external communication.
  • The basic idea according to a main aspect of the invention is to provide the tamper-resistant security device with an application adapted for cooperating with the AKA module, and means for interfacing the AKA module to this application.
  • The application cooperating with the AKA module is preferably a security and/or privacy enhancing application, which typically performs enhanced security and/or privacy processing related to authentication and/or key agreement of the AKA module.
  • For enhanced security, the application performs somewhat different security processing tasks depending on the particular security goals to be accomplished. In general, the enhanced security processing may involve processing of one or more input parameters (re-processing) and/or output parameters (post-processing) of the AKA process. For example, a security enhancing application may be configured for encapsulating AKA responses in a more secure algorithm, e.g. as suggested in the EAP SIM protocol mentioned above. However, according to the invention, all sensitive processing takes place in the tamper-resistant security device, including the security enhancing steps. Thus, considering the increased strength of the EAP SIM and similar security enhancing algorithms, the probability that attacks aimed at retrieving the secret key or other sensitive data will be successful is significantly reduced. Accordingly, the overall security can be maintained even if the tamper-resistant security device is used in a less secure environment such as a personal computer (PC), or when reusing the AKA protocol over a less secure interface such as Bluetooth.
  • Other examples of enhanced security processing that may be performed by the security application of the invention include i) extending the basic security functionality to generate additional keying material, e.g. one or more (possibly longer) keys based on one or more challenge-response queries, ii) executing at least part of the computations required for generating a shared key for end-to-end encryption between two users (based on the key in the SIM or similar security device), and iii) masking AKA key information generated by the AKA module. For example, additional keying material could be useful for the purposes of lawful interception with increased security from the end-user's point of view, or for security enhancements associated with public access.
  • The invention can also be used to perform replay checks, ensuring that the same AKA input parameter (RAND) is not re-used in ways that are not secure. In particular, when combining several AKA output parameters into a higher security response or key, it is important to make sure that a set of unique AKA input parameters (RAND values) are used.
  • For privacy enhancement, an important aspect is to protect the user's identity by managing (maintaining or possibly generating) proper user pseudonyms, also called temporary user identifiers, as will be described later on.
  • In the context of enhanced security, the tamper-resistant security device and/or the corresponding user terminal is preferably configured for performing some form of security policy processing. The security policy processing normally involves security policy decision and/or enforcement, and is preferably based on information representative of the security conditions in relation to the tamper-resistant security device. For example, it is important that the overall security enhancement is not compromised by unauthorized access, e.g. by viruses and Trojans, to resident application files and commands of the tamper-resistant security device that could expose the AKA process and the corresponding AKA parameters. Therefore, the tamper-resistant device is advantageously adapted for allowing access to such resident files and commands only under given circumstances. More particularly, certain resident files and commands of the tamper-resistant device are preferably disabled when the security device is pulled out of its normal environment, e.g. a mobile phone, and plugged into a more hostile environment such as a PC or the like. Instead, any requests for AKA processing are conveniently routed to the security enhancing application. This could be managed, for example by utilizing an internal or external module for detecting the security conditions of the tamper-resistant security device and/or by letting the user enter different PIN codes or equivalent to set access rights in dependence on the type of device into which the security device is arranged. In similarity, when reusing the AKA protocol over a less secure interface such as Bluetooth, the user terminal may re-route AKA requests to the security-enhancing application.
  • It has been recognized that it is particularly advantageous to implement the security enhancing and/or privacy enhancing application as a software application, preferably as an applet, which may be pre-installed during manufacture or provided as an authenticated application download into an application environment in the tamper-resistant security device. For example, the application environment may be provided by the GSM SAT (SIM Application Toolkit) of ordinary GSM SIM cards, or the UMTS SAT of UMTS SIM cards. In general, the application is securely (preferably authenticated and encrypted) downloaded into the application environment from a network server managed by a trusted party such as a network operator associated with the GSM UMTS SIM.
  • The application together with one or more security policies is easily replaced or upgraded (even over the air interface) so that the terminal/security device has the latest “release” of the applications applet. In addition, since the applets are normally under the control of the network operator or other trusted party and “signed” by the operator, they are by far less likely to be infected by malicious software than applets on an ordinary PC.
  • In a hostile environment, typically in external devices, challenges to the AKA process are sent as input data to the application in the application environment, instead of using the ordinary command (e.g. the RUN_GSM_ALGORITHMS command of GSM SIMs) for invoking the AKA algorithms.
  • If the application files/input data are transferred into the application environment by using an existing command, such as the ENVELOPE command of the GSM SAT, the input/output interface of the tamper-resistant security device does not require any changes. This is important since the invention hence does not violate existing standard specifications.
  • In an alternative embodiment of the invention, the AKA algorithms are also at least partly implemented, preferably together with the enhanced security and/or privacy processing, as an application in the application environment of the tamper-resistant device. Apparently, this approach does not require a special interface between the resident AKA module and the application environment, since both the enhanced security and/or privacy processing and the AKA algorithms are located in the application environment. Naturally, there will still be some program code interface between the AKA algorithms and the security enhancing functionality.
  • It should be understood that although a software implementation is particularly beneficial, it is also possible to have the AKA cooperating application premanufactured as hardware in tamper-resistant security device, with a more or less direct interface between the hardware application and the AKA module.
  • The invention offers the following advantages:
    • From the terminal point of view, the present invention shows how to extend and improve legacy SIMs and similar tamper-resistant security devices with an extra security layer that protects the device in hostile environments subject to viruses and Trojans.
    • It also shows a simple way to extend functionality to achieve new security/privacy goals based on legacy technology.
    • A main merit is that the solution is future proof and easy to administer in a secure way by authenticated downloads.
    • The solution is in a sense transparent to the device into which the tamper-resistant security device is plugged. In addition, it enables secure remote access directly to the security device, such as a SIM, when the security device is still in the original (mobile) terminal, communicating over e.g. Bluetooth. This means that the mobile terminal can be used as a “generic” authentication device, without threatening the security of the SIM.
    • From the network point of view, it should be noted that the AuC (or similar) node can be left completely unchanged, it is only the AAA server, if such a server is used, that needs to implement the extra security processing.
    • Finally, many of the proposed embodiments have no standards impact, but may require slight change of the internal SAT environment's APIs towards the normal SIM functionality.
  • Other advantages offered by the present invention will be appreciated upon reading of the below description of the embodiments of the invention.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • The invention, together with further objects and advantages thereof, will be best understood by reference to the following description taken together with the accompanying drawings, in which:
  • FIG. 1 is a schematic diagram of a typical prior art challenge-response authentication procedure illustrating transmission of information between relevant parties;
  • FIG. 2 is a schematic diagram of a prior art challenge-response authentication extended with the EAP-SIM protocol;
  • FIG. 3 illustrates an exemplary embodiment of a tamper-resistant security device according to the invention;
  • FIG. 4 is a schematic diagram of a user terminal equipped with a tamper-resistant security device according to an exemplary embodiment of the invention;
  • FIG. 5 is a block diagram of an exemplary embodiment of a tamper-resistant device according to the invention realized as a subscriber identity module;
  • FIG. 6 is a schematic diagram of a network server supporting security and/or privacy enhancements in tamper-resistant security devices according to an exemplary embodiment of the invention;
  • FIG. 7 is a block diagram of an alternative embodiment of a tamper-resistant device in which one or more security policies and corresponding security policy processing is implemented in the application environment of the security device;
  • FIG. 8 is a block diagram of a further exemplary embodiment of a tamper-resistant device according to the invention realized as a subscriber identity module;
  • FIG. 9 is a block diagram of yet another exemplary embodiment of a tamper-resistant device according to the invention realized as a subscriber identity module;
  • FIG. 10 is a schematic block diagram of a tamper-resistant security device illustrating the operation of a security enhancing application according to an exemplary embodiment of the present invention;
  • FIG. 11 is schematic block diagram of a tamper-resistant security device illustrating a security enhancing application with encapsulation and comparative pre-processing according to an exemplary embodiment of the present invention;
  • FIG. 12 is a diagram illustrating an authentication process with privacy enhancement obtained by a tamper-resistant subscriber identity module according to the invention; and
  • FIG. 13 is a block diagram of another exemplary embodiment of a tamper-resistant device according to the invention realized as a subscriber identity module.
  • DETAILED DESCRIPTION OF EMBODIMENTS OF THE INVENTION
  • Throughout the drawings, the same reference characters will be used for corresponding or similar elements.
  • As will be described below, it is possible to obtain the above and other security goals in a way that can be used regardless of what algorithms that are currently implemented on the security device.
  • The basic idea according to a main aspect of the invention is to provide an application adapted for cooperating with the AKA module as well as an interface, for example an API or similar interface, between the AKA module and the application, as schematically illustrated in FIG. 3.
  • FIG. 3 illustrates an exemplary embodiment of a tamper-resistant security device according to the invention. The security device 10 basically comprises switching logic 11, an AKA module 12, securely stored user credentials 13 including at least a security key K (possibly also user identities and pseudonyms), an application 14 adapted for cooperating with the AKA module, and a more or less direct interface between the AKA module 12 and the AKA cooperating application 14. The switching logic 11 parses commands sent to the security device and handles communication with internal functions. The AKA module 12 comprises algorithms for authentication and/or key agreement based at least partly on the security key K.
  • The tamper-resistant security device is preferably adapted for implementation in a network device such as a user terminal or equivalent FIG. 4 illustrates a user terminal 20, such as a mobile phone or a personal computer, which generally has some form of network communication capabilities 25 and a tamper-resistant security device 10 similar to that shown in FIG. 3.
  • The application cooperating with the AKA module is normally an application related to authentication and/or key agreement, and preferably a security and/or privacy enhancing application.
  • For enhanced security, the application performs somewhat different security processing tasks depending on the particular security goals. The enhanced security processing is normally related to authentication and/or key agreement of the AKA module, and associated with input parameters and/or output parameters of the AKA process.
  • In the context of enhanced security, the tamper-resistant security device and/or the corresponding user terminal is preferably configured for performing some form of security policy processing. The security policy processing normally involves security policy decision and/or enforcement, and is preferably based on information representative of the security conditions in relation to the tamper-resistant security device, as will be described in more detail later on.
  • For enhanced privacy, the application manages for example user pseudonyms.
  • The invention will now mainly be presented in the context of GSM SIMs, although the ideas are also applicable to UMTS SIMs, or in fact any tamper-resistant security device having AKA functionality, and a similar application and interface as described below. Other examples include the ISIMs used for 3GPP IP multimedia, or more generally UICC cards that may contain several SIMs at the same time.
  • The application is preferably implemented as a software application, which may be pre-installed during manufacture or provided as an authenticated application download into an application environment of the tamper-resistant security device.
  • The SIM 10 illustrated in FIG. 5 includes switching logic 11, an AKA module 12, a security key K 13, an application environment 15, and preferably also a module 16 for detecting security conditions in relation to the SIM, for example whether the SIM 10 is operated in its normal secure environment or in a less secure environment. The switching logic 11 parses the commands sent to the SIM, handles communication with internal modules and also forwards outbound data to the user terminal in which the SIM is located. The AKA module 12 performs an AKA process using the security key K, e.g. a subscription key associated with a client-operator subscription, or a key derived therefrom. In GSM SIMs, this function is generally the A3/A8 AKA algorithms.
  • The Application Environment
  • The application environment 15 is advantageously provided by the application toolkit of the subscriber identity module, and is generally an environment capable of executing code. For a GSM SIM the application environment may be provided by the SIM Application Toolkit (SAT) [5], whereas the analogue application environment of UMTS SIM (USIM) is provided by UMTS SAT (USAT) [6].
  • For a GSM SIM, the SIM-ME (SIM-Mobile Equipment) interface specifies the “commands” and data that can be sent to/from the SIM/ME. For instance, to run the GSM A3/A8 AKA algorithms, there is a RUN_GSM_ALGORITHMS command that routes input parameters/output results to/from the resident AKA algorithms. The AKA algorithms compute a response and/or one or more keys based on the challenge RAND (and the stored security key). In the list of commands possible over the SIM-ME interface, we specially note the ENVELOPE command. This command is intended to send more or less arbitrary data to the SIM for use with the SIM Application Toolkit (SAT). The input/output format to the SIM is explicitly specified, but there is a high degree of freedom as to exactly what the applications can do or not. For instance, the application could be a quite general Java Applet, see reference [7]. The applet can be given various degrees of authorization to access resident GSM-related files, one possibility being to give it “full GSM access”.
  • In a preferred embodiment of the invention, the AKA cooperating application 14 is implemented in the application environment provided by the SIM application toolkit, using the ENVELOPE command, or an analogous command. Input/output data to the application is then preferably also transferred into the SAT by means of the ENVELOPE command.
  • For communication between the software application 14 in the SAT environment 15 and the AKA module 12, there is preferably a special interface, such as a dedicated API, between the AKA module 12 and the SAT application environment 15.
  • The SIM Application Toolkit (SAT) enables the operator to either “hardcode”, or download over the air, the AKA cooperating application 14 into the SIM. In the latter download case, it is also possible (and strongly recommended) to authenticate the application as coming from a trusted party, such as the right operator. This is important since it gives protection against downloading “viruses” from malicious servers. The downloaded application can also be encrypted so that the application content is not available outside the SIM. For security aspects related to the GSM SAT, reference is made to [8]. By implementing the application in the application environment of the SIM, it is also possible to upgrade the functionality thereof. Upgrades are simply downloaded using the ENVELOPE command.
  • FIG. 6 is a schematic diagram of a network server supporting download of security and/or privacy enhancement applications or applets into a tamper-resistant security device. The network server 30 is typically managed by a trusted party such as the network operator and basically comprises an applet source 31, a module 32 for encryption/authentication purposes and a download module 33.
  • Security Policy Processing
  • As previously mentioned, some form of security policy processing is typically implemented in the tamper-resistant security device and/or the user terminal, and the security policy processing is preferably based on information that represents the security conditions of the tamper-resistant security device. Examples of relevant security conditions may include the environment in which the security device is operated, the interface over which a request for AKA processing comes, the network used by the user terminal for network communication and so forth.
  • For increased security control, the SIM or more generally the security device preferably authorizes access to resident application files and commands that could expose the AKA process and the corresponding AKA parameters only under certain security conditions or circumstances. The security conditions can for example be detected internally in the tamper-resistant security device or externally, e.g. by the user terminal.
  • With reference once again to FIG. 5, it can be seen that the SIM includes a module 16 for detection of security conditions, such as the environment in which the SIM is placed. For example, the SIM or more generally the security device preferably authorizes access to resident application files and commands that could expose the AKA process and the corresponding AKA parameters only if the SIM is operated in its normal environment (e.g. a mobile phone). If the SIM is located in or otherwise exposed to a foreign less secure environment access to such resident files and commands is preferably disabled. Instead, any requests for AKA processing are conveniently routed to the security and/or privacy enhancing application. This is a perfect example of a security policy that is implemented and enforced in the tamper-resistant security device.
  • It should be understood that the enhanced security and/or privacy processing may not be required when the security device is operated in its normal environment, using the normal network interface of the user terminal. On the other hand, for insecure environments, it may be advantageous to customize the security processing depending on the particular insecure environment in which the SIM is placed. In practice, this can be accomplished by providing a number of different customized security-enhancing modules or sub applications, and selecting among these modules in dependence on the environment.
  • When for example a GSM SIM is used externally to its normal environment, it is recommendable that the normal RUN_GSM_ALGORITHMS command/interface can be deactivated (otherwise a virus could still use that command). A number of possibilities to accomplish such a deactivation will now be described.
  • If the SIM is only to be used outside the normal terminal (i.e. we have a special purpose SIM), then one may simply manufacture a SIM so that it does not accept the RUN_GSM_ALGORITHMS command, or, so that this command is always internally “re-routed” to the SAT environment and the software application(s) running therein. Of course, in this case it might appear that it is better to simply build a special purpose SIM from scratch. However, if most of the existing SIM architecture can be re-used, this is of course a benefit.
  • As illustrated in FIG. 5, the security-device or SIM is preferably provided with the capability of checking the identity/type of the terminal or handset in which it is used. This may be performed on power-up and accomplished by the module 16, which is configured for detecting whether the SIM 10 is operated in its normal secure environment (normally the mobile) or in a less secure environment such as a PC or the like. The detection module 16 preferably controls the switching logic 11 so that AKA request are transferred directly to the AKA module or re-routed to the application environment depending on the circumstances. This functionality could thus be utilized so that when the SIM discovers or suspects that it is not in the (correct) terminal/handset, it assumes that it is external (in an insecure environment) and enters a mode where it only accepts the SAT commands, and all requests for AKA access by resident files or commands are denied.
  • There is also a possibility to associate more than one PIN code with the SIM. In this case, a specific PIN code could inform the SIM that it is used in an external device, and set access rights accordingly so that only the “harmless” SAT commands are accepted. Here, the PIN code for normal SIM access may have to be reconfirmed to prevent activation of normal access by mistake.
  • It is also possible to implement one or more security policies and corresponding security policy processing in the application environment of the tamper-resistant security device, as schematically indicated in FIG. 7. In this example, the application environment 15 includes an AKA cooperating application 14A such as a security enhancing application, and a security policy application 14B. The security policy application 14B may be partly or fully integrated with the security enhancing application 14A, or provided as a separate application. In a practical scenario, the normal AKA command(s) may be disabled (e.g. by controlling the switching logic 11 or by other means) by default at power-up, and initially information on the security conditions of the SIM is transferred to the security policy application 14B, which then takes a security policy decision for appropriate further actions. For example, if the security policy application 14B is informed that the SIM is placed in its normal environment (e.g. the mobile), the security policy application 14B enables the normal AKA command(s). If the security policy application 14B is informed that the SIM is placed in another less secure environment, the normal AKA command(s) will continue to be disabled, and all requests for AKA processing are transferred to the security enhancing application 14A, which handles the AKA requests in accordance with the applicable security policy. The security conditions of the SIM may be detected internally or externally to the SIM, although a higher degree of autonomy and security may be obtained when the SIM itself is provided with functionality for detecting the relevant security conditions. The security policies and the corresponding security policy processing may be either “hardcoded” by a trusted party such as the home operator, or downloaded (encrypted/authenticated) into the application environment of the SIM. The SAT environment and the ENVELOPE command (or equivalent) make downloads of issued security policies as well as policy changes practically feasible. Even if the SIM is operated in the normal terminal (mobile), it may be desirable to re-use the AKA protocol over other interfaces than the normal (GSM/UMTS) network interface. In order to handle the security issues in this case, different solutions are feasible.
  • In a typical payment scenario for example, the user will simply start a payment application that follows some standardized protocol, in which an AKA request is re-routed, using e.g. the ENVELOPE or equivalent command, to a security enhancing application. In this case, the problem is solved on the application level.
  • In addition, in the above payment scenario, it may also be desirable for the user to stay anonymous with respect to third parties. Therefore, a privacy enhancing application generating a user pseudonym may be invoked after proper and secure authentication, as will be described in detail later on.
  • Furthermore, the terminal (mobile) may be configured to determine whether the AKA request initially comes over the normal network interface, or over another interface such as Bluetooth or IRDA (Infrared Data Association) interfaces. For example, this means that the mobile itself is capable of detecting when a request for SIM access comes over less secure interfaces, and taking appropriate actions accordingly. The origin of the request may for example be determined by the terminal based on port identification (IR Port, Bluetooth Port, Normal Radio Interface Port, etc.). Typically, instead of transferring a request for AKA processing directly to the AKA module, using the normal resident command, the AKA request is re-routed to the security enhancing application by the terminal using the SAT application environment command when the request comes over the Bluetooth or IRDA interface. This is another example of a security policy suitable for implementation by the invention. Here also, it may be advantageous to customize the security processing by providing a number of different sub applications and selecting among the sub applications depending on the particular type of interface used by the terminal.
  • Another example of a security policy suitable for implementation in a tamper-resistant security device of the invention is related to the existing proposals for enhancing the security of the 3GPP Gb interface [13]. When security is in place there is also a need for policies that govern how/when to use security. Sometimes low/no security can be accepted, sometimes it cannot. Specifically, during negotiation of which security algorithms to use, there may be a problem that a man-in-the-middle performs a so-called “bidding-down attack”. Suppose that the mobile terminal signals to the network that it is capable of using security algorithm “A” and “B”, where “A” is much stronger than “B”. If an attacker now simply deletes “A” from the list of supported algorithms, the network will believe that the mobile only supports “B” and the mobile terminal/network will end up using suboptimal security, even if both parties support also “A”. For this reason, there is a suggestion to add some form of integrity protection of the negotiation. However, for some time there will be a mix of networks supporting the enhanced security negotiation, as well as some networks that have not yet been upgraded. Therefore, operators may wish to issue a policy to their subscribers, dictating if the mobile terminal should accept an insecure negotiation in a foreign, visited network. Clearly, an attractive placement for this policy control is in the application environment of a tamper-resistant security device such as a SIM. The decision as to whether insecure negotiation should be accepted is preferably based on information that is integrity protected via AKA.
  • Yet another variant of security policy processing is to identify the network/operator, for example by examining incoming AKA parameters, and customize the subsequent security processing in dependence on the network/operator identity. This assumes that different operators can be distinguished based on for example incoming AKA parameters.
  • For illustrative purposes, an example of a security policy table for implementation in a tamper-resistant security device according to the invention is presented below.
    TABLE I
    Security conditions Security mode
    Network/ Normal Security-enhancing
    Environment Operator Interface AKA sub application
    Mobile Home Normal Enabled
    PC Home Normal Disabled 01
    Mobile Home Bluetooth Disabled 02
    Mobile Home IR Disabled 03
    Mobile Home WLAN Disabled 04
    Mobile Visited Normal 05
    (negotiation)
    Mobile Operator A Normal Disabled 06
    Mobile Operator B Normal Disabled 07
    . . . . . .
    PC Visited WLAN Disabled 01, 04, 05
  • Modifications to the User Terminal
  • It is highly desirable to keep the SIM/ME interface intact, not affecting the standards (at least, even if new commands might need to be added, the SIMs can still be backwards compatible with the standard). It is of course also important to consider the issue of whether the terminals/handsets remain unaffected by the invention. When the SIM is to be used externally to the terminal/handset, obviously there is no need to change the handset, since it will not even be involved. In the case when the handset is to be used as an “authentication token” as discussed above, there is normally a need for modification. However, the mere fact that it should be possible to run GSM AKA commands over IRDA or Bluetooth alone makes modifications necessary (connecting the SIM to Bluetooth/IRDA), and our invention regarding the SIM functionality does not make it more difficult to introduce these changes.
  • Alternative Location for Implementing the AKA Algorithms
  • It is also possible, though somewhat less preferred, to implement the AKA algorithms, or at least parts thereof, as an application in the application environment of the tamper-resistant device, with read-access to the security key (or possibly a key derived therefrom), as illustrated in FIGS. 8 and 9. In FIG. 8, the AKA cooperating application 14 and the AKA algorithms 12 are implemented as separate applications that are cooperating with each other. Alternatively, however, the two finctions 12, 14 are integrated, at least partly, into the same software application, as schematically illustrated in FIG. 9.
  • In the following, the invention will mainly be described with reference to various non-limiting examples of enhanced security processing and privacy processing implemented as software in an SAT environment of a SIM.
  • For further information on fundamental details of the GSM SIM specification, reference is made to [9].
  • Example of Enhanced Security Processing
  • For example, to increase the security for a GSM SIM, for the purpose of normal GSM AKA, the following steps could be taken.
  • A SIM card is manufactured which follows [4, 5, and 9], but in addition has an internal API, or similar interface, from the SAT environment to the A3/A8 algorithms. Note that this has no impact on existing SIM standard specifications.
  • In addition, if the SIM is to be used externally to the phone, plugged into some other device, it is highly recommendable to make provisions so that the normal RUN_GSM_ALGORITHMS command can be disabled. To this end, several different solutions are possible as previously discussed.
  • The operator provides the SIM (either during manufacturing, or, at later time as an authenticated application download) with an application configured for performing enhanced security processing in the SAT environment. For example, the security enhancing application could be configured for encapsulating AKA responses in a more secure algorithm, e.g. as suggested in the EAP SIM protocol. The challenges (RANDs) are sent as input data to the SAT application by means of the ENVELOPE command, rather than using the RUN_GSM_ALGORITHMS command on the SIM-ME interface. Alternatively, the whole applet is downloaded in real-time for each authentication. This gives the benefit of making it possible to authenticate the network (since the applet is authenticated) and to make sure the terminal always has the latest “release” of the applet. Of course, this authentication will in general anyway be achieved without downloading the whole applet, for instance by running a protocol in which the “RAND” values are authenticated and possibly also checked for replay and the authentication/freshness is verified in the SAT applet itself each time.
  • Regardless of the terminal type the SIM is attached to, and the way the SIM is accessed (by Bluetooth, IRDA, in card-reader, etc.) all AKA related processing takes place on the SIM, including the security enhancing steps. The enhanced security processing may involve manipulation of output parameters and/or input parameters of the AKA process, as schematically illustrated for a general tamper-resistant security device in FIG. 10.
  • For example, the EAP SIM protocol is based on encapsulation of sensitive parameters by manipulating AKA output parameters. Given a number of AKA responses RES(1), . . . , RES(n) resulting from a set of initial RAND values, RAND(1), . . . , RAND(n), the AKA responses may be encapsulated in the following way to produce a resulting higher-security response RES′:
    h(key, RES(1), . . . , RES(n))
  • where h is a keyed function, e.g. based on SHA-1. In other words, the n responses are combined to a single response by a keyed function. Similarly, a longer key Kc′ may be generated by concatenating the keys Kc(1), . . . Kc(n) resulting from the above set of RAND values, possibly followed by additional processing.
  • The approach of using several RAND values in sequence to derive longer keys was recently discovered to have some flaws [11]. For instance, by issuing the same RAND value repeated n times, rather than n distinct RAND values, the effective security obtained may still only be equivalent to that obtained from a single RAND value. In general, by comparing the relevant set of AKA input parameters for freshness and/or uniqueness, this particular problem can be solved. In accordance with a particular embodiment of the invention, the security enhancing application 14 implemented on the tamper-resistant security device 10 (e.g. a SIM) therefore includes a comparator 17 together with an encapsulation module 18, as illustrated schematically in FIG. 11. For example, the encapsulation module 18 performs encapsulation by combination of a predetermined number of consecutive AKA output parameters (Kc, RES) generated in response to a number of corresponding AKA input parameters (RAND). The comparator 17 compares the relevant set of consecutive AKA input parameters (RAND) for verifying that all of these AKA input parameters are unique. Typically, the comparator 17 expects to receive a set comprising a given number of consecutive input parameters (RAND values) for the overall encapsulation, and compares each incoming input parameter against each of the previous input parameters in that set. In this way, it can be ensured that the resulting “masked” AKA output parameters (Kc′, RES′) are generated in response to a set of unique AKA input parameters (RAND values). If desired, the AKA input parameters may also be fed into the encapsulation module 18 as additional input for the encapsulation, as indicated by the dashed line in FIG. 11. Alternatively, the freshness/uniqueness of the AKA input parameters may be determined in other ways, for example by using time-stamped AKA input parameters and checking that the time stamps of a given set of parameters are within a predetermined time interval.
  • Yet another feature from the EAP-SIM protocol that may be generalized and implemented into an AKA cooperating application is authentication of the network over which the user terminal communicates. In normal GSM AKA, the network sends an authentication request together with a RAND, and the SIM simply replies with a response RES. This authentication can be extended by letting the SIM or equivalent tamper-resistant security device send a new random value RAND′ to the network side in response to the authentication request. The network then calculates a MAC (Message Authentication Code) or similar based on the received RAND′ and a session key derived from RAND and the SIM key K, and sends the MAC back to the SIM for verification of the authenticity of the network. The relevant steps of such an extended protocol could be designed in the following way:
    • 1. Network sends authentication request to SIM.
    • 2. SIM sends RAND′ to network.
    • 3. Network generates RAND, calculates MAC (key, RAND, RAND′, . . . ) and sends RAND and MAC to the SIM.
    • 4. SIM checks MAC, and if OK calculates keys/responses.
  • The encapsulation of AKA keys/responses suggested in the EAP SIM protocol generally implies manipulation of AKA output parameters. It is however also possible to manipulate input parameters to the AKA process. For example, a new manipulated input can be calculated as:
    h (key, RAND),
  • so that the output response is equal to:
    A8 (key, h (key, RAND)),
  • where h is a keyed function, e.g. based on SHA-1. An example of manipulation of both input parameters and output parameters is to generate the final resulting output response as:
    g (key, A8 (key, h (key, RAND))),
  • where g and h are keyed functions, for example based on SHA-1.
  • No sensitive data is available outside the SIM, and the security functionality can also be extended to provide more than one key and so forth.
  • Corresponding manipulation/encapsulation could be performed for UMTS, using USIMs. Also for ISIMs used for 3GPP IP multimedia, there is a proposal to “encapsulate” authentication messages in the HTTP digest protocol, [12]. This encapsulation can be achieved by the current invention.
  • Examples of pre-processing of AKA input parameters include:
    • Verification of the freshness of AKA input parameter(s);
    • Verification of the integrity of AKA input parameter(s);
    • Decryption of AKA input parameter(s);
    • Combination of AKA input parameter(s); and
    • Security policy decision based on AKA input parameter(s).
  • Examples of post-processing of AKA output parameters include:
    • Combination of a number of generated AKA output parameters (Kc and/or RES) into one or more (possibly longer) modified AKA output parameters (Kc′ and/or RES′);
    • Integrity protection of generated AKA output parameter(s);
    • Encryption of generated AKA output parameter(s); and
    • Policy decision and/or enforcement of AKA output parameter(s) based on examination of AKA input parameter(s).
  • Enhanced Security Processing for Lawful Interception
  • There are legal requirements on lawful interception. That is, network operators must by court order be able to supply plaintext conversation to law enforcement agencies. In the classical GSM case this is easy since only the link between the ME and the RBS (Radio Base Station) is encrypted (with a key that the operator knows).
  • It is expected that we will soon see end-to-end (e2e) encryption between users. That is, before the conversation starts, an e2e key-agreement between the two users is performed, e.g. using the protocol MIKEY as specified in [10]. This makes lawful interception harder, since the operator must somehow be able to deduce the same key as the users obtain shared between them. The invention proposes that at least parts of the operations and computations required in connection with the e2e key-agreement are implemented as an application in a SAT-like environment, by upgrading the SIM with an application that, based on the operator-user shared key k, derives also end-to-end keys between users A and B, that “automatically” become known to the operator too.
  • For example, let gx denote exponentiation in some suitable (secure) group G, e.g. the integers modulo a prime p, or the points on an elliptic curve over a finite field. The outcome of the GSM (or UMTS) AKA for user A is a key, kA. Similarly, user B gets a key kB. We now perform a Diffie-Hellman protocol, [14], where A sends gkA to B, and B sends gkB to A. The shared key is gkA*kB. Either operator (A's or B's home operator) can by knowing kA (or kB) and observing gkB (or gkA) compute the very same key.
  • Note that if the terminal is to be extended with this extra functionality it is again desirable to implement the gkA (and gkB) computation in the SIM itself, since otherwise kA (and kB) need to leave the protected environment of the SIM. With the present invention, the whole computation can indeed be done in the SIM, preferably in a SAT application, which can be easily upgraded with new key-exchange methods.
  • For information on e2e encryption and lawful interception, reference is made to our earlier patent application [15], which is incorporated herein by reference.
  • Still, a problem, discussed in [15], is that not only the home operators will be able to “eavesdrop” on the communication between A and B, but also the operator of the visited networks in which A and B are at the moment. This might be a threat if the operator of the visited network is not 100% trustworthy. This is an effect of kA (and kB) being sent to the visited networks. To solve this, the method proposed in [15] or a similar method can be used. Let k be the key shared between the user and the home net (stored on the SIM). Instead of sending kA=kdƒ(k, RAND) to the visited net, where kdƒ is a key derivation function, we send kA′=ƒ(kA) (and similarly for kB) to the visited net, where ƒ is some one-way function. The one-way property assures that someone only knowing kA′, can still not know what kA is. The key kA′ is now (transparently) used for the normal GSM/UMTS security, whereas it is still kA (and kB) that is used as a basis for the e2e key agreement between A and B, using for example the Diffie-Hellman protocol. Now, only the home operators can perform lawful interception. The idea according to the invention is to implement the masking functionality of the function ƒ in a SAT-like application.
  • Enhanced Security Processing for Public Access
  • A problem that is related to the last issue above is the following. There are plans to provide public “hot-spots” where mobile users temporarily gain higher bit-rates by another access technology, e.g. IEEE 802.11 WLAN (Wireless LAN). A problem here is that the “base station” or AP (Access Point) is in an untrusted environment. This could mean that it is possible to physically “tap” into the AP for sensitive data, such as keys for integrity protection of traffic, necessary for the operator to bill the traffic correctly. Therefore, some ideas exist where the integrity protection is terminated in some other node, called the ASN (Access Service Node), further into the network, thus being more protected. Still, there might be conventional 802.11 or similar integrity protection in place between the terminal and the AP and thus two keys are needed:
    • a key, k1, to protect the ME-AP link; and
    • a key, k2, to protect the ME-ASN link, which must not be available in the AP.
  • This means that, based on the subscriber key, stored on the SIM, two keys must be derived, rather than just one. Moreover, k2 must not be deducible from k1. This can be accomplished by deriving k2 using the normal AKA protocol, and then k1=ƒ(k2) for a suitable one-way function, where only this latter k1 is sent to the AP. Again, at least the generation of the further key k1 can be implemented securely as a SAT application on the SIM itself using the current invention.
  • Privacy Enhancements
  • In another aspect of the invention, the SIM or similar security device (and more particularly the application toolkit thereof) is used to enhance the privacy of the user in a convenient way, for example by managing user pseudonyms.
  • Typically, a user is assigned a temporary identifier or pseudonym during attachment to the network in order to protect his true identity. In addition, the pseudonym can be refreshed multiple times to make even linking of transactions impossible. Preferably, the temporary id, tmpID, is just a string selected at random each time the user connects. It could be chosen by the user (e.g. by the user's communication device) or assigned to him by the network. The latter having the advantage that it is easy to assure uniqueness for each used pseudonym.
  • It should though be understood that the assignment of user pseudonyms may involve both the network and the user terminal. For example, the temporary id may be defined by a first part from the network and a second part, which for example may be specific to the home operator of the user, from the user terminal. An example of such a tmpID may be “4711@xyz.com”, where the first part “4711” is assigned by the network, and the second part “@xyz.com” is assigned in the user terminal.
  • Consider a multi-access scenario, where the user now and then changes access. The user is typically assigned a new identity when the access changes. However, the new assignment must normally be based on the old tmpID, i.e. the ID used for the previous network/device, or, the ID used in a previous session with the same network. This means that the tmpID somehow needs initially to be carried over to the new access method or service provider. This causes synchronization problems. For instance the user could change from GPRS terminal access to a Wireless LAN access on a laptop computer.
  • With the present invention, it is possible for the SIM, or similar security device, to store and administrate the tmpIDs, preferably in a SAT application or equivalent. When the user changes access, the SIM is connected to the new terminal (e.g. by physically moving it), thereby transferring the current tmpID (and possibly other existing security parameters) over to the new device. The new network can, preferably after having authenticated the user (involving the AKA module), now assign him a new temporary ID, tmpID′. In the somewhat simpler case that the same terminal is used but for a new session, the SIM will similarly “remember” the ID used previously and does not need to be physically moved.
  • As illustrated in FIG. 12, credentials (including e.g. authentication responses and an already existing ID) are retrieved (0) from the SIM 10, which is arranged in a first user terminal 20-1, and a user/network authentication protocol between the SIM 10 and a first access network 40-1 is carried out (1). This authentication possibly involves (2) an external authentication server 50. The user obtains a new pseudonym (3), tmpID, which is stored (4) in the SIM 10-1. Steps (1-4/3-4) may optionally be repeated at intervals, resulting in re-authentication and/or new pseudonyms. After some time, the user of the first user terminal 20-1 finds it desirable to change access to a second user terminal 20-2 and a second access network 40-2. The SIM 10 is moved (5) to the second user terminal 20-2. Possibly, using existing credentials/tmpID (6), the user needs to re-authenticate (7) to the new network 40-2, again possibly involving (8) the authentication server 50. Optionally, the user's pseudonym is refreshed (9) to a new value tmpID′, and that new value is then stored in the SIM 10. Again, steps (7-9/8-9) may be repeated at intervals to enhance privacy and security.
  • It may of course also be the case that the two terminals 20-1 and 20-2 are identical, and the two accesses are obtained by different access means in the same terminal 20, in which case the SIM 10 never leaves the terminal, but still manages IDs across access changes.
  • The execution of the privacy enhancing application is typically conditional, depending on whether or not the AKA authentication is successful. For example, the privacy enhancement application is only executed in response to successful authentication.
  • Considering the case when the temporary identifier is assigned, at least partly, by the user terminal, it may be possible to generate the new tmpID′ or at least parts thereof by using the AKA module, for example by calculating the new tmpID′ as:
    new tmpID′=s (key, A8 (key, old tmpID)),
  • where s is a keyed function, e.g. based on SHA-1. In this particular example, the privacy enhancing application in the SAT environment of the SIM will send the old tmpID to the AKA module and receive an A8 response, which is used by the privacy enhancing application to calculate the new tmpID′.
  • Alternatively, the network assigns a new pseudonym tmpID′ for the user. The assigned pseudonym is then securely transferred (encrypted/authenticated) to the SIM or equivalent tamper-resistant security device, in which the pseudonym is decrypted and/or authenticated by means of the SIM key and recorded and administrated in the privacy enhancing application. In yet another embodiment, the privacy enhancing application simply randomizes a new tmpID′, which is accepted by the network if the AKA response is correct.
  • Hardware Implementations
  • It should be understood that although a software implementation is particularly beneficial, it is also possible to have the AKA cooperating application premanufactured as hardware in the tamper-resistant security device, with a more or less direct interface between the hardware application and the AKA module.
  • FIG. 13 illustrates an example of a particularly beneficial hardware implementation, which utilizes the application environment of the SIM and the existing commands (e.g. the ENVELOPE command) for transferring input data to the application environment, and then routes the input data from the application environment via an additional interface to the premanufactured hardware application module on the SIM. The hardware application interfaces the AKA module more or less directly, preferably through a special interface, and finally forwards the output data to the user terminal via the application environment.
  • In yet another implementation, the AKA module and the cooperating application, such as a security enhancing application, are integrated in the same hardware circuit on the SIM. However, in such an integrated hardware implementation, it should preferably still be possible to select between normal AKA processing and enhanced AKA processing depending on the operational environment of the SIM.
  • A hardware implementation does not exclude the possibility of later downloading a software application, which may replace the hardware application, or a software patch that may cooperate with the hardware application.
  • Finally, we refer to our earlier patent application [16], which is incorporated herein by reference.
  • The embodiments described above are merely given as examples, and it should be understood that the present invention is not limited thereto. Further modifications, changes and improvements which retain the basic underlying principles disclosed and claimed herein are within the scope of the invention.
  • REFERENCES
  • [1] Haverinen, “EAP SIM Authentication”, draft-haverinen-pppext-eap-sim-05.txt, IETF.
  • [2] Federal Information Processing Standard FIPS PUB 180-1, NIST.
  • [3] Arkko and Haverinen: “EAP AKA Authentication”, draft-arkko-pppext-eap-aka-04.txt, IETF.
  • [4] 3GPP TS 11.11 Technical Specification 3rd Generation Partnership Project; Technical Specification Group Terminals Specification of the Subscriber Identity Module—Mobile Equipment (SIM—ME) interface.
  • [5] 3GPP TS 11.14 Technical Specification 3rd Generation Partnership Project; Specification of the SIM Application Toolkit for the Subscriber Identity Module—Mobile Equipment (SIM—ME) interface.
  • [6] 3GPP TS 31.111 Technical Specification 3rd Generation Partnership Project; Technical Specification Group Terminals; USIM Application Toolkit (USAT).
  • [7] 3GPP TS 03.19 Technical Specification 3rd Generation Partnership Project; Technical Specification Group Terminals; Subscriber Identity Module Application Programming Interface (SIM API) for Java Card™; Stage 2.
  • [8] 3GPP TS 03.48 Technical Specification 3rd Generation Partnership Project; Technical Specification Group Terminals; Security Mechanisms for the SIM application toolkit; Stage 2.
  • [9] ETSI TS 100 922 Technical Specification Digital cellular telecommunications system (Phase 2+); Subscriber Identity Modules (SIM); Functional characteristics.
  • [10] Arkko, Carrara, Lindholm, Näslund, and Norrman, “MIKEY: Multimedia Internet KEYing”, draft-ietf-msec-mikey-04.txt, IETF.
  • [11] Sarvar Patel, “Analysis of EAP-SIM Session Key Agreement”, posted on the Internet on May 29, 2003.
  • [12] Niemi, Arkko, Torvinen, IETF RFC 3310, “HTTP Digest Authentication Using AKA”, September 2002.
  • [13] 3GPP TSG WG3 Security, “Enhanced Security for A/Gb”, Jul. 15-18 2003.
  • [14], Menezes, van Oorschot, and Vanstone: “Handbook of Applied Cryptography”, CRC Press, pp. 489-541.
  • [15] UK Patent Application No. 0129339-8, filed Dec. 7, 2001.
  • [16] International Patent Application WO 02/084980, claiming priority from Swedish Patent Application No. 0101295-4 filed Apr. 10, 2001.

Claims (36)

  1. 1-43. (canceled)
  2. 44. A tamper-resistant security device having means for storing user credentials, including at least a security key, an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key, and means for external communication,
    wherein said tamper-resistant security device further comprises:
    an application for cooperation with said AKA module; and
    means for interfacing said AKA module and said cooperating application.
  3. 45. The tamper-resistant security device according to claim 44, wherein said cooperating application performs enhanced security processing of at least one parameter associated with said AKA process.
  4. 46. The tamper-resistant security device according to claim 45, wherein said enhanced security processing includes at least one of:
    pre-processing of at least one AKA input parameter; and
    post-processing of at least one AKA output parameter.
  5. 47. The tamper-resistant security device according to claim 45, wherein said enhanced security processing includes encapsulation of said at least one AKA parameter.
  6. 48. The tamper-resistant security device according to claim 45, wherein said cooperating application is receiving at least one AKA parameter from said AKA process to generate a further AKA parameter that has higher security than said received AKA parameter.
  7. 49. The tamper-resistant security device according to claim 45, wherein said enhanced security processing includes evaluation of a predetermined number of consecutive AKA input parameters for verifying that said AKA input parameters can be used securely.
  8. 50. The tamper-resistant security device according to claim 49, wherein said enhanced security processing further includes combination of a predetermined number of consecutive AKA output parameters generated in response to a number of corresponding unique AKA input parameters.
  9. 51. The tamper-resistant security device according to claim 44, further comprising means for performing security policy processing based on information representative of security conditions in relation to said tamper-resistant security device.
  10. 52. The tamper-resistant security device according to claim 51, wherein the security conditions reflect at least one of the environment in which said security device is operated and the network interface over which a request for AKA processing originates.
  11. 53. The tamper-resistant security device according to claim 51, wherein said security policy processing includes at least one of a security policy decision process and a security policy enforcement process.
  12. 54. The tamper-resistant security device according to claim 51, wherein said means for performing security policy processing comprises means for selectively disabling direct access to said AKA module.
  13. 55. The tamper-resistant security device according to claim 51, wherein said tamper-resistant security device comprises means for detecting whether said tamper-resistant security device is operated in its normal environment or in an environment considered insecure, and said means for performing security policy processing comprises means for disabling direct access to said AKA module when operated in said insecure environment.
  14. 56. The tamper-resistant security device according to claim 44, wherein said cooperating application includes a security enhancing application, and said security device further comprises means for transferring a request for AKA processing directly to said AKA module if said security device is operated in an environment considered secure, and means for transferring said request to said security enhancing application if said security device is operated in an environment considered insecure.
  15. 57. The tamper-resistant security device according to claim 44, wherein said cooperating application is performing at least part of the computations in connection with end-to-end key agreement between users.
  16. 58. The tamper-resistant security device according to claim 44, wherein said cooperating application is masking key information generated by said AKA module.
  17. 59. The tamper-resistant security device according to claim 44, wherein said cooperating application is a software application installed in an application environment of said tamper-resistant security device.
  18. 60. The tamper-resistant security device according to claim 59, wherein said application is securely downloaded into said tamper-resistant security device from a trusted party.
  19. 61. The tamper-resistant security device according to claim 44, wherein said cooperating application is a privacy enhancing application, which participates in managing a user pseudonym.
  20. 62. The tamper-resistant security device according to claim 61, wherein said privacy enhancing application is requesting an AKA response from said AKA module based on an old user pseudonym and for generating a new user pseudonym based on the received AKA response.
  21. 63. A tamper-resistant security device having means for storing user credentials, including at least a security key, an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key, and means for external communication,
    wherein said tamper-resistant security device further comprises a software application implemented in an application environment of said tamper-resistant security device and adapted for cooperating with said AKA module, and said AKA module is also implemented, at least partly, as a software application in said application environment.
  22. 64. A user terminal provided with a tamper-resistant security device, said tamper-resistant security device having means for storing user credentials, including at least a security key, an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key, and means for communication with said user terminal,
    wherein said tamper-resistant security device further comprises:
    an application for cooperation with said AKA module; and
    means for interfacing said AKA module and said cooperating application.
  23. 65. The user terminal according to claim 64, wherein said cooperating application is at least one of a security enhancing application and a privacy enhancing application.
  24. 66. The user terminal according to claim 64, wherein said cooperating application is performing enhanced security processing of at least one parameter associated with said AKA process.
  25. 67. The user terminal according to claim 66, wherein said enhanced security processing includes encapsulation of said at least one AKA parameter for producing an output parameter of higher security than said at least one AKA parameter.
  26. 68. The user terminal according to claim 64, further comprising means for performing security policy processing based on information representative of security conditions in relation to said tamper-resistant security device.
  27. 69. The user terminal according to claim 68, wherein the security conditions reflect at least one of the environment in which said security device is operated, the network interface over which a request for AKA processing comes, and the network used by the user terminal for network communication.
  28. 70. The user terminal according to claim 68, wherein said security policy processing includes at least one of a security policy decision process and a security policy enforcement process.
  29. 71. The user terminal according to claim 68, wherein said means for performing security policy processing is implemented in said tamper-resistant security device for selectively disabling direct access to said AKA module.
  30. 72. The user terminal according to claim 64, wherein said cooperating application is a security enhancing application, and said security device further comprises means for transferring a request for AKA processing directly to said AKA module if said security device is operated in an environment considered secure, and means for transferring said request to said security enhancing application if said security device is operated in an environment considered insecure.
  31. 73. The user terminal according to claim 64, wherein said cooperating application includes a security enhancing application, and said user terminal further comprises means for transferring a request for AKA processing directly to said AKA module if said request comes over an interface considered secure, and means for transferring said request to said security enhancing application if said request comes over an interface considered insecure.
  32. 74. The user terminal according to claim 73, wherein said security enhancing application comprises a number of different security enhancing modules, and said security enhancing application is for selecting among said security enhancing modules in dependence on the type of interface.
  33. 75. The user terminal according to claim 64, wherein said cooperating application is a software application installed in an application environment of said tamper-resistant security device.
  34. 76. The user terminal according to claim 64, wherein said cooperating application includes a security enhancing application authenticating a network over which said user terminal intends to communicate.
  35. 77. A network server managed by a trusted party sharing a security key with a tamper-resistant security device implemented in a user terminal, said tamper-resistant security device having an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key,
    wherein said network server comprises means for downloading a software application adapted for interfacing and cooperating with said AKA module into an application environment of said tamper-resistant device.
  36. 78. The network server according to claim 77, wherein said download application is at least one of a security enhancing application, a privacy enhancing application, and a security policy application.
US10530293 2002-10-07 2003-09-17 Security and privacy enhancements for security devices Abandoned US20060288407A1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
US41627202 true 2002-10-07 2002-10-07
PCT/SE2003/001461 WO2004032557A1 (en) 2002-10-07 2003-09-17 Security and privacy enhancements for security devices
US10530293 US20060288407A1 (en) 2002-10-07 2003-09-17 Security and privacy enhancements for security devices

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US10530293 US20060288407A1 (en) 2002-10-07 2003-09-17 Security and privacy enhancements for security devices
US14309221 US9282095B2 (en) 2002-10-07 2014-06-19 Security and privacy enhancements for security devices
US15060678 US20160191510A1 (en) 2002-10-07 2016-03-04 Security and privacy enhancements for security devices

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
PCT/SE2003/001461 A-371-Of-International WO2004032557A1 (en) 2002-10-07 2003-09-17 Security and privacy enhancements for security devices

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US14309221 Continuation US9282095B2 (en) 2002-10-07 2014-06-19 Security and privacy enhancements for security devices

Publications (1)

Publication Number Publication Date
US20060288407A1 true true US20060288407A1 (en) 2006-12-21

Family

ID=32069944

Family Applications (3)

Application Number Title Priority Date Filing Date
US10530293 Abandoned US20060288407A1 (en) 2002-10-07 2003-09-17 Security and privacy enhancements for security devices
US14309221 Active 2023-11-27 US9282095B2 (en) 2002-10-07 2014-06-19 Security and privacy enhancements for security devices
US15060678 Abandoned US20160191510A1 (en) 2002-10-07 2016-03-04 Security and privacy enhancements for security devices

Family Applications After (2)

Application Number Title Priority Date Filing Date
US14309221 Active 2023-11-27 US9282095B2 (en) 2002-10-07 2014-06-19 Security and privacy enhancements for security devices
US15060678 Abandoned US20160191510A1 (en) 2002-10-07 2016-03-04 Security and privacy enhancements for security devices

Country Status (6)

Country Link
US (3) US20060288407A1 (en)
EP (1) EP1550341B1 (en)
KR (1) KR101047641B1 (en)
CN (1) CN100477834C (en)
DE (2) DE60310968T2 (en)
WO (1) WO2004032557A1 (en)

Cited By (36)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050286721A1 (en) * 2004-06-29 2005-12-29 Nokia Corporation Providing content in a communication system
US20060075264A1 (en) * 2004-09-30 2006-04-06 Microsoft Corporation Security state watcher
US20060120488A1 (en) * 2004-08-20 2006-06-08 Arie Heiman Method and system for decoding control data in GSM-based systems using inherent redundancy
US20070107049A1 (en) * 2005-10-21 2007-05-10 Nokia Corporation Apparatus, computer program product and method for secure authentication response in a mobile terminal
US20070105530A1 (en) * 2004-08-29 2007-05-10 Huawei Technologies Co., Ltd. Method for Ensuring Security of Subscriber Card
US20070147618A1 (en) * 2003-11-11 2007-06-28 Horn Guenther Method for safeguarding data traffic between a first terminal and a first and a second terminal and a second network
US20070198834A1 (en) * 2003-11-27 2007-08-23 Rached Ksontini Method For The Authentication Of Applications
US20070204326A1 (en) * 2006-02-27 2007-08-30 Research In Motion Limited Method of customizing a standardized it policy
US20070204323A1 (en) * 2006-02-24 2007-08-30 Rockwell Automation Technologies, Inc. Auto-detection capabilities for out of the box experience
US20080028229A1 (en) * 2002-11-27 2008-01-31 Priebatsch Mark H Authenticated remote pin unblock
US20080288699A1 (en) * 2007-05-17 2008-11-20 Incard Sa Method for controlling the execution of an applet for an ic card
US20090094683A1 (en) * 2007-10-04 2009-04-09 Morgan Todd C Method for authenticating mobile units attached to a femtocell that operates according to code division multiple access
US20090132806A1 (en) * 2004-06-10 2009-05-21 Marc Blommaert Method for agreeing between at least one first and one second communication subscriber to security key for securing communication link
WO2009115552A2 (en) 2008-03-18 2009-09-24 Eads Secure Networks Management of the identities of users in a system
US20100017621A1 (en) * 2008-06-20 2010-01-21 General Instrument Corporation Radio transceiver or other encryption device having secure tamper-detection module
US20100064341A1 (en) * 2006-03-27 2010-03-11 Carlo Aldera System for Enforcing Security Policies on Mobile Communications Devices
US20100151822A1 (en) * 2008-12-12 2010-06-17 Microsoft Corporation Security Protocols for Mobile Operator Networks
WO2010069962A1 (en) * 2008-12-15 2010-06-24 Koninklijke Kpn N.V. Service-based authentication to a network
US20100223537A1 (en) * 2004-08-20 2010-09-02 Arie Heiman Method and System for Decoding Video, Voice, and Speech Data Using Redundancy
US20100325713A1 (en) * 2005-11-18 2010-12-23 Taro Kurita Mobile terminal, data communication method, and computer program
US20110004754A1 (en) * 2007-06-12 2011-01-06 John Michael Walker Method And Apparatuses For Authentication And Reauthentication Of A User With First And Second Authentication Procedures
US20110087884A1 (en) * 2009-10-14 2011-04-14 Texas Instruments Incorporated Methods and Systems for Improving the Security of Password-Based Authentication Protocols for IEEE 802.11 Networks
US20110179465A1 (en) * 2010-01-20 2011-07-21 Research In Motion Limited Apparatus, and an associated method, for facilitating secure operations of a wireless device
US20110265186A1 (en) * 2008-12-26 2011-10-27 Sk Telecom Co., Ltd. Method for protecting a software license, system for same, server, terminal, and computer-readable recording medium
US20110289554A1 (en) * 2005-11-21 2011-11-24 Research In Motion Limited System and method for application program operation on a wireless device
WO2012058429A2 (en) * 2010-10-28 2012-05-03 Apple Inc. Methods and apparatus for delivering electronic identification components over a wireless network
CN103200184A (en) * 2013-03-14 2013-07-10 电子科技大学 Evaluation method for mobile terminal security
US20130268753A1 (en) * 2012-04-04 2013-10-10 Lockheed Martin Corporation Anti-tamper device, system, method, and computer-readable medium
WO2014079960A1 (en) 2012-11-22 2014-05-30 Koninklijke Kpn N.V. System to detect behaviour in a telecommunications network
US8787572B1 (en) 2005-05-04 2014-07-22 Marvell International Ltd. Enhanced association for access points
US20150256515A1 (en) * 2014-03-06 2015-09-10 Samsung Electronics Co., Ltd. Proximity communication method and apparatus
US20150296378A1 (en) * 2014-04-11 2015-10-15 Blackberry Limited Method and apparatus for a dual radio user equipment
US20150304846A1 (en) * 2014-04-17 2015-10-22 Mavenir Systems, Inc. Gsm a3/a8 authentication in an ims network
US9450759B2 (en) 2011-04-05 2016-09-20 Apple Inc. Apparatus and methods for controlling distribution of electronic access clients
US9825774B2 (en) 2008-06-04 2017-11-21 Samsung Electronics Co., Ltd. Method of sharing usage information, and apparatus and system thereof
US9949112B2 (en) 2012-12-10 2018-04-17 Koninklijke Kpn N.V. System to protect a mobile network

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7181196B2 (en) 2003-05-15 2007-02-20 Lucent Technologies Inc. Performing authentication in a communications system
WO2005125261A1 (en) 2004-06-17 2005-12-29 Telefonaktiebolaget Lm Ericsson (Publ) Security in a mobile communications system
WO2006057627A1 (en) * 2004-11-23 2006-06-01 Igor Kocis Apparatuses for establishing a highly secure voice amd data link between communicating parties
GB0428084D0 (en) * 2004-12-22 2005-01-26 Nokia Corp Method for producing authentication information
CN100581104C (en) * 2005-01-07 2010-01-13 华为技术有限公司 Method for arranging key in IP multimedia service subsystem network
GB0504865D0 (en) * 2005-03-09 2005-04-13 Nokia Corp User authentication in a communications system
KR100734856B1 (en) * 2005-12-05 2007-07-03 한국전자통신연구원 Method for identifying universally using SASL
EP1933528B9 (en) * 2006-12-12 2018-05-23 Orange Secure service access from a communication apparatus with a personal device
CN100479568C (en) 2006-12-25 2009-04-15 北京邮电大学 Implementation scheme for secrecy phone of the smart mobile terminal
DE102009026953A1 (en) * 2009-06-16 2010-12-23 Bundesdruckerei Gmbh A method for logging a mobile telephone in a mobile radio network
US20140171029A1 (en) * 2011-07-08 2014-06-19 Nokia Corporation Method and apparatus for authenticating subscribers to long term evolution telecommunication networks or universal mobile telecommunications system
US8434158B2 (en) * 2011-08-29 2013-04-30 Maxim Integrated Products, Inc. Systems and methods for detecting and thwarting unauthorized access and hostile attacks on secured systems
GB201207816D0 (en) * 2012-05-04 2012-06-13 Vodafone Ip Licensing Ltd Telecommunication networks
CN104158721A (en) * 2014-07-15 2014-11-19 神州数码融信软件有限公司 Basic information interaction system

Citations (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4748668A (en) * 1986-07-09 1988-05-31 Yeda Research And Development Company Limited Method, apparatus and article for identification and signature
US4853522A (en) * 1986-09-16 1989-08-01 Fujitsu Limited System for permitting access to data field area in IC card for multiple services
US5386468A (en) * 1992-09-14 1995-01-31 Fujitsu Limited Method of registering identification number in personal communication terminal
US5422953A (en) * 1993-05-05 1995-06-06 Fischer; Addison M. Personal date/time notary device
US5537474A (en) * 1994-07-29 1996-07-16 Motorola, Inc. Method and apparatus for authentication in a communication system
US5623637A (en) * 1993-12-06 1997-04-22 Telequip Corporation Encrypted data storage card including smartcard integrated circuit for storing an access password and encryption keys
US5668878A (en) * 1994-02-28 1997-09-16 Brands; Stefanus Alfonsus Secure cryptographic methods for electronic transfer of information
US5740403A (en) * 1991-02-19 1998-04-14 Gemplus Card International Process circuit & system for protecting an integrated circuit against fraudulent use
US5757918A (en) * 1995-01-20 1998-05-26 Tandem Computers Incorporated Method and apparatus for user and security device authentication
US6141756A (en) * 1998-04-27 2000-10-31 Motorola, Inc. Apparatus and method of reading a program into a processor
US20020044648A1 (en) * 2000-03-23 2002-04-18 Benjamin Arazi Methods and systems for efficient chained certification
US6470454B1 (en) * 1998-03-31 2002-10-22 International Business Machines Corporation Method and apparatus for establishing computer configuration protection passwords for protecting computer configurations
US6507907B1 (en) * 1999-02-26 2003-01-14 Intel Corporation Protecting information in a system
US20030023871A1 (en) * 2001-07-24 2003-01-30 Thiru Gnanasabapathy System and method for code and data security in a semiconductor device
US20030028771A1 (en) * 1998-01-02 2003-02-06 Cryptography Research, Inc. Leak-resistant cryptographic payment smartcard
US20030033537A1 (en) * 2001-08-08 2003-02-13 Kabushiki Kaisha Toshiba Tamper resistant microprocessor using fast context switching
US20030056100A1 (en) * 2001-09-14 2003-03-20 Rodney Beatson Method and system for authenticating a digitized signature for execution of an electronic document
US20030159067A1 (en) * 2002-02-21 2003-08-21 Nokia Corporation Method and apparatus for granting access by a portable phone to multimedia services
US6687375B1 (en) * 1999-06-02 2004-02-03 International Business Machines Corporation Generating user-dependent keys and random numbers
US6711400B1 (en) * 1997-04-16 2004-03-23 Nokia Corporation Authentication method
US7039191B2 (en) * 2000-11-22 2006-05-02 Nec Corporation Chaining key broadcasting reception system and chaining key broadcasting reception method
US7047416B2 (en) * 1998-11-09 2006-05-16 First Data Corporation Account-based digital signature (ABDS) system
US7149308B1 (en) * 2000-11-13 2006-12-12 Stealthkey, Inc. Cryptographic communications using in situ generated cryptographic keys for conditional access
US20070189534A1 (en) * 2001-03-30 2007-08-16 Wood Matthew D Encrypting message for secure transmission

Family Cites Families (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3483055A (en) 1966-03-28 1969-12-09 Robert Wayne Eshbaugh Method for forming a fiber glass racket frame
FR2718312B1 (en) * 1994-03-29 1996-06-07 Rola Nevoux A method for combined authentication of a telecommunication terminal and a user module.
JPH08139718A (en) 1994-11-04 1996-05-31 Hitachi Ltd Cipher device and inter-terminal communication method using the cipher device
US5651068A (en) * 1995-03-08 1997-07-22 Hewlett-Packard Company International cryptography framework
DE19530339A1 (en) 1995-08-18 1997-02-20 Degussa Fumed silica, process for their preparation and use
US5602918A (en) * 1995-12-22 1997-02-11 Virtual Open Network Environment Corp. Application level security system and method
EP0795844A1 (en) * 1996-03-11 1997-09-17 Koninklijke PTT Nederland N.V. Method of securely modifying data on a smart card
CN1197248A (en) 1996-09-25 1998-10-28 中国工商银行福建省分行 Numeral signature method
KR20010013155A (en) 1997-05-28 2001-02-26 아담 루카스 영 Auto-recoverable auto-certifiable cryptosystems
US6816968B1 (en) * 1998-07-10 2004-11-09 Silverbrook Research Pty Ltd Consumable authentication protocol and system
FR2780177B1 (en) * 1998-06-17 2001-10-05 Schlumberger Ind Sa System protection software
WO1999067701A1 (en) * 1998-06-19 1999-12-29 4P S.R.L. Multifunctional electronic palmtop computer
DE69900178T2 (en) * 1998-10-16 2001-10-31 Matsushita Electric Ind Co Ltd System for the protection of digital content
FI107860B (en) 1999-02-09 2001-10-15 Sonera Smarttrust Oy A method and system in a telecommunications system and subscriber identity module
US6516414B1 (en) * 1999-02-26 2003-02-04 Intel Corporation Secure communication over a link
JP3389186B2 (en) * 1999-04-27 2003-03-24 松下電器産業株式会社 Semiconductor memory card and a reading device
US6591116B1 (en) * 1999-06-07 2003-07-08 Nokia Mobile Phones Limited Mobile equipment and networks providing selection between USIM/SIM dependent features
WO2000077974A1 (en) 1999-06-11 2000-12-21 Liberate Technologies Hierarchical open security information delegation and acquisition
CN1312593C (en) * 1999-09-01 2007-04-25 松下电器产业株式会社 Dispensing system, semiconductor storing card, receiving device, computer readable recording medium and receiving method
EP1081891A3 (en) 1999-09-02 2002-05-22 Compaq Computer Corporation Autokey initialization of cryptographic devices
JP4602627B2 (en) * 2000-03-09 2010-12-22 パナソニック株式会社 Management device, editing device, the audio data management system including a recording medium, the management apparatus, editing apparatus, a recording medium, the method
FI108769B (en) * 2000-04-07 2002-03-15 Nokia Corp Connecting an access point in a wireless communication system
US6950521B1 (en) * 2000-06-13 2005-09-27 Lucent Technologies Inc. Method for repeated authentication of a user subscription identity module
JP2002163584A (en) * 2000-11-24 2002-06-07 Fujitsu Ltd Method for card settlement using portable information terminal and its system
KR20030060981A (en) * 2000-12-07 2003-07-16 쌘디스크 코포레이션 System, Method, and Device for Playing Back Recorded Audio, Video or Other Content From Non-Volatile Memory Cards, Compact Disks, or Other Media
US6745048B2 (en) * 2001-01-25 2004-06-01 Microsoft Corporation Sim manager API
JP4019303B2 (en) 2001-02-02 2007-12-12 日本電気株式会社 Encryption device and decryption device and their method using the encryption key included in the electronic watermark
DE60214836T2 (en) 2001-04-10 2007-03-01 Telefonaktiebolaget Lm Ericsson (Publ) A method and network for delivering streaming data
JP2002329180A (en) * 2001-04-27 2002-11-15 Toshiba Corp Memory card having radio communication function and its data communication method
FI114180B (en) * 2001-06-12 2004-08-31 Nokia Corp The improved method and device arrangement for encrypting the transfer of the data contained in the radio interface between the terminal and the radio terminal equipment
US8549110B2 (en) * 2001-06-25 2013-10-01 Cinterion Wireless Modules Gmbh Method for transmitting data
DE10200041A1 (en) * 2002-01-03 2003-07-24 Vodafone Holding Gmbh Authentication system and method between two communication units
US7200756B2 (en) * 2002-06-25 2007-04-03 Microsoft Corporation Base cryptographic service provider (CSP) methods and apparatuses

Patent Citations (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4748668A (en) * 1986-07-09 1988-05-31 Yeda Research And Development Company Limited Method, apparatus and article for identification and signature
US4853522A (en) * 1986-09-16 1989-08-01 Fujitsu Limited System for permitting access to data field area in IC card for multiple services
US5740403A (en) * 1991-02-19 1998-04-14 Gemplus Card International Process circuit & system for protecting an integrated circuit against fraudulent use
US5386468A (en) * 1992-09-14 1995-01-31 Fujitsu Limited Method of registering identification number in personal communication terminal
US5422953A (en) * 1993-05-05 1995-06-06 Fischer; Addison M. Personal date/time notary device
US5623637A (en) * 1993-12-06 1997-04-22 Telequip Corporation Encrypted data storage card including smartcard integrated circuit for storing an access password and encryption keys
US5668878A (en) * 1994-02-28 1997-09-16 Brands; Stefanus Alfonsus Secure cryptographic methods for electronic transfer of information
US5537474A (en) * 1994-07-29 1996-07-16 Motorola, Inc. Method and apparatus for authentication in a communication system
US5757918A (en) * 1995-01-20 1998-05-26 Tandem Computers Incorporated Method and apparatus for user and security device authentication
US6711400B1 (en) * 1997-04-16 2004-03-23 Nokia Corporation Authentication method
US20030028771A1 (en) * 1998-01-02 2003-02-06 Cryptography Research, Inc. Leak-resistant cryptographic payment smartcard
US6470454B1 (en) * 1998-03-31 2002-10-22 International Business Machines Corporation Method and apparatus for establishing computer configuration protection passwords for protecting computer configurations
US6141756A (en) * 1998-04-27 2000-10-31 Motorola, Inc. Apparatus and method of reading a program into a processor
US7047416B2 (en) * 1998-11-09 2006-05-16 First Data Corporation Account-based digital signature (ABDS) system
US6507907B1 (en) * 1999-02-26 2003-01-14 Intel Corporation Protecting information in a system
US6687375B1 (en) * 1999-06-02 2004-02-03 International Business Machines Corporation Generating user-dependent keys and random numbers
US20020044648A1 (en) * 2000-03-23 2002-04-18 Benjamin Arazi Methods and systems for efficient chained certification
US7149308B1 (en) * 2000-11-13 2006-12-12 Stealthkey, Inc. Cryptographic communications using in situ generated cryptographic keys for conditional access
US7039191B2 (en) * 2000-11-22 2006-05-02 Nec Corporation Chaining key broadcasting reception system and chaining key broadcasting reception method
US20070189534A1 (en) * 2001-03-30 2007-08-16 Wood Matthew D Encrypting message for secure transmission
US20030023871A1 (en) * 2001-07-24 2003-01-30 Thiru Gnanasabapathy System and method for code and data security in a semiconductor device
US20030033537A1 (en) * 2001-08-08 2003-02-13 Kabushiki Kaisha Toshiba Tamper resistant microprocessor using fast context switching
US20030056100A1 (en) * 2001-09-14 2003-03-20 Rodney Beatson Method and system for authenticating a digitized signature for execution of an electronic document
US20030159067A1 (en) * 2002-02-21 2003-08-21 Nokia Corporation Method and apparatus for granting access by a portable phone to multimedia services

Cited By (85)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9560041B2 (en) * 2002-11-27 2017-01-31 Assa Abloy Ab Authenticated remote pin unblock
US20160044027A1 (en) * 2002-11-27 2016-02-11 Assa Abloy Ab Authenticated remote pin unblock
US20080028229A1 (en) * 2002-11-27 2008-01-31 Priebatsch Mark H Authenticated remote pin unblock
US9893892B2 (en) * 2002-11-27 2018-02-13 Assa Abloy Ab Authenticated remote pin unblock
US9118668B1 (en) * 2002-11-27 2015-08-25 Assa Abloy Ab Authenticated remote pin unblock
US8495381B2 (en) * 2002-11-27 2013-07-23 Activcard Authenticated remote PIN unblock
US20070147618A1 (en) * 2003-11-11 2007-06-28 Horn Guenther Method for safeguarding data traffic between a first terminal and a first and a second terminal and a second network
US8345882B2 (en) * 2003-11-11 2013-01-01 Siemens Aktiengesellschaft Method for safeguarding data traffic between a first terminal and a first network and a second terminal and a second network
US9143888B2 (en) 2003-11-27 2015-09-22 Nagravision S.A. Method for the authentication of applications
US9531681B2 (en) 2003-11-27 2016-12-27 Nagravision S.A. Method for the authentication of applications
US8261365B2 (en) * 2003-11-27 2012-09-04 Nagravision S.A. Method for the authentication of applications
US8813253B2 (en) 2003-11-27 2014-08-19 Nagravision S.A. Method for the authentication of applications
US20070198834A1 (en) * 2003-11-27 2007-08-23 Rached Ksontini Method For The Authentication Of Applications
US20090132806A1 (en) * 2004-06-10 2009-05-21 Marc Blommaert Method for agreeing between at least one first and one second communication subscriber to security key for securing communication link
US20050286721A1 (en) * 2004-06-29 2005-12-29 Nokia Corporation Providing content in a communication system
US7765404B2 (en) * 2004-06-29 2010-07-27 Nokia Corporation Providing content in a communication system
US8924830B2 (en) 2004-08-20 2014-12-30 Broadcom Corporation Method and system for decoding control data in GSM-based systems using inherent redundancy
US20060120488A1 (en) * 2004-08-20 2006-06-08 Arie Heiman Method and system for decoding control data in GSM-based systems using inherent redundancy
US8359523B2 (en) 2004-08-20 2013-01-22 Broadcom Corporation Method and system for decoding video, voice, and speech data using redundancy
US8046662B2 (en) * 2004-08-20 2011-10-25 Broadcom Corporation Method and system for decoding control data in GSM-based systems using inherent redundancy
US20100223537A1 (en) * 2004-08-20 2010-09-02 Arie Heiman Method and System for Decoding Video, Voice, and Speech Data Using Redundancy
US7650139B2 (en) * 2004-08-29 2010-01-19 Huawei Technologies Co., Ltd. Method for ensuring security of subscriber card
US20070105530A1 (en) * 2004-08-29 2007-05-10 Huawei Technologies Co., Ltd. Method for Ensuring Security of Subscriber Card
US7574610B2 (en) * 2004-09-30 2009-08-11 Microsoft Corporation Security state watcher
US20060075264A1 (en) * 2004-09-30 2006-04-06 Microsoft Corporation Security state watcher
US8787572B1 (en) 2005-05-04 2014-07-22 Marvell International Ltd. Enhanced association for access points
US8291222B2 (en) * 2005-06-10 2012-10-16 Siemens Aktiengesellschaft Method for agreeing between at least one first and one second communication subscriber to security key for securing communication link
US20070107049A1 (en) * 2005-10-21 2007-05-10 Nokia Corporation Apparatus, computer program product and method for secure authentication response in a mobile terminal
US8316426B2 (en) * 2005-10-21 2012-11-20 Nokia Corporation Apparatus, computer program product and method for secure authentication response in a mobile terminal
US8832441B2 (en) * 2005-11-18 2014-09-09 Felica Networks, Inc. Mobile terminal, data communication method, and computer program
US20100325713A1 (en) * 2005-11-18 2010-12-23 Taro Kurita Mobile terminal, data communication method, and computer program
US8699999B2 (en) 2005-11-21 2014-04-15 Blackberry Limited System and method for application program operation on a wireless device
US20110289554A1 (en) * 2005-11-21 2011-11-24 Research In Motion Limited System and method for application program operation on a wireless device
US8254884B2 (en) * 2005-11-21 2012-08-28 Research In Motion Limited System and method for application program operation on a wireless device
US20070204323A1 (en) * 2006-02-24 2007-08-30 Rockwell Automation Technologies, Inc. Auto-detection capabilities for out of the box experience
US20070204324A1 (en) * 2006-02-27 2007-08-30 Research In Motion Limited Method of customizing a standardized it policy
US8332906B2 (en) 2006-02-27 2012-12-11 Research In Motion Limited Method of customizing a standardized IT policy
US20070204326A1 (en) * 2006-02-27 2007-08-30 Research In Motion Limited Method of customizing a standardized it policy
US9621587B2 (en) 2006-02-27 2017-04-11 Blackberry Limited Method of customizing a standardized IT policy
US8544057B2 (en) 2006-02-27 2013-09-24 Blackberry Limited Method of customizing a standardized IT policy
US8689284B2 (en) 2006-02-27 2014-04-01 Blackberry Limited Method of customizing a standardized IT policy
US8413209B2 (en) * 2006-03-27 2013-04-02 Telecom Italia S.P.A. System for enforcing security policies on mobile communications devices
US20100064341A1 (en) * 2006-03-27 2010-03-11 Carlo Aldera System for Enforcing Security Policies on Mobile Communications Devices
US20080288699A1 (en) * 2007-05-17 2008-11-20 Incard Sa Method for controlling the execution of an applet for an ic card
US20110004754A1 (en) * 2007-06-12 2011-01-06 John Michael Walker Method And Apparatuses For Authentication And Reauthentication Of A User With First And Second Authentication Procedures
US8224921B2 (en) * 2007-10-04 2012-07-17 Alcatel Lucent Method for authenticating mobile units attached to a femtocell that operates according to code division multiple access
KR101121465B1 (en) * 2007-10-04 2012-03-19 알카텔-루센트 유에스에이 인코포레이티드 Method for authenticating mobile units attached to a femtocell in communication with a secure core netowrk such as an ims
WO2009045317A3 (en) * 2007-10-04 2009-09-11 Lucent Technologies Inc. Method for authenticating mobile units attached to a femtocell in communication with a secure core network such as an ims
US20090094683A1 (en) * 2007-10-04 2009-04-09 Morgan Todd C Method for authenticating mobile units attached to a femtocell that operates according to code division multiple access
WO2009045317A2 (en) * 2007-10-04 2009-04-09 Lucent Technologies Inc. Method for authenticating mobile units attached to a femtocell in communication with a secure core network such as an ims
US8230035B2 (en) * 2007-10-04 2012-07-24 Alcatel Lucent Method for authenticating mobile units attached to a femtocell that operates according to code division multiple access
US20110269428A1 (en) * 2007-10-04 2011-11-03 Lucent Technologies, Inc. Method for authenticating mobile units attached to a femtocell that operates according to code division multiple access
WO2009115552A2 (en) 2008-03-18 2009-09-24 Eads Secure Networks Management of the identities of users in a system
US20110018683A1 (en) * 2008-03-18 2011-01-27 Eads Secure Networks Management of the identities of users in a system
WO2009115552A3 (en) * 2008-03-18 2009-11-26 Eads Secure Networks Management of the identities of users in a system
KR101620934B1 (en) 2008-03-18 2016-05-13 에어버스 디에스 에스아에스 Management of the identities of users in a system
US9825774B2 (en) 2008-06-04 2017-11-21 Samsung Electronics Co., Ltd. Method of sharing usage information, and apparatus and system thereof
US20100017621A1 (en) * 2008-06-20 2010-01-21 General Instrument Corporation Radio transceiver or other encryption device having secure tamper-detection module
US8006101B2 (en) 2008-06-20 2011-08-23 General Instrument Corporation Radio transceiver or other encryption device having secure tamper-detection module
US9270700B2 (en) * 2008-12-12 2016-02-23 Microsoft Technology Licensing, Llc Security protocols for mobile operator networks
US20100151822A1 (en) * 2008-12-12 2010-06-17 Microsoft Corporation Security Protocols for Mobile Operator Networks
WO2010069962A1 (en) * 2008-12-15 2010-06-24 Koninklijke Kpn N.V. Service-based authentication to a network
US8881235B2 (en) 2008-12-15 2014-11-04 Koninklijke Kpn N.V. Service-based authentication to a network
US20110265186A1 (en) * 2008-12-26 2011-10-27 Sk Telecom Co., Ltd. Method for protecting a software license, system for same, server, terminal, and computer-readable recording medium
US20110087884A1 (en) * 2009-10-14 2011-04-14 Texas Instruments Incorporated Methods and Systems for Improving the Security of Password-Based Authentication Protocols for IEEE 802.11 Networks
US8433918B2 (en) * 2009-10-14 2013-04-30 Texas Instruments Incorporated Methods and systems for improving the security of password-based authentication protocols for IEEE 802.11 networks
US20110179465A1 (en) * 2010-01-20 2011-07-21 Research In Motion Limited Apparatus, and an associated method, for facilitating secure operations of a wireless device
US9264448B2 (en) * 2010-01-20 2016-02-16 Blackberry Limited Apparatus, and an associated method, for facilitating secure operations of a wireless device
WO2012058429A3 (en) * 2010-10-28 2014-04-10 Apple Inc. Methods and apparatus for delivering electronic identification components over a wireless network
WO2012058429A2 (en) * 2010-10-28 2012-05-03 Apple Inc. Methods and apparatus for delivering electronic identification components over a wireless network
US9877194B2 (en) 2010-10-28 2018-01-23 Apple Inc. Methods and apparatus for delivering electronic identification components over a wireless network
US8555067B2 (en) 2010-10-28 2013-10-08 Apple Inc. Methods and apparatus for delivering electronic identification components over a wireless network
US9450759B2 (en) 2011-04-05 2016-09-20 Apple Inc. Apparatus and methods for controlling distribution of electronic access clients
US9788209B2 (en) 2011-04-05 2017-10-10 Apple Inc. Apparatus and methods for controlling distribution of electronic access clients
US8843739B2 (en) * 2012-04-04 2014-09-23 Lockheed Martin Corporation Anti-tamper device, system, method, and computer-readable medium
US20130268753A1 (en) * 2012-04-04 2013-10-10 Lockheed Martin Corporation Anti-tamper device, system, method, and computer-readable medium
WO2014079960A1 (en) 2012-11-22 2014-05-30 Koninklijke Kpn N.V. System to detect behaviour in a telecommunications network
US9949112B2 (en) 2012-12-10 2018-04-17 Koninklijke Kpn N.V. System to protect a mobile network
CN103200184A (en) * 2013-03-14 2013-07-10 电子科技大学 Evaluation method for mobile terminal security
US20150256515A1 (en) * 2014-03-06 2015-09-10 Samsung Electronics Co., Ltd. Proximity communication method and apparatus
US9693225B2 (en) * 2014-04-11 2017-06-27 Blackberry Limited Method and apparatus for a dual radio user equipment
US9866588B2 (en) 2014-04-11 2018-01-09 Blackberry Limited Method and apparatus for a dual radio user equipment
US20150296378A1 (en) * 2014-04-11 2015-10-15 Blackberry Limited Method and apparatus for a dual radio user equipment
US9526005B2 (en) * 2014-04-17 2016-12-20 Mitel Mobility Inc. GSM A3/A8 authentication in an IMS network
US20150304846A1 (en) * 2014-04-17 2015-10-22 Mavenir Systems, Inc. Gsm a3/a8 authentication in an ims network

Also Published As

Publication number Publication date Type
EP1550341A1 (en) 2005-07-06 application
KR20050083729A (en) 2005-08-26 application
KR101047641B1 (en) 2011-07-08 grant
US20140304768A1 (en) 2014-10-09 application
CN100477834C (en) 2009-04-08 grant
DE60310968T2 (en) 2007-10-11 grant
US20160191510A1 (en) 2016-06-30 application
US9282095B2 (en) 2016-03-08 grant
EP1550341B1 (en) 2007-01-03 grant
WO2004032557A1 (en) 2004-04-15 application
DE60310968D1 (en) 2007-02-15 grant
CN1689367A (en) 2005-10-26 application

Similar Documents

Publication Publication Date Title
Haverinen et al. Extensible authentication protocol method for global system for mobile communications (GSM) subscriber identity modules (EAP-SIM)
Funk et al. Extensible authentication protocol tunneled transport layer security authenticated protocol version 0 (EAP-TTLSv0)
Aboba et al. Extensible authentication protocol (EAP) key management framework
US7653200B2 (en) Accessing cellular networks from non-native local networks
US20060089123A1 (en) Use of information on smartcards for authentication and encryption
US20080189550A1 (en) Secure Software Execution Such as for Use with a Cell Phone or Mobile Device
US7058180B2 (en) Single sign-on process
US20060253703A1 (en) Method for distributing certificates in a communication system
US20040117623A1 (en) Methods and apparatus for secure data communication links
US20020187808A1 (en) Method and arrangement for encrypting data transfer at an interface in mobile equipment in radio network, and mobile equipment in radio network
US20130117824A1 (en) Privacy preserving authorisation in pervasive environments
US8503376B2 (en) Techniques for secure channelization between UICC and a terminal
US20100062808A1 (en) Universal integrated circuit card having a virtual subscriber identity module functionality
US20050120213A1 (en) System and method for provisioning and authenticating via a network
US20090239503A1 (en) System and Method for Securely Issuing Subscription Credentials to Communication Devices
US7373509B2 (en) Multi-authentication for a computing device connecting to a network
US20070234041A1 (en) Authenticating an application
US20050135622A1 (en) Upper layer security based on lower layer keying
US20060064458A1 (en) Secure access to a subscription module
US20090158032A1 (en) Method and System for Automated and Secure Provisioning of Service Access Credentials for On-Line Services to Users of Mobile Communication Terminals
US20100058064A1 (en) Login authentication using a trusted device
US20070208936A1 (en) Means and Method for Single Sign-On Access to a Service Network Through an Access Network
US20060059344A1 (en) Service authentication
US8533803B2 (en) Method and apparatus for trusted federated identity
US20080095361A1 (en) Security-Enhanced Key Exchange

Legal Events

Date Code Title Description
AS Assignment

Owner name: TELEFONAKTIEBOLAGET L M ERICSSON (PUBL), SWEDEN

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:NASLUND, MATS;NORRMAN, KARL;GOLDBECK-LOWE, TOMAS;REEL/FRAME:018032/0948

Effective date: 20050405