Method and device for authentication of billing records for use of anonymized network services

Abstract

A method and apparatus for authenticating billing records for anonymized network service utilization. The user device (10) determines service-specific keying material and billing-specific keying material. The user device (10) determines a billing record indicative of usage of the network service by the subscriber and associates the billing record with the first authentication information based on the billing-specific keying material. A user device (10) generates at least one message containing a billing record and associated first authentication information. The user device (10) associates at least one message with the second authentication information based on the service-specific keying material. The user device (10) sends the at least one message to the first network node (150), which is not capable of associating billing-specific keying material or service-specific keying material with the subscriber's subscriber identity. The first network node (150) receives at least one message and associated second authentication information from the user device (10) and authenticates the at least one message based on the service-specific keying material and the second authentication information. In response to authenticating the at least one message, the first network node forwards the charging record and associated first authentication information to the second network node (120). The second network node (120) is capable of associating the billing specific keying material with the subscriber identity of the subscriber. The second network node (120) receives the charging record and associated first authentication information from the first network node (150) and authenticates the charging record based on the charging-specific keying material and the first authentication information. In response to authenticating the charging record, the second network node (120) controls charging for the network service.

Description

technical field [0001] The invention relates to a method and corresponding apparatus for controlling the utilization of network services. Background technique [0002] In communication networks it is known to provide mechanisms for authenticating subscribers. In mobile communication networks as specified by 3GPP (Third Generation Partnership Project), it is eg known to base such mechanisms on associating a User Equipment (UE) such as a mobile phone with a SIM (Subscriber Identity Module). A SIM usually contains identity and security information corresponding to the identity and security information stored in the mobile communication network, eg in the HSS (Home Subscriber Server) or similar subscriber database. Such identity and security information is generally only accessible to network nodes operated by the operator to which the subscriber subscribes. For other network nodes, access to identity and security information is generally restricted for security and privacy re...

AI Technical Summary

Problems solved by technology

However, even if this information is provided to third-party service providers, it may not be sufficient for billing because it does not indicate the network service actually used by the subscriber or to what extent the network service is used, such as in duration, data volume or service level aspects

Images