Cellular Device Authentication Using Asymmetric Key Pairs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cellular communication devices rely on physical subscriber identification modules (SIMs) for authentication, which can be lost, damaged, or compromised, and existing methods lack a secure, SIM-free authentication mechanism.
Innovation Solution
Implementing asymmetric cryptographic key pairs stored in non-volatile secure memory within devices, with a public key repository maintained by manufacturers or trusted entities, allowing devices to authenticate with cellular networks using digital signatures and public key infrastructure (PKI) techniques, eliminating the need for physical tokens like SIMs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical SIM cards are used for authentication, then device authentication with cellular networks is enabled, but the SIM can be lost, damaged, or compromised
Solution Approach 1:
The patent replaces the physical SIM card (mechanical system) with a digital authentication system using asymmetric cryptographic key pairs stored in non-volatile secure memory within the device. This substitution eliminates the physical token that can be lost, damaged, or compromised while maintaining authentication functionality through digital signatures and public key infrastructure.
Solution Approach 2:
The patent extracts the authentication functionality from the physical SIM card and embeds it directly into the device's secure memory. By taking out the secret keys and authentication logic from the removable SIM and integrating them into the device's permanent secure storage, the system eliminates the risks associated with physical SIM cards while preserving the authentication mechanism.
2Reliability
If SIM cards are required for authentication, then network security is maintained, but user convenience is reduced due to SIM management requirements
Solution Approach 1:
The patent merges the authentication credentials (secret keys) directly into the device's secure memory, combining the device hardware and authentication credentials into a single integrated system. This eliminates the need for separate SIM card management while maintaining network security through the same cryptographic authentication mechanisms.
3Adaptability or versatility
If asymmetric cryptographic key pairs are stored in non-volatile secure memory, then SIM-free authentication is enabled, but the device complexity increases
Solution Approach 1:
The device's secure memory independently stores and manages the asymmetric cryptographic key pairs without requiring external SIM card infrastructure. The authentication system is self-contained within the device, with the secure memory automatically providing cryptographic services for authentication and encryption without needing separate physical tokens or external key management systems.
Data Source
AI summary
When manufacturing, distributing, or selling mobile phones, each phone is associated with an asymmetric cryptographic key pair, comprising a public key and a private key. The private key is stored on the phone, and the public key is stored in a public key repository. When connecting to a cellular network, a phone provides its device ID to the network. The cellular network queries the public key repository to determine the public key of the phone and authenticates the phone using the phone's public key. The cellular network also provides a digital identity certificate to the phone, allowing the phone to authenticate the cellular network using a public key infrastructure (PKI).