Mobile Device Authentication via Key Agreement Protocol
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile communication systems lack standardized cryptographic functions for authentication and key generation, relying on non-standardized mechanisms that are not universally secure, particularly in 3GPP systems, which can lead to vulnerabilities in data transmission between mobile devices and networks.
Innovation Solution
Implementing a key agreement protocol between mobile devices and networks to compute a shared secret value, which is then used to derive response values for authentication and key generation, utilizing cryptographic protocols like MQV and key derivation functions to ensure secure communication, with optional key generation for securing data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If non-standardized cryptographic mechanisms are used for authentication and key generation, then device complexity and implementation flexibility are reduced, but security reliability deteriorates due to lack of universal security standards
Solution Approach 1:
The patent changes the cryptographic parameters by implementing standardized cryptographic functions (such as AES-128, AES-192, AES-256) with specific key lengths and algorithms. This standardization transforms the authentication mechanism from using arbitrary cryptographic parameters to using proven, standardized parameters that ensure security while maintaining manageable complexity through established implementations
2Reliability
If standardized cryptographic functions are implemented for authentication and key generation, then security reliability is improved through universal security standards, but device complexity increases due to implementation requirements
Solution Approach 1:
The patent implements a universal authentication framework that can accommodate multiple cryptographic algorithms (AES-128, AES-192, AES-256, SNOW 3G, KEA) within a single standardized structure. This multi-functionality allows the system to maintain high security reliability through standardization while managing complexity by providing a unified implementation template that can select among standardized algorithms
3Reliability
If symmetric keys are preserved for securing data transmission, then security is maintained, but efficiency deteriorates due to the need to securely manage and transmit symmetric keys
Solution Approach 1:
The patent extracts the key management burden from the authentication process by implementing dedicated key derivation functions (KDFs) that automatically generate session keys from shared secrets. This separation extracts the symmetric key generation and management out of the manual provisioning process, maintaining transmission security through derived keys while improving efficiency by eliminating the need to securely transmit and manage pre-shared symmetric keys
Data Source
AI summary
There are disclosed systems and methods for authenticating a mobile device by a network and/or for generating one or more keys that can be used for securely transmitting data between the mobile device and the network. In one embodiment, the following operations are performed by a mobile device: (i) the mobile device participates in at least a portion of a key agreement protocol with a network to compute a secret value; (ii) the mobile device obtains a response value derived from the secret value; and (iii) the mobile device sends the response value to a verification entity for use in authenticating the mobile device. There are also disclosed systems and methods for authenticating a network by a mobile device.