Subscriber authentication

摘要

To provide reliable and customized authentication, a parameter to be used in authentication is defined for the operator. A secret which may be stored e.g. in a subscriber identity module is calculated from the operator parameter and a subscriber key. An authentication response is calculated from the secret and the challenge to be used in authentication with a one-way function.

主权项

1. A method, comprising:
providing a first secret calculated using a first one-way function to calculate a first secret from only two inputs comprising a predefined key and a predefined operator parameter, wherein the key is predefined for a subscriber and the operator parameter is predefined as an operator-specific parameter having a value selected by an operator associated with the subscriber; using a second one-way function to calculate an output from only two different inputs, the two different inputs comprising a challenge and the calculatedprovided first secret, wherein the challenge comprises a generated random number; extracting thean authentication response from the output calculated by the second one-way function; and authenticating the subscriber with the extracted authentication response, wherein the first and second one-way functions are configured to each receive exactly two inputs.