Authentication of a mobile device by a network and key generation

摘要

There are disclosed systems and methods for authenticating a mobile device by a network and/or for generating one or more keys that can be used for securely transmitting data between the mobile device and the network. In one embodiment, the following operations are performed by a mobile device: (i) the mobile device participates in at least a portion of a key agreement protocol with a network to compute a secret value; (ii) the mobile device obtains a response value derived from the secret value; and (iii) the mobile device sends the response value to a verification entity for use in authenticating the mobile device. There are also disclosed systems and methods for authenticating a network by a mobile device.

主权项

1. A method in a mobile device, comprising:
initiating communication with a visited network, the visited network including a verification entity, and the visited network able to communicate with a home network of the mobile device; receiving, from the visited network, an ephemeral public key of the home network; using the ephemeral public key of the home network and a static private key of the mobile device to participate in at least a portion of an asymmetric key agreement protocol with the home network to compute a secret value, wherein an ephemeral private key of the mobile device is not used in the asymmetric key agreement protocol and the asymmetric key agreement protocol is a Menezes-Qu-Vanstone (MQV) key agreement protocol; obtaining a response value derived from the secret value; and sending the response value to the verification entity of the visited network for use in authenticating the mobile device.