| 摘要 |
<p>A user device (110), UD, attaches to a network. The UD includes a mobile equipment (111), ME, portion and a network authentication module (116), NAM, having a mobile subscription associated therewith. Cryptographic processing of an authentication challenge is performed on both a network device (140) and the ME (111) in order to generate a modified authentication challenge. The network device (140) uses the modified authentication challenge to compute an expected response. The network device provides the authentication challenge to the UD (110). The ME (111) provides the modified authentication challenge parameter to the NAM (116), which uses the modified authentication challenge parameter to the NAM (116) to compute a response. The modified challenge is computed based on a key related to the subscriber identity, i.e. NAM, in the network device (140) and stored in the ME (111). Only a specific combination of NAM and ME can therefore be authenticated.</p> |
