Authentication method for mobile communications.

摘要

In the preliminary authentication stage, the mobile station (35) is authenticated by sending from the home network (30) to the roamed network (31), a plurality of pairs of first random numbers (RNDa1,...,RNDan) and calculation results (SRESa1,...,SRESan) of the cipher function (f), which calculation is performed at the home network using the secret key (ki) and the first random numbers (RNDa1,...,RNDan), by sending, from the roamed network to the mobile station, third random numbers formed by coupling second random numbers (RNDb1,...,RNDbm) produced at the roamed network with the first random numbers (RNDa1,...,RNDan), by sending, from the mobile station to the roamed network, calculation results (SRESa1,...,SRESan, SRESb1,...,SRESbm)) of the cipher function (f), which calculation is performed at the mobile station using the secret key (ki) and the sent third random numbers, and by confirming, at the roamed network, coincidence of the calculation results (SRESa1,...,SRESan) sent from the mobile station with the calculation results (SRESa1,...,SRESan) sent from the home network. In the main authentication, the mobile station is authenticated by using a pair of the second random number (RNDb1,...,RNDbm) and of the calculation result (SRESb1,...,SRESbm) with respect to the second random number (RNDb1,...,RNDbm), sent from the mobile station.