Methods providing authentication using a request commit message and related user equipment and network nodes

Patent metadata

Field	Value
Publication number	US-11924634-B2
Application number	US-202017422497-A
Country	US
Kind code	B2
Filing date	Jan 13, 2020
Priority date	Jan 21, 2019
Publication date	Mar 5, 2024
Grant date	Mar 5, 2024

Abstract

Methods of operating a user equipment (UE) in a mobile communication network are disclosed. An authentication process start message may be transmitted from the UE to the mobile communication network, wherein the authentication process start message includes an identifier for the UE. After transmitting the authentication process start message from the UE, a request commit message may be received from the mobile communication network. Responsive to receiving the request commit message, a response commit message may be transmitted to the mobile communication network. After transmitting the response commit message, an authentication challenge message may be received corresponding to the authentication process start message. Related methods of operating network nodes are also discussed.

First claim

The invention claimed is:

1. A method of operating a network node of a mobile communication network, the method comprising:
receiving an authentication process start message from each of a plurality of user equipment (UE), the authentication process start message being received from each UE including an identifier for the UE;
responsive to receiving the authentication process start message from each of the plurality of UEs, transmitting a request commit message to each of the plurality of UEs; and
when a response to a request commit message to the UE is not received, stopping authentication of the UE from which the response to the request commit message is not received.

2. The method of claim 1 , wherein the request commit message comprises a liveness check request, wherein the response commit message comprises a liveness check response, and wherein the method further includes determining to proceed with authentication of the UE based on receiving the liveness check response.

3. The method of claim 1 , wherein the request commit message comprises a request to solve a cryptographic puzzle, wherein the response commit message comprise a solution to the cryptographic puzzle, and wherein the method further includes determining whether to proceed with authentication of the UE based on the solution to the cryptographic puzzle.

4. The method of claim 3 , further comprising determining to not proceed with authentication of the UE responsive to the solution to the cryptographic puzzle being incorrect, the method further comprising:
stopping authentication of the UE responsive to determining to not proceed.

5. The method of claim 3 , further comprising determining to proceed with authentication of the UE responsive to the solution to the cryptographic puzzle being correct.

6. The method of claim 1 , wherein the request commit message comprises a request to provide a token, wherein the response commit message comprises an authentication priority token, and wherein the method further includes determining whether to proceed with authentication of the UE based on the authentication priority token.

7. The method of claim 6 , further comprising determining to not proceed with authentication of the UE responsive to the authentication priority token being incorrect, the method further comprising:
stopping authentication of the UE responsive to determining to not proceed.

8. The method of claim 6 , further comprising determining to proceed with authentication of the UE responsive to the authentication priority token being correct.

9. The method of claim 1 , wherein the request commit message comprises a request to either provide a token or solve a cryptographic puzzle, wherein the response commit message comprises one of an authentication priority token or a solution to the cryptographic puzzle, and wherein the method further includes determining whether to proceed with authentication of the UE based on the response commit message comprising the one of the authentication priority token or the solution to the cryptographic puzzle.

10. The method of claim 9 , further comprising determining to not proceed with authentication of the UE responsive to the response commit message including one of an incorrect authentication priority token or an incorrect solution to the cryptographic puzzle, the method further comprising:
stopping authentication of the UE responsive to determining to not proceed.

11. The method of claim 9 , further comprising determining to proceed with authentication of the UE responsive to the response commit message including one of a correct authentication priority token or a correct solution to the cryptographic puzzle.

12. The method of claim 2 , further comprising:
responsive to determining to proceed, transmitting an authentication challenge message to the UE.

13. The method of claim 12 further comprising:
responsive to determining to proceed, decrypting the identifier for the UE from the authentication process start message; and
wherein transmitting the authentication challenge message is transmitted based on decrypting the identifier.

14. The method of claim 1 , wherein the request commit message comprises a liveness check request.

15. A network node of a mobile communication network, the network node comprising:
a processor; and
memory coupled with the processor, wherein the memory includes instructions that when executed by the processor causes the node to:
receive an authentication process start message from each of a plurality of user equipment (UE), the authentication process start message received from each UE including an identifier for the UE;
responsive to receiving the authentication process start message from each of the plurality of UEs, transmit a request commit message to each of the plurality of UEs; and
when a response to a request commit message to the UE is not received, stop authentication of the UE from which the response to the request commit message is not received.

16. The network node according to claim 15 , wherein the
request commit message comprises a liveness check request, wherein the response commit message comprises a liveness check response, and wherein determining comprises determining to proceed with authentication of the UE based on receiving the liveness check response.

Assignees

• Ericsson Telefon Ab L M

Inventors

• Arkko Jari
• Lehtovirta Vesa

Classifications

• H04W12/06 Primary

  Authentication · CPC title

• H04L9/3271

  using challenge-response · CPC title

• H04L2209/80

  Wireless · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L2209/42

  Anonymization, e.g. involving pseudonyms · CPC title