JPH0637713A - Verification method for mobile terminal equipment and mobile communication equipment - Google Patents

Abstract

(57) [Abstract] [Purpose] The processing load of the control station in the method and apparatus for judging the legitimacy of the mobile terminal by comparing the calculation results for the same numerical value between the mobile terminal and the control station connected by call. To reduce traffic on the wireless line. [Configuration] Both the mobile terminal and the control station store the calculation result at the time of the previous authentication, and use that value as a numerical value for the calculation at the time of the next authentication. [Effect] It is possible to reduce the generation of random numbers in the control station for each authentication and the processing of transmission thereof.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION The present invention is used in mobile communication devices such as car phones and mobile phones. In particular, it relates to a technique for authenticating whether or not a mobile terminal is a legitimate terminal.

[0002]

2. Description of the Related Art In a mobile communication device such as a car phone or a mobile phone, as a method for confirming that the mobile terminal is a correct terminal, whether or not the processing result for the random number is the same between the mobile terminal and the control station. There is a known authentication method for checking. That is, each time a call is generated, the control station sends a random number to the mobile terminal, the mobile terminal processes this random number by a predetermined arithmetic expression, and returns the result to the control station. The control station also processes the random number by an arithmetic expression defined for each mobile terminal, and when it matches the result sent from the mobile terminal, confirms that the mobile terminal is a correct terminal.

[0003]

Such an authentication method is, for example, FEA which is one method of encryption as an operation.
By using L-8, extremely high reliability can be obtained. However, it is necessary to send a random number for each call to perform complicated arithmetic processing. In order to send a random number, it is necessary for the control station to generate a random number, and to send the random number, it occupies a valuable wireless line and is accompanied by a processing load on the control station.
Further, since the control station sends a random number, the authentication processing time becomes long.

An object of the present invention is to solve the above problems and provide a mobile terminal authentication method and a mobile communication device capable of reducing the processing load of a control station and the traffic of a wireless line.

[0005]

A first aspect of the present invention is a method for authenticating a mobile terminal, wherein both the mobile terminal and the control station perform calculation at the time of authentication based on the result of the previous connection control. Characterize.

When the calculation result notified from the mobile terminal is different from the calculation result of its own station, the control station newly generates a random number to notify the mobile station and performs the calculation based on the random number as in the conventional case. The mobile station receives the random number from the control station, performs the calculation based on the random number, and notifies the control station of the result, and when the control station has the same calculation result based on the random number, the mobile terminal It is good to judge that it is a legitimate terminal.

A second aspect of the present invention is an apparatus for implementing the above method, which determines whether or not one or more mobile terminals to which different operations are assigned and the call-connected mobile terminal are legitimate terminals. Each mobile terminal is equipped with a control station,
A terminal side arithmetic means for performing arithmetic operation on the inputted random number,
The control station includes means for notifying the control station of the calculation result, and the control station performs the same calculation using the same random number as that of the mobile terminal to which the call is connected, and the calculation result by this station side calculation means. In a mobile communication device including an authentication means for comparing the calculation result notified from the corresponding mobile terminal and determining that the mobile terminal is a valid terminal when they are the same, the control station is For each terminal, the result of the previous authentication is stored, and at the time of the next authentication of the mobile terminal, the stored operation result is output as a random number to the station side arithmetic means, and the authenticating means prevents the mobile terminal from being authorized. When it is determined that the mobile terminal has a new random number, the mobile terminal outputs the new random number to the station-side arithmetic means and notifies the corresponding mobile terminal of the mobile terminal. Means for storing definitive calculation results,
And a means for inputting the stored calculation result to the terminal-side calculation means first, and then, when a new random number is notified from the control station, to the input to the terminal-side calculation means. And

[0008]

[Function] Normally, instead of generating a new random number for each call, the calculation result used in the previous call is stored in both the control station and the mobile terminal, and the new random number is stored in the next call. To use as. When the control station and the mobile terminal have different calculation results, a new random number is newly generated in the control station, and the same authentication process as in the conventional case is performed using the random number. When the calculation results based on the stored values are different, the processing load on the control station increases more than before and the time required for authentication also increases, but such frequency is low, and the processing of random number generation in the control station as a whole It is possible to reduce the traffic on the wireless line due to the transmission of random numbers from the control station to the mobile terminal and the processing load on the control station. Also, the time required for authentication is shortened on average.

[0009]

1 is a block diagram showing the configuration of a mobile communication device according to an embodiment of the present invention. The mobile communication device includes one or more mobile terminals 1 to which different operations are assigned, and the one or more mobile terminals. 1 is provided with a radio base station 2 connected via a radio line, and a control station 3 for judging whether the mobile terminal 1 call-connected via the radio base station 2 is an authorized terminal. The mobile terminal 1 includes an input / output unit 11 that performs general operations as a telephone such as input by operating buttons, input / output of voice, and display of various data, and a transmission / reception unit 12 that transmits / receives signals via a wireless line. The input / output unit 11, the transmission / reception unit 12, and the transmission / reception unit 12 are used as means for notifying the control station 3 of the calculation result by including the calculation unit 14 as a terminal-side calculation unit that calculates the input random number. A control unit 13 that controls the operation of the calculation unit 14 is provided. The control station 3 includes a connection control unit 31 for controlling line connection and a processing unit 3
2, the processing unit 32 is notified from the station-side computing means that performs the same computation using the same random number as that of the mobile terminal 1 connected to the call, and the mobile terminal 1 corresponding to the computation result. As a control program, there is provided an authentication means for comparing the calculation result with each other and determining that the mobile terminal 1 is a legitimate terminal when they are identical.

The feature of this embodiment is that the control station 3 stores the calculation result at the time of the previous authentication for each mobile terminal 1 and the stored calculation at the time of the next authentication of the mobile terminal 1. The database 33 is provided as means for outputting the result to the processing section 32 as a random number, and the random number generation section 34 is provided as means for generating a new random number when the mobile terminal 1 is determined to be invalid. Means for outputting to the computing means and notifying the corresponding mobile terminal 1 are provided as a control program of the processing unit 32, and the mobile terminal 1 is provided with the memory 15 as means for storing the computation result at the time of the previous authentication, and the storage thereof. The means for using the calculated result as the input of the calculating unit 14 first and then receiving the new random number from the control station 3 as the input of the calculating unit 14 is calculated. In that it comprises as a 14 control program.

A method of authenticating the mobile terminal 1 will be described by taking the case of location registration as an example.

FIG. 2 shows a normal position registration sequence, and FIG. 3 shows a sequence in the case where the sequence shown in FIG. 2 cannot be authenticated. Further, FIG. 4 shows the database 3
3 shows an example of data stored in FIG.

When the mobile terminal 1 moves to a new location registration zone, the transmission / reception unit 12 of the mobile terminal 1 captures the radio control channel from the radio base station 2 of that zone,
The control unit 13 controls the control station 3 to request location registration. Here, it is assumed that the function f1 (x) is assigned to the calculation unit 14 of the mobile terminal 1 as a calculation for authentication. Further, it is assumed that the memory 15 stores the calculation result when the previous authentication is performed. When the controller 13 knows that the new location registration zone has been reached, the controller 14
The calculation f1 (x) is executed using the previous calculation result stored in the memory 15. The result of this calculation f1 (x) is set to, for example, “1234567”. The control unit 13 and this calculation result and its own terminal number, for example, “1234”
Then, if necessary, a position registration request signal is generated from the new position registration zone number and is transmitted from the transmission / reception unit 12 to the wireless control channel. This position registration request signal is sent to the control station 3 via the radio base station 2.

When the processing unit 32 of the control station 3 receives this position registration request signal, it accesses the database 33, and from the column of the terminal number "1234" of the mobile terminal 1, the corresponding arithmetic expression f1 (x), Previous calculation result "15962
48 ". Next, the processing unit 32 executes the operation f1 (x) based on the previous operation result “1596248”, and when the result is the same as the operation result “12344567” sent from the mobile terminal 1, The mobile terminal 1
If it is confirmed that is the correct terminal, the location registration acceptance signal is sent to the mobile terminal 1. Also, on the other hand,
A new calculation result “123456” is displayed in the previous calculation result column corresponding to the terminal number “1234” in the database 33.
Write "7". By doing so, it is not necessary to send a random number for calculation to the mobile terminal 1 for each call.

When the calculation result sent from the mobile terminal 1 is different from the value calculated by the processing unit 32, the processing unit 32 sends to the mobile terminal 1 not the position registration acceptance signal but the authentication re-request signal. A random number value from the random number generator 34 is added to this signal. In the mobile terminal 1 which has received this authentication re-request signal by the transmission / reception unit 12, the transmitted random number is input to the calculation unit 14, and the calculation result is transmitted from the transmission / reception unit 12 as an authentication response. Also in the control station 3,
Based on the random number sent to the mobile terminal 1 by the processing unit 32,
The calculation assigned to the mobile terminal 1 is performed. And
The calculation result is compared with the calculation result of the authentication response signal sent from the mobile terminal 1, and if they match, the mobile terminal 1
The position registration acceptance signal is returned to and the calculation result is stored in the database. When the position registration request signal is returned, the mobile terminal 1 also stores the calculation result sent in the authentication response in the memory 15 and uses it for the next authentication.

As described above, when the processing amount and the control channel traffic are usually reduced by the simplified sequence shown in FIG. 2 and the stored operation result deviates from the correct value due to some accident, It can be recovered by the sequence shown in 3.

FIG. 5 shows a control flow of the processing unit 32.

Although the location registration procedure has been described as an example in the above embodiments, the method of the present invention can be similarly applied to the authentication required for normal call processing such as call origination, call termination, and channel switching. . Further, in the above embodiment, the case where the calculation result is held until the next call is described as performing authentication for each call connection. However, for example, when performing authentication at the time of channel switching, only during call communication. It is also possible to retain the calculation result only in.

[0019]

As described above, the mobile terminal authentication method and the mobile communication device of the present invention can reduce the number of signals for authentication required for each call and also reduce the processing load for authentication. For example, if location registration occurs frequently,
The number of signals can be reduced to almost half. Further, the control station does not need to generate a random number for authentication, and the transmission procedure can be reduced. Therefore, the control station can be made economical, and the authentication processing time can be shortened to operate efficiently.

[Brief description of drawings]

FIG. 1 is a block diagram showing a mobile communication device according to an embodiment of the present invention.

FIG. 2 is a diagram showing a position registration sequence during normal operation.

FIG. 3 is a diagram showing a sequence in the case where the sequence shown in FIG. 2 fails to be authenticated.

FIG. 4 is a diagram showing an example of data stored in a database.

FIG. 5 is a diagram showing a flow of control by a processing unit.

[Explanation of symbols]

 1 mobile terminal 2 radio base station 3 control station 11 input / output unit 12 transmission / reception unit 13 control unit 14 arithmetic unit 31 connection control unit 32 processing unit 33 database 34 random number generation unit

Claims (3)

[Claims] 1. A mobile terminal and a control station both connected to a call perform an operation assigned to the mobile terminal, and the operation result is notified from the mobile terminal to the control station. In the authentication method of a mobile terminal that determines that the mobile terminal is a valid terminal when the results are the same, in both the mobile terminal and the control station, the calculation at the time of authentication is performed based on the result of the previous connection control. A method for authenticating a mobile terminal, which is characterized by performing. 2. When the calculation result notified from the mobile terminal is different from the calculation result of its own station, the control station newly generates a random number to notify the mobile station and performs the calculation based on the random number. The mobile station receiving a random number from the control station performs the calculation based on the random number and notifies the control station of the result, and when the control station has the same calculation result based on the random number, The method for authenticating a mobile terminal according to claim 1, wherein the mobile terminal is determined to be an authorized terminal. 3. One or more mobile terminals to which different operations are assigned, and a control station for determining whether the call-connected mobile terminals are legitimate terminals, wherein each of the one or more mobile terminals respectively comprises: It includes a terminal-side arithmetic means for performing the arithmetic operation based on the inputted random number, and means for notifying the control station of the arithmetic result, wherein the control station uses the same random number as that of the call-connected mobile terminal. The station-side computing means that performs the same computation and the computation result by this station-side computing means are compared with the computation result notified from the corresponding mobile terminal, and when they are the same, the mobile terminal is a valid terminal. In a mobile communication device including an authenticating unit that determines that there is, the control station stores the operation result at the time of the previous authentication for each mobile terminal, and at the time of the next authentication of the mobile terminal, the stored operation result is a random number. As Means for outputting to the station side arithmetic means, means for generating a new random number when the mobile terminal is judged not to be valid by the authentication means, and outputting and outputting the new random number to the station side arithmetic means And a means for notifying the mobile terminal, wherein each of the one or more mobile terminals stores the operation result at the time of the previous authentication, and the stored operation result is first input to the terminal side operation means. The mobile communication device further comprises means for receiving a new random number from the control station as an input to the terminal side arithmetic means.