DEVICE, USE AND PROCEDURE TO IDENTIFY COMMUNICATING PARTIES IN A TELECOMMUNICATION SYSTEM

Abstract: Device at telecommunication system, to identify communicating parties including a telecommunication network for transmission of information, and a communication transmitter and a communication receiver, at which active cards can be applied to the communication transmission equipment and/or to the communication receiver equipment to identify the communication transmitter and/or the communication receiver by card specific information being transmitted from an active card via a card reader to an identification device, at which the identification device is located on the communication path between the communication transmitter and the communication receiver. The invention also describes a use and procedure at said device.

Description: Device, use and procedure to identify communicating parties in a telecommunication system. TECHNICAL FIELD The present invention relates to a device and procedure to identify communicating parties in a telecommunication system at which active cards cooperates with the telecommunication equipment at one or both parties at the communication. PRIOR ART Normally an information transmission via the telecommunication network can come about in that way that a communication transmitter A which intends to communicate with a card supplier or service supplier B connects an active card to his/her telecommunication equipment. The active card is also called smart card, or intelligent card, and usually contains an integrated circuit with memory and processor. After that this person keys his/her secret personal identity number (PIN-code) to the communication equipment which includes reader for active cards, at which communication is performeed between the card and the owner. The card then checks that it is used by the person who is authorized to use the card. Then the communication transmitter A keys the telephone number to the card supplier B with whom he/she intends to exchange information. The card supplier B then wants to make sure that it is an authorized communication transmitter that wants admission. This is made by that a digitally secured, encrypted string of information which is stored in the active card is transmitted to the card supplier, which has the encryption key to this information. By that the card supplier can decide whether the communication transmitter is authorized. This procedure means that we now has secure connection between a communication transmitter and a card supplier. After that, encrypted information according to some encryption method can be transmitted between these parties. DESCRIPTION OF THE INVENTION TECHNICAL PROBLEM Transmission of delicate information via the telephone network requires that the information is protected against unauthorized influence, recording and distorsion by persons who illegally get access to the network. Furthermore is required that those who communicate via the network can be sure to decide that the person with whom they intend to communicate really is the person he/she states himself/herself to be. At communication between two communicating parties active cards are often utilized. The active cards usually include the following functions: - Verification of owner. Identification: Identity check. Support for encryption such as ability to perform active operations in connection with signing of information. The function for identification implies that the card supplier, which often is a service supplier, checks the identity by using a secret key which he/she knows. This means that customers to a card supplier normally cannot use the same card to communicate with another card supplier (service supplier). However, the other service supplier can obtain the secret key by some type of agreement, and in the same way as above, the identity in these cases can be checked. The aim with the invention consequently is to effect one in relation to prior art improved and simplified communication system which allows a simple and secure identification of communicating parties before one for instance transmits encrypted information. Another aim with the invention is to give support for different encryption procedures. THE SOLUTION The above mentioned aims are achieved by the invention showing the in the enclosed patent claims indicated characteristics. ADVANTAGES By the invention a number of advantages are achieved. In the first place a simpler and neater way to identify telecommunicating parties is obtained. Further the invention leads to that card manufacturers and service suppliers can utilize a general identification platform which is located between transmitter and receiver. One more advantage is that the manufacturing of active cards can be simplified because it is possible to exclude functionality in the card for check of identification. This also makes them cheaper to manufacture. Further the identification is not based on subscriber number, which implies that it is possible to be identified from different telecommunication equipments. Further the invention implies that all types of telecommunication equipments obtain, by the invention, possibility to identify its opposite party. Another advantage is that service suppliers get possibility to create active cards which can be used towards different types of service suppliers. DESCRIPTION OF DRAWINGS The invention will now be described by means of not restricted examples of embodiment and with references to enclosed, schematically performed drawings. In the drawings; Figure 1 shows a communications system according to the invention with identification of one party. Figure 2 shows a communications system according to the invention with identification of both parties. DETAILED DESCRIPTION The present way of identifying transmitters and receivers implies that the function check and the information which is necessary for this control only exist on the transmitter side and the receiver side. This results in that each communication receiver has devices for check of authorization of the active card of the communication transmitter before the encrypted information can be transmitted. In order to make the invention clear, some examples of how the invention is realized is now shown. Example 1. (with reference to Figure 1) The receiver subscribes to identification service. A person A intends to communicate with a person B via the public telecommunication network. The person B, who can be a service supplier, wants to be perfectly sure that the person A is the person he/she states him/herself to be. The person A has to his assistance a telephone, fax, personal computer or the like, and a reader for active cards. The reader for active cards can be integrated with the communication equipment, or be a stand alone unit. The card is applied to the reader at which the card owner is asked by the reader to key his personal identification number (PlN-code) . The keying of the PIN-code aims at deciding whether person A has authorization to use the card. After that a telephone number which the telecommunication operator has provided to the person B is keyed to make possible for the person B to utilize a special identification service. If the card owner has authorization to use the card, the card automatically transmits a digitally secured string of information to a node in the network, which has a device with functionality to identify the card. The node has the information to decide from which person this string of information is coming. When the identity has been checked, information about this is transmitted to the person B, at which the call is connected. Example 2 (with reference to Figure 2) Both the transmitter and the receiver subscribe to identification service. A person A intends to communicate with a person B via the public telecommunication network. The person B, who can be a service supplier, wants to be perfectly sure that the person A is the one he/she states him/herself to be, and the person A wants to be sure that he/she has contact with the right receiver. A person A calls a person B in the same way as above and identifies himself/herself to the card. If the card owner has authorization to use the card, the card automatically transmits a digitally secured string of information to a node in the network C, which has a device with functionality to identify the card. After that the call is forwarded to person B, who gets a voice message or a message on one to the telephone connected display that an identification call is coming. Person B then applies his/her active card to his/her reader with indication of PIN-code, at which the card automatically transmits a digitally secured string of information to the node, which verifies that the card owner is authorized. A connection is then made by the network, at which person A and person B has a connection with checked identities of respective party. By this check the possibility for these persons is now created to transmit information to each other where the network has checked the identity of both. The persons A and B now can transmit delicate information to each other. In the cases when these persons want to transmit encrypted information via the network, there is possibility to utilize a special encryption function. In principle it is possible to encrypt one's information in two different ways: Symmetric respective asymmetric. The classic symmetric method is based on that transmitter and receiver use the same encryption key to encrypt respective decrypt a message which of course must be kept secret. The disadvantage of this method is the handling of all keys. Among other things for this reason there have arisen so called asymmetric encryption methods. Here are instead utilized two different keys, of which the "private" key is only known to the owner, and the other, the "public" key has been made public. In this way anyone can encrypt a message with the public key, whereas only the real receiver, the owner of the private key, can decrypt and read the message. The assymetric encryption is based on that the two different keys have a unique relation (by a mathematical function). But in contrast to the symmetric case, it must be difficult to calculate. The known key shall certainly not be possible to use to calculate what the private key looks like. Due to the large and extensive calculations the method requires, even if one knows the key, it will take a long time to decrypt long messages. One way to get around the problem of calculation is to combine the two methods by transmitting a short, asymmetrically encrypted message which includes the key of a symmetric encryption. The long message is then encrypted by a symmetric algorithm and can be unlocked by means of the enclosed key. If one then changes key, by for instance making the active card generate new keys at each transaction, one further increases the security. Decryption with the public key can be used to create electronic seals or signatures. Such a seal contains a check sum calculated on the basis of the contents in a message. This will on the one hand show that the key owner is the originator of the message, and on the other the check sum (if it is correct) confirms that nothing has been changed in the message since it left the originator. By the in the network located identification device, information about the public keys which corresponds to each card is stored, which contain support functionality for encryption. These keys are specific for each card and public for persons who intend to transmit encrypted information according to asymmetric encryption. The invention is not restricted to the shown examples of embodiment, but can be varied in just any way within the frame of the idea of the invention, such as it is defined in the following patent claims.

Claims: PATENT CLAIMS 1. Device at telecommunication system to identify communicating parties, including a telecommunication network for transmission of information, and a communication transmitter and a communication receiver, at which active cards can be applied to the communication transmitter equipment and/or to the communication receiver equipment to identify the communication transmitter and/or the communication receiver by card specific information being transmitted from an active card via a card reader to an identifying device, c h a r a c t e r i z e d in that the identifying device is located on the communication path between the communication transmitter and the communication receiver. 2. Device at telecommunication system according to patent claim 1, c h a r a c t e r i z e d in that the identifying device has functionality to identify the active card of the transmitting party and/or the card of the receiving party. 3. Device at telecommunication system according to patent claim 1, c h a r a c t e r i z e d in that the identifying device is located in a node in the network. 4. Device at telecommunication system according to any of the previous patent claims, c h a r a c t e r i z e d in that the identifying device includes a storing device for encryption keys which are specific for each card. 5. Device at telecommunication system including a telecommunication network and one or more transmitters, and one or more receivers, at which both transmitters and receivers include functionality to read active cards, c h a r a c t e r i z e d in that the identifying function of the active cards is placed in an identifying device which is located in a node in the telecommunication network. 6. Use of active cards in connection with identification of communicating parties in a telecommunication network, at which one in the network existing identifying function cooperates with the cards to achieve an identification of the communicating parties. 7. Procedure to identify communicating parties in a telecommunication system, c h a r a c t e r i z e d in that an active card is applied to a card reader, at which the card owner is asked by the reader to key his/her personal PIN-code, at which a telephone number is keyed which the telecommunication operator has provided to the person B to make possible for the person B to utilize a special identification service, and if the card owner is authorized to use the card, the card automatically transmits a digitally secured string of information to a node in the network which has a device with functionality to identify the card, at which the node has information to decide from which person this string of information is coming, and when the identity is checked, information about this is transmitted to the person B, at which the call will be connected. 8. Procedure to identify communicating parties in a telecommunication system, c h a r a c t e r i z e d in that an active card is applied to a card reader, at which the card owner is asked by the reader to key his/her personal PIN-code at which, and if the card owner is authorized to use the card, the card automatically transmits a digitally secured string of information to a node in the network which has a device with functionality to identify the card, at which the node has information to decide from which person this string of information is coming, at which the call is forwarded to person B who gets a voice message or a message on one to the telephone connected display that an identification call is coming, at which person B applies his/her active card to his/her reader at indicating his/her PIN-code, at which the card automatically transmits a digitally secured string of information to the node, which verifies that the card owner is authorized, at which a connection is made by the network, at which person A and person B has a connection with checked identities of respective party. 9. Procedure accordning to patent claim 7, c h a r a c t e r i z e d in that, if authorization does not exist, the call is connected to another, alternative telephone number to which person B subscribes.

Inventors: FRIDH KURT, OHLSSON HANS, FRIDH, KURT, OHLSSON, HANS
Applicants: FRIDH KURT, OHLSSON HANS, TELIA AB, FRIDH, KURT, OHLSSON, HANS
Application year: 1996
Main classification: H04Q7
IPC codes: H04L9, H04L29, H04M1, H04Q3