Source: https://patents.google.com/patent/US20070140196
Timestamp: 2018-04-26 19:29:04
Document Index: 375837642

Matched Legal Cases: ['art 110', 'art 120', 'art 120', 'art 130', 'art 130', 'art 150', 'art 140', 'art 160', 'art 160', 'art 210', 'art 220', 'art 220', 'art 230', 'art 220', 'art 230', 'art 220', 'art 240', 'art 210', 'art 210', 'art 220', 'art 240', 'art 110', 'art 210', 'art 130', 'art 230', 'art 160', 'art 110', 'art 210', 'art 130', 'art 170', 'art 170', 'art 170', 'art 170', 'art 260', 'art 170', 'art 170', 'art 260', 'art 260', 'art 110', 'art 210', 'art 170', 'art 260', 'art 170', 'art 170', 'art 260', 'art 170']

US20070140196A1 - System for preventing IP allocation to cloned mobile communication terminal - Google Patents
System for preventing IP allocation to cloned mobile communication terminal Download PDF
US20070140196A1
US20070140196A1 US11580741 US58074106A US2007140196A1 US 20070140196 A1 US20070140196 A1 US 20070140196A1 US 11580741 US11580741 US 11580741 US 58074106 A US58074106 A US 58074106A US 2007140196 A1 US2007140196 A1 US 2007140196A1
US11580741
US7636845B2 (en )
Yun-sik Jeon
The present invention provides a system for preventing IP (Internet Protocol) allocation to a cloned mobile communication terminal by generating a hash value required for user authentication during a mobile IP registration process from a user key known only to a user and registering the hash value in a home agent of a mobile communication system so that a fraudulent user cannot copy the hash value required for authentication during a mobile IP access process to the fraudulent user's mobile communication terminal.
The mobile communication terminal may include a mobile communication terminal processing module including: a storage part storing a first variable having network access identification information, a second variable having a hash value, and a third variable set to ‘TRUE’ or ‘FALSE’ according to whether or not the hash value is registered; an initialization part setting the first and second variables to ‘NULL’ and setting the third variable to ‘FALSE’ when the ESN is input; a user key input part providing UI (User Interface) to a user and receiving a user key from the user through the UI when the first and second variables are set to ‘NULL’; a hash value generation part generating a hash value by hashing the user key inputted by the user key input part and the ESN with a hash function, and setting the first and second variables to the generated hash value; an IP registration request part transmitting an IP registration request message (RRQ) including the first and second variables to the HA; and a hash value registration check part storing network access identification information, which is predetermined between the mobile communication terminal and the HA, in the first variable and changing the third variable to ‘TRUE’ when an IP registration reply message (RRP) transmitted from the HA is a message indicating ‘registration of hash value’.
The HA may include an HA processing module including: a storage part storing a fourth variable having network access identification information and a fifth variable having a hash value; a hash value inspection part inspecting the fifth variable when the IP registration request message is received from the mobile communication terminal; a hash value registration part setting the first variable included in the IP registration request message to the fifth variable when the fifth variable is determined to be ‘NULL’ by the hash value inspection part and transmitting an IP registration reply message indicating ‘registration of hash value’ to the mobile communication terminal; a cloned mobile communication terminal determination part comparing the first variable included in the IP registration request message and the fourth variable stored in the storage part with the second variable included in the IP registration request message and the fifth variable stored in the storage part, respectively, when the fifth variable is not determined to be ‘NULL’ by the hash value inspection part, and determining the mobile communication terminal as normal if the compared variables match, or determining the mobile communication terminal as cloned if the compared variables do not match; and an IP registration processing part performing an IP registration process for the mobile communication terminal if the mobile communication terminal is determined as normal, or not performing an IP registration process for the mobile communication terminal if the mobile communication terminal is determined as cloned.
The mobile communication terminal processing module may further include a hash value processing part that requests a change of a hash value at the hash value change request of a user when the third variable is determined to be ‘TRUE’ by providing UI (User Interface) to the user, receiving a registered user key from the user through the UI, comparing the inputted user key with the second variable, setting the first variable to the second variable if the user key and the second variable match, and transmitting the IP registration request message including the first and second variables to the HA of the mobile communication system.
The HA processing module may further include a hash value change part changing the fifth variable to ‘NULL’ when the first variable included in the IP registration request message received from the mobile communication terminal and the fifth variable match, and transmitting an IP registration reply message indicating ‘approval of change of hash value’ to the mobile communication terminal.
The hash value processing part may further provide the UI to the user and receive a new user key from the user through the UI according to the IP registration reply message indicating ‘approval of change of hash value’ transmitted from the HA, generate a hash value by hashing the user key and the ESN with the hash function, set the first and second variables to the generated hash value, and set the third variable to ‘FALSE’.
The hash value processing part may further transmit the IP registration request message including the first and second variables to the HA, and, if the IP registration reply message transmitted from the HA is a message indicating ‘registration of hash value’, store network access identification information, which is predetermined between the mobile communication terminal and the HA, in the first variable, and change the third variable to ‘TRUE’.
When the hash value change part receives the IP registration request message from the mobile communication terminal, the hash value change part may further inspect the fifth variable, set the first variable included in the IP registration request message to the fifth variable when the fifth variable is ‘NULL’, and transmit an IP registration reply message indicating ‘registration of hash value’ to the mobile communication terminal.
The storage part 110 stores a first variable (NAI: network access identification), which stores information concerning network access identification, a second variable (MASS: MN-AAA(HA) shared secret), which stores a hash value, and a third variable (Personal_Auth), which is set to ‘TRUE’ or ‘FALSE’ according to whether or not the hash value is registered.
A mobile communication terminal is initially configured by default such that the first and second variables are set to ‘NULL’ and the third variable is set to ‘FALSE’.
The initialization part 120 initializes the first and second variables to ‘NULL’ and the third variable to ‘FALSE’ when the ESN is input.
In more detail, when the ESN is newly recorded on the mobile communication terminal, the mobile communication terminal processing module 100 initializes the first and second variables to ‘NULL’ and the third variable to ‘FALSE’ by means of the initialization part 120.
When the first and second variables are ‘NULL’, the user key input part 130 provides user interface (UI) to a user so that the user can input a user key through the UI.
When the user attempts to access a network through the mobile communication terminal, the mobile communication terminal processing module 100 provides the UI to the user by means of the user key input part 130 and receives a user key from the user if the first and second variables are ‘NULL’, i.e., if the mobile communication terminal is newly purchased or the ESN is newly recorded on the mobile communication terminal.
In more detail, when the user attempts to access the network using the mobile communication terminal, the mobile communication terminal processing module 100 transmits the IP registration request message (RRQ) including the first and second variables to the HA of the mobile communication system by means of the IP registration request part 150 if the first and second variables are not ‘NULL’ or are newly set by the hash value generation part 140.
When an IP registration reply message (RRP) transmitted from the HA indicates ‘register hash value’, the hash value registration check part 160 stores network access identification information, which is predetermined between the mobile communication terminal and the HA, in the first variable and changes the third variable to ‘TRUE’.
When the user key is registered by the HA, the HA transmits the IP registration reply message (RRP) indicating ‘registration of hash value’ to the mobile communication terminal. When the IP registration reply message (RRP) is received, the hash value registration check part 160 of the mobile communication processing module 100 stores the network access identification information, which is predetermined between the mobile communication terminal and the HA, in the first variable and changes the third variable to ‘TRUE’. The network access identification information is information based on providers, for example, an IP address for providing a mobile network access service, such as ‘ESN@XXXX.com’.
When the user key is not registered, the fourth variable is set to predetermined network access identification information, for example, IP address for providing a mobile network access service, such as ‘ESN@XXXX.com’, and the fifth variable is set to ‘NULL’.
When the IP registration request message is received from the mobile communication terminal for network access, the HA processing module 200 inspects the fifth variable stored in the storage part 210 by means of the hash value inspection part 220 to check whether or not a hash value is registered. The fifth variable having ‘NULL’ implies that the hash value is not registered.
When the fifth value is determined by the hash value inspection part 220 to be ‘NULL’, the hash value registration part 230 sets the first variable included in the IP registration request message to the fifth value and transmits the IP registration reply message (RRP) indicating ‘registration of hash value’ to the mobile communication terminal.
If the fifth variable is determined by the hash value inspection part 220 to be ‘NULL’, i.e., if the hash value is not registered, the HA processing module 200 sets the first variable included in the IP registration request message (RRQ) to the fifth value by means of the hash value registration part 230, and transmits the IP registration reply message (RRP) indicating ‘registration of hash value’ to the mobile communication terminal.
When the fifth variable is not determined by the hash value inspection part 220 to be ‘NULL’, the cloned mobile communication terminal determination part 240 compares the first variable included in the IP registration request message and the fourth variable stored in the storage part 210 with the second variable included in the IP registration request message and the fifth variable stored in the storage part 210, respectively. If the variables match, the mobile communication terminal is determined as normal. If not, it is determined as cloned.
When the fifth variable is not determined by the hash value inspection part 220 to be ‘NULL’, i.e., when the hash value is registered, the cloned mobile communication terminal determination part 240 of the HA processing module 200 compares the first variable included in the IP registration request message and the fourth variable stored in the storage part with the second variable included in the IP registration request message and the fifth variable stored in the storage part, respectively. If the variables match, the mobile communication terminal is determined as normal. If not, it is determined as cloned.
A mobile communication terminal has the storage part 110 of the mobile communication terminal processing module 100, which stores first and second variables initially set to ‘NULL’ and a third variable initially set to ‘FALSE’. A fourth variable stored in the storage part 210 of the HA processing module 200 is set to predetermined network access identification information and a fifth variable is set to ‘NULL’.
In operation S110, when a user attempts to access a network using a new mobile communication terminal, the mobile communication terminal processing module 100 provides user interface (UI) through the user key input part 130 and receives a user key from the user through the UI since the first and second variables are ‘NULL’.
The fifth variable is determined to be ‘NULL’ in operation S140. In operation S150, the hash value registration part 230 of the HA processing module 200 sets the first variable included in the IP registration request message and transmits an IP registration reply message (RRP) indicating ‘registration of hash value’ to the mobile communication terminal.
In operation S160, when receiving the IP registration reply message indicating ‘register hash value’, the hash value registration check part 160 of the mobile communication terminal processing module 100 stores network access identification information, which is predetermined between the mobile communication terminal and the HA, in the first variable, and changes the third variable to ‘TRUE’, thereby completing a hash value registration process.
In a cloned mobile communication terminal, the storage part 110 of the mobile communication terminal processing module 100 stores first and second variables set to ‘NULL’, and a third variable set to ‘FALSE’. The storage part 210 of the HA processing module 200 stores a fourth variable set to predetermined network access identification information, and a fifth variable set to the hash value.
In operation S210, when the cloned mobile communication terminal accesses a network, the mobile communication terminal processing module 100 provides user interface (UI) by means of the user key input part 130 and receives a user key from the cloned mobile communication terminal through the UI since the first and second variables are ‘NULL’.
The hash value processing part 170 determines whether or not the third variable is ‘TRUE’ when a user requests a change of a hash value from the hash value processing part 170. If the third variable is ‘TRUE’, the hash value processing part 170 provides user interface (UI) to the user and receives a user key from the user through the UI. When the user key and the second variable match, the hash value processing part 170 sets the first variable to the second variable, transmits the IP registration request message (RRQ) including the first and second variables to the HA, and requests the HA to change the hash value.
When the first variable included in the IP registration request message received from the mobile communication terminal and the fifth variable match, the hash value change part 260 changes the fifth variable to ‘NULL’, and transmits an IP registration reply message (RRP) indicating ‘approval of change of hash value’ to the mobile communication terminal.
In another embodiment, according to the IP registration reply message (RRP) indicating ‘approval of change of hash value’ transmitted from the HA, the hash value processing part 170 further provides user interface (UI) to a user, receives a user key from the user through the UI, generates a hash value by hashing the user key and the ESN with a hash function, sets the first and second variables to the generated hash value, and sets the third variable to ‘FALSE’.
In another embodiment, the hash value processing part 170 further transmits the IP registration request message (RRQ) including the first and second variables to the HA of the mobile communication system, and, if the IP registration reply message (RRP) transmitted from the HA is a message indicating ‘register hash value’, stores network access identification information, which is determined between the mobile communication terminal and the HA, in the first variable, and changes the third variable to ‘TRUE’, thereby completing a new hash value registration process.
In another embodiment, when the hash value change part 260 receives the IP registration request message (RRQ) from the mobile communication terminal, the hash value change part 260 further inspects the fifth variable, and, if the fifth variable is ‘NULL’, sets the first variable included in the IP registration request message (RRQ) to the fifth variable, and transmits the IP registration reply message (RRP) indicating ‘registration of hash value’ to the mobile communication terminal.
Once a hash value is registered, the mobile communication terminal processing module 100 has a storage part 110 storing a first variable that is set to predetermined network access identification information, a second variable that is set to a hash value, and a third variable that is set to ‘TRUE’. The HA processing module 200 has a storage part 210 storing a fourth variable that is set to predetermined network access identification information, and a fifth variable that is set to a hash value.
In operation S320, since the third variable is set to ‘TRUE’, the mobile communication terminal processing module 100 provides user interface (UI) to the user and receives a user key from the user through the UI by means of the hash value processing part 170.
Since the fifth variable is set to the hash value, the first variable and the fifth variable match. Thus, in operation S350, the HA processing module 200 changes the fifth variable to ‘NULL’ by means of the hash value change part 260, and transmits the IP registration reply message (RRP) indicating ‘approval of change of hash value’ to the mobile communication terminal.
The mobile communication terminal processing module 100 receives the IP registration reply message (RRP) indicating ‘approval of change of hash value’ from the HA and performs by means of the hash value processing part 170 the same process as performed when the hash value is registered upon purchasing the mobile communication terminal.
That is, in operation S360, the hash value processing part 170 of the mobile communication terminal processing module 100 provides UI to a user, receives a user key from the user through the UI, generates a hash value by hashing the user key and the ESN with a hash function, sets the first and second variables to the generated hash value, and sets the third variable to ‘FALSE’.
In operation S380, when the IP registration request message (RRQ) including the first and second variables is received from the mobile communication terminal, the hash value change part 260 of the HA processing module 200 inspects the fifth variable, and, if the fifth variable is ‘NULL’, sets the first variable included in the IP registration request message to the fifth variable, and transmits the IP registration reply message (RRP) indicating ‘registration of hash value’ to the mobile communication terminal.
In operation S390, when the IP registration reply message indicating ‘registration of hash value’ is received from the HA, the hash value processing part 170 of the mobile communication terminal processing module 200 stores network access identification information, which is predetermined between the mobile communication terminal and the HA, in the first variable, and changes the third variable to ‘TRUE’, thereby completing registration of a new hash value.
a mobile communication terminal generating a hash value obtained by hashing a user key inputted by a user and an ESN (Electronic Serial Number) with a hash function, and transmitting the hash value to an HA (Home Agent) of a mobile communication system; and
an HA registering the hash value transmitted from the mobile communication terminal, comparing a hash value included in an IP registration request message (RRQ) with the registered hash value at the IP registration request of the mobile communication terminal, and performing an IP registration process if the compared values match.
2. The system of claim 1, wherein the mobile communication terminal includes a mobile communication terminal processing module comprising:
a storage part storing a first variable having network access identification information, a second variable having a hash value, and a third variable set to ‘TRUE’ or ‘FALSE’ according to whether or not the hash value is registered;
an initialization part setting the first and second variables to ‘NULL’ and setting the third variable to ‘FALSE’ when the ESN is input;
a user key input part providing UI (User Interface) to a user and receiving a user key from the user through the UI when the first and second variables are set to ‘NULL’;
a hash value generation part generating a hash value by hashing the user key inputted by the user key input part and the ESN with a hash function, and setting the first and second variables to the generated hash value;
an IP registration request part transmitting an IP registration request message (RRQ) including the first and second variables to the HA; and
a hash value registration check part storing network access identification information, which is predetermined between the mobile communication terminal and the HA, in the first variable and changing the third variable to ‘TRUE’ when an IP registration reply message (RRP) transmitted from the HA is a message indicating ‘registration of hash value’.
3. The system of claim 2, wherein the HA includes an HA processing module comprising:
a storage part storing a fourth variable having network access identification information and a fifth variable having a hash value;
a hash value inspection part inspecting the fifth variable when the IP registration request message is received from the mobile communication terminal;
a hash value registration part setting the first variable included in the IP registration request message to the fifth variable when the fifth variable is determined to be ‘NULL’ by the hash value inspection part and transmitting an IP registration reply message indicating ‘registration of hash value’ to the mobile communication terminal;
a cloned mobile communication terminal determination part comparing the first variable included in the IP registration request message and the fourth variable stored in the storage part with the second variable included in the IP registration request message and the fifth variable stored in the storage part, respectively, when the fifth variable is not determined to be ‘NULL’ by the hash value inspection part, and determining the mobile communication terminal as normal if the compared variables match, or determining the mobile communication terminal as cloned if the compared variables do not match; and
an IP registration processing part performing an IP registration process for the mobile communication terminal if the mobile communication terminal is determined as normal, or not performing an IP registration process for the mobile communication terminal if the mobile communication terminal is determined as cloned.
4. The system of claim 3, wherein the mobile communication terminal processing module further includes a hash value processing part that requests a change of a hash value at the hash value change request of a user when the third variable is determined to be ‘TRUE’ by providing UI (User Interface) to the user, receiving a registered user key from the user through the UI, comparing the inputted user key with the second variable, setting the first variable to the second variable if the user key and the second variable match, and transmitting the IP registration request message including the first and second variables to the HA of the mobile communication system.
US11580741 2005-12-15 2006-10-12 System for preventing IP allocation to cloned mobile communication terminal Active 2028-02-07 US7636845B2 (en)
KR10-2005-0123711 2005-12-15
KR20050123711A KR100755536B1 (en) 2005-12-15 2005-12-15 Prevention system for the IP allocation of a cloned mobile phone
US20070140196A1 true true US20070140196A1 (en) 2007-06-21
US7636845B2 US7636845B2 (en) 2009-12-22
ID=38173346
US11580741 Active 2028-02-07 US7636845B2 (en) 2005-12-15 2006-10-12 System for preventing IP allocation to cloned mobile communication terminal
US (1) US7636845B2 (en)
KR (1) KR100755536B1 (en)
KR100755536B1 (en) 2007-09-06 grant
KR20070063688A (en) 2007-06-20 application
US7636845B2 (en) 2009-12-22 grant
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:JEON, YUN-SIK;KIM, YOUNG-ROK;REEL/FRAME:018417/0726
Free format text: MERGER;ASSIGNOR:PANTECH & CURITEL COMMUNICATIONS, INC.;REEL/FRAME:028737/0856