Patent ID: 8112065

Claim:
A method of mutual authentication in a mobile network, the method comprising: generating at least one service ticket and session key corresponding to a mobile station in accordance with an authentication data request for the mobile station; encrypting the service ticket and the session key by using a user security key pre-assigned in accordance with the mobile station; sending the encrypted service ticket and session key to the mobile station by using a control message; and authenticating the mobile station by analyzing user mutual authentication information received from the mobile station, wherein the user mutual authentication information includes the service ticket, an unencrypted random value (nonce) and a random value (E SK (nonce)) encrypted with the session key (SK); wherein the step of authenticating comprises: obtaining the session key from the service ticket; decoding the encrypted random value by using the obtained session key; and comparing whether the unencrypted random value is identical to the decoded random value.