JPH08242488A - Mobile communication system - Google Patents

Abstract

PURPOSE: To instantaneously complete the authentication after the paging by performing simultaneously these authentication and paging, to release the radio resources, and to attain the effective management of the radio resources. CONSTITUTION: In a paging state of a mobile terminal 3, a paging device 11 sends the random numbers of a random number generation device 13 to the terminal 3 together with a paging signal. The terminal 3 extracts a random number, and a paging answer device 31 calculates the authentication information received from a terminal information storage 33 and the extracted random number through an authentication arithmetic unit 35. Then the device 31 adds the arithmetic result into paging answer signal to send them to a communication network 1 and extracts the authentication arithmetic result. At the same time, the device 11 sends the authentication information obtained from a terminal information storage 17 to an authentication arithmetic unit 19 together with the random number via a terminal information retrieval device 15 to obtain again the authentication arithmetic result. This arithmetic result is compared with the extracted authentication arithmetic result for decision of the correctness of the terminal 3. Thereby, the reserved radio resources can be instantaneously released after the paging and before the transmission/reception of various signals when a wrong mobile terminal receives an incoming call.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a mobile communication system using a paging system.

[0002]

2. Description of the Related Art Generally, when there is an incoming call in mobile communication, paging is performed to identify the position of a moving called terminal. That is, in the specific location registration area, only the mobile terminals that broadcast a signal having information identifying the receiving terminal as an information element from the network and judge that the broadcasted information is their own identification information To the network and report the location of the mobile terminal itself.

On the other hand, the network authenticates the mobile terminal in order to check the legitimacy of the responding mobile terminal, specifically to identify a valid user and prevent illegal use. Send a request signal. The mobile terminal receiving this authentication request signal creates a response using the authentication information of the mobile terminal itself, and returns an authentication response signal to the network. The network judges the legitimacy of this mobile terminal by comparing the content of this authentication response signal with the content expected by the network itself. if,
Here, for example, if the mobile terminal is illegal, the authentication will not be completed correctly because it does not have an authentication response function or the ability to generate an authentication response expected by the network because it does not have valid authentication information. After that, access to the network is restricted. On the other hand, if the mobile terminal is legitimate, the authentication will be completed correctly and access to the network will progress.

The above-mentioned authentication procedure will be specifically described below with reference to FIG. 3 by taking a case of using a secret key encryption algorithm as an example.

First, the random number for authentication generated by the random number generator 113 in the network is transmitted / received by the transmitter / receiver / comparator 111 including a transmitter / receiver and a comparator to the mobile terminal 1 as a destination terminal.
03, and is received by the transmission / reception device 131 in this mobile terminal 103. The transmission / reception device 131 uses this and the secret key obtained from the secret key storage device 133.
Send to 35. The authentication calculation device 135 outputs the authentication calculation result and sends it to the communication network 101 via the transmission / reception device 131.

In the network 101, the authentication calculation result from the mobile terminal 103 is received via the transmission / reception / comparison device 111. The transmission / reception / comparison device 111 is a secret key search device 115.
Is requested to obtain the private key of the mobile terminal 103. The private key search device 115 sends the private key obtained from the private key storage device 117 to the transmission / reception / comparison device 111. The transmission / reception / comparison device 111 sends this secret key to the authentication operation device 119 together with the random number for authentication previously generated by the random number generator 113. The authentication calculation device 119 transmits / receives the authentication calculation result to the comparison / comparison device 1
Send to 11. The transmission / reception / comparison device 111 compares this authentication calculation result with the authentication calculation result obtained from the mobile terminal 103. If the two authentication calculation results match, authentication is possible, and if they do not match, authentication is not possible.

[0007] Next, as an example of a communication procedure for receiving an incoming call, the Japanese standard mobile communication standard PHS (Personal Handy-phone S
Figure 4 shows the procedure for ystem) (for public use).

As shown in FIG. 4, first, the communication network 101 requests the mobile terminal 103 for paging (step S1).
01) is performed. Next, the mobile terminal 103 makes a link channel establishment request (step S103), and link channel allocation (step S105) is performed. Hereinafter, after a sequential paging response (step S107), predetermined signal transmission / reception (SETUP, CALLPR) is performed in step S109.
OC, definition information request, definition information response, RT function request, R
T function request response, secret key setting, MM function request, MM function request response). Then, the authentication is further performed by the authentication request including the authentication random number (step S111) and the authentication response including the authentication calculation result (step S113).

Therefore, if the unauthorized mobile terminal responds to the paging, the wireless resource is unnecessarily reserved during the signal transmission / reception until the authentication is completed, although the wireless resource must be released eventually. Will be.

[0010]

As described above, in the conventional mobile communication system, when the incoming call is received, the wireless resource must be reserved until the authentication is completed. Therefore, the wireless resource is used. Not efficient.

The present invention has been made in view of the above problems, and an object of the present invention is to provide a mobile communication system capable of improving the use efficiency of limited radio resources and performing efficient radio resource management.

[0012]

In order to achieve the above object, the first invention of the present application is that the network sends a random number for authenticating the mobile terminal in the paging signal to the mobile terminal, and the mobile terminal transmits the random number. The first authentication operation result of the random number in the paging signal and the authentication information is included in the paging response signal and transmitted to the network. Further, in the network, the first authentication operation result in the paging response signal is transmitted.
The gist is to judge the validity of the responding mobile terminal by comparing the authentication calculation result of 1) with the second authentication calculation result generated in the network.

A second invention of the present application is to provide a random number generating means for generating a random number for authenticating a mobile terminal, an in-network storing means for storing authentication information for each terminal, and an in-network storage in the network. Means for performing an authentication operation using the authentication information stored in the means and the random number generated by the random number generating means to obtain a second authentication operation result; and a paging signal generated by the random number generating means. And a paging means for judging the legitimacy of the responding mobile terminal by comparing the first authentication operation result in the paging response signal from the mobile terminal with the second authentication operation result. , Inside the mobile terminal, which stores the authentication information of the terminal itself, and inside the terminal which performs the authentication calculation by using the authentication information of the terminal and the random number in the paging signal stored in the internal storage means Computing means and net When the identification information in the paging signal and the identification information of the own terminal match, the paging response is the first authentication operation result obtained by the in-terminal operation means performing the authentication operation using the random number in the paging signal. The gist of the present invention is to have a paging response means for transmitting to the network by including it in a signal.

[0014]

In the mobile communication system according to the first aspect of the present invention, the network first sends a random number for authenticating the mobile terminal in the paging signal and sends it to the mobile terminal. Authentication calculation is performed with the authentication information of the mobile terminal, and the calculation result is included in the paging response signal as the first authentication calculation result and sent to the network. Further, the network compares the first authentication operation result in the paging response signal with the second authentication operation result generated in the network to judge the validity of the responding mobile terminal at the same time as paging.

In the mobile communication system according to the second invention of the present application, the paging means in the network first includes the random number generated by the random number generating means in the paging signal and sends the paging signal to the mobile terminal.

Upon receipt of this paging signal, the in-terminal arithmetic means of the mobile terminal performs the authentication operation using the authentication information of the terminal itself stored in the in-terminal storage means and the random number in the paging signal from the network.

The paging response means in the mobile terminal, when the identification information in the paging signal from the network coincides with the identification information of the self terminal, the in-terminal arithmetic means uses the random number in the paging signal to perform the authentication operation. The first authentication calculation result obtained by performing the above is included in the paging response signal and transmitted to the network.

The in-network operation means in the network performs authentication operation using the authentication information for each terminal stored in the in-network storage means and the random number for authentication generated by the random number generation means, and the second operation is performed. Obtain the authentication calculation result. Furthermore, the paging means in the network is
The validity of the responding mobile terminal is judged by comparing the first authentication operation result in the paging response signal from the mobile terminal with the second authentication operation result. As a result, the legitimacy of the mobile terminal is judged simultaneously with paging.

[0019]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a mobile communication system according to the present invention.

As shown in FIG. 1, the communication network 1 includes a paging device 11, a random number generator 13 connected to the paging device 11, a terminal information retrieval device 15, an authentication operation device 19, and an authentication operation device 19. It is configured by the connected terminal information storage device 17. In addition, the mobile terminal 3
It is configured by a paging response device 31 connected to the paging device 11 of the communication network 1 via a wireless line, and a terminal information storage device 33 and an authentication calculation device 35 connected to the paging response device 31.

Next, referring to FIG. 1, the operation of the present embodiment will be specifically described along the authentication procedure. First, the mobile terminal 3
Paging device 1 in communication network 1 for paging
1 obtains a random number generated by the random number generator 13 and includes this random number in the paging signal and sends it to the destination mobile terminal 3.

In the mobile terminal 3, first, the paging signal is received and the random number in the paging signal is extracted, and the authentication information obtained by the paging response device 31 from the terminal information storage device 33 and the extracted random number in the paging signal. The result is sent to the authentication operation device 35, and the authentication operation result as the first authentication operation result obtained by the authentication operation device 35 is included in the paging response signal and sent out to the communication network 1.

The communication network 1 receives the paging response signal and extracts the authentication calculation result included in the paging response signal. On the other hand, the paging device 11 requests the terminal information search device 15 to acquire the authentication information of the mobile terminal, and the authentication information obtained by the terminal information search device 15 from the terminal information storage device 17 is sent to the authentication operation device 19 together with the random number. The authenticity of the mobile terminal 3 is judged by comparing the authentication calculation result as the second authentication calculation result obtained by sending with the authentication calculation result as the extracted first authentication calculation result.

Next, with reference to FIG. 2, an example of the PHS (public) call receiving procedure to which the method of the present invention is applied will be described.
Unlike FIG. 4, in FIG. 2, paging and authentication are performed simultaneously. That is, first, in step S1, the communication network 1 makes a paging request to the mobile terminal 3. In response to this paging request, the mobile terminal 3 makes a paging response in step S3. After this paging, a predetermined signal transmission / reception (link channel establishment request (step S5
1), link channel allocation (step S53), SET
UP, CALL PROC, definition information request, definition information response, RT function request, RT function request response, secret key setting, M
The M function request and the MM function request response (step S55) are performed.

Therefore, if there is an incoming call to an unauthorized mobile terminal, it is possible to immediately release the held wireless resource after paging without waiting for various signal transmission / reception.

In the above embodiments, the case where the present invention is applied to PHS has been described as an example, but the present invention is not limited to this, and for example, appropriate paging such as cellular communication, pager (so-called pager), etc. The present invention can be applied to mobile communication systems.

[0027]

As described above, according to the present invention, since paging and authentication are performed at the same time, authentication is completed immediately after paging, and it is possible to judge the release of wireless resources. As a result, it is possible to effectively manage the wireless resources.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an embodiment according to the present invention.

FIG. 2 is a diagram showing an example of an incoming communication procedure of PHS (for public) to which the method of the present invention is applied.

FIG. 3 is a block diagram showing a configuration when performing authentication using a secret key encryption algorithm.

FIG. 4 is a diagram showing an example of an incoming communication procedure of PHS (for public).

[Explanation of symbols]

 1 Communication Network 3 Mobile Terminal 11 Paging Device 13 Random Number Generator 15 Terminal Information Retrieval Device 17, 33 Terminal Information Storage Device 19 Authentication Calculation Device 31 Paging Response Device 35 Authentication Calculation Device

Claims (2)

[Claims] 1. The network sends the mobile terminal a random number for authenticating the mobile terminal in a paging signal, and the mobile terminal sends a first authentication operation result of the random number in the paging signal and the authentication information. Is sent to the network by including it in the paging response signal, and the network further compares the result of the first authentication operation in the paging response signal with the result of the second authentication operation generated in the network, thereby validating the response mobile terminal. A mobile communication system characterized by determining the sex. 2. A random number generation means for generating a random number for authenticating a mobile terminal, a network storage means for storing authentication information for each terminal, and authentication information stored in the network storage means in the network. And an in-network arithmetic operation means for performing an authentication operation using the random number generated by the random number generation means to obtain a second authentication operation result,
The responding mobile terminal is transmitted by including the random number generated by the random number generating means in the paging signal and comparing the first authentication operation result in the paging response signal from the mobile terminal with the second authentication operation result. A paging means for determining the validity of the terminal, and a mobile terminal stores in-terminal storage means for storing authentication information of its own terminal, and the authentication information of the terminal and paging signals stored in the in-terminal storage means. When the identification information in the paging signal from the network and the identification information of the own terminal match, the in-terminal operation means for performing the authentication operation using the random number and the in-terminal operation means by using the random number in the paging signal And a paging response means for transmitting the first authentication calculation result obtained by performing the authentication calculation to the network by including it in a paging response signal.