Apple, Inc. v. Motorola, Inc. et al

Filing 107

Declaration of Winslow B. Taub filed by Plaintiffs Apple, Inc., Next Softward, Inc. re: 90 Motion Requesting Claims Construction by Plaintiffs. (Attachments: # 1 Ex. A, '486 Inf. Chart, # 2 Ex. B, '354 file history excerpt, # 3 Ex. C, '354 file history excerpt, # 4 Ex. D, Spielman report excerpts, # 5 Ex. E, '983 file history excerpts, # 6 Ex. F, '983 file history excerpts, # 7 Ex. G, '337 Inf. Chart, # 8 Ex. H, '002 Inf. Chart, # 9 Ex. I, '002 file history excerpt, # 10 Ex. J, '002 file history excerpt, # 11 Ex. K, '002 file history excerpt, # 12 Ex. L, dictionary definitions, # 13 Ex. N, JPS63-167588 cert. trans., # 14 Ex. O, appl. 08/050952 file history excerpt, # 15 Ex. P, invalidity conten. excerpt, # 16 Ex. Q, 6,371,977, # 17 Ex. R, 5,474,831) (Haslam, Robert) Modified on 7/18/2011 (llj).

EXHIBIT O

Y:"':~'Br\
.~~
. '.,
\

'

..

;

i

i

t~7/7S

,

,I

\

PATENT APPLICATION

....,IN THE UNITED STATES PATENT AND TRADEMARK OFFICE

r§

,

(CANTS

:

FLANDERS ET AL

EXAMINER

NIA

CONTINUATION OF
SERIAL NO.
07/626,227

GROUP

NIA

PARENT FILED:

12/7/90

CASE NO.

CE02132RP3

ENTITLED

METHOD FOR AUTHENTICATION AND PROTECTION OF
SUBSCRIBERS IN TELECOMMUNICATION SYSTEMS
Motorola, Inc.
Corporate Offices
1303 E. Algonqui n Road
Schaumburg, IL 60196
April 21, 1993
PRELIMINARY AMENDMENT

Honorable Commissioner of
Patents and Trademarks
Washington, D.C. 20231
Sir:
After granting a filing date, please amend the above-identified patent
application as follows:
In the Title
Please delete "METHOD FOR AUTHENTICATION AND PROTECTION OF
SUBSCRIBERS IN TELECOMMUNICATION SYSTEMS" and insert therefor-METHOD AND APPARATUS FOR AUTHENTICATION IN A COMMUNICATION
SYSTEM--.
In the Drawings
In FIG. 1, as indicted in the enclosed marked up drawing sheet, please rotate
the text of element entitled "Microprocessing stage" within element 20 by 180°.
Similarly, please rotate .the text of element 12 by 180°,

LJ~

-

'3

~.L3

In the Specification
-

page~e

~-

10, please delete "Application Serial Number 7-176951", and
insert therefore --Number 4,992,783--.
In the Claims
'/

l{(.>~lease delete claim 28:-/
ollowing new claims:
(New) A method of authentication between a subscriber unit and a
communication unit of a communication system, comprising:
(a)
(b)

l~fJ

maintaining an historic non-arbitrary value in the subscrib

generating an authentication message in the subscribe unit as a
function of the at least part of the historic non-arbitr
value; and
transmitting the authentication message to the
munication unit.

I

J7

~

(c)

1,?6. (New) The method of claim

unit;

~~

wherein the histo c non-arbitrary value
comprises a record of pseudo random commu cation events associated with
the subscriber unit selected from the group nsisting essentially of the number
of telephone calls attributed to the subscr,' er unit, the number of channel
handoffs attributed to the subscriber u . , a frame count assigned to the

'J
Ii

subscriber unit, and a slot count as . ned to the subscriber unit.

1,2;(, (New) A method of authentica' n between a subscriber unit and a
communication unit of a co munication system, comprising:
(a)
receiving an auth tication message at the communication unit;
(b)
maintaining an IStOriC non-arbitrary value in the communication unit;
(c)

and
determini in the communication unit, through the use of the received
authen 'cation message and the maintained historic non-arbitrary value,
whe er a received service request is authentic,

-2-

f

(New) The method of claim 127 wherein the historic non-arbitrary v
comprises a record of pseudo random communication events
the subscriber unit selected from the group consisting es
of telephone calls attributed to the subscriber unit, t
. handoffs attributed to the subscriber unit. a fra
subscriber unit. and a slot count assigned t
(New) A method of authentication
communication unit of a com
(a)

sociated with

tially of the number

number of channel

count assigned to the
e subscriber unit.

tween a subscriber unit and a

nication system. comprising:

providing the subsc' er unit with at least part of a plurality of dialed digits
which uniquely' entity a target communication unit;

(b)

generating

(c)

trans

function

authentication message in the subscriber unit as a
the at least part of the plurality of dialed digits; and

tting the authentication message and the at least part of the

pi ality of dialed digits from the subscriber unit to the communication
nit.

t/

1~.

1D

(New) The method of claim 1~ wherein:
(a)

the subscriber unit is provided with an identification number; and

(b)

the authentication message is generated in the subscriber unit further as
a function of the identification number.

~O

tZ-

1)"1.

(New) The method of claim 1J9 wherein the authentication message is
generated in the subscriber unit further as a function of a random number
known to the subscriber unit.

13
~.

2~

(New) The method of claim 1)9 wherein the authentication message is
transmjtted during a communication session on a communication medium
selected from the group consisting essentially of a radio communication link,
,
satellite link, fiber optic cable, coaxial cable, and wireline.

-3-

(New) A method of authentication between a subscriber unit and
communication unit of a communication system, comprising:
(a)

., P.

(b)

(.,~

~~b

receiving an authentication message and at least part a plurality of
dialed digits which uniquely identifies a target com nication unit, the
authentication message being derived from the ceived dialed digits;
and
determining in the communication unit, th ugh the use of the received
authentication message and the recei d dialed digits, whether a

.

received service request is authent'

1'1

298

(New) The method of claim
wh ein:
(a)
the communication unit is rovided with information regarding an
identification number; d
(b)
the determination I
e communication unit of whether a received
service request i authentic further occurs through the use of the
information r

'? ~

Y35",

2-7

~.

d

arding the identification number.

<,

'J.tf

(New) The method of claim 1)8' wherein the authentication message is received
during a communication session on a communication medium selected from the
group consisting essentially of a radio communication link, satellite link, fiber
optic cable, coaxial cable, and wireline.

1b
17-

tj

(New) The me od of claim 1,;33 wherein the authentication message is further
derived fro a r~ndom number known to the communication unit.

(New) The method of claim
comprises:
(a)

2¥

.

1)1 wherein the step of determining further

granting communication between the subscriber unit and the target
communication unit uniquely identified by the received dialed digits, if the
received authentication message was substantially derived from the
received dialed digits; and

(b)

\)

providing outP~~icatifl9..'bmk multiple user is attempting to access the
communication system, if the received authentication message was not
substantially derived from the received digits.

-4-

1,

r
(New) A method of authentication between a subscriber unit mn('

lJIlIIW _ _1

communication unit of a communication system. com . ng:
(a)

providing the subscriber unit with at leas
bits which uniquely identify a ta~

(b)

generating an authentication1TIessage in the subscriber unit as a
function of the at I

(c)

rt of a plurality of information

ommunication unit;

transmittin
plura'

part of the plurality of information bits; and

authentication message and the at least part of the

of information bits from the subscriber unit to the communication

it.

'30

~.

(New) The method of claim
(a)
(b)

t1

1)« wherein:

the subscriber unit is provided with an identification number; and
the authentication message is generated in the subscriber unit further as
a function-of the identification number.

;.1

(New) The method of claim ~ wherein the authentication message Is
generated In the subscriber unit further as a function of a random number
known to the subscriber unit.

3~

)A"t.

~r

(New) The method of claim ~ wherein the authentication message is
transmitted during a communication session on a communication medium
selected from the group consisting essentially of a radio communication link,

} ""L satellite link, fiber optic cable, coaxial cable, and wireline.
I
../

iWJ A method of authentication between a subscriber unit and
communication unit of a communication system, comprising'
(a)

receiving an authentication message and at lea
information bits which uniquely identifies
authentication message being deriv

art of a plurality of

rget communication unit, the

rom the received information bits;

and
(b)

I
L-

determining in the comm

cation unit, through the use of the received

authentication mess e and the received at least part of the plurality of
information bit, hether a received service request is authentic.

-5-

,-

r.J,
.~

{'!

143.

).44'.
.,..

,">

""7.-;>
(New) The method of claim {4'2' wherein
(a) . the communication unit is provi ed with information regarding an
identification number; and
(b)
the determination in the co munication unit of whether a received
service request is authe IC further occurs through the use of the
information regarding e identification number.

31
(New) The method of cl 1m 1,ft2wherein the authentication message is further
derived from a rando

30'

jAS.

number known to the communication unit.

.J3

(New) The method of claim ~ wherein the authentication message is received
during a communication session on a communication medium selected from the
group consisting essentially of a radio communication link, satellite link, fiber
optic cable, coaxial cable, and wireline.

3'1

~.

33

(New) The method of claim ~ wherein the step of determining further
comprises:
(a)

granting communication between the subscriber unit and the target
communication unit uniquely identified by the received information bits, if
the received authentication message was substantially derived from the

(b)

received information bits; and
providing output indicating that a mUltiple user is attempting to access the
communication system, if the received authentication message was not
substantially derived from the received digits.
) A subscriber unit which authenticates communications with

communication unit of a communication system, compri .
(a)
(b)

memory means for maintaining an histor'
processor means for generatin
of the at least part of th

(c)

\1

n-arbitrary value;

authentication message as a function

. oric non-arbitrary value; and

transmitter mean
r transmitting the authentication message to the
communic . n unit.

-6-

3Y
~g.

(New) The subscriber unit of claim 1,4'1 wherein the historic non-arbitrary valu
comprises a record of pseudo random communication events associated 'h
the subscriber unit selected from the group consisting essentially of the mber
of telephone calls attributed to the subscriber unit, the number of cha
handoffs attributed to the subscriber unit, a frame count assigned t

el
e

subscriber unit, and a slot count assigned to the subscriber unit.

t{D
1)g,· (New) A commu~ication unit which authenticates communi tions with a
subscriber unit of a communication system, comprising:
(a)
(b)
(c)

receiver means for receiving an authentication essage:
memory means for maintaining an historic n -arbitrary value; and
processor means for determining, through e use of the received
authentication message and the mainta' ed historic non-arbitrary value,
whether a received service request is uthentic,

yl

ro

J,.5c1. (New) The communication unit of claim M:f wherein the historic non-arbitrary
value comprises a record of pseudo ndom communication events associated
with the subscriber unit selected fr
the group consisting essentially of the
number of telephone calls attrib ed to the subscriber unit, the number of
channel handoffs attributed to e subscriber unit, a frame count assigned to the
subscriber unit, and a slot c unt assigned to the subscriber unit.

~;L

}5{

(New) A sUbscri~er uni
communication unit

hich authenticates communications with a

a communication system, comprising:

(a)

input mean

or obtaining at least part of a plurality of dialed digits which

(b)

proces r means for generating an authentication message as a function
of th at least part of the plurality of dialed digits; and

(Q)

tra mitter means for transmitting the authentication message and the at
I ast part of the plurality of dialed digits to the communication unit.

uniquely i entifies a target communication unit;

-7-

.

~·t
r-

*-~

J..i1:

.

(New) The subscriber unit of claim
(a)
further comprising memory means for providing an identification number;
and
(b)
wherein the processor means comprises means for generating the
(

authentication message further as a function of the identification number,

~NeW)

~~rein

The subscriber unit of claim
the processor means comprises
means for generating the authentication message further as a function of a
random number known to the subscriber unit.

~/p
~

~-;

.

(New) The subscriber unit of claim

1Bfwherein the transmitter means transmits

the authentication message during a communication session on a
communication flledium selected from the group consisting essentially of a
radio communication link, satellite link, fiber optic cable, coaxial cable, and
wireline,
(New},.A communication unit which authenticates communications wit

I ~l-----

subscriber unit of a communication system, comprising:
(a)

receiver means for receiving an authentication message nd at least part
of a plurality of dialed digits which uniquely identify arget
communication unit, the authentication messag
eing derived from the
received dialed digits; and

(b)

processor means for determining, throu the use of the received
authentication message and the re Ived dialed digits, whether a

~7

received service request is aut

ntic,

yh

196:" (New) The communication un'

f claim 1 $:

(a)

further comprising emory means for providing information regarding an
identification n ber; and

(b)

wherein the rocessor means for determining whether the received
service

quest is authentic further utilizes the information regarding the

iden ' Jcation number.

-8-

l/fr:J
(New) The communication unit of claim 155 wherein the received authenticatio
.'

message is further derived from a random number known to the communic 'on
unit.

,

'1m

(New) The communication unit of claim 155wherein the receiver
ans
receives the authentication message during a communication s ssion on a
communication medium selected from the group consisting sentially of a
radio communication link, satellite link, fiber optic cable, c xial cable, and
wireline.

(lb

(New) The communication unit of claim 1»5 wher 'n the processor means
further comprises:
(a)
means for granting communication be een the subscriber unit and the
target cort'lmunication unit uniquely' entified by the received dialed
digits, if the received authenticati n message was substantially derived
from the received dialed digits' and
(b)
means for providing output I cicating that a multiple user Is attempting to
access the communicatio system, if the received authentication
message was not subs ntially derived from the received dialed digits.

~;(

t60.

(New) A subscriber unit
ich authenticates communications with a
communication unit of communication system, comprising:
(a)
input means f r obtaining at least part of a plurality of information bits
which uni ely identifies a target communication unit;
(b)
process means for generating an authentication message as a function
of the t least part of the plurality of information bits; and
(c)

a.

tra mitter means for transmitting the authentication message and the at
I st part of the plurality of information bits to the communication unit.

~v..,

1fl1'.

c1aim~

q

(New) The subscriber unit of
(a)
further comprising memory means for providing an identification number;
and
(b)

wherein the processor means comprises means for generating the
authentication message further as a function of the identification number.

-9-

g1
~.

.

~erein

(New) The subscriber unit of claim
the processor means comprises
means for generating the authentication message further as a function of a
random number known to the subscriber unit.

g

QJ1lf)·,

~.

(New) The subscriber unit of

1

clai~1.,.,6b wherein the transmitter means transmits

the authentication message during a communication session on a
communication medium selected from the group consisting essentially of a
radio communication link, satellite link, fiber optic cable, coaxial cable, and
wireline.

"A communication unit which authenticates communications wit
subscriber unit of a communication system, comprising:
(a)
receiver means for receiving an authentication message d at least part
of a plurality of information bits which uniquely identify target
communication unit, the authentication message b . g derived from the
received information bits; and
(b)

processor means for determining, through t use of the received
authentication message and the received 'nformation bits, whether a
received service request is authentic.

(New) The communication unit of clai
j)4:
(a)
further comprising memory
ans for providing information regarding an
identification number; and
(b)

wherein the processor
service request is a

eans for determining whether the received
entic further utilizes the information regarding the

identification num er.
t:

r

,) .. )

(New) The commu cation unit of claim 161f wherein the received authentication'
message is furt
unit.

r derived from a random number known to the communication

-10-

,Sl.'
.~)

(New) The communication unit of claim ~ wherein the receiver mean
receives the authentication message during a communication sessi on a
comml,mication medium selected from the group consisting es
tially of a
radio communication link, satellite link, fiber optic cable,
xial cable, and
wireline.

~~ S
(New) The communication unit of claim 1.6
further comprises:
,
(a)

(b)

erein the processor means

means for granting commu' tion between the subscriber unit and the
target communication
uniquely identified by the received information
bits. if the receive uthentication message was substantially derived
from the recei
information bits: and
means for oViding output indicating that a multiple user is attempting to.
acce
he communication system, if the received authentication
ssa e was not sUbstantially derived from the

-11-

recei~~d i!l!~J:mation

bits.

In the Abstract
_--1I--

!-P!..::le~a~se~de~l~et~e~theabstract, and insert therefor,

METHOD AND APPARATUS FOR
AUTHENTICATION IN A COMMUNICATION SYSTEM
Abstract of the Disclosure
A method and apparatus for authentication between a subscriber unit and a
communication unit is provided. The authentication process includes: maintaining an
historic non-arbitrary value in the subscriber unit, generating an authentication
message in the subscriber unit as a function of at least part of the historic non-arbitrary
value, and transmitting the authentication message to the communication unit. In
addition, the authentication process includes: receiving an authentication message at
a communication unit, maintaining an historic non-arbitrary value in the
communication unit, and determining, in the communication unit, through the use of
the received authentication message and the maintained historic non-arbitrary value,
whether a received service request is authentic. In another embodiment, the
authentication process includes: providing the subscriber unit with at least part of a
plurality of dialed digits which uniquely identify a target communication unit,
generating an authentication message in the subscriber unit as a function of the at
least part of the plurality of dialed digits, and transmitting the authentication message
and the at least part of the plurality of dialed digits from the subscriber unit to the
communication unit. In addition the other embodiment authentication process
includes: receiving an authentication message and at least part of a plurality of dialed
digits which uniquely identifies a target communication unit. the authentication
message being derived from the received dialed digits, and determining in the
communication unit, through the use of the received authentication message and the
received dialed digits, whether a received service request is authentic.-Remarks
The Applicant has amended the title, corrected typographical errors in the
drawings and the specification, deleted claim 28, added new claims 125-168, and
amended the abstract to more closely correspond to the subject matter which the
Applicants regards as their invention. In addition, a new oath and declaration is

2\

-12-

,provided to cover the claims as amended by this preliminary amendment. It is
submitted that these amendments do not constitute new matter. Claims 125-168 are
pending in the application.
In accordance with the Examiner's suggestions in the parent patent application,
a new substitute specification has been provided under 37 C.F.R. 1.125 (M.P.E.P.
608.01 (q)) to facilitate processing of the patent application. This substitute
specification does not contain any new matter, except for that which was added by
amendment in the July 13,1990 and December 7,1990 amendments. In addition, a
corresponding marked-up copy has also been provided which details the locations of
each insertion and deletion of text in the specification.
Favorable action with respect to the present application is respectfully
requested. If there are any question or comments regarding the prosecution of the
present application, please do not hesitate to contact the undersigned by telephone or
facsimile.

Respectfully submitted,

........ F8 39 og 7()'31 ~
....,D.-_. . '. .k 1 ._J_~ _
4 ........ _

FLANDERS ET AL.

BY~~-Shawn B. Dempster
Agent for Applicants
Registration No. 34,321
Phone: [phone]
Fax: (708) 576·3750

-13-

,

I

I

20

I

10
I
15

..
IsE~cf~CE LI----.

)

'Y

Lr

COUNTER

NON-VOLATILE
MEMORY
CONTENTS:

UNIT

W RF"

BER
1~SUBSCRIONE
TELEPH
NUMBER
18
SN, PIN

11

BASE
UNIT

~ 12 I SUBSCRIBER

IA

STAGE

~

RF ·Sl AG EI. -.

1"------"

CA ll

rft\
C/)
C/)

~~
0<
D:: I Q..Cf )

~

OUTPUT:
ENCIPHERED SN

DATA BASE
CONTENTS:
SN , PIN.--""
SUBSCRIBER

127
1/

NUMBER

OUTPUT:
ENCIPHERED SN

"
Ol

26

~

16

/

TELEPHONE~

60
I

I

/

~ SEQUENCE 1-24
COUNTER. 23

~
~

19

~

25

SWITCH CENTER

N UNIT
FIXED NETWORK ICOt.fMUNICAliO

T
SUBSCRIBER COMMUNICATION UNI

\

:p

-...,

F IC .t

-;)

r <:>

~

~~

'"

'"'
.J

7;'

-T
<:x..
~

~

'"

'"

~

r-

:;::;>(j. ..

"-- <:P'
.r\
~

..... __ .~

2/3

29
30
OBTAIN DATA

31
OBTAIN PIN

32
USE DATA AND PIN AS
KEYS TO ENCIPHER SN

33
08T AIN ASSIGNED
TELEPHONE NUMBER

34
OBTAIN CALL
SE~UENCE COUNT

35
FORM AUTHENTIC ATlON
WESSAGE-ARW USING:
DA TA, ASSIGNED
TELEPHONE NUWBER,
ENCIPHERED SN,
CALL SE~UENCE COUNT

36
TRANS WIT ARW

FIG.2

37
21

38

BASE ST AnON
RF STAGE

OBTAIN ASSIGNED
TELEPHONE NUMBER
FROM DATA BASE

43
40
OBTAIN SN
FROM DATA BASE
OBT AIN PIN
USE RECEIVED DATA AND
DA TA BASE PIN TO ENCIPHER
ASSIGNED TELEPHONE No.
fROM DATA BASE

41

42

44

OBTAIN RECEIVED
ENCIPHERED ID

45

NO
TAKE
OBTAIN FIXED NETWORK ......-+........., OBTAIN RECEIVED CALL
CALL SEQUENCE
SEQUENCE COUNT

48

49

NO

F IG.3

TAKE ACTION
YES
AUTHENTICA nON
CONF'IRMED

52

51

TIB

r4DO
Serving site using first
encryption process
with subscriber unit

•

Handolf of subscriber to
another channel required

.~

r- 4/C

Handol! count and
session key communicated
over landline network to
target site

•

Subscriber gets the new
handoff channel and is
handed off

J,
Target site and subscriber
unit update handol! count

•

7
r 4 _::.

.~

Target site broadcaSts
frame count for
synchronization with
subscriber unit via RF link

••

Target site continues
communicatiuon by
restarting encryption
process using the handoff
count as a new encrytion
variable

FIG'. 1-

(-430

050952

r Hendoff Cnt I OuerflowlSlot Cnt 1 -/lJtTI!lLIYtl-tcw'
0

,'- t>O::J-

I

08 050952

,- soo

..

.
-

Session Keu

?

.31

;.t.

!

"
Crypto-algorithm
,
~Ir

"

(

OutDut Maslc

---_

,-52.0

........_-------~
USELP S eech

.--

.L..

OUTPUT: ERROR PROTECTED

r

..;,.,

~z.:;-

V6:::...l?JK..

20

10
15

14

CALL
SEQUENCE ...... - - - - ,
1
COUNTER

171 SUBSCRIBER
TELEPHONE
NUMBER

(")

o

U) .."
~ ::0

>0

C)o

12 I SUBSCRIBER
UNIT

BASE
UNit

(")

::0

o

DATA BASE
CONTENTS:

27

(I) "

~::o

RF STAGE

RF STAGE

>0
C")(")

JT1 JT1

...,~

U)
U)

(I)
(I)

z

SN, PIN

11

i::

i::
::0

23

21

13
NON-VOLA TILE
MEMORY
CONTENTS:

CALL
SEQUENCE ,1-24
COUNTER

z

C")

C")

19

60
16

SN, PIN
281 SUBSCRIBER
TELEPHONE
NUMBER
OUTPUT:
ENCIPHERED SN

-.

"
0.

'---'"-

...
"--- ~.,,:;'~, ~:::
'~

.--~~

-5::-;
'.'

SWITCH CENTER
SUBSCRIBER COMMUNICATION UNIT

FIXED NETWORK COMMUNICATION UNIT

F fG.t

'J

=

q

~

~

~~\~'
"-t ::
,

."

0-,
........

\

""

•

l...
.

"-

::;.,
N
";-

..

08 050952
2/5
AUTHENTICA TION
REQUEST

29

~

30

OBTAIN DATA AND/OR RAND

+

31

OBTAIN PIN

\

~

,"(,\ '
;'

32

USE DATA, PIN AND ~ OR RAND
AS KEYS TO ENCI HER SN

I

\

:

, \,
i
\

l"

{,

~

33

C/'

OBT AIN ASSIGNED
TELEPHONE NUMBER

+

34

OBTAIN CALL
SEQUENCE COUNT

t

;'

F IG.2

35

FORM AUTHENTICATION
MESSAGE-ARM USING:
DA TA, ASSIGNED
TELEPHONE NUMBER,
ENCIPHERED SN,
CALL SEQUENCE COUNT

+

36

TRANSMIT ARM

F IG.7
704

08 050952

3/5.

37
21

38

BASE STATION
RF STAGE

OBT AIN ASSIGNED
TELEPHONE NUMBER
FROM DATA BASE

43

40
OBTAIN SN
FROM DATA BASE
OBT AIN PIN
USE RECEIVED DATA AND
DA TA BASE PIN TO ENCIPHER
ASSIGNED TELEPHONE No.
FROM DATA BASE

41

42

44

OBT AIN RECEIVED
ENCIPHERED ID

45

NO
TAKE
OBTAIN FIXED NETWORK .........-+-~-1 OBTAIN RECEIVED CALL
CALL SEQUENCE COUNT
SEQUENCE COUNT

48

49

NO

F IG.3

TAKE ACTION
YES
AUTHENTICA TION
CONFIRMED

52

51

08 050952
SERVING SITE USING
CURRENT ENCRYPTION PROCESS
WITH SUBSCRIBER UNIT

~
HANDOFF OF SUBSCRIBER TO
ANOTHER CHANNEL REQUIRED

t

400

~

HANDOFF COUNT AND SESSION
KEY COt.4MUNICA TED TO
TARGET SITE

.

4/5

- ...

_~

.;

..

,/

405

1--'410

F IC.4

~
SUBSCRIBER GETS NEW HAND OFF
CHANNEL AND IS HANDED OFF

J0-

415
1-"

,~

t
TARGET SITE AND SUBSCRIBER
UNIT UPDATE HANDOFF COUNT

I- 420

t
TARGET SITE BROADCASTS
FRAt.4E COUNT FOR
SYNCHRONIZA TlON WITH
SUBSCRIBER UNIT VIA RF LINK

I-

425

~
TARGET SITE CONTINUES
COMMUNICA TION BY RESTARTING
ENCRYPTION PROCESS USING
THE HANDOFF COUNT AS A
NEW ENCRYPTION V.ARIABLE

- 430
F IC.5
INITIALIZATION VECTOR
HANDOrF COUNT OVERFLOW SLOT COUNT

500-

I

505

t

I

I

SESSION KEY

I

'11
I

I

I

510

CRYPTO ALGORITHM

t
OUTPUT MASK

,

520

I

VSELP SPEECH

II
I

r 1\ . 518
\. ~

51~

~

~25

OUTPUT:ERROR PROTECTED

I

08 050952
RECEIVE REQUEST
INCLUDING MIN, DIALED
DIGITS, CALL COUNT

5/5
600

.~.

YES.

YES
RETRIEVE PIN FROM
DATABASE AND
GENERATE RANO!RESP
FOR THIS PIN

GET RAND!RESP PAIRS
FROM HOME NETWORK
608

STORE IN DATABASE
RETRIEVE RAND /RESP PAIR

GENERA TE RESP 0

622

ISSUE RAND TO MOBILE

624-

RECEIVE RESPO
FROM MOBILE

626

612

F IG.6

NO
630

DENY SERVICE

\

\J

NO

~

636

ISSUE SERVICE

o
~~',.
i ..

634

638

/

08 050952
r4DO
Serving site using first
encryption process
with subscriber unit

~

r-

Handoff of subscriber to
another channel required

-l

r- 4/C

I'

j'

Handoff count and
session key communicated
over landline network to
target site

•

Subscriber gets the new
handoff channel and is
handed off

•
•
•

Target site and subscriber
unit update handoff count

,42:;

. Target site broadcasts
frame count for
synchronization with
subscriber unit via RF link

Target site continues
communlcatiuon by
restarting encryption
process using the handotf
count as a new encrytion
variable

FI&-,

1-

(430

.{ !

r400
Serving site using first
encryption process
with subscriber unit

•

Handoll of subscriberto
another channel required

~
Handoll count and
session key communicated
over landline network to
target site

•

/

Subscriber gets the/new
handoff channel. and is
handed off

,.

Targef site and subscriber
unit update handoff count

•
•

.r 4 '"'-::,

Target site broadcasts
Irame count lor
synchronization with
subscriber unit via RF link

Target site continues
communicatiuon by
restaning encryption
process using the handoff
count as a new encrytion
variable

FIe,..

+

(430

08 050952