Agent-based authentication and key agreement method for devices without sim card

Abstract

A method for devices without SIM card (SD) to communicate directly with a core network. The method may be performed in the following matter. The SD registers with the core network through a cellular device (MD) in order to obtain a credential for the SD. The credential comprises Access ID, key, and control parameters. The SD then performs a mutual authentication directly with the core network using the credential. If the SD authenticates successfully with the core network, the SD is granted access to the servers via the core network.

What is claimed is: 
     
         1 . A system for a master cellular device (MD) comprising a SIM card to register a secondary device (SD) without a SIM card to communicate directly with a core network comprising:
 retrieving, by the SD, an identity information of the SD (Device ID) after a first channel between the MD and the SD is established;   transmitting, by the SD, the Device ID to the MD;   receiving, by the MD, the Device ID;   transmitting, by the MD, the Device ID to the core network through a second channel between the MD and the core network;   receiving, by the MD and from the core network, a credential for the SD; and   transmitting, by the MD, the credential to the SD;   receiving, by the SD, the credential; and   performing, by the SD, a mutual authentication directly with the core network by using the credential;   transmitting data, by the SD, to the core network in response to authenticating successfully with the core network.   
     
     
         2 . The method according to  claim 1 , wherein the SD is an internet of things device. 
     
     
         3 . The system according to  claim 1 , wherein the step of performing a mutual authentication directly with the core network by using the credential comprises:
 generating and transmitting, by the SD, an attach request comprising the credential;   receiving, by the SD, a user authentication request from the core network, wherein the user authentication request includes an authentication token;   computing, by the SD, another authentication token;   authenticating, by the SD, with the core network by verifying whether the computed authentication token is equal to received authentication token; and   generating and transmitting, by the SD, a user authentication response message to the core network when the computed authentication token is equal to received authentication token.   
     
     
         4 . The system according to  claim 1 , further comprising:
 accessing, by the SD, at least one server via the core network in response to authenticating successfully with the core network.   
     
     
         5 . The system according to  claim 1 , wherein the credential comprises an access ID for the SD. 
     
     
         6 . The system according to  claim 5 , wherein the credential further comprises a key for the SD. 
     
     
         7 . The system according to  claim 1 , further comprising:
 sending, by the MD and to the core network, a Revoke Message indicating to revoke the access ID.   
     
     
         8 . The system according to  claim 1 , further comprising:
 in response to receiving the Device ID, creating, by the MD, a new entry when the Device ID has not been recorded in the database of the MD.   
     
     
         9 . The method according to  claim 8 , wherein the new entry further comprises a control parameter associated with a pre-determined data limit for the SD. 
     
     
         10 . The method according to  claim 8 , further comprising:
 in response to receiving the access ID, appending, by the MD, the access ID to the entry associated to the Device ID.   
     
     
         11 . A method for a master cellular device (MD) comprising a SIM card to register a secondary device (SD) without a SIM card to communicate directly with a core network comprising:
 establishing, by the MD, a first channel between the MD and the SD;   obtaining, by the MD, an identity information of the SD (Device ID) by using the first channel;   establishing, by the MD, a second channel between the MD and the core network;   transmitting, by the MD, the Device ID to the core network by using the second channel;   receiving, by the MD and from the core network, a credential for the SD; and   transmitting, by the MD, the credential to the SD.   
     
     
         12 . The method according to  claim 11 , wherein the SD is an internet of things device. 
     
     
         13 . The method according to  claim 11 , wherein the credential comprises an access ID for the SD. 
     
     
         14 . The method according to  claim 13 , further comprising:
 in response to obtaining the Device ID, creating, by the MD, a new entry when the Device ID has not been recorded in the database of the MD.   
     
     
         15 . The method according to  claim 14 , further comprising:
 in response to receiving the access ID, appending, by the MD, the access ID to the entry associated to the Device ID.   
     
     
         16 . The method according to  claim 13 , further comprising:
 sending, by the MD and to the core network, a Revoke Message indicating to revoke the access ID.   
     
     
         17 . A master cellular device (MD) for registering a secondary device (SD) without a SIM card to communicate directly with a core network comprising:
 a processor; and   a non-transitory computer-readable storage medium storing instructions that when executed by the processor cause the following steps to be performed:
 establishing a first channel between the MD and the SD; 
 obtaining an identity information of the SD (Device ID) by using the first channel; 
 establishing a second channel between the MD and the core network; 
 transmitting the Device ID to the core network by using the second channel; 
 receiving from the core network, a credential for the SD; and 
 transmitting the credential to the SD. 
   
     
     
         18 . The MD according to  claim 17 , wherein the credential comprises an access ID for the SD. 
     
     
         19 . The MD according to  claim 17 , wherein the instructions furthers causes the following steps to be performed:
 in response to obtaining the Device ID, creating a new entry when the Device ID has not been recorded in the database of the MD.   
     
     
         20 . The MD according to  claim 19 , the instructions furthers causes the following steps to be performed:
 in response to receiving the access ID, appending, by the MD, the access ID to the entry associated to the Device ID.