A mutli-system subscriber identification module

0001A multi-system subscriber identification module

0002Field of the invention

0003The invention relates to removable data storage module which contain data related to an identification and authentication of a subscriber of a mobile radio terminal.

0004The invention also relates to a roaming method and a mobile radio system utilizing such a data storage module.

0005Background of the invention The specifications of GSM, the European Digital

0006Cellular System for Land Mobile Radio Communications, de¬ fines that all the information elements needed by the ra¬ dio system to identify, authenticate and locate a mobile subscriber will be contained into a dedicated module, cal- led SIM (Subscriber Identity Module) , which is removable and allows the use of different mobile stations. The re¬ maining part of the mobile station, called a mobile equip¬ ment (ME) , is intended to contain all the mechanisms and devices which are needed to access the GSM services (for instance the radio equipments) but are not specific to a given subscriber. Further, the SIM is removable from the mobile equipment and the intervals between subscriber identity module and mobile equipment is standardized in ETSI specification GSM 11.11. This interface is in accor- dance with ISO standards on IC cards (ISO 7816) The SIM may be a part of the multi service card, of which GSM mo¬ bile telecommunication is one of the applications. This feature allows the mobile equipment being a universal equipment operable by different mobile subscribers in turn, each using his own SIM. The SIM can be either a smart card being a well-known size of credit cards, or alternatively it can be in a much smaller format, called "plug-in SIM". The latter format is more suitable for handportable terminal equipments. As noted above, GSM systems are using a SIM-card that stores user identities and other user specific information and thereby enables access to the service of the radio system. Only a combination of the SIM and the ME makes an operative mobile station MS for GSM system. The same SIM card may be used in any GSM mobile equipment ME. It is even possible that a mobile subscriber has only a personal subscriber identity module SIM and rents the remaining part of the mobile station, ie. the mobile equipment ME, when needed. This transferring of the SIM instead of the entire mobile station MS and using different mobile equipments ME is sometimes called a "SIM roaming" within GSM system.

0007Also other mobile radio systems in addition to GSM may use the same kind of smart card for similar purposes, thus enabling user specific information to roam between different mobile radio systems independently of the air interface specifications. For example in the U.S.A. the so called Personal Communications Systems (PCS) are being developed having several different air interfaces. Also in Europe, DCS 1800 which is a mobile radio system realized according to GSM specifications expect different radio interface (carrier frequencies of approximately 1800 MHz instead of that of approximately 900 MHz in GSM system) utilizes SIM card. The smart card may be the only common nominator between these systems to provide "SIM roaming" between systems. It is desirable to have the same smart card in different systems, because the user does not have to change his/her user profile when the terminal and/or air interface needs to be changed. One identity type for a mobile subscriber in a mobile radio system is Temporary Mobile Subscriber Identity (TMSI) . This mobile identity type is used for user anonymity purposes by utilizing it as an alias for the actual user identity in order to avoid sending the actual user identity in clear on the radio path. A part of TMSI is a random number which can not be used to identify the user/terminal without mapping information to the actual user identity, which is found in the telecommunications network entity that allocated the random number.

0008The TMSI is also stored in the SIM-card, but in the GSM specific way using identities pertaining only to GSM. For user anonymity reasons it is desirable to also have TMSI-roaming between different systems with different kind of air interfaces, i.e. also the TMSI allocated for the user and stored to the SIM card in an "old" mobile radio system all is transferred to a "new" mobile radio system by SIM roaming. The problem, however, is that the TMSI as specified for GSM does not have any relevance in other mobile radio systems. Further the GSM SIM card contains only a single storage location for a single TMSI.

0009Disclosure of the invention

0010An object of the present invention is to allow a temporary mobile subscriber identity roaming between different mobile radio systems.

0011A further object is a method to differentiate between temporary mobile subscriber identities of different systems and to store them in a smart card in a uniform way.

0012One aspect of the present invention is a removable subscriber identification module for a mobile radio terminal, comprising electrically alterable memory means for storing data related to an identification and authentication of a mobile subscriber, said memory means including a predetermined storage location for storing a temporary mobile subscriber identity, an identity of a mobile radio system which has allocated said temporary mobile subscriber identity being indicated in predetermined bit locations in said temporary mobile subscriber identity in a manner independent from said mobile radio system, the remaining bit locations of said temporary mobile subscriber identity being stored in a mobile radio system specific format.

0013Another aspect of the present invention is an inter-system roaming method, comprising steps of allocating a temporary mobile subscriber identity for a mobile subscriber in a first mobile radio system having a first radio interface, an identity of said mobile radio system being indicated in predetermined bit locations in said temporary mobile subscriber identity in a manner independent from said first mobile radio system, sending said temporary subscriber identity to a first mobile station of said mobile subscriber, said mobile station comprising a removable subscriber identification module for storing data related to an identification and authentication of a mobile subscriber, as well as a first mobile equipment capable of operating in said first mobile radio system, storing said temporary mobile subscriber identity into predetermined storage location in said removable subscriber identification module, removing said mobile subscriber identification module from said first mobile station, inserting said mobile subscriber identification module into a second mobile station comprising a second mobile subscriber equipment capable of operating in a second mobile radio system having a second radio interface, copying said temporary mobile subscriber identity from said mobile subscriber identification module, sending said temporary mobile subscriber identity to a fixed network of said second mobile radio system, analyzing said predetermined bit locations in said temporary mobile subscriber identity in order to find said identity of said first mobile radio system, requesting an actual identity of said mobile subscriber from said first mobile radio system by means of said identity of said first mobile radio system and said temporary mobile subscriber identity.

0014Still further aspect of the present invention is a mobile radio system, comprising a mobile exchange, mobile stations each including a removable subscriber identification module for storing data related to an identification and authentication of a mobile subscriber, as well as a first mobile equipment capable of operating in said first mobile radio system, and a visitor location register including means for allocating temporary mobile subscriber identities for mobile subscribers in said mobile radio system, an identity of said mobile radio system being indicated in predetermined bit locations in said temporary mobile subscriber identity in a manner independent from said first mobile radio system, means for analyzing said predetermined bit locations in a temporary mobile subscriber identity received from a mobile station in order to find an identity of a mobile radio system which has allocated the temporary mobile subscriber identity, means for requesting an actual identity of said mobile subscriber from a mobile radio system which has allocated said temporary mobile subscriber identity by means of said analyzed mobile radio system identity and said temporary mobile subscriber identity. In the present invention predetermined bits of a temporary mobile subscriber identity TMSI are used to differentiate between different TMSI's of different systems by indicating in an uniform manner in all mobile radio systems the mobile radio system which has allocated the TMSI. The remaining bit locations of the TMSI may be in a mobile radio system specific format. During SIM roaming between two different mobile radio systems, the mobile station reads the TMSI from subscriber identification module and makes a copy of the TMSI to an air-interface message. TMSI is forwarded to a mobile radio system, which decodes the TMSI. The new system can use the predetermined bits of TMSI to find out the actual structure of TMSI and the mobile radio system that allocated the TMSI. The new system is provided with an interconnection to other networks/systems through which it can request the actual user identity from the old system because that is the only place containing mapping between the TMSI and the actual user identity.

0015A Brief Description of the Drawings

0016The preferred embodiments of the invention will be described with reference to attached drawing, wherein

0017Fig. 1 is a block diagram illustrating a cellular mobile radio system, Fig. 2 shows a vehicle mounted mobile station,

0018Fig. 3 is a block diagram of a mobile station con¬ sisting of a mobile equipment ME and a subscriber identity module SIM,

0019Fig. 4 illustrates the GSM TMSI format, Fig. 5 illustrates the universal TMSI format according to the invention,

0020Fig. 6 illustrates a TMSI roaming between two mobile radio systems,

0021Fig. 7 is a flow diagram illustrating operation of a visitor location register VLR2 in Fig. 6. Preferred Embodiments of the Invention The present invention is applicable to all mobile radio systems utilizing subscriber identity module SIM or alike. The present invention is particularly advantaged when applied in the pan-European digital mobile radio sys¬ tem GSM or in the modification thereof, DCS1800. In the following the preferred embodiment of the invention will be described as an application in a GSM system, to which the invention, however, is not intended to be limited.

0022Figure 1 shows schematically a portion of a GSM cellular radio system. In the cellular radio system the area covered by the system is divided into radio cells. Base station controllers BSCl and BSC2 are connected by digital transmission links 12 to a mobile exchange MSC. Furthermore, base stations BTS1, BTS2 and BTS3, BTS4 are connected by digital transmission links 11 to the base station controllers BSCl and BSC2, respectively. Each BSC and the base stations BTS controlled by it form a base station system BSS. The radio coverage area of a single base station BTS typically creates a single radio cell. Each base station BTS1 to BTS4 has a predetermined fixed number of physical radio channels. The configuration and properties of the GSM system are described in more detail in the GSM specifications and in the book "The GSM System for Mobile Communications, M. Mouly & M.B. Pautet, Pa- laiseau, France, 1992, ISBN:2-9507190-0-7, which are hereby incorporated by reference.

0023Subscriber data, such as location date, are stored permanently in a home location register (HLR) . The HLR also contain the original user profiles. The HLR also has an associated authentication center AC (not shown) , which may be integrated or separate. The authentication center contains subscriber authentication data and authentication algorithms. The system also comprises several visitor location registers (VLR) each associated with one or more MSC area. The VLR is a data base in which subscriber data, i.e the copies of the original user profile, are stored while the mobile station MS is visiting the area of the MSC. The VLR also contains the temporary mobile subscriber identity associated with the user profile. VLR further has a mapping to obtain an actual user identity on the basis of the TMSI.

0024According to the GSM specifications, all the infor- mation elements contained in a MS which are related to a mobile subscriber must be stored and operated within a specific module, called subscriber identity module SIM. The remaining part of MS, called a mobile equipment ME, contains the hardware and software specific to the radio interface. Specification GSM 2.17 specifies the operation of SIM, and specification GSM 11.11 specifies the instruc¬ tion format and encoding in SIM as well as the interface between the SIM and the ME. The SIM can be a smart card, IC card SIM, the interface of which with the outside world is in accordance with ISO standards on IC cards, i.e. ISO 7816 series. The IC card SIM of a standard size may be too large for handportable radios, and therefore, also a plug- in SIM which is a dedicated module fully standardized wit¬ hin the GSM system and intended to be semipermanently ins- tailed in the ME can be used.

0025In the GSM system the identification of a mobile subscriber is based on the SIM card. The mobile subscriber is able to use different mobile equipments ME but is all the time using the same SIM card and thereby can be reached by the same subscriber number. Without the SIM card only emergency calls can be made by the ME. When used in the ME, the SIM shall provide when it is in GSM network operation a storage of subscriber related security infor¬ mation (according to recommendations GSM 02.09) e.g. te - porary mobile subscriber identity TMSI and a key Ki, and an implementation of authentication and cipher key genera¬ tion mechanisms according to recommendation GSM 03.20 (i.e. algorithms A3 and A8) . For the user's own security, the SIM must handle a 1 digit PIN code (Personal identi- fication number) . Furthermore, the SIM storage capability may provide facilities to memorize and manage additional information elements related to the mobile subscriber in association with GSM services and MS features.

0026The present invention may be applied in a mobile radio system to any type of mobile radio station MS, e.g. a portable mobile phone or a vehicle mounted station with an ability of using a removable memory. Figure 2 shows, as an example of an mobile radio station, a radio telephone unit which can be mounted in a vehicle. The mobile station MS of Figure 2 comprises a radio unit 1, which is connec¬ ted by a cable 8 to a handset 2. The handset 2 includes normal components and functions: microphone, loudspeaker, and a user interface formed by a display and a keypad. In order to allow a handsfree operation, the radio unit 1 may also be connected to a separate microphone 3 and separate loudspeaker 7. Further, a separate reading device 4 for memory card or memory module 5, referred to a subscriber identity module SIM herein, is connected to a radio unit 1 via cable 9. A reading device 4 includes a card slot 6, in which a SIM card 5 can be inserted in a reading device 4 in a such way that it can later be easily removed or de¬ tached. One example of a vehicle mounted mobile station is Nokia GSM model 6050 manufactured by Nokia Mobile Phones Inc. Finland. The mobile stations may be also a portable terminal wherein the card reading device, the radio sections and the handset are integrated into one piece. One example of such portable mobile station is Nokia 101 GSM manufactured by Nokia Mobile Phones Inc., Finland.

0027Figure 3 shows a block diagram of a mobile equip- ment part ME of a mobile station MS. The ME comprises an antenna 3, a duplex filter 28, a receiver 21, a transmit¬ ter 29 and a synthesizer 27. In a receiving direction a series connection of an A/D converter 22, a detector 23, a deinterleaving means 24, a channel decoder 25, speech decoder 26 and a loud speaker is connected subsequent to receiver 21. In a transmitting direction a series connec¬ tion of a microphone, a speech coder 34, a channel coder 33, an interleaving unit 32, a TDMA burst building unit 31 and a modulator 30 is connected prior to the transmitter 29. All the above mentioned blocks are controlled by a timing and control unit 35, which processes all outbound and inbound messages. The timing and control unit 35 is further connected to a SIM card reading device 4 via cable 9. As mentioned above, the temporary mobile subscriber identity (TMSI) is a mobile identity type used for user anonymity purposes by utilizing it as an alias for the actual user identity in order to avoid sending the actual user identity in clear on the radio path. TMSI for GSM has been specified as shown in figure 4. GSM TMSI is 72 bits long digit string in its maximum having nine octets 1 to 9. The octets 1 to 4 contain a random MS identity, i.e. a random number which is allocated at a given moment to a certain mobile station in a current location area. The location area code LAI of the current location area is given in the octets 8 and 9 of TMSI. The random MS ID can not be used to identify the user/terminal without mapping information to the actual user identity, which is found in the telecommunications network entity (MSC/VLR) that allocated the random MS identity. The octets 5 and 7 as well as bits l to 4 in octet 6 are in other use. The remaining bits 5 to 8 in the octet 6 are not presently used for anything in GSM but they are merely filling bits for coding purposes. In GSM system TMSIs are managed by MSC/VLR. GSM TMSI is meaningful only within one location area, being first allocated (by MSC/VLR) to a MS the first time it registers in the location area, and being released when the MS leaves the location area. When the MS performs a location attempt in a new cell of a new location area, the TMSI used in the "old" location area will be sent to a MSC/VLR of the location area. If the MSC/VLR of the new location area is other than the one which allocated the "old" TMSI, the new MSC/VLR has to request the actual identity, IMSI, of the MS from the previous MSC/VLR, as indicated by the LAI part of the TMSI. As a result, the actual identity of the MS will not be sent on the radio path.

0028The TMSI is stored in the SIM-card TMSI in the same way. as it is sent on the air interface, i.e. in the GSM specific way using identities pertaining only to GSM. Storage space for TMSI in a SIM-card is 72 bits. Therefore, the "SIM roaming" allows to move also the TMSI from one mobile equipment to another within GSM systems. The "new" MS then performs a location attempt to the GSM network using the "old" TMSI as described above.

0029For user anonymity reasons it is desirable to also have TMSI-roaming between different systems with different kind of air interfaces, i.e. also the TMSI allocated for the user and stored to the SIM card in an "old" mobile radio system is also transferred to a "new" mobile radio system by SIM roaming. The problem, however, is that the TMSI as specified for GSM does not have any relevancy in other mobile radio systems. Further the GSM SIM card contains only a single storage location for a single TMSI. Therefore a method is needed to differentiate between TMSI's of different mobile radio systems and to store them in GSM SIM-card in an uniform way.

0030In the preferred embodiment of the present invention the above problem is solved by utilizing the bits 5 to 8 of the octet 6 in the TMSI to differentiate between different TMSI's of different systems. According to the invention these bits are coded in all mobile radio systems in an uniform manner to indicate the mobile radio system which has allocated the TMSI. The remaining bit locations of the TMSI may be in a mobile radio system specific format. For example, if these bits are coded as "1111" for identifying TMSI of GSM900/DCS1800 systems, as shown in Fig. 4. All other codings of the bits 5 to 8 in the octet 6 may be used to identify TMSIs of other mobile radio systems, as shown by "xxxx" in Fig. 5.

0031A preferred embodiment of the "SIM roaming", or particularly TMSI roaming, according to the invention will be described below with reference to the Figs. 6 and 7. In Fig. 6 two interconnected mobile radio systems I and II with different radio interfaces I and II, respectively, are shown. Assume that the mobile radio system I is in accordance with GSM specifications including the radio interface I. Only the network elements necessary to the description of the invention are shown in Fig. 6, namely visitor location register VLRl, mobile exchange MSC1, base station controller BSCl, and base station BTS1. Further a mobile station MSI consists of a removable subscriber identification module SIM, as well as a mobile equipment ME1 containing the hardware and software specific for communication of the radio interface I.

0032Similarly, only the network elements of the mobile radio system II necessary for describing the present invention are shown in Fig. 6, namely visitor location register VLR2, a mobile exchange MSC2, a base station controller BSC2, and a base station BTS2. The mobile radio system II may follow the same network standard as the mobile radio system I, namely GSM MAP, or any other network standard, e.g. IS-41. However, the radio interface II of the system II is different from the radio interface I of the system I, e.g. operates on different band of carrier frequencies. Fig. 6 shows also a mobile station MS2 of the mobile radio system II consisting of a subscriber identification module SIM, and mobile equipment ME2 containing the hardware and software specific for communication of the radio interface II. The minimum requirement for the present invention is that the SIM format used in system I is similar to or compatible with the SIM used in system II. Further, for purposes of the present invention, an interconnection link between VLR1 and VLR2 is shown. The interconnection between the mobile radio system I and II may be, however, embodied by any other type of the interconnection enabling the IMSI request according to the present invention.

0033Firstly, let us assume that a mobile subscriber is using the mobile radio system I . The SIM of the mobile subscriber is inserted into the reading device of mobile equipment ME1 of the mobile station 1. The mobile station has performed a location updating in one of the location areas of VLR1. Consequently VLR1 has allocated to the mobile subscriber a TMSI for this location area. In the allocated TMSI the bits 5 to 8 of the octet 6 are coded as "1111" for identifying the mobile radio system I. Octets 8 and 9 of the TMSI contain the location area code of the current location area of the MSI. The VLR1 will send the allocated TMSI to the mobile station MSI in which the TMSI is stored into the predetermined storage location of the SIM. Let us next assume that the mobile subscriber wishes to use the mobile radio system 2 in which he/she also is an authorized mobile user. To that end he/she removes the personal SIM from MSI and inserts it into the reading device of MS2 in the mobile radio system II. The mobile equipment ME2 of the MS2 reads the stored TMSI from the inserted SIM of the mobile subscriber, and makes a copy of the TMSI to an air interface message. It should be noted that the use and the operation of the SIM and the mobile stations MSI and MS2 in the process according to the present invention may be similar to that of the prior SIMs and MSs. The MS2 will send the TMSI, in a location attempt, for example, over the radio interface II to the network part of the system II in which the TMSI is forwarded to the VLR2. Referring now to the flow chart of Fig. 7, the VLR receives a location attempt from a new MS2 in one of its location areas. Also the old TMSI allocated to the mobile subscriber in the mobile radio system I is received at VLR2 at step 71. Then the VLR2 analyses bits 5 to 8 of octet 6 in the TMSI, in steps 72 and 73, in order to find out the actual structure of the old TMSI and the mobile radio system that allocated the old TMSI. If the decision in the step 73 is that the old TMSI is allocated by the same mobile radio system, namely system II, VLR2 makes a standard IMSI request in mobile radio system II, unless the old TMSI is already known by VLR2, in step 74. In the present example, the VLR2 detects that the bits 5 to 8 of octet 6 in the TMSI are coded as "1111", and the decision that the old TMSI belongs to the mobile radio system I is made in step 73. As a consequence, VLR2 requests the actual user identity, IMSI, from the VLR1 of the mobile radio system I because VLR1 is the only place containing mapping between the old TMSI and the actual user identity in step 75. The request is made by using the system identification information obtained from the TMSI to find the old VLR and by sending the old TMSI to the VLR2. The VLR2 will respond by sending the IMSI and, optionally, other subscriber data to the VLR2. The VLR2 receives the IMSI in step 76 and then follows the standard network procedure utilized in the mobile radio system II. The figures and the description associated are only intended to illustrate the present invention. Changes and modifications to the described embodiments are possible without going beyond the scope and spirit of the attached claims.