Mobile wireless device managed access system providing enhanced authentication features and related methods

• US 10,405,184 B2
• Filed: 01/31/2017
• Issued: 09/03/2019
• Est. Priority Date: 01/31/2017
• Status: Active Grant

• Current Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: Gallagher, Shawn H., Salyers, Eric J., Collins, Matthew D.
• Primary Examiner(s): Avery, Jeremiah L
• Application Number:
  US15/420,167
• Publication Number:
  US 20180220301A1
• Time in Patent Office: 945 Days
• Field of Search: None
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

A managed access system is for mobile wireless devices (MWDs) in a facility, with the facility being geographically within a wireless communications network of a communications carrier. The system may include antennas arranged at the facility, radio equipment coupled to the antennas, a network interface device configured to provide communications with the communications carrier, and a management access controller. The controller may be configured to communicate with the radio equipment and the network interface device to retrieve respective authenticated encryption keys from the communications carrier for each MWD, authenticate the MWDs to a local managed access network based upon respective encrypted keys, provide communications between authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier, and deny communications between un-authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier.

Claims

1. A managed access system for mobile wireless devices (MWDs) in a facility, the facility being geographically within a wireless communications network of a communications carrier, the managed access system comprising:

a plurality of antennas arranged at the facility;

radio equipment coupled to the plurality of antennas;

a network interface device configured to provide communications with the communications carrier; and

a management access controller configured to

communicate with the radio equipment and the network interface device to retrieve respective authenticated encryption keys from the communications carrier for each MWD,

authenticate the MWDs to a local managed access network based upon respective encrypted keys,

provide communications between authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier, and

deny communications between un-authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier.

2. The managed access system of claim 1 wherein the network interface device comprises an aggregation server to aggregate communications between the authenticated MWDs and the communications carrier.

3. The managed access system of claim 1 wherein the network interface device cooperates with a mobile network operator to retrieve the respective authenticated encryption keys from the communications carrier for each MWD.

4. The managed access system of claim 1 wherein the management access controller provides or denies communications based upon a local policy for the local managed access network.

5. The managed access system of claim 1 wherein each of the plurality of antennas comprises a directional antenna.

6. The managed access system of claim 1 wherein the plurality of antennas are arranged around a periphery of the facility.

7. The managed access system of claim 1 wherein the management access controller is configured to permit an un-authenticated MWD to communicate with other MWDs on the local managed access network.

8. The managed access system of claim 1 wherein the managed access controller is configured to identify MWDs based upon respective International Mobile Subscriber Identity (IMSI) identifiers thereof.

9. The managed access system of claim 1 further comprising at least one MWD geolocation device;

and wherein the management access controller cooperates with the at least one MWD geolocation device to locate a given MWD within the facility.

10. The managed access system of claim 9 wherein the at least one MWD geolocation device comprises a plurality of external geolocation devices arranged around a periphery of the facility.

11. The managed access system of claim 9 wherein the at least one MWD geolocation device comprises a plurality of internal geolocation devices arranged within a periphery of the facility.

12. The managed access system of claim 1 wherein the radio equipment comprises a plurality of picocell radios, each coupled to a respective antenna;

and wherein the management access controller implements a change in the radio equipment in response to a change in the wireless communications network.

13. The managed access system of claim 1 wherein the radio equipment is operable according to an LTE protocol.

14. A management access controller for mobile wireless devices (MWDs) in a facility and comprising:

a processor and a memory cooperating therewith to

communicate with the MWDs and a network interface device to retrieve respective authenticated encryption keys from a communications carrier for each MWD,

authenticate the MWDs to a local managed access network based upon respective encrypted keys,

provide communications between authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier, and

deny communications between un-authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier.

15. The management access controller of claim 14 wherein the processor provides or denies communications based upon a local policy for the local managed access network.

16. The management access controller of claim 14 wherein the processor is configured to permit an un-authenticated MWD to communicate with other MWDs on the local managed access network.

17. The management access controller of claim 14 wherein the processor is configured to permit an un-authenticated MWD to communicate with other MWDs on the local managed access network.

18. The management access controller of claim 14 wherein the processor is configured to communicate with the MWDs according to an LTE protocol.

19. A method for operating a management access controller for mobile wireless devices (MWDs) in a facility, the method comprising:

communicating with the MWDs and a network interface device to retrieve respective authenticated encryption keys from a communications carrier for each MWD;

authenticating the MWDs to a local managed access network based upon respective encrypted keys;

providing communications between authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier; and

denying communications between un-authenticated MWDs on the local managed access network and the network interface device for communications with the communications carrier.

20. The method of claim 19 wherein providing and denying are based upon a local policy for the local managed access network.

21. The method of claim 19 further comprising permitting an un-authenticated MWD to communicate with other MWDs on the local managed access network.

22. The method of claim 19 further comprising identifying MWDs based upon respective International Mobile Subscriber Identity (IMSI) identifiers thereof.

23. The method of claim 19 wherein the processor is configured to communicate with the MWDs according to an LTE protocol.