Method and apparatus for secure immediate wireless access in a telecommunications network

• US 20050181793A1
• Filed: 04/06/2005
• Published: 08/18/2005
• Est. Priority Date: 03/04/2002
• Status: Active Grant

• Current Assignee: Evolving Systems Labs Incorporated
• Original Assignee: Eran Netanel
• Inventors: Netanel, Eran
• Granted Patent: US 7,565,142 B2
• Time in Patent Office: Days
• US Class Current: 455/435.200
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

A wireless telephone and messaging system provides Secure Immediate Wireless Access (SIWA) to wireless telephones onto existing wireless networks, such as GSM, CDMA, TDMA, and analog (AMPS). The SIWA protocol uses existing wireless network messaging to exchange information between wireless devices and a network server, referred to herein as an Intelligent Service Manager (ISM). The ISM acts as a gateway between wireless devices and wireless service provider, and provides the wireless devices with an immediate limited or unlimited access to the wireless network. The ISM can also deny access to the wireless network from unauthorized wireless devices.

Claims

1. A bootstrap process for secure immediate wireless access by at least one wireless device for exchange of information via an existing wireless network, comprising the steps of:

after said at least one wireless device is powered on and after scanning available networks, said at least one wireless device optionally interacting with a user to select a desired network, said at least one wireless device then selecting a bootstrap network identity known by said selected network;

using existing wireless network messaging to exchange said information between said wireless device and a network server;

said network server comprising an intelligent service manager which executes the steps of;

operating as a trusted gateway between said wireless device and a wireless network;

providing said wireless device with mandatory network identifier and security keys;

providing service to a user without a need for manual provision of accounts;

providing said wireless device with immediate access to said wireless network; and

providing access to service offered by said wireless service provider to said user at the time they are needed by said user.

2. The process of claim 1, further comprising the steps of:

once a wireless device selects a wireless network and before a network access attempt, either registration or call origination, said wireless device checking for a Wireless Session status;

wherein if a non-active Wireless Session status is detected, said wireless device then changes its state to indicate that a bootstrap process is initiated.

3. The process of claim 2, wherein said wireless device selects a bootstrap network identity and remains in a bootstrap state until a SessionGranted message is received;

wherein said SessionGranted message provides said wireless device with a network identity.

4. The process of claim 3, wherein said SessionGranted message returns said bootstrap network identity back to said wireless device for a limited use, which may comprise a one time use, limited time use or limited usage use.

5. The process of claim 3, further comprising the steps of:

said intelligent service manager providing said wireless device with a network identity;

programming said network identity into said wireless device; and

said wireless device re-initiating its network access using its new identity.

6. The process of claim 1, wherein said bootstrap process comprises any of assigning a <

Siwa ID, Siwa Key>

pair;

a network identifier;

one or more security keys assignment; and

a phone number.

7. The process of claim 5, further comprising the step of:

said intelligent service manager invalidating a provided Wireless Session as a result of any of an expiration or usage depletion.

8. The process of claim 5, further comprising the step of:

said wireless device checking Wireless Session status before re-initiating its network access.

9. The process of claim 1, further comprising the step of:

said wireless device selecting a network identification for use during said bootstrap process;

wherein said network identification is allocated from a plurality of bootstrap identification numbers known to said network.

10. The process of claim 1, further comprising the step of:

said wireless device selecting a network identification for use during said bootstrap process;

wherein said network identification is pre-assigned.

11. The process of claim 1, further comprising the step of:

in the case of a network identification collision between two bootstrapping wireless devices, rejecting either one of said colliding wireless devices from said network.

12. The process of claim 11, further comprising the step of:

said rejected wireless device re-selecting a network identification and accessing the network using its newly selected network identification.

13. The process of claim 1, wherein said bootstrap process comprises a Wireless Session purchase phase, during which a user is acknowledged with a Wireless Session promotion.

14. The process of claim 13, wherein said Wireless Session is purchased from said wireless device itself after user information is collected.

15. The process of claim 13, wherein said Wireless Session purchase phase includes subscribing the user for postpaid service.

16. The process of claim 14, further comprising the steps of:

said intelligent service manager sending a SessionPromote message to said wireless device;

said wireless device returning a SessionPurchase message with said user information; and

returning a SessionGranted message acknowledging said purchase in case of a successful purchase;

or returning a SessionDenied message indicating a failure.

17. The process of claim 13, wherein a Wireless Session is pre-purchased, and wherein said bootstrap process includes a NULL Wireless Session purchase phase, in which no SessionPromote or SessionPurchase messages are exchanged.

18. The method of claim 1, wherein a SiwaID is embedded as an ESN in an AUTHREQ message.

19. The method of claim 1, wherein a signature is embedded in any of an AUTHR of AUTHREQ or AUTHU of ASREPORT message.

20. The method of claim 1, wherein an MSID is embedded into RANDSSD of either authreq or asreport or AUTHDIR of the SSD update procedure.

21. The method of claim 1, wherein a wireless device ESN is embedded into RANDBS BSCHALL of the SSD update procedure.

22. The method of claim 1, wherein a last unique challenge is used to make sure that both sides are in sync.