Method and Apparatus for Secure Immediate Wireless Access in a Telecommunications Network

• US 20070300294A1
• Filed: 09/04/2007
• Published: 12/27/2007
• Est. Priority Date: 03/04/2002
• Status: Active Grant

• Current Assignee: Evolving Systems Labs Incorporated
• Original Assignee: Telespree Communications (CCUR Holdings, Inc.)
• Inventors: Netanel, Eran, Lavine, James
• Granted Patent: US 7,904,072 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

A wireless telephone and messaging system provides Secure Immediate Wireless Access (SIWA) to wireless telephones onto existing wireless networks, such as GSM, CDMA, TDMA, and analog (AMPS). The SIWA protocol uses existing wireless network messaging to exchange information between wireless devices and a network server, referred to herein as an Intelligent Service Manager (ISM). The ISM acts as a gateway between wireless devices and wireless service provider, and provides the wireless devices with an immediate limited or unlimited access to the wireless network. The ISM can also deny access to the wireless network from unauthorized wireless devices.

Claims

1. A secure immediate access wireless apparatus that enables at least one non-active wireless device to activate itself on the wireless network, comprising:

an intelligent service manager server for managing an activation session of said at least one non-active wireless device;

means for said non-active wireless device to present at least one temporary mandatory network identifier at the beginning of activation to gain access to said intelligent service manager server via said wireless network;

means for securely exchanging information between said at least one non-active wireless device and said intelligent service manager server during said activation session, wherein wireless network elements interposed between said intelligent service manager server and said non-active wireless device passively route messages between said intelligent service manager server and said non-active wireless device as if said non-active wireless device were active;

means for using one or more wireless messaging transports to exchange information between said at least one non-active wireless device and said intelligent service manager server during activation without requiring implementation of extensions to messaging protocols;

wherein activation comprises the steps of;

said non-active device presenting at least one temporary mandatory network identifier to said intelligent service manager via said wireless network;

said non-active wireless device gaining restricted access to said wireless network with said at least one temporary network identifier; and

wherein activation further comprises any of the steps of;

said intelligent service manager server programming said non-active wireless device with at least one mandatory network identifier;

said intelligent service manager server programming said non-active wireless device with at least one security key;

said intelligent service manager server interacting with a user via said wireless device immediately after authentication;

said intelligent service manager server triggering an additional network provisioning process; and

said intelligent service manager server providing feedback to said user.

2. The apparatus of claim 1, wherein said at least one temporary mandatory network identifier is generated from a set of allocated network identifiers.

3. The apparatus of claim 2, wherein the set of allocated network identifiers provide access only to said intelligent service manager server via said wireless network.

4. The apparatus of claim 1, wherein said at least one temporary network identifier is algorithmically generated.

5. The apparatus of claim 1, wherein said intelligent service manager server returns an access profile for said non-active wireless device to appropriate network elements.

6. The apparatus of claim 1, wherein said non-active wireless device authenticates said intelligent service manager server.

7. The apparatus of claim 1, wherein said intelligent service manager server authenticates said non-active wireless device.

8. The apparatus of claim 1, wherein said intelligent service manager server allocates at least one mandatory network identifier for said non-active wireless device.

9. The apparatus of claim 1, wherein said non-active wireless device detects that it is not active and wherein activation further comprises any of the steps of:

said non-active wireless device informs the user that it is not active and allow the user to initiate activation;

.

said non-active wireless device automatically initiates activation.

10. The apparatus of claim 1, wherein an active wireless device reactivates itself by initiating activation as if the active wireless device were non-active.

11. The apparatus of claim 1, wherein an active wireless device reactivates itself after receiving a reactivation command message from the wireless network and by initiating activation as if the active wireless device were non-active.

12. A secure immediate access wireless method for enabling at least one non-active wireless device to activate itself on the wireless network, said method comprising the steps of:

managing an activation session of said at least one non-active wireless device with an intelligent service manager server;

said non-active wireless device presenting at least one temporary mandatory network identifier at the beginning of activation to gain access to said intelligent service manager server via said wireless network;

securely exchanging information between said at least one non-active wireless device and said intelligent service manager server during said activation session, wherein wireless network elements interposed between said intelligent service manager server and said non-active wireless device passively route messages between said intelligent service manager server and said non-active wireless device as if said non-active wireless device were active;

using one or more wireless messaging transports to exchange information between said at least one non-active wireless device and said intelligent service manager server during activation without requiring implementation of extensions to messaging protocols;

wherein activation comprises the steps of;

said non-active device presenting at least one temporary mandatory network identifier to said intelligent service manager via said wireless network;

said non-active wireless device gaining restricted access to said wireless network with said at least one temporary network identifier; and

wherein activation further comprises any of the steps of;

said intelligent service manager server programming said non-active wireless device with at least one mandatory network identifier;

said intelligent service manager server programming said non-active wireless device with at least one security key;

said intelligent service manager server interacting with a user via said wireless device immediately after authentication;

said intelligent service manager server triggering an additional network provisioning process; and

said intelligent service manager server providing feedback to said user.

13. The method of claim 12, further comprising the step of:

generating said at least one temporary mandatory network identifier from a set of allocated network identifiers.

14. The method of claim 13, further comprising the step of:

said set of allocated network identifiers providing access only to said intelligent service manager server via said wireless network.

15. The method of claim 12, further comprising the step of:

algorithmically generating said at least one temporary network identifier.

16. The method of claim 12, further comprising the step of:

said intelligent service manager server returning an access profile for said non-active wireless device to appropriate network elements.

17. The method of claim 12, further comprising the step of:

said non-active wireless device authenticating said intelligent service manager server.

18. The method of claim 12, further comprising the step of:

said intelligent service manager server authenticating said non-active wireless device.

19. The method of claim 12, further comprising the step of:

said intelligent service manager server allocating at least one mandatory network identifier for said non-active wireless device.

20. The method of claim 12, further comprising the step of:

A non-active wireless device detecting that it is not active and wherein activation further comprises any of the steps of;

said non-active wireless device informing the user that it is not active and allowing the user to initiate activation;

said non-active wireless device automatically initiating activation.

21. The method of claim 12, further comprising the step of:

an active wireless device reactivating itself by initiating activation as if the active wireless device were non-active.

22. The method of claim 12, further comprising the step of:

an active wireless device reactivating itself after receiving a reactivation command message from the wireless network and initiating activation as if the active wireless device were non-active.