TICKET-BASED CONFIGURATION PARAMETERS VALIDATION

• US 20100069067A1
• Filed: 09/12/2008
• Published: 03/18/2010
• Est. Priority Date: 09/12/2008
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Vanderveen, Michaela, Park, Vincent D., Corson, M. Scott, Tsirtsis, George
• Granted Patent: US 8,548,467 B2
• Time in Patent Office: Days
• US Class Current: 455/435.100
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

Aspects describe spectrum authorization, access control, and configuration parameters validation. Devices in an ad-hoc or peer-to-peer configuration can utilize a licensed spectrum if the devices are authorized to use the spectrum, which can be determined automatically. Aspects relate to distribution of authorization tickets by an authorization server as a result of validating a device'"'"'s credentials and services to which the device is entitled. An exchange and verification of authorization tickets can be performed by devices as a condition for enabling a validated wireless link using the spectrum.

Claims

1. A method for validating ticket-based configuration parameters, comprising:

associating a device with one or more validated information elements; and

transmitting an authorization ticket certified by a trusted party to the device, the ticket includes a subset of the one or more validated information elements, wherein the device uses the authorization ticket to establish a communication link with another device.

2. The method of claim 1, wherein the validated information elements includes an Internet Protocol address assigned to the device.

3. The method of claim 1, wherein the validated information elements includes a telephone number assigned to the device.

4. The method of claim 1, wherein the authorization ticket includes a cryptographic signature of the trusted party.

5. The method of claim 1, further comprising:

employing an authentication protocol or authorization protocol to communicate with the device; and

determining whether to construct an authorization ticket and the information elements to include in the authorization ticket based in part on the communication with the device.

6. The method of claim 1, further comprises consulting a database of authorized devices and associated parameters identified by a unique device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum.

7. The method of claim 1, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of the trusted party.

8. The method of claim 1, wherein the authorization ticket is implemented as a traditional digital certificate.

9. A wireless communications apparatus, comprising:

a memory that retains instructions related to associating a device with one or more validated information elements and transmitting an authorization ticket certified by a trusted party to the device, the ticket includes a subset of the one or more validated information elements, wherein the device uses the authorization ticket to establish a communication link with another device; and

a processor, coupled to the memory, configured to execute the instructions retained in the memory.

10. The wireless communications apparatus of claim 9, wherein the validated information elements include an Internet Protocol address assigned to the device, a telephone number assigned to the device, or both the Internet Protocol address and the telephone number.

11. The wireless communications apparatus of claim 9, the memory further retains instructions related to consulting a database of authorized devices and associated parameters identified by a unique device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum.

12. The wireless communications apparatus of claim 9, the memory further retains instructions related to employing an authorization protocol to communicate with the device and determining whether to construct an authorization ticket and the information elements to include in the authorization ticket.

13. The wireless communications apparatus of claim 9, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of the trusted party.

14. A wireless communications apparatus that provides ticket-based validation parameters, comprising:

means for associating a device with one or more validated information elements; and

means for transmitting an authorization ticket certified by a trusted party to the device, the ticket includes a subset of the one or more validated information elements, wherein the device uses the authorization ticket to establish a validated and secure communication link with another device.

15. The wireless communications apparatus of claim 14, further comprising:

means for consulting a database of authorized devices and associated parameters identified by a device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum.

16. The wireless communications apparatus of claim 14, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of the trusted party.

17. The wireless communications apparatus of claim 14, further comprising:

means for employing an authentication protocol to communicate with the device; and

means for determining whether to construct an authorization ticket and the information elements to include in the authorization ticket.

18. A computer program product, comprising:

a computer-readable medium comprising;

a first set of codes for causing a computer to communicate with a device;

a second set of codes for causing the computer to determine whether to create an authorization ticket for the device;

a third set of codes for causing the computer to associate the device with one or more validated information elements; and

a fourth set of codes for causing the computer to communicate the authorization ticket to the device, wherein the authorization ticket includes a subset of one or more validated information elements.

19. The computer program product of claim 18, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of a trusted party.

20. At least one processor configured to validate ticket-based configuration parameters, comprising:

a first module for consulting a database of authorized devices and associated parameters identified by a device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum;

a second module for associating a device with one or more validated information elements; and

a third module for transmitting an authorization ticket certified by a trusted party to the device, the ticket includes a subset of the one or more validated information elements and the information related to the configuration the device can use to communicate, wherein the device uses the authorization ticket to establish a communication link with another device.

21. A method for validation of ticket-based configuration parameters, comprising:

obtaining an authorization ticket that includes one or more validated information elements associated with a device;

validating the authorization ticket;

utilizing the authorization ticket to establish a validated communication with the device; and

using a subset of the one or more validated information elements to perform a configuration operation.

22. The method of claim 21, wherein at least one of the validated information elements is an Internet Protocol address.

23. The method of claim 21, wherein the configuration operation comprises configuring an interface.

24. The method of claim 21, wherein the configuration operation comprises adding a route.

25. The method of claim 21, wherein the validated communication is broadcast or multicast.

26. The method of claim 21, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of a trusted party that issued the authorization ticket.

27. The method of claim 21, wherein the validated communication with the device is a peer-to-peer configuration.

28. A wireless communications apparatus, comprising:

a memory that retains instructions related to obtaining an authorization ticket that includes one or more validated information elements associated with a device, validating the authorization ticket, utilizing the authorization ticket to establish a validated communication with the device, and using a subset of the one or more validated information elements to perform a configuration operation; and

a processor, coupled to the memory, configured to execute the instructions retained in the memory.

29. The wireless communications apparatus of claim 28, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of a trusted party that issued the authorization ticket.

30. The wireless communications apparatus of claim 28, wherein the validated communication with the device is a peer to peer configuration.

31. The wireless communications apparatus of claim 28, wherein the configuration operation comprises at least one of configuring an interface or adding a route.

32. The wireless communications apparatus of claim 28, wherein the validated communication is broadcast or multicast.

33. A wireless communications apparatus that validates ticket-based configuration parameters, comprising:

means for acquiring an authorization ticket that includes one or more validated information elements associated with a device;

means for validating the authorization ticket;

means for establishing a validated communication with the device based in part on the authorization ticket; and

means for performing a configuration operation with a subset of the one or more validated information elements.

34. The wireless communications apparatus of claim 33, wherein the means for obtaining the authorization ticket requests the authorization ticket from a nearby device.

35. The wireless communications apparatus of claim 33, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of a trusted party that issued the authorization ticket.

36. The wireless communications apparatus of claim 33, wherein the validated communication with the device is an ad-hoc configuration.

37. A computer program product, comprising:

a computer-readable medium comprising;

a first set of codes for causing a computer to obtain an authorization ticket that includes one or more validated information elements associated with a device;

a second set of codes for causing the computer to validate the authorization ticket;

a third set of codes for causing the computer to utilize the authorization ticket to establish a validated communication with the device; and

a fourth set of codes for causing the computer to use a subset of the one or more validated information elements to perform a configuration operation.

38. The computer program product of claim 37, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of a trusted party that issued the authorization ticket.

39. At least one processor configured to provide spectrum authorization and access control, comprising:

a first module for acquiring an authorization ticket that includes one or more validated information elements associated with a device;

a second module for validating the authorization ticket;

a third module for employing the authorization ticket to establish a validated communication with the device; and

a fourth module for utilizing a subset of the one or more validated information elements to perform a configuration operation.

40. The at least one processor of claim 39, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of a trusted party that issued the authorization ticket.