DEVICE, METHOD AND APPARATUS FOR AUTHENTICATION ON UNTRUSTED NETWORKS VIA TRUSTED NETWORKS

• US 20110030039A1
• Filed: 07/31/2009
• Published: 02/03/2011
• Est. Priority Date: 07/31/2009
• Status: Abandoned Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: BILANGE, Eric
• Application Number:
  US12/533,230
• Publication Number:
  US 20110030039A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

The described apparatus and methods may include a security agent configured to transmit a first service request message via a trusted network, and acquire credential information via the trusted network. The security agent is further configured to transmit a second service request message via an untrusted network, wherein the second service request message comprising the credential information. The security agent is further configured to receive service via the untrusted network based on the credential information in the second service request message.

Claims

1. A method for authenticating a mobile device on an untrusted network via a trusted network, the method comprising:

transmitting, by the mobile device, a first service request message via the trusted network;

acquiring credential information via the trusted network;

transmitting a second service request message via the untrusted network, the second service request message comprising the credential information; and

receiving service via the untrusted network based on the credential information in the second service request message.

2. The method of claim 1, wherein acquiring the credential information further comprises receiving the credential information generated by a service provider.

3. The method of claim 1, further comprising determining a route of communication by comparing communication parameters of the trusted network and the untrusted network, and designating the network with the more preferable communication parameters as the preferred route of communication.

4. The method of claim 1, wherein transmitting the second service request message further comprises inserting the credential information in a header of the second service request message.

5. The method of claim 1, wherein acquiring the credential information further comprises receiving, via the trusted network, encrypted credential information encrypted at a service provider.

6. The method of claim 5, wherein transmitting the second service request message further comprises transmitting the encrypted credential information for decrypting and authentication of the credential information at the service provider.

7. The method of claim 1, wherein transmitting the first service request message further comprises transmitting the first service request message to a service provider via a respective trusted network having a predetermined service relationship with the service provider.

8. The method of claim 1, wherein transmitting the first service request message further comprises transmitting the first service request message via a mobile carrier network.

9. The method of claim 1, wherein transmitting the second service request message further comprises transmitting the second service request message via a local area network (LAN).

10. A wireless communication apparatus, comprising:

a security agent configured to;

transmit a first service request message via a trusted network;

acquire credential information via the trusted network;

transmit a second service request message via an untrusted network, the second service request message comprising the credential information; and

receive service via the untrusted network based on the credential information in the second service request message.

11. The wireless communication apparatus of claim 10, wherein the credential information is generated by a service provider.

12. The wireless communication apparatus of claim 10, wherein the security agent is further configured to determine a route of communication by comparing communication parameters of the trusted network and the untrusted network, and to designate the network with the more preferable communication parameters as the preferred route of communication.

13. The wireless communication apparatus of claim 10, wherein the second service request message includes a header comprising the credential information.

14. The wireless communication apparatus of claim 10, wherein the received credential information is encrypted at a service provider.

15. The wireless communication apparatus of claim 10, wherein the security agent is further configured to transmit the first service request message to a service provider via a respective trusted network having a predetermined service relationship with the service provider.

16. The wireless communication apparatus of claim 10, wherein the security agent is further configured to transmit the first service request message via a mobile carrier network.

17. The wireless communication apparatus of claim 10, wherein the security agent is further configured to transmit the second service request message via a local area network (LAN).

18. An apparatus comprising:

means for transmitting, by a mobile device, a first service request message via a trusted network;

means for acquiring credential information via the trusted network;

means for transmitting a second service request message via an untrusted network, the second service request message comprising the credential information; and

means for receiving service via the untrusted network based on the credential information in the second service request message.

19. A computer program product, comprising:

a computer-readable medium comprising;

at least one instruction for causing a computer to transmit, by a mobile device, a first service request message via a trusted network;

at least one instruction for causing the computer to acquire credential information via the trusted network;

at least one instruction for causing the computer to transmit a second service request message via an untrusted network, the second service request message comprising the credential information; and

at least one instruction for causing the computer to receive service via the untrusted network based on the credential information in the second service request message.

20. A wireless communications apparatus, comprising:

at least one processor configured to;

transmit, by a mobile device, a first service request message via a trusted network;

acquire credential information via the trusted network;

transmit a second service request message via an untrusted network, the second service request message comprising the credential information; and

receive service via the untrusted network based on the credential information in the second service request message.

21. A method for authenticating a mobile device on an untrusted network via a trusted network, the method comprising:

receiving, at a service provider, a first service request message via the trusted network;

generating credential information;

transmitting the credential information via the trusted network;

receiving a second service request message via the untrusted network, the second service request message comprising the credential information; and

transmitting service via the untrusted network based on the credential information in the second service request message.

22. The method of claim 21, wherein receiving the first service request message further comprises receiving the first service request message modified at the trusted network such that the first service request message is designated as having been transmitted by an authentic subscriber of the trusted network.

23. The method of claim 21, wherein generating the credential information further comprises encrypting the credential information.

24. The method of claim 23, wherein receiving the second service request message further comprises extracting the encrypted credential information from the second service request message, and decrypting the credential information.

25. The method of claim 21, wherein receiving the first service request message further comprises receiving the first service request message via a respective trusted network having a predetermined service relationship with the service provider.

26. The method of claim 21, wherein receiving the first service request message further comprises receiving the first service request message via a mobile carrier network.

27. The method of claim 21, wherein receiving the second service request message further comprises receiving the second service request message via a local area network (LAN).

28. A wireless communication apparatus, comprising:

a service provider configured to;

receive a first service request message via a trusted network;

generate credential information;

transmit the credential information via the trusted network;

receive a second service request message via an untrusted network, the second service request message comprising the credential information; and

transmit service via the untrusted network based on the credential information in the second service request message.

29. The wireless communication apparatus of claim 28, wherein the first service request message is modified at the trusted network such that the first service request message is designated as having been transmitted by an authentic subscriber of the trusted network.

30. The wireless communication apparatus of claim 28, wherein the service provider is further configured to encrypt the credential information.

31. The wireless communication apparatus of claim 30, wherein the service provider is further configured to extract the encrypted credential information from the second service request message, and decrypt the credential information.

32. The wireless communication apparatus of claim 28, wherein the first service request message is received via a respective trusted network having a predetermined service relationship with the service provider.

33. The wireless communication apparatus of claim 28, wherein the first service request message is received via a mobile carrier network.

34. The wireless communication apparatus of claim 28, wherein the second service request message is received via a local area network (LAN).

35. An apparatus comprising:

means for receiving, at a service provider, a first service request message via a trusted network;

means for generating credential information;

means for transmitting the credential information via the trusted network;

means for receiving a second service request message via an untrusted network, the second service request message comprising the credential information; and

means for transmitting service via the untrusted network based on the credential information in the second service request message.

36. A computer program product, comprising:

a computer-readable medium comprising;

at least one instruction for causing a computer to receive, at a service provider, a first service request message via a trusted network;

at least one instruction for causing a computer to generating credential information;

at least one instruction for causing the computer to transmit the credential information via the trusted network;

at least one instruction for causing the computer to receive a second service request message via an untrusted network, the second service request message comprising the credential information; and

at least one instruction for causing the computer to transmit service via the untrusted network based on the credential information in the second service request message.

37. A wireless communications apparatus, comprising:

at least one processor configured to;

receive a first service request message via a trusted network;

generate credential information;

transmit the credential information via the trusted network;

receive a second service request message via an untrusted network, the second service request message comprising the credential information; and

transmit service via the untrusted network based on the credential information in the second service request message.