ENTERPRISE INSTANT MESSAGE AGGREGATOR

• US 20110035591A1
• Filed: 10/19/2010
• Published: 02/10/2011
• Est. Priority Date: 10/30/2006
• Status: Active Grant

• Current Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Original Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Inventors: DUDZIAK, Thaddeus Jude, Patel, Biren, Kupsh, Jerry
• Granted Patent: US 8,032,165 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A disclosed enterprise instant messaging (IM) service aggregator enables validation of mobile stations and/or users for enterprise IM service through a wireless communication network; and in the examples, the enterprise IM service provides a secure messaging environment that allows IM traffic to/from wireless mobile stations. The security offered may be unique to and controlled by each enterprise, for example, by enabling each enterprise to generate its own encryption key for distribution through the aggregator and by allowing mobile stations to generate their own keys for distribution back through the aggregator to the enterprise IM servers. As disclosed, the login credentials are encrypted from the mobile station to the enterprise IM server. The use of standard encryption methods within the call flows allows a simple method of ensuring that only authorized users can access the enterprise servers and that the messages will be encrypted by the strongest possible means.

Claims

1-15. -15. (canceled)

16. A method of providing enterprise instant messaging (IM) service for a mobile station through a mobile wireless communication network, the method comprising:

receiving a request for enterprise service from the mobile station, in an IM service control element of the mobile wireless communication network;

determining whether the mobile station is authorized to utilize the enterprise IM service through the mobile communication network;

in response to a determination that the mobile station is authorized to utilize the enterprise IM service through the mobile communication network, encrypting and forwarding login information of a user of the mobile station to an IM server of one of a plurality of enterprise communities served through the mobile wireless communication network for enterprise validation of user authentication;

receiving an indication of successful validation of the user of the mobile station from the IM server, and in response, providing a key of the IM service control element of the mobile wireless communication network to the mobile station for use in encrypted communication of a security key of the mobile station through the mobile wireless communication network to the IM server as part of a login of the mobile station with the IM server; and

transporting encrypted communications of IM messages through the mobile wireless communication network at least between the mobile station and the IM server, wherein at least one of the communications of IM messages is encrypted with the security key of the mobile station.

17. The method of claim 16, wherein:

the security key is a security key of the mobile station for encryption in accord with a first encryption algorithm;

the encrypting of the login information uses a public security key for the first encryption algorithm associated with the IM server; and

the providing of the key to the mobile station involves encrypting the key in accord with a second encryption algorithm.

18. The method of claim 17, wherein:

the second encryption algorithm implements Rivest, Shamir and Adleman (RSA) encryption; and

the first encryption algorithm implements Advanced Encryption Standard encryption or encryption in accord with a Triple Data Encryption Algorithm.

19. The method of claim 16, wherein:

the received request includes a username for the user of the mobile station; and

forwarding of the login information of the user comprises identifying the one enterprise community with which the username is associated.

20. The method of claim 19, wherein:

the username comprises an email address for the user of the mobile station; and

the one enterprise community is identified by a domain name portion of the email address for the user.

21. The method of claim 19, further comprising:

receiving another request for enterprise service from another mobile station, in the IM service control element of the mobile wireless communication network;

determining whether or not the other mobile station is authorized to utilize the enterprise IM service through the mobile communication network; and

in response to a determination that the other mobile station is not authorized to utilize the enterprise IM service through the mobile communication network, sending a message through the mobile communication network to the other mobile station to initiate provisioning of the other mobile station for enterprise IM service through the mobile communication network.

22. A method of providing enterprise instant messaging (IM) service for a mobile station through a mobile wireless communication network, the method comprising:

receiving a first request for enterprise service from the mobile station, in an IM service control element of the mobile wireless communication network;

determining whether or not the mobile station is authorized to utilize the enterprise IM service through the mobile communication network;

in response to a determination that the mobile station is not authorized to utilize the enterprise IM service through the mobile communication network, initiating a communication between the mobile station and a provisioning system of the carrier providing the IM service through the mobile wireless communication network, to provision the mobile station for enterprise IM service through the mobile communication network; and

after successful completion of communication to provision the mobile station for enterprise IM service, establishing a two-way encrypted secure communication link through the mobile communication network, between an IM server of an identified one of a plurality of enterprise IM communities served by the network and the mobile station for exchange of encrypted IM message payload data.

23. The method of claim 22, wherein the establishing of the two-way encrypted secure communication comprises:

receiving a second request for enterprise service from the mobile station, in the IM service control element of the mobile wireless communication network;

checking whether or not the mobile station is authorized to utilize the enterprise IM service through the mobile communication network; and

upon determining that the mobile station is authorized to utilize the enterprise IM service through the mobile communication network, establishing the two-way encrypted secure communication link through the mobile communication network, between the IM server of the identified enterprise IM community and the mobile station for the exchange of the encrypted IM message payload data.