Device Verification for Dynamic Re-Certificating

• US 20130185552A1
• Filed: 01/13/2012
• Published: 07/18/2013
• Est. Priority Date: 01/13/2012
• Status: Abandoned Application

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Steer, David G.
• Application Number:
  US13/350,648
• Publication Number:
  US 20130185552A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/63775 for uploading keys, e.g. for a client to communicate its public key to the server key management H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38

Abstract

A method for authenticating a device is provided. The method comprises receiving, by a network component, from the device, an access request and an encryption key; sending, by the network component, to the device, a request for at least one of current information associated with the device and an identification number associated with the device; receiving, by the network component, a response from the device; comparing, by the network component, the response with a known version of the at least one of current information associated with the device and identification number associated with the device; and determining, by the network component, that the device has passed an authenticity test when at least one of: current information included in the response matches the known version of the current information, and the identification number included in the response matches the known version of the identification number.

Claims

1. A method for authenticating a device, the method comprising:

receiving, by a network component, from the device, an access request and an encryption key;

sending, by the network component, to the device, a request for at least one of information based upon a current location of the device and an identification number associated with the device;

receiving, by the network component, a response from the device;

comparing, by the network component, the response with information obtained independently of the response; and

determining, by the network component, whether the access request is authentic based at least in part upon one of;

whether the information about the current location is consistent with the information obtained independently of the response, and

whether the identification number included in the response is consistent with the information obtained independently of the response.

2. The method of claim 1, wherein the network component sends the device a message encrypted using the encryption key.

3. The method of claim 1, wherein the request for information based upon the current location of the device is a request for at least one of:

an identifier for a cell in which the device is currently located; and

a current time of day where the device is currently located.

4. The method of claim 1, wherein, when the network component determines that the access request is authentic, and when reconfiguration software is determined to be compatible with the device, the reconfiguration software is provided to the device.

5. The method of claim 4, wherein the received reconfiguration software includes a new certificate of conformance for the reconfigured device.

6. The method of claim 1, wherein a service provider is managing wireless transmission service to the device, and wherein the network component obtains the independent information from the service provider.

7. The method of claim 1, wherein the response from the device to the network component is encrypted using the encryption key.

8. A network component, comprising:

a processor configured such that the network component receives, from a device, an access request and an encryption key, further configured such that the network component sends, to the device, a request for at least one of information based upon a current location of the device and an identification number associated with the device, further configured such that the network component receives a response from the device, further configured such that the network component compares the response with information obtained independently of the response, and further configured such that the network component determines whether the access request is authentic based at least in part upon one of whether the information about the current location is consistent with the information obtained independently of the response, and whether the identification number included in the response is consistent with the information obtained independently of the response.

9. The network component of claim 8, wherein the network component sends the device a message encrypted using the encryption key.

10. The network component of claim 8, wherein the request for information based upon a current location of the device is a request for at least one of:

an identifier for a cell in which the device is currently located; and

a current time of day where the device is currently located.

11. The network component of claim 8, wherein, when the network component determines that the access request is authentic, and when reconfiguration software is determined to be compatible with the device, the reconfiguration software is provided to the device.

12. The network component of claim 11, wherein the received reconfiguration software includes a new certificate of conformance for the reconfigured device.

13. The network component of claim 8, wherein a service provider is managing wireless transmission service to the device, and wherein the network component obtains the independent information from the service provider.

14. The network component of claim 8, wherein the response from the device to the network component is encrypted using the encryption key.

15. A method for authentication of a device, the method comprising:

sending, by the device, to a network component, an access request and an encryption key;

receiving, by the device, from the network component, a request for at least one of information based upon a current location of the device and an identification number associated with the device; and

returning, by the device, to the network component, a response that includes at least one of the information based upon the current location of the device and the identification number associated with the device.

16. The method of claim 15, wherein the encryption key can be used by the network component to send an encrypted message to the device.

17. The method of claim 15, wherein the request for information based upon the current location of the device is a request for at least one of:

an identifier for a cell in which the device is currently located; and

a current time of day where the device is currently located.

18. The method of claim 17, wherein the access request is determined to be authentic when at least one of:

the identifier for the cell in which the device is currently located is consistent with information obtained independently of the response; and

the current time of day where the device is currently located is consistent with a time of day obtained independently of the response.

19. The method of claim 15, wherein the access request is determined to be authentic when the identification number returned in the response is consistent with information obtained independently of the response.

20. The method of claim 15, wherein, when the access request is determined to be authentic based on the response, and when reconfiguration software is determined to be compatible with the device, the reconfiguration software is provided to the device.

21. The method of claim 20, wherein the received reconfiguration software includes a new certificate of conformance for the reconfigured device.

22. The method of claim 15, wherein a service provider is managing wireless transmission service to the device, and wherein the network component obtains from the service provider independent information that can be used in determining if the access request is authentic.

23. The method of claim 15, wherein the response from the device to the network component is encrypted using the encryption key.

24. A device, comprising:

a processor configured such that the device sends, to a network component, an access request and an encryption key, further configured such that the device receives, from the network component, a request for at least one of information based upon a current location of the device and an identification number associated with the device, and further configured such that the device returns, to the network component, a response that includes at least one of the information based upon a current location of the device and the identification number associated with the device.

25. The device of claim 24, wherein the encryption key can be used by the network component to send an encrypted message to the device.

26. The device of claim 24, wherein the request for information based upon a current location of the device is a request for at least one of:

an identifier for a cell in which the device is currently located; and

a current time of day where the device is currently located.

27. The device of claim 26, wherein the access request is determined to be authentic when at least one of:

the identifier for the cell in which the device is currently located is consistent with information obtained independently of the response; and

the current time of day where the device is currently located is consistent with a time of day obtained independently of the response.

28. The device of claim 24, wherein the access request is determined to be authentic when the identification number returned in the response is consistent with information obtained independently of the response.

29. The device of claim 24, wherein, when the access request is determined to be authentic based on the response, and when reconfiguration software is determined to be compatible with the device, the reconfiguration software is provided to the device.

30. The device of claim 29, wherein the received reconfiguration software includes a new certificate of conformance for the reconfigured device.

31. The device of claim 24, wherein a service provider is managing wireless transmission service to the device, and wherein the network component obtains from the service provider independent information that can be used in determining if the access request is authentic.

32. The device of claim 24, wherein the response from the device to the network component is encrypted using the encryption key.

33. A method for a database manager for transmissions within a television white space to authenticate a device adapted for television band transmissions, the method comprising:

sending, by the device, to the database manager, an access request and an encryption key;

sending, by the database manager, to the device, a request for additional information;

returning, by the device, to the database manager, a response that includes at least one of information associated with a current location of the device and the identification number associated with the device;

comparing, by the database manager, the response with information obtained independent of the device; and

determining, by the database manager, whether the access request is authentic based at least in part upon one of;

whether the current information included in the response is consistent with the independent information, and

whether the identification number included in the response is consistent with the independent information.

34. The method of claim 33, wherein the database manager sends the device a message encrypted using the encryption key.

35. The method of claim 33, wherein the request for information based upon the current location comprises one of:

an identifier for a cell in which the device is currently located; and

the current time of day within the cell where the device is currently located.

36. The method of claim 33, wherein, when the database manager determines that the device is authentic, and when reconfiguration software is determined to be compatible with the device, the reconfiguration software is provided to the device.

37. The method of claim 36, wherein the received reconfiguration software includes a new certificate of conformance for the reconfigured device.

38. The method of claim 33, wherein a service provider is managing wireless transmission service to the device, and wherein the network component obtains the independent information from the service provider.

39. The method of claim 33, wherein the response from the device to the network component is encrypted using the encryption key.

40. A database manager for transmissions within a television white space, the database manager comprising:

a processor configured such that the database manager receives, from a device adapted for television band transmissions, an access request and an encryption key, further configured such that the database manager sends, to the device, a request for additional information, further configured such that the database manager receives, from the device, a response that includes at least one of information associated with a current location of the device and the identification number associated with the device, further configured such that the database manager compares the response with information obtained independent of the device, and further configured such that the database manager determines whether the access request is authentic based at least in part upon one of;

whether the current information included in the response is consistent with the independent information, and whether the identification number included in the response is consistent with the independent information.

41. The database manager of claim 40, wherein the database manager sends the device a message encrypted using the encryption key.

42. The database manager of claim 40, wherein the request for information based upon the current location comprises one of:

an identifier for a cell in which the device is currently located; and

the current time of day within the cell where the device is currently located.

43. The database manager of claim 40, wherein, when the database manager determines that the device is authentic, and when reconfiguration software is determined to be compatible with the device, the reconfiguration software is provided to the device.

44. The database manager of claim 43, wherein the received reconfiguration software includes a new certificate of conformance for the reconfigured device.

45. The database manager of claim 40, wherein a service provider is managing wireless transmission service to the device, and wherein the network component obtains the independent information from the service provider.

46. The database manager of claim 40, wherein the response from the device to the network component is encrypted using the encryption key.