TICKET-BASED CONFIGURATION PARAMETERS VALIDATION

• US 20130227655A1
• Filed: 04/04/2013
• Published: 08/29/2013
• Est. Priority Date: 09/12/2008
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Vanderveen, Michaela, Tsirtsis, Georgios, Park, Vincent D., Corson, Mathew Scott
• Granted Patent: US 8,913,995 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

Aspects describe spectrum authorization, access control, and configuration parameters validation. Devices in an ad-hoc or peer-to-peer configuration can utilize a licensed spectrum if the devices are authorized to use the spectrum, which can be determined automatically. Aspects relate to distribution of authorization tickets by an authorization server as a result of validating a device'"'"'s credentials and services to which the device is entitled. An exchange and verification of authorization tickets can be performed by devices as a condition for enabling a validated wireless link using the spectrum.

Claims

1. A method for validating ticket-based configuration parameters, comprising:

employing an authentication protocol or authorization protocol to communicate with a device;

determining whether to construct an authorization ticket for the device and information elements to include in the authorization ticket;

constructing the authorization ticket to include a subset of one or more validated information elements associated with the device, the subset of the one or more validated information elements including a type of services allowed for a communication link between the device and another device, wherein the authorization ticket includes the type of services allowed to said another device for the communication link between the device and said another device, and at least one of a broadcastable expression, or an Internet Protocol address assigned to the device; and

transmitting the authorization ticket certified by a trusted party to the device.

2. The method of claim 1, wherein the validated information elements includes the Internet Protocol address assigned to the device.

3. The method of claim 1, wherein the validated information elements includes a telephone number assigned to the device.

4. The method of claim 1, wherein the authorization ticket includes a cryptographic signature of the trusted party.

5. The method of claim 1, wherein the broadcastable expression is at least one of a name, an identity, a location, user information, or a trademark.

6. The method of claim 1, further comprises consulting a database of authorized devices and associated parameters identified by a unique device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum.

7. The method of claim 1, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of the trusted party.

8. The method of claim 1, wherein the authorization ticket is implemented as a digital certificate.

9. The method of claim 1, further comprising verifying with the device the type of services allowed for the communication link between the device and said another device.

10. A wireless communications apparatus, comprising:

a memory that retains instructions related to employing an authorization protocol to communicate with a device;

determining whether to construct an authorization ticket for the device and information elements to include in the authorization ticket;

constructing the authorization ticket to include a subset of one or more validated information elements associated with the device, the subset of the one or more validated information elements including a type of services allowed for a communication link between the device and another device, wherein the authorization ticket includes the type of services allowed to said another device for the communication link between the device and said another device, and at least one of a broadcastable expression, or an Internet Protocol address assigned to the device; and

transmitting the authorization ticket certified by a trusted party to the device; and

a processor, coupled to the memory, configured to execute the instructions retained in the memory.

11. The wireless communications apparatus of claim 10, wherein the validated information elements include the Internet Protocol address assigned to the device, a telephone number assigned to the device, or both the Internet Protocol address and the telephone number.

12. The wireless communications apparatus of claim 10, the memory further retains instructions related to consulting a database of authorized devices and associated parameters identified by a unique device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum.

13. The wireless communications apparatus of claim 10, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of the trusted party.

14. A wireless communications apparatus that provides ticket-based validation parameters, comprising:

means for employing an authentication protocol to communicate with a device;

means for determining whether to construct an authorization ticket for the device and information elements to include in the authorization ticket;

means for constructing the authorization ticket to include a subset of one or more validated information elements associated with the device, the subset of the one or more validated information elements including a type of services allowed for a communication link between the device and another device, wherein the authorization ticket includes the type of services allowed to said another device for the communication link between the device and said another device, and at least one of a broadcastable expression, or an Internet Protocol address assigned to the device; and

means for transmitting the authorization ticket certified by a trusted party to the device.

15. The wireless communications apparatus of claim 14, further comprising:

means for consulting a database of authorized devices and associated parameters identified by a device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum.

16. The wireless communications apparatus of claim 14, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of the trusted party.

17. The wireless communications apparatus of claim 14, wherein the broadcastable expression is at least one of a name, an identity, a location, user information, or a trademark.

18. A computer program product, comprising:

a non-transitory computer-readable medium comprising;

a first set of codes for causing a computer to communicate with a device;

a second set of codes for causing the computer to determine whether to create an authorization ticket for the device and information elements to include in the authorization ticket;

a third set of codes for causing the computer to construct the authorization ticket to include a subset of one or more validated information elements associated with the device, the subset of the one or more validated information elements including a type of services allowed for a communication link between the device and another device, wherein the authorization ticket includes the type of services allowed to said another device for the communication link between the device and said another device, and at least one of a broadcastable expression, or an Internet Protocol address assigned to the device; and

a fourth set of codes for causing the computer to communicate the authorization ticket to the device.

19. The computer program product of claim 18, wherein the authorization ticket includes an identifier of the device, a validity range, and a signature of a trusted party.

20. At least one processor configured to validate ticket-based configuration parameters, comprising:

a first module for consulting a database of authorized devices and associated parameters identified by a device identifier, wherein the database contains information related to a configuration each device can use to communicate in a licensed spectrum;

a second module for determining whether to construct an authorization ticket for a device and information elements to include in the authorization ticket;

a third module for constructing the authorization ticket to include a subset of one or more validated information elements associated with the device, the subset of the one or more validated information elements including a type of services allowed for a communication link between the device and another device, wherein the authorization ticket includes the type of services allowed to said another device for the communication link between the device and said another device, and at least one of a broadcastable expression, or an Internet Protocol address assigned to the device; and

a fourth module for transmitting the authorization ticket certified by a trusted party to the device, the ticket including the information related to the configuration the device can use to communicate.