PRE-ASSOCIATION MECHANISM TO PROVIDE DETAILED DESCRIPTION OF WIRELESS SERVICES

• US 20140122242A1
• Filed: 09/24/2013
• Published: 05/01/2014
• Est. Priority Date: 08/24/2010
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Stephenson, David, Torres, Esteban Raul, Salowey, Joseph, Ersoy, Chetin, Cam-Winget, Nancy
• Granted Patent: US 10,515,391 B2
• Time in Patent Office: Days
• US Class Current: 705/14.64
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0267 Wireless devices
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 4/23 for mobile advertising
• CPC Class Codes: H04W 48/14 using user query or user detection

Abstract

In an example embodiment, an apparatus comprising a transceiver configured to send and receive data and logic coupled to the transceiver. The logic is configured to determine from a signal received by the transceiver whether an associated device sending the signal supports a protocol for advertising available services. The logic is configured to send a request for available services from the associated device via the transceiver responsive to determining the associated device supports the protocol. The logic is configured to receive a response to the request via the transceiver, the response comprising at least one service advertisement and a signature. The logic is configured to validate the response by confirming the signature.

Claims

1. A method, comprising:

receiving a signal from an access network provider;

determining from the signal whether the access network provider supports a protocol for advertising available services;

sending a request for a list of available services to the access network provider;

generating a hash of the request;

receiving a response to the request, the response comprising a signature; and

validating the response;

wherein validating the response comprises determining that the response has a request hash matching the generated hash; and

wherein validating the response comprises determining the signature includes the request hash.

2. The method of claim 1, further comprising:

generating a nonce; and

sending the nonce in the request;

wherein validating the response further comprises determining that the nonce is included in the response.

3. The method of claim 1, further comprising:

sending a request for a certificate for a server generating the response, wherein the request is sent via a second signaling protocol; and

receiving a certificate via the second signaling protocol.

4. The method of claim 3, further comprising verifying that the certificate has not revoked.

5. The method of claim 1, wherein the response further comprises state information.

7. The method of claim 1, wherein the response includes at least one service advertisement that comprises at least one service brief.

8. The method of claim 7, wherein the at least one service advertisement includes a provider declaration that comprises data associated with a service provider of advertised available services.

9. The method of claim 8, wherein a provider declaration includes service provider name, a service provider icon, textual data describing an available service, a uniform resource indicating where the service is available, and a certificate binding an icon for the provider with a domain name and a public key private key pair.

10. The method of claim 7, wherein the at least one service advertisement comprises data representative of an application on a mobile device for acquiring the service.

11. The method of claim 7, wherein the at least one service brief comprises data representative of a recommended application for accessing an advertised service.

12. The method of claim 7, wherein the at least one service brief comprises keywords associated with an advertised service.

13. The method of claim 1, wherein the signature is an Extensible Markup Language (XML) digital signature.

6. The method of claim 6, the method further comprising storing the state information.

14. Logic encoded in a tangible, non-transitory computer readable medium for execution by a processor, and when executed operable to:

receive a signal from an access network provider comprising data representative of a protocol for advertising available services;

determine from the signal whether the access network provider supports a protocol for advertising available services;

send a request for a list of available services to the access network provider;

generate a hash of the request;

receive a response to the request, the response comprising a signature; and

validate the response;

wherein the logic, in validating the response, is further operable to determine that the response has a request hash matching the generated hash and to determine the signature includes the request hash.

15. The logic of claim 14, wherein the logic is further operable to:

generate a nonce; and

send the nonce in the request;

wherein the logic, in validating the response, is operable to determine that the nonce is included in the response.

16. The logic of claim 14, wherein the logic is further operable to:

send a request for a certificate for a server generating the response, wherein the request is sent via a second signaling protocol; and

receive a certificate via the second signaling protocol.

17. The logic of claim 16, wherein the logic is further operable to verify that the certificate has not revoked.

18. The logic of claim 14, wherein the response includes at least one service advertisement that comprises at least one service brief and a provider declaration that comprises data associated with a service provider of advertised available services.

19. The logic of claim 18, wherein a provider declaration includes service provider name, a service provider icon, textual data describing an available service, a uniform resource indicating where the service is available, and a certificate binding an icon for the provider with a domain name and a public key private key pair.

20. A method, comprising:

receiving a signal comprising data representative of a protocol for advertising available services;

sending a request for a list of available services in response to receiving the signal;

receiving a response to the request, the response comprising at least one service advertisement that comprises at least one service brief, and a first signature;

wherein the service advertisement comprises data representative of a name of a service provider and data representative of an icon for the service provider;

wherein the service brief comprises data representative of a description of an available service and data representative of a uniform resource indicator associated with the service;

wherein the first signature comprises a hash of the at least one service advertisement and the at least one service brief;

validating the response to the request for available services by determining whether the hash comprises the data representative of the at least one service advertisement and the at least one service brief;

sending a certificate request, wherein the certificate request comprises a nonce;

receiving a response to the certificate request, the response comprising a certificate and a second signature, the second signature comprising a hash of the certificate and the nonce;

validating the response to the certificate request by verifying the second signature comprises a hash of the certificate and the nonce;

sending a validate certificate chain request;

receiving a response to the validate certificate chain request;

determining from the response to the validate certificate chain request whether the certificate has been revoked; and

displaying on an associated user interface an icon associated with the service brief responsive to validating the response to the request for available services, validating the response to the certificate request, and determining that the certificate has not been revoked.