Method and apparatus for preventing wireless fraud

• US 5,420,908 A
• Filed: 03/11/1993
• Issued: 05/30/1995
• Est. Priority Date: 03/11/1993
• Status: Expired due to Term

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Rubenstein, Zev C., Hodges, Steven J.
• Primary Examiner(s): Kuntz, Curtis
• Assistant Examiner(s): Bost, Dwayne D.
• Application Number:
  US08/030,682
• Time in Patent Office: 810 Days
• Field of Search: 379/58, 379/59, 379/62, 340/825.3, 340/825.34, 340/825.5, 380/23
• US Class Current: 455/411
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

The use of stolen mobile identification number (MIN) and electronic serial number (ESN) information to fraudulently place wireless calls is prevented by having the switches of multiple wireless carriers forward or direct, over a telephone connection, all calls placed from selected MINs to a central authentication platform that serves the multiple wireless carriers. The central authentication platform engages in a so-called "challenge-response" authentication with local processors that are interfaced to the wireless telephones from which non-fraudulent calls originate. The challenge-response authentication uses a shared secret key (S-Key) that is not broadcast over the air interface, thus preventing the key from being "stolen". A call from a wireless telephone that is not interfaced to a local processor capable of successfully completing the challenge-response authentication is blocked, while a call from a wireless telephone having a local processor capable of successfully completing the challenge-response authentication is completed to the number desired by the customer. Advantageously, since the central authentication platform serves multiple wireless carriers, the need for one wireless carrier to access the database of another is alleviated and the expense of providing additional security is reduced.

Claims

1. A method for use in completing a call from a wireless telephone to its destination, the method comprising the steps of:

receiving a request at a mobile switching center of a wireless carrier for wireless telephone service from a wireless telephone having a particular MIN;

placing a call from said mobile switching center to an authentication platform serving a plurality of wireless carriers so that a voice path exists from said authentication platform through said mobile switching center to said wireless telephone if said particular MIN belongs to a particular predefined group of MINs;

transmitting a challenge from said authentication platform to said wireless telephone over said voice path; and

denying said request if a proper response to said challenge is not received.

2. The invention as defined in claim 1 wherein a response to said challenge is supplied by a local processor connected to said wireless telephone over said voice path.

3. The invention as defined in claim 1 wherein said particular MIN is a non-dialable MIN.

4. The invention as defined in claim 1 wherein in said placing step, said call is placed to a particular telephone number that requires translation for muting of said call to successfully complete.

5. The invention as defined in claim 1 wherein a proper response to said challenge is received and further including the steps of:

denying said request if information stored in said authentication platform for said particular MIN indicates that said request is one that is not to be completed.

6. The invention as defined in claim 1 further including the steps of:

receiving at said authentication platform a response to said challenge over said voice path;

receiving at said authentication platform a telephone number to which said request is to be completed; and

causing said wireless telephone to be connected to said received telephone number if said received response is a proper response.

7. The invention as defined in claim 6 further including the step of:

responsive to receipt of said response, transmitting a prompt requesting said telephone number to which said wireless telephone is to be connected.