Fraud detection and user validation system for mobile earth terminal communication device

• US 5,748,742 A
• Filed: 11/30/1995
• Issued: 05/05/1998
• Est. Priority Date: 11/30/1995
• Status: Expired due to Fees

• Current Assignee: ATC Technology Corporation (FedEx Corporation)
• Original Assignee: Amsc Subsidiary Corp. (PetIQ, Inc.)
• Inventors: Tisdale, William R., Sigler, Charles E.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): SAYADIAN, HRAYR
• Application Number:
  US08/565,036
• Time in Patent Office: 887 Days
• Field of Search: 380/25, 380/49, 380/23, 380/21, 340/825.34, 340/825.3, 340/825.31, 455/12.1, 455/410, 455/411, 455/422, 455/427-430
• US Class Current: 380/249
• CPC Class Codes: H04B 7/18565 Arrangements for preventing unauthorised access or for providing user protection arrangements for secret or secure communication H04L9/00

Abstract

In a mobile satellite system, a mobile communication system includes a fraud detection and user validation system and method for commissioning the mobile communication system in the mobile satellite system. The method includes the steps of generating a first input signal by the mobile communication system upon initialization, and transmitting the first input signal from the mobile communication system to the central controller. The method also includes the steps of generating a first security key in the central controller using the first input signal, and generating a second security key in the mobile communication system using the first input signal and transmitting the second security key to the central controller. The central controller verifies the mobile communication system that transmitted the first input signal to commission it in the mobile satellite system. The verification process is responsive to a comparison of the first security key with the second security key. When the mobile communication system has been verified, information is transmitted throughout the mobile satellite system to enable future access and use of the mobile satellite system by the mobile communication system.

Claims

1. In a mobile satellite system including a satellite communication switching office having a satellite antenna for receiving/transmitting a satellite message via a satellite from/to a vehicle using a mobile communication system, a satellite interface system, a central controller receiving/transmitting the satellite message from/to the satellite communication switching office issued from the vehicle via the satellite and the satellite interface system, a method of preventing a mobile communication system from fraudulently commissioning in the satellite communication system, said method comprising the steps of:

(a) requesting, by a user, to become a subscriber in a communication system;

(b) generating a first input signal by the mobile communication system;

(c) transmitting the first input signal from the mobile communication system to the central controller;

(d) generating a first security key having a first component in the central controller using a data encryption algorithm, the data encryption algorithm using the first input signal and a second input signal generated by a random number generator in the central controller;

(e) generating a third input signal responsive to the first input signal confirming receipt of the first input signal by the central controller;

(f) transmitting the third input signal from the central controller to the mobile communication system responsive to said transmitting step (c);

(g) generating a second security key having a second component in the mobile communication system using the data encryption algorithm, the data encryption algorithm using the first input signal and the second input signal independently generated in the mobile communication system; and

(h) verifying by the central controller when the mobile communication system initiates a communication that the mobile communication system is commissioned as a valid subscriber to be eligible for subsequent authentication in the communication system responsive to a comparison of the first component of the first security key with the second component of the second security key.

2. A method according to claim 1, wherein the data encryption algorithm comprises the DES algorithm.

3. A method according to claim 1, wherein each of the first and second components comprises primary and secondary check components for verification of the mobile communication system.

4. In a mobile satellite system including a satellite communication switching office having a satellite antenna for receiving/transmitting a satellite message via a satellite from/to a vehicle using a mobile communication system, a satellite interface system, a central controller receiving/transmitting the satellite message from/to the satellite communication switching office issued from the vehicle via the satellite and the satellite interface system, a fraud prevention system for preventing a mobile communication system from fraudulently commissioning in the satellite communication system, comprising:

a mobile communication system requesting for a user to become a subscriber in a communication system, generating a first input signal by the mobile communication system, and transmitting the first input signal;

a central controller for the communication system responsively connected to said mobile communication system, receiving the first input signal from said mobile communication system, generating a first security key having a first component using a data encryption algorithm, the data encryption algorithm using the first input signal and a second input signal generated by a random number generator in said central controller, generating a third input signal responsive to the first input signal confirming receipt of the first input signal, and transmitting the third input signal to the mobile communication system,

wherein the mobile communication system receives the third input signal from the central controller, generates a second security key having a second component using the data encryption algorithm using, the data encryption algorithm the first input signal and the second input signal independently generated in the mobile communication system, and

wherein the central controller verifies that the mobile communication system is commissioned as a valid subscriber to be eligible for subsequent authentication in the communication system responsive to a comparison of the first component of the first security key with the second component of the second security key.

5. A fraud prevention system according to claim 4, wherein the data encryption algorithm comprises the DES algorithm.

6. A fraud prevention system according to claim 4, wherein each of the first and second components comprises primary and secondary check components for verification of the mobile communication system.

7. In a mobile satellite system including a satellite communication switching office having a satellite antenna for receiving/transmitting a satellite message via a satellite from/to a vehicle using a mobile communication system, a satellite interface system, a central controller receiving/transmitting the satellite message from/to the satellite communication switching office issued from the vehicle via the satellite and the satellite interface system, the mobile communication system comprising:

a user interface system providing a user interface through which a user has access to services supported by the mobile satellite system;

an antenna system providing an interface between the mobile communication system and the mobile satellite system via the satellite interface system, and receiving a first satellite message from the satellite and transmitting a second satellite message to the satellite, said antenna system including

an antenna including one of a directional and an omnidirectional configuration, a diplexer, a low noise amplifier, a beam steering unit when said antenna is of the directional configuration, and at least one of a compass and sensor to determine vehicle orientation,

a transceiver system, operatively connected to said antenna system, including a receiver and a transmitter,

the transmitter converting the second satellite message including at least one of voice, data, fax and signaling signals into a modulated signal, transmitting the modulated signal to said antenna system, the transmitter including an amplifier, a first converter and associated first frequency synthesizer, a modulator, an encoder, multiplexer, scrambler and frame formatter for at least one of voice, fax, and data,

the receiver accepting the first satellite message from the antenna system and converting the first satellite message into at least one of voice, data, fax and signaling signals, at least one of the voice, data and fax signals routed to the user interface system, the receiver including a second converter with an associated second frequency synthesizer, a demodulator, a decoder, demultiplexer, descrambler and frame deformatter for at least one of voice, fax, and data;

a logic and signaling system, operatively connected to said transceiver, controlling initialization of the mobile communication system, obtaining an assigned outbound signaling channel from which updated system information and commands and messages are received, said logic and signaling system configuring said transceiver for reception and transmission of at least one of voice, data, fax and signaling messages, and controlling protocols between the mobile communication system and the mobile satellite system, and validating a received signalling messages and generating codes for a signaling message to be transmitted,

wherein the mobile communication system requests for a user to become a subscriber in the satellite communication system, and generates and transmits a first input signal,

wherein the central controller receives the first input signal from the mobile communication system, generates a first security key having a first component using a data encryption algorithm, the data encryption algorithm using the first input signal and a second input signal generated by a random number generator in the central controller, generates a third input signal responsive to the first input signal confirming receipt of the first input signal, and transmits the third input signal to the mobile communication system,

wherein the mobile communication system receives the third input signal from the central controller, generates a second security key having a second component using the data encryption algorithm, the data encryption algorithm using the first input signal and the second input signal independently generated in the mobile communication system, and

wherein the central controller verifies that the mobile communication system is commissioned as a valid subscriber to be eligible for subsequent authentication in the communication system responsive to a comparison of the first component of the first security key with the second component of the second security key.

8. The mobile communication system according to claim 7, further comprising a facsimile interface unit, operatively connected to said logic and signaling system, said facsimile interface unit generating a line control packet responsive to a line state transition indicating transmission of information associated with a new line state over a communication channel, said facsimile interface unit comprising a look ahead buffer to perform early line control packet detection by looking ahead a predetermined time interval into a received satellite data stream and identifying a valid idle line control packet.

9. The mobile communication system according to claim 7,

wherein said logic and signaling system providing a roam function permitting the mobile communication system to roam between the mobile satellite system and a terrestrial based communication system responsive to the user selection of a primary service and an alternate service, and

wherein upon the loss of the primary service the mobile communications system waits for a first time interval before attempting to register in the alternate service and when the primary service is recovered prior to the expiration of the first time interval, the mobile communications system will not attempt to register with the alternate service.

10. The mobile communication system according to claim 7, further comprising a digital terminal equipment unit, operatively connected to said logic and signaling system, said digital terminal equipment unit initiating a call release for said mobile communication system by issuing a release command to said logic signaling system, and when the call release is initiated by a public switched telephone network, said logic and signaling system issues a no carrier indication to said digital terminal equipment, and continuously transmits an on hook status until at least one of receiving an on-hook acknowledgment and expiration of a predetermined time interval.

11. The mobile communication system according to claim 7, further comprising:

a facsimile interface unit, operatively connected to said logic and signaling system, said facsimile interface unit generating a line control packet responsive to a line state transition indicating transmission of information associated with a new line state over a communication channel, said facsimile interface unit comprising a look ahead buffer to perform early line control packet detection by looking ahead a predetermined time interval into a received satellite data stream and identifying a valid idle line control packet;

a digital terminal equipment unit, operatively connected to said logic and signaling system, said digital terminal equipment unit initiating a call release for said mobile communication system by issuing a release command to said logic signaling system, and when the call release is initiated by a public switched telephone network, said logic and signaling system issues a no carrier indication to said digital terminal equipment, and continuously transmits an on hook status until at least one of receiving an on-hook acknowledgment and expiration of a predetermined time interval,

wherein said logic and signaling system providing a roam function permitting the mobile communication system to roam between the mobile satellite system and a terrestrial based communication system responsive to the user selection of a primary service and an alternate service, and

wherein upon the loss of the primary service the mobile communications system waits for a first time interval before attempting to register in the alternate service and when the primary service is recovered prior to the expiration of the first time interval, the mobile communications system will not attempt to register with the alternate service.

12. In a mobile satellite system including a satellite communication switching office having a satellite antenna for receiving/transmitting a satellite message via a satellite from/to a vehicle using a mobile communication system, a satellite interface system, a central controller receiving/transmitting the satellite message from/to the satellite communication switching office issued from the vehicle via the satellite and the satellite interface system, a method of preventing a mobile communication system from fraudulently commissioning in the satellite communication system, said method comprising the steps of:

(a) requesting, by a user, to become a subscriber in a communication system;

(b) generating a first input signal by the mobile communication system including an FTIN KEY data signal;

(c) transmitting the first input signal from the mobile communication system to the central controller;

(d) generating a first security key in the central controller using a data encryption algorithm using the first input signal including the FTIN KEY data signal and a second input signal including a SASK data signal generated by a random number generator;

(e) generating a third input signal responsive to the first input signal confirming receipt of the first input signal by the central controller;

(f) transmitting the controller t signal from the central controller to the mobile communication system responsive to said transmitting step (c);

(g) generating a second security key in the mobile communication system using the data encryption algorithm using the first input signal and the second input signal including the FTIN KEY and the SASK data signals, the second input signal including the SASK data signals independently generated in the mobile communication system; and

(h) verifying and commissioning by the central controller when the mobile communication system initiates a first communication that the mobile communication system is authorized to utilize the communication system responsive to a comparison of the first security key with the second security key generated by the central controller and the mobile communication system.