Method and apparatus for preventing wireless fraud

• US 5,754,952 A
• Filed: 05/23/1996
• Issued: 05/19/1998
• Est. Priority Date: 03/11/1993
• Status: Expired due to Term

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Rubenstein, Zev Chaim, Hodges, Steven Joseph
• Primary Examiner(s): Bost, Dwayne
• Assistant Examiner(s): TROST IV, WILLIAM GEORGE
• Application Number:
  US08/652,214
• Time in Patent Office: 726 Days
• Field of Search: 379/50, 379/59, 379/62, 340/825.3, 340/825.34, 340/825.5, 380/23, 455/410, 455/411, 455/403, 455/422, 455/560
• US Class Current: 455/411
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

The use of stolen mobile identification number (MIN) and electronic serial number (ESN) information to fraudulently place wireless calls is prevented by having the switches of multiple wireless carriers forward or direct, over a telephone connection, all calls placed from selected MINs to a central authentication platform that serves the multiple wireless carriers. The central authentication platform engages in a so-called "challenge-response" authentication with local processors that are interfaced to the wireless telephones from which non-fraudulent calls originate. The challenge-response authentication uses a shared secret key (S-Key) that is not broadcast over the air interface, thus preventing the key from being "stolen". A call from a wireless telephone that is not interfaced to a local processor capable of successfully completing the challenge-response authentication is blocked, while a call from a wireless telephone having a local processor capable of successfully completing the challenge-response authentication is completed to the number desired by the customer. Advantageously, since the central authentication platform serves multiple wireless carriers, the need for one wireless car to access the database of another is alleviated and the expense of providing additional security is reduced.

Claims

1. A method for use in completing calls from wireless telephones, each wireless telephone being served by one of a plurality of wireless carriers, the method comprising the steps of:

receiving requests at mobile switching centers of said plurality of wireless carriers for completion of calls from said wireless telephones;

forwarding, from said mobile switching centers to an authentication platform serving said plurality of wireless carriers, those of said calls originated from wireless telephones having MINs that belong to a particular predefined group of MINs;

transmitting a challenge from said authentication platform to each of said wireless telephones via, said mobile switching centers of said plurality of wireless carriers; and

receiving at said authentication platform responses to said challenges;

terminating communication between said authentication platform and said wireless telephones providing proper responses and completing said call by causing said mobile switching center to establish a connection to a called party.

2. The invention as defined in claim 1 wherein responses to said challenges are supplied by local processors connected to said wireless telephones.

3. The invention as defined in claim 2 wherein said local processors are external to said wireless telephones.

4. The invention as defined in claim 1 wherein said challenges are transmitted over voice path connections between said wireless telephones and said authentication platform.

5. The invention as defined in claim 1 wherein at least one of said particular predefined group of MINs is a non-dialable MIN.

6. The invention as defined in claim 1 wherein, in said forwarding step, said calls are forwarded by said mobile switching centers to said authentication platform by being routed to a particular telephone number.

7. The invention as defined in claim 6 wherein said particular telephone number is one that requires translation for said routing to successfully complete.

8. The invention as defined in claim 1 wherein, for at least one of said calls, a proper response to said challenge is received and further including the steps of:

blocking said at least one call if information stored in said authentication platform for said MIN for said at least one call indicates that said at least one call is not to be completed.