Secure equipment automation using a personal base station

• US 5,875,395 A
• Filed: 10/09/1996
• Issued: 02/23/1999
• Est. Priority Date: 10/09/1996
• Status: Expired due to Term

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Wireless Services Incorporated (AT&T, Inc.)
• Inventors: Holmes, David William James
• Primary Examiner(s): Wolfe, Willis R.
• Assistant Examiner(s): Vo, Hieu T.
• Application Number:
  US08/728,513
• Time in Patent Office: 867 Days
• Field of Search: 455/88, 455/151.1, 455/151.2, 455/152.1, 455/410, 455/411, 455/418, 455/419, 455/420, 340/825.31, 340/825.34, 340/825.36
• US Class Current: 455/420
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2009/00928 for garage doors
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 36/14 Reselecting a network or an air interface
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B

Abstract

A system and method for preventing unauthorized use of a remotely operated system, by using a sophisticated bi-directional verification schemes. The bi-directional verification schemes are based on random challenge and response between a mobile station and a cellular network. The cellular network discriminates between "pirate" mobile stations and mobile stations authorized to use the cellular network. The security afforded by bi-directional verification is applied to a system and method for use in conjunction with remotely operated systems, including one or more pieces of application equipment or a home automation system.

Claims

1. A personal base station, comprising:

a radio transceiver receiving data from and transmitting data to a mobile station, said data including commands;

a security module, coupled to said radio transceiver, authenticating an identity of said mobile station using bi-directional verification, and said security module producing an output based on an authenticated identity of said mobile station; and

an application interface, coupled to said radio transceiver and said security module, and being connectable to application equipment, said application interface translating data received by said radio transceiver when permitted based on said output from said security module.

2. The apparatus according to claim 1, wherein said application interface is coupled to said application equipment;

and

wherein said application interface translates data received from said radio transceiver to said application equipment, permitting control of said application equipment by said mobile station.

3. The apparatus according to claim 1,

wherein said application interface is coupled to said application equipment;

and

wherein said application interface translates data between said radio transceiver and said application equipment when permitted based on said output from said security module, thus permitting monitoring and control of said application equipment by said mobile station.

4. The personal base station according to claim 3, wherein a piece of said application equipment produces an alarm signal in response to a predetermined condition, and said application interface receives said alarm signal and transmits data to said mobile station via said radio transmitter indicating the presence of said alarm signal at said application equipment.

5. The apparatus according to claim 1, wherein said application interface monitors and controls said application equipment, and said application interface is modifiable based on data received from said mobile station.

6. The personal base station according to claim 4, further comprising:

a network including at least one terminal;

a baseband processing and telephony interface, coupled to said radio transceiver and said network, transmitting signals to and receiving signals from said terminal; and

a network interface coupled to said security module, said baseband processing and telephony interface, and said application interface, said network interface converting said signals from said network to and from data; and

wherein said security module receives said data from said network interface, authenticates an identity of said terminal on said network using a bi-directional verification scheme, and generates an output based on an authenticated identity of said terminal; and

wherein said application interface translates between said application equipment and said digital information from said network interface when permitted based on said output from said security module, and said application interface being modifiable based on said data from said network.

7. The personal base station according to claim 6, wherein the personal base station is implemented as part of a home automation system.

8. The personal base station according to claim 7, wherein said application interface includes:

at least one user interface unit displaying information to a user and allowing said user to input and display data on said application interface;

a memory for storing data;

a database for storing data;

a data bus carrying data to and from said at least one user interface unit, said radio transceiver, said network interface, said security module, said memory, and said database; and

a processor, transmitting data to and receiving data from said data bus, said processor monitoring and controlling said application equipment, and said processor translating data, when permitted based on said output from said security module, between said radio transceiver, said at least one user interface unit, and said network interface and said application equipment, and said processor being configurable by a user.

9. The personal base station according to claim 6, wherein said network verification scheme is based on an Aker authentication technique.

10. The personal base station according to claim 5, wherein the personal base station is implemented as part of a home automation system.

11. The apparatus according to claim 1, wherein said bi-directional verification technique is based on a GSM authentication technique.

12. The apparatus according to claim 1, wherein said bi-directional verification technique is based on a TIA/EIA standard IS-136.1 authentication technique.

13. The apparatus according to claim 1, wherein said bi-directional verification technique is based on a TIA/EIA standard IS-136.2 authentication technique.

14. The apparatus according to claim 1, wherein said bi-directional verification technique is based on a TIA/EIA standard IS-95 authentication technique.

15. The apparatus according to claim 1, wherein said bi-directional verification technique is based on a TIA/EIA standard IS-91 authentication technique.

16. A method for making secure transmissions between a mobile station and application equipment, the method comprising the steps of:

receiving and transmitting data between a mobile station and a personal base station, said data including commands;

authenticating an identity of said mobile station using bi-directional verification; and

translating between said personal base station and said application equipment when the identity of said mobile station is authenticated.

17. The method according to claim 16, further comprising the step of monitoring and controlling said application equipment by said personal base station.

18. The method according to claim 17, wherein said monitoring and controlling is modifiable based on data from said mobile station.

19. The method according to claim 18, wherein the method is performed by at least a portion of a home automation system.