Method and apparatus for validating a subscriber terminal on a telecommunication network

• US 5,940,589 A
• Filed: 03/21/1996
• Issued: 08/17/1999
• Est. Priority Date: 03/21/1996
• Status: Expired due to Term

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: MCI Incorporated (Verizon Communications Inc.)
• Inventors: Gung, Shou, Chiou, Jeremy, Donovan, Steven R.
• Primary Examiner(s): Treat, William M.
• Application Number:
  US08/620,065
• Time in Patent Office: 1,244 Days
• Field of Search: 395/186, 395/187.01, 379/58-63, 379/111-115, 455/26.1
• US Class Current: 726/4
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A method and apparatus for validating a terminal for access to a network that includes a central office having a memory for storing an equipment identity record and a local office having a memory for storing a subscriber record and an access count. The equipment identity record and the subscriber record each store an access authorization status of the terminal. Network access for the terminal is requested at the local office and a value of the access count at the local office is incremented when the value of the access count is less than a predetermined number. The access status of the terminal stored in the equipment identity record at the central office is requested by the local office when the terminal requests access for the first time or the value of the access count equals the predetermined number. The access authorization status of the terminal stored in the equipment identity record is sent to the local office in response to the request. The requested access status of the terminal is received at the local office and stored in the subscriber record. The value of the access count is reset in response to receiving the requested access status and access to the network is provided based on the access status stored in the subscriber record.

Claims

1. A method for validating a terminal for access to a network, the network including a central office having a memory for storing an equipment identity record and a local office having a memory for storing a subscriber record and an access count, the equipment identity record storing an access status of the terminal and the subscriber record storing a current and a previous access status of the terminal, the method comprising the steps of:

requesting network access for the terminal at the local office;

incrementing a value of the access count at the local office when the value of the access count is less than a predetermined number, the value of the access count representing a number of times the terminal has accessed the network at the local office since the terminal was last validated;

requesting the access status of the terminal stored in the equipment identity record at the central office when the value of the access count equals the predetermined number;

sending the access status of the terminal stored in the equipment identity record to the local office in response to the request;

receiving the requested access status of the terminal at the local office;

storing the requested access status of the terminal in the subscriber record at the local office as the current access status of the terminal;

resetting the value of the access count in response to receiving the requested access status of the terminal; and

providing the terminal with the requested access to the network based on the current access status and the previous access status of the terminal stored in the subscriber record.

2. The method according to claim 1, wherein the network is a wireless network.

3. The method according to claim 2, wherein the step of providing the requested access comprises the steps of:

providing the requested network access when the access status stored in the subscriber record is a first condition; and

generating an alarm when the access status stored in the subscriber record is a second condition.

4. The method according to claim 3, wherein the first condition is a white access status and the second condition is a grey access status and/or a black access status.

5. The method according to claim 4, wherein the step of generating an alarm comprises the steps of:

providing the requested network access when the second condition is the grey access status; and

disallowing the requested network access when the second condition is the black access status.

6. The method according to claim 5, wherein the step of generating an alarm further comprises the step of resetting the value of the access count.

7. A system for validating a terminal for access to a network, the system comprising:

a central office having a memory for storing an access status information of the terminal; and

a local office having a memory for storing a current access status information of the terminal, a previous access status information of the terminal and an access count value, the access count value representing a number of times the terminal has accessed the network at the local office since the terminal was last validated,

when the terminal requests access to the network at the local office, the local office increments the access count value when the access count value is less than a predetermined number, and requests the access status information stored at the central office when the access count equals the predetermined number,

the central office responds to the request of the local office by sending the access status information for the terminal to the local office and the local office stores the requested access status information for the terminal in the memory of the local office and resets the value of the access count,

the local office provides the terminal with the requested access to the network based on the current and the previous access status information stored in the subscriber record.

8. The system according to claim 7, wherein the network is a wireless network.

9. The system according to claim 8, wherein the access status information includes a first condition and a second condition,

when the access status information stored in the subscriber record is a first condition, the local office provides the terminal with the requested network access, and

when the access status information stored in the subscriber record is a second condition, the local office generates an alarm.

10. The system according to claim 9, wherein the first condition is a white access status and the second condition is a grey access status and/or a black access status.

11. The system according to claim 10, wherein when the access status information is a grey access status, the local office further provides the terminal with the requested network access when the second condition is the grey access status;

and

when the access status information is a black access status, the local office disallows the terminal from the requested network access.

12. The system according to claim 11, wherein when the local office generates the alarm, the value of the access count is reset.