System and method for over the air activation in a wireless telecommunications network

• US 6,141,544 A
• Filed: 11/30/1998
• Issued: 10/31/2000
• Est. Priority Date: 11/30/1998
• Status: Expired due to Term

• Current Assignee: Optis Wireless Technology, LLC (Brevet Capital)
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Corriveau, Michel, Houde, Michel
• Primary Examiner(s): Vo, Nguyen
• Assistant Examiner(s): APPIAH, CHARLES NANA
• Application Number:
  US09/201,534
• Time in Patent Office: 701 Days
• Field of Search: 340/825.34, 713/200, 455/418, 455/419, 455/420, 455/410, 455/411, 380/247, 380/248, 380/249
• US Class Current: 455/411
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

There is disclosed a system and method for over the air (OTA) activation of a mobile station in a wireless telecommunications network. During activation, a network OTA processor requests the data configuration of the mobile station. The mobile station may issue a challenge the OTA processor and in so doing transmits a challenge message including certain mobile station parameters and a code lock indicator to the OTA processor. The OTA activation processor determines if a new or first code lock parameter has been forwarded to the OTA activation processor by the network for the code lock indicator. If so, the OTA activation processor includes the first code lock parameter in a challenge message forwarded to the authentication center for processing a response to be validated by the mobile station. If not, the OTA activator forwards the challenge message to the home location register that has previously stored the code lock parameter. The home location register substitutes the stored code lock parameter for the code lock indicator and forwards the challenge message so revised to the authentication center for processing. The authentication center uses a code lock parameter comprising one of the Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S) security locks. The OTA activation processor is capable of instructing the authentication center to generate new code lock parameters and instructing the home location register to commit to these new operating parameter.

Claims

1. A wireless communications network system for activating over the air (OTA) a mobile station, comprising:

an over the air processor for activating the mobile station and for receiving from the mobile station a first challenge request message of the activation that includes certain mobile station parameters and a code lock indicator, the over the air processor determining if a first code lock parameter corresponding to the code lock indicator has been received from the network and and if so, the over the air processor replacing the code lock indicator with the first code lock parameter and forwarding the first challenge request message including the certain mobile station parameters and the first code lock parameter to the an authentication center, and, in the event the over the air processor has not received the code lock parameter, the over the air processor forwarding the first challenge request message including the certain mobile station parameters and the code lock indicator to a first predetermined node in the network;

the first predetermined node upon receipt of the first challenge request message including the code lock indicator, replacing the code lock indicator with a stored code lock parameter stored in the predetermined node for the mobile station and corresponding to the code lock indicator, and the first predetermined node forwarding the first challenge request message including the certain mobile station parameters and the stored code lock parameter to the authentication center; and

,

the authentication center upon receipt of the first challenge request message using the certain mobile station parameters and a forwarded one of the first code lock parameter and stored code lock parameter to generate a return challenge response message and forwarding the return challenge response message to the over the air processor and onto the mobile station for validation.

2. The system of claim 1 wherein the first predetermined node is a node selected from the group consisting of the over the air processor, a home location register, the authentication center and a co-located home location register and authentication center.

3. The system of claim 1 wherein the over the air processor sends a code lock generating message to a second predetermined node in the network selected from the group consisting of the over the air processor, a home location register, the authentication center and a co-located home location register, and the second predetermined node generating a new code lock parameter for the mobile station which is downloaded to the mobile station when the over the air processor sends new programming information to the mobile station to activate the mobile station with new operating parameters.

4. The method of claim 3 wherein the over the air processor sends a commit message to the first predetermined node to store the new code lock parameter.

5. The method of claim 4 wherein the first predetermined node is a node selected from the group consisting of the over the air processor, a home location register, the authentication center and a co-located home location register and authentication center.

6. The method of claim 5 wherein the code lock indicator is a Shared Secret Data Indicator that indicates one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S) to be utilized by the authentication center in the generation of the return challenge response.

7. A method for activating over the air (OTA) a mobile station in a wireless communications network including an over the air processor, and an authentication center, the method comprising the steps of:

i) the over the air processor requesting the data configuration of the mobile station;

ii) the mobile station making a first challenge request of the request for data configuration information and transmitting certain mobile station parameters to the over the air processor including a code lock indicator;

iii) the over the air processor upon receipt of the first challenge request determining if a first code lock parameter corresponding to the code lock indicator has been received from the network and in the event the first code lock parameter has been received, the over the air processor replacing the code lock indicator with the first code lock parameter and forwarding the first challenge request including the certain mobile station parameters and the first code lock parameter to the authentication center, and, in the event the over the air processor has not received the code lock parameter, the over the air processor forwarding the first challenge request including the certain mobile station parameters and the code lock indicator to a first predetermined node in the network;

iv) the first predetermined node upon receipt of the first challenge request including the code lock indicator, replacing the code lock indicator with a stored code lock parameter stored in the predetermined node for the mobile station and corresponding to the code lock indicator, and the first predetermined node forwarding the first challenge request including the certain mobile station parameters and the stored code lock parameter to the authentication center;

v) the authentication center upon receipt of the first challenge request using the certain mobile station parameters and a forwarded one of the first code lock parameter and stored code lock parameter to generate a return challenge response and forwarding the return challenge response to the over the air processor and onto the mobile station;

vi) the mobile station validating the return challenge request response and forwarding data configuration information to the over the air processor and,

vii) the over the air processor sending new programming information to the mobile station to activate the mobile station with new operating parameters.

8. The method of claim 7 wherein the first predetermined node is a node selected from the group consisting of the over the air processor, a home location register, the authentication center and a co-located home location register and authentication center.

9. The method of claim 7 further including the step of the over the air processor sending a code lock generating message to a second predetermined node in the network selected from the group consisting of the over the air processor, a home location register, the authentication center and a co-located home location register, and the second predetermined node generating a new code lock parameter for the mobile station which is downloaded to the mobile station when the over the air processor sends new programming information to the mobile station to activate the mobile station with new operating parameters.

10. The method of claim 9 further including the step of the over the air processor sends a commit message to the first predetermined node to store the new code lock parameter.

11. The method of claim 10 wherein the first predetermined node is a node selected from the group consisting of the over the air processor, a home location register, the authentication center and a co-located home location register and authentication center.

12. The method of claim 11 wherein the code lock indicator is a Shared Secret Data Indicator that indicates one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S) to be utilized by the authentication center in the generation of the return challenge response.

13. The method of claim 12 wherein code lock generating message instructs the second predetermined node to generate one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S).

14. The method of claim 13 wherein the certain mobile station parameters further include the mobile identification number (MIN/IMSI), electronic serial number (ESN), challenge request activation code, and the service provider identity.

15. The method of claim 9 wherein the code lock indicator is a Shared Secret Data Indicator that indicates one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S) to be utilized by the authentication center in the generation of the return challenge response.

16. The method of claim 15 wherein code lock generating message instructs the second predetermined node to generate one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S).

17. The method of claim 7 wherein the code lock indicator is a Shared Secret Data Indicator that indicates one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S) to be utilized by the authentication center in the generation of the return challenge response.

18. The method of claim 9 wherein code lock generating message instructs the second predetermined node to generate one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S).

19. A method for activating over the air (OTA) a mobile station in a wireless communications network including an over the air processor, a home location register and an authentication center, the method comprising the steps of:

i) the over the air processor requesting the data configuration of the mobile station;

ii) the mobile station making a first challenge request of the request for data configuration information and transmitting certain mobile station parameters to the over the air processor including a code lock indicator;

iii) the over the air processor upon receipt of the first challenge request determining if a first code lock parameter corresponding to the code lock indicator has been received from the network and in the event the first code lock parameter has been received, the over the air processor replacing the code lock indicator with the first code lock parameter and forwarding the first challenge request including the certain mobile station parameters and the first code lock parameter to the home location register, and, in the event the over the air processor has not received the code lock parameter, the over the air processor forwarding the first challenge request including the certain mobile station parameters and the code lock indicator to the home location register;

iv) the home location register upon receipt of the first challenge request including the first code lock parameter forwarding the first challenge request to the authentication center, the home location register, upon receipt of the first challenge request including the code lock indicator, replacing the code lock indicator with a stored code lock parameter stored in the home location register for the mobile station and corresponding to the code lock indicator, and the home location register forwarding the first challenge request including the certain mobile station parameters and the stored code lock parameter to the authentication center;

v) the authentication center upon receipt of the first challenge request from the home location center using the certain mobile station parameters and a forwarded one of the first code lock parameter and stored code lock parameter to generate a return challenge response and forwarding the return challenge response to the over the air processor and onto the mobile station;

vi) the mobile station validating the return challenge request response and forwarding data configuration information to the over the air processor, and,

vii) the over the air processor sending new programming information to the mobile station to activate the mobile station with new operating parameters.

20. The method of claim 19 wherein the code lock indicator is a Shared Secret Data Indicator that indicates one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S) to be utilized by the authentication center in the generation of the return challenge response.

21. The method of claim 20 wherein the certain mobile station parameters further include the mobile identification number (MIN/IMSI), electronic serial number (ESN), challenge request activation code, and the service provider identity.

22. The method of claim 19 further including the step of the over the air processor sending a code lock generating message to the authentication center via the home location register and the authentication center in response to the code lock generating message generating a new code lock parameter for the mobile station which is downloaded to the mobile station when the over the air processor sends new programming information to the mobile station to activate the mobile station with new operating parameters.

23. The method of claim 22 further including the step of the over the air processor sending a commit message to the home location register to store the new code lock parameter.

24. The system of claim 19 wherein the step of the over the air processor sends a code lock generating message to the authentication center via the home location register and the authentication center in response to the code lock generating message generating a new code lock parameter for the mobile station which is downloaded to the mobile station when the over the air processor sends new programming information to the mobile station to activate the mobile station with new operating parameters.

25. The system of claim 24 wherein the over the air processor sends a commit message to the home location register to store the new code lock parameter generated by the authentication center.

26. An over the air activation system for use in a wireless telecommunications network, the mobile station being programmed with certain identification and operating parameters for communicating with the wireless network, the system comprising:

a mobile switching center for communicating through a base station with the mobile station;

an over the air processor for forwarding to the mobile station through the base station a first message requesting the data configuration of the mobile station and for receiving from the mobile station a first challenge message comprising certain mobile station parameters that includes a code lock indicator message identifying secret data information excluded from the first challenge message, the over the air processor determining if a first code lock parameter corresponding to the code lock indicator has been received from the network and in the event the first code lock parameter has been received, the over the air processor revising the first challenge message by replacing the code lock indicator with the first code lock parameter and forwarding the first challenge message to a home location register, and, in the event the over the air processor has not received the first code lock parameter, the over the air processor forwarding the first challenge message as received to the home location register;

the home location register upon receipt of the first challenge request message including the first code lock parameter forwarding the first challenge request message to an authentication center, and the home location register, upon receipt of the first challenge request message including the code lock indicator, replacing the code lock indicator with a stored code lock parameter stored in the home location register, and the home location register forwarding the first challenge message including the stored code lock parameter to the authentication center;

the authentication center in response to the first challenge message received from the home location register generating a return challenge request message calculated from the certain mobile station parameters and the appropriate one of the first code lock parameter and the stored code lock parameter and forwarding the return challenge request message to the over the air processor including authentication information and authorization command which is forwarded by the over the air processor to the mobile station; and

,

the mobile station validating the calculated return challenge request message and forwarding a data configuration information message to the over the air processor in response to the authorization command to permit the over the air processor to send new programming information to the mobile station to re-activate the mobile station with new operating parameters.

27. The system of claim 26 wherein the code lock indicator is a Shared Secret Data Indicator that indicates one of the parameters selected from the group consisting of Shared Secret Data Challenge (SSD_-- C) and Shared Secret Data Subsidy (SSD_-- S) to be utilized by the authentication center in the generation of the return challenge request message.

28. The system of claim 27 wherein the certain mobile station parameters further include the mobile identification number (MIN/IMSI), electronic serial number (ESN), challenge request activation code, and the service provider identity.