System and method for a previously activated mobile station to challenge network mobile station knowledge during over the air activation
First Claim
1. A method for activating over the air a previously activated mobile station in a wireless communications network having an over the air processor, the method comprising the steps of:
- i) the over the air processor requesting the data configuration information of the mobile station;
ii) the mobile station making a first challenge request of the request for data configuration information and transmitting certain mobile station parameters to the network;
iii) the network in response to the first challenge request from the mobile station using the certain mobile station parameters to generate a first return challenge response and forwarding the first return challenge response to the mobile station;
iv) the mobile station validating the first return challenge response and forwarding data configuration information to the over the air processor;
v) the over the air processor sending new programming information to the mobile station to re-activate the mobile station with new operating parameters, wherein the over the air processor further requests the mobile station to commit to the new operating parameters;
vi) the mobile station upon receipt of the request to commit to new operating parameters making a second challenge request to the network and transmitting certain mobile station parameters to the network;
vii) the network in response to the second challenge request from the mobile station using the certain mobile station parameters to generate a second return challenge response and forwarding the second return challenge response to the mobile station; and
viii) upon receipt of the second return challenge response the mobile station validating the second return challenge response and then committing to the new operating parameters.
6 Assignments
0 Petitions
Accused Products
Abstract
There is disclosed a system and method for over the air (OTA) activation of a previously activated mobile station in a wireless telecommunications network. During the new activation, an over the air processor requests the data configuration of the mobile station. The mobile station may issue a first challenge to the over the air processor and in so doing transmits a challenge message including certain mobile station parameters to the over the air processor. The over the air processor then communicates this information to the network authentication center which produces a challenge return message from the certain mobile station parameters and sends the challenge return message to the mobile station. The mobile station validates the challenge return message and if validation is successful the mobile station completes the transfer of mobile station data configuration to the over the air processor. The authentication center uses one of the Shared Secret Data Challenge (SSD_C) and Shared Secret Data Subsidy (SSD_S) security locks not broadcast over the air in the generation of the challenge return message. The authentication center stores the SSD_C and SSD_S for this purpose and is advised by the mobile station on which one of these two parameters is to be used by a Shared Secret Data Select parameter indicator (SSD_Select) forwarded by the mobile station as one of the parameters transmitted in the challenge request. The over the air processor then forwards new operating parameters to the mobile station and requests the mobile station to commit to these parameters. The mobile station may then issue a second challenge to the over the air processor request to commit where the second challenge is handled by the network in a manner similar to the first challenge.
74 Citations
18 Claims
-
1. A method for activating over the air a previously activated mobile station in a wireless communications network having an over the air processor, the method comprising the steps of:
-
i) the over the air processor requesting the data configuration information of the mobile station;
ii) the mobile station making a first challenge request of the request for data configuration information and transmitting certain mobile station parameters to the network;
iii) the network in response to the first challenge request from the mobile station using the certain mobile station parameters to generate a first return challenge response and forwarding the first return challenge response to the mobile station;
iv) the mobile station validating the first return challenge response and forwarding data configuration information to the over the air processor;
v) the over the air processor sending new programming information to the mobile station to re-activate the mobile station with new operating parameters, wherein the over the air processor further requests the mobile station to commit to the new operating parameters;
vi) the mobile station upon receipt of the request to commit to new operating parameters making a second challenge request to the network and transmitting certain mobile station parameters to the network;
vii) the network in response to the second challenge request from the mobile station using the certain mobile station parameters to generate a second return challenge response and forwarding the second return challenge response to the mobile station; and
viii) upon receipt of the second return challenge response the mobile station validating the second return challenge response and then committing to the new operating parameters. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A method for activating over the air (OTA) a previously activated mobile station in a wireless communications network including an over the air processor and an authentication center, the method comprising the steps of:
-
i) the over the air processor requesting the data configuration information of the mobile station;
ii) the mobile station making a first challenge request of the request for data configuration information and transmitting certain mobile station parameters to the over the air processor;
iii) the over the air processor forwarding the first challenge request to the authentication center including the certain mobile station parameters;
iv) the authentication center in response to the first challenge request from the mobile station using the certain mobile station parameters to generate a return challenge response and forwarding the return challenge response to the over the air processor and onto the mobile station;
v) the mobile station validating the return challenge request response and forwarding data configuration information to the over the air processor in response to the authorization command;
vi) the over the air processor sending new programming information to the mobile station to re-activate the mobile station with new operating parameters, wherein the over the air processor further requests the mobile station to commit to the new operating parameters;
vii) the mobile station upon receipt of the request to commit to new operating parameters making a second challenge to the over the air processor request to commit to new operating parameters and transmitting certain mobile station parameters to the over the air processor;
viii) the over the air processor forwarding the second challenge request to the authentication center including the certain mobile station parameters;
ix) the authentication center in response to the second challenge request from the mobile station using the certain mobile station parameters to generate a second return challenge response and forwarding the second return challenge response to the over the air processor and onto the mobile station; and
x) upon receipt of the second return challenge response the mobile station validating the second return challenge response and then committing to the new operating parameters. - View Dependent Claims (13, 14, 15)
-
-
16. An over the air activation system for use in a wireless telecommunications network for activating a previously activated mobile station, the mobile station being programmed with certain identification and operating parameters for communicating with the wireless network, the system comprising:
-
a mobile switching center for communicating through a base station with the mobile station;
an over the air processor for forwarding to the mobile station a first message requesting the data configuration of the mobile station and for receiving from the mobile station a first challenge message comprising certain mobile station parameters that excludes secret data information and includes a first challenge request for the request for data configuration information, the over the air processor forwarding a first challenge request message with the certain mobile station parameters to an authentication center;
the authentication center in response to the first challenge request message generating a return challenge request message calculated from the certain mobile station parameters and secret data information of the mobile station stored in the authentication center and forwarding the return challenge request message to the over the air processor including authentication information and authorization command which is forwarded by the over the air processor to the mobile station;
the mobile station validating the calculated return challenge request message and forwarding a data configuration information message to the over the air processor in response to the authorization command to permit the over the air processor to send new programming information to the mobile station to re-activate the mobile station with new operating parameters said new programming information including a commit instruction to the mobile station to commit to use the new operating parameters; and
the mobile station generating a second challenge request message to the over the air processor request to commit to new operating parameters and the second challenge request message including the certain mobile station parameters and excluding secret data information, the over the air processor forwarding the second challenge request message to the authentication center including the certain mobile station parameters and the authentication center in response to the second challenge request message generating a second return challenge request message calculated from the certain mobile station parameters and secret data information of the mobile station stored in the authentication center and forwarding the second return challenge request message to the over the air processor including authentication information and authorization command which is forwarded by the over the air processor to the mobile station, the mobile station, upon successful validation of the second authorization command, committing to the new operation parameters. - View Dependent Claims (17, 18)
-
Specification