System and method for secure over-the-air administration of a wireless mobile station

• US 7,165,173 B1
• Filed: 09/01/2000
• Issued: 01/16/2007
• Est. Priority Date: 09/01/2000
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Herle, Sudhindra P.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Simitoski; Michael J.
• Application Number:
  US09/653,764
• Time in Patent Office: 2,328 Days
• Field of Search: 713/151, 709/209, 370/400, 370/392, 455/419, 380/270, 726/14
• US Class Current: 713/151
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/169 Special adaptations of TCP, UDP or IP for interworking of IP based networks with other networks protocols for interworking, protocol conversion H04L69/08
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

There is disclosed a mobile station for securely communicating with base stations in a wireless network and receiving at least one of a software program, a software correction patch and provisioning data from a server in the wireless network. The mobile station comprises: 1) an RF transceiver capable of receiving wireless messages from the plurality of base stations and converting the received wireless messages to a plurality of Internet protocol (IP) packets; 2) an encryption controller capable of converting the IP packets from an encrypted format to a decrypted format; and 3) a data burst message protocol controller capable of converting the decrypted IP packets to at least one data burst message. Also disclosed is a system for secure over-the-air administration of a wireless mobile station via a base station in a wireless network. The system transmits to the wireless mobile station one or more of a software program, a software correction patch and provisioning data from a server. The system comprises: 1) a data burst message protocol controller for receiving and converting the software program, software correction patch or provisioning data into at least one data burst message; 2) an encryption controller for converting the at least one data burst message into a plurality of encrypted IP packets; and 3) an RF transceiver for converting the encrypted IP packets into at least one wireless message and transmitting the at least one wireless message to the wireless mobile station.

Claims

1. A mobile station that communicates with a plurality of base stations in a wireless network and receives at least one of a software program, a software correction patch and provisioning data from a server associated with said wireless network, said mobile station comprising:

an RF transceiver that receives wireless messages from said plurality of base stations and converts said received wireless messages to a plurality of Internet protocol (IP) packets;

an encryption controller that converts said IP packets from an encrypted format to a decrypted format according to at least one of;

IP Sec tunneling protocol;

Secure Shell (SSH) tunneling protocol;

Secure Sockets Layer/Transport Layer Security (SSL/TLS); and

point-to-point tunneling protocol (PPTP); and

a data burst message protocol controller that converts said decrypted IP packets to at least one data burst message,

wherein said mobile station accesses at least one of said software program, said software correction patch and said provisioning data via a public IP network and automatically applies at least one of said software program, said software correction patch and said provisioning data.

2. The mobile station as set forth in claim 1 wherein each of said IP packets comprise IP layer information and an IP packet payload.

3. The mobile station as set forth in claim 2 wherein said IP packet payload comprises transmission control protocol (TCP) layer information.

4. The mobile station as set forth in claim 3 wherein said IP packet payload comprises an over-the-air service provisioning payload associated with said at least one data burst message.

5. The mobile station as set forth in claim 1 wherein each of said IP packets comprises IP layer information, transmission control protocol (TCP) layer information and a IP packet payload.

6. The mobile station as set forth in claim 5 wherein said IP packet payload comprises an over-the-air service provisioning payload associated with said at least one data burst message.

7. The mobile station as set forth in claim 1 wherein said data burst message protocol controller converts said decrypted IP packets to said at least one data burst message according to at least one of:

1) an IS-683-A protocol;

     2) a short messaging service (SMS) protocol; and

     3) extensible mark-up language (XML) protocol.

8. A system for secure over-the-air administration of a wireless mobile station via a base station in a wireless network, said system that transmits to said wireless mobile station at least one of a software program, a software correction patch and provisioning data from a server associated with said wireless network, said system comprising:

a data burst message protocol controller that receives and converts said at least one of a software program, a software correction patch and provisioning data into at least one data burst message;

an encryption controller that converts said at least one data burst message into a plurality of encrypted IP packets according to at least one of;

IP Sec tunneling protocol;

Secure Shell (SSH) tunneling protocol;

Secure Sockets Layer/Transport Layer Security (SSL/TLS); and

point-to-point tunneling protocol (PPTP); and

an RF transceiver that converts said encrypted IP packets into at least one wireless message and transmits said at least one wireless message to said wireless mobile station,

wherein said mobile station accesses at least one of said software program, said software correction patch and said provisioning data via a public IP network and automatically applies at least one of said software program, said software correction patch and said provisioning data.

9. The system as set forth in claim 8 wherein each of said IP packets comprises IP layer information and a IP packet payload.

10. The system as set forth in claim 9 wherein said IP packet payload comprises transmission control protocol (TCP) layer information.

11. The system as set forth in claim 10 wherein said IP packet payload comprises an over-the-air service provisioning payload associated with said at least one data burst message.

12. The system as set forth in claim 8 wherein each of said IP packets comprises IP layer information, transmission control protocol (TCP) layer information and a IP packet payload.

13. The system as set forth in claim 12 wherein said IP packet payload comprises an over-the-air service provisioning payload associated with said at least one data burst message.

14. The system as set forth in claim 8 wherein said data burst message protocol controller that converts said at least one of a software program, a software correction patch and provisioning data to said at least one data burst message according to at least one of:

1) an IS-683-A protocol;

     2) a short messaging service (SMS) protocol; and

     3) extensible mark-up language (XML) protocol.

15. For use in a wireless network, a method for securely transmitting to a wireless mobile station at least one of a software program, a software correction patch and provisioning data from a server associated with the wireless network, the method comprising the steps of:

receiving and converting the at least one of a software program, a software correction patch and provisioning data into at least one data burst message;

converting said at least one data burst message into a plurality of encrypted IP packets;

converting said encrypted IP packets into at least one wireless message according to at least one of;

IP Sec tunneling protocol;

Secure Shell (SSH) tunneling protocol;

Secure Sockets Layer/Transport Layer Security (SSL/TLS); and

point-to-point tunneling protocol (PPTP); and

transmitting said at least one wireless message to said wireless mobile station,

wherein said mobile station accesses at least one of said software program, said software correction patch and said provisioning data via a public IP network and automatically applies at least one of said software program, said software correction patch and said provisioning data.

16. The method as set forth in claim 15 wherein each of the said IP packets comprises IP layer information and a IP packet payload.

17. The method as set forth in claim 16 wherein said IP packet payload comprises transmission control protocol (TCP) layer information.

18. The method as set forth in claim 17 wherein said IP packet payload comprises an over-the-air service provisioning payload associated with said at least one data burst message.

19. The method as set forth in claim 15 wherein each of said IP packets comprises IP layer information, transmission control protocol (TCP) layer information and a IP packet payload.

20. The method as set forth in claim 19 wherein the said IP packet payload comprises an over-the-air service provisioning payload associated with said at least one data burst message.

21. The method as set forth in claim 15 wherein said steps of receiving and converting said at least one of a software program, a software correction patch and provisioning data into at least one data burst message comprises the sub-sep of converting said at least one of a software program, a software correction patch and provisioning data into at least one data burst message according to at least one of:

1) an IS-683-A protocol;

     2) a short messaging service (SMS) protocol; and

     3) extensible mark-up language (XML) protocol.