Method and apparatus for secure immediate wireless access in a telecommunications network

• US 7,565,142 B2
• Filed: 04/06/2005
• Issued: 07/21/2009
• Est. Priority Date: 03/04/2002
• Status: Expired due to Fees

• Current Assignee: Evolving Systems Labs Incorporated
• Original Assignee: Telespree Communications (CCUR Holdings, Inc.)
• Inventors: Netanel, Eran
• Primary Examiner(s): Eisen; Alexander
• Assistant Examiner(s): CAI, WAYNE HUU
• Application Number:
  US11/100,791
• Publication Number:
  US 20050181793A1
• Time in Patent Office: 1,567 Days
• Field of Search: 455/419, 455/524, 455/418, 455/410, 455/411, 705/14, 709/224
• US Class Current: 455/419
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

A wireless telephone and messaging system provides Secure Immediate Wireless Access (SIWA) to wireless telephones onto existing wireless networks, such as GSM, CDMA, TDMA, and analog (AMPS). The SIWA protocol uses existing wireless network messaging to exchange information between wireless devices and a network server, referred to herein as an Intelligent Service Manager (ISM). The ISM acts as a gateway between wireless devices and wireless service provider, and provides the wireless devices with an immediate limited or unlimited access to the wireless network. The ISM can also deny access to the wireless network from unauthorized wireless devices.

Claims

1. A bootstrap process for secure immediate wireless access that enables at least one non-active wireless device to activate itself on a wireless network, comprising the steps of:

after said at least one non-active wireless device is powered on, said at least one non-active wireless device detecting that it is not active and generating at least one temporary network identifier from a set of allocated temporary network identifiers;

said non-active wireless device gaining access to said wireless network using said at least one temporary network identifier generated by said at least one non-active wireless device;

an intelligent service manager (ISM) server returning a profile for said at least one non-active wireless device to appropriate network elements;

said at least one non-active wireless device authenticating said ISM server;

said ISM server authenticating said wireless non-active device;

said ISM server programming said at least one non-active wireless device with mandatory network identifiers and security keys unique to each wireless technology; and

providing said at least one non-active wireless device with immediate access to said wireless network;

wherein said at least one non-active wireless device and said ISM server exchange information end-to-end between said at least one non-active wireless device and said ISM server, and wherein existing wireless network elements interposed between said ISM server and said at least one non-active wireless device passively route messages between said ISM server and said at least one non-active wireless device as if said at least one non-active wireless device were active;

wherein said information is exchanged via existing wireless network messaging;

wherein said ISM server provides service to a user of said at least one non-active wireless device without a need for manual provision of accounts, so that said user receives access to services offered via said wireless network to said user at the time they are needed by said user.

2. The process of claim 1, further comprising the steps of:

once a wireless device selects a wireless network and before a network access attempt, either registration or call origination, said wireless device checking for a Wireless Session status;

wherein if a non-active Wireless Session status is detected, said wireless device then changes its state to indicate that a bootstrap process is initiated.

3. The process of claim 2, wherein said wireless device selects a bootstrap network identity and remains in a bootstrap state until a SessionGranted message is received;

wherein said SessionGranted message provides said wireless device with a network identity.

4. The process of claim 3, wherein said SessionGranted message returns said bootstrap network identity back to said wireless device for a limited use, which may comprise a one time use, limited time use or limited usage use.

5. The process of claim 3, further comprising the steps of:

said intelligent service manager providing said wireless device with a network identity;

programming said network identity into said wireless device; and

said wireless device re-initiating its network access using its new identity.

6. The process of claim 5, further comprising the step of:

said intelligent service manager invalidating a provided Wireless Session as a result of any of an expiration or usage depletion.

7. The process of claim 5, further comprising the step of:

said wireless device checking Wireless Session status before re-initiating its network access.

8. The process of claim 1, wherein said bootstrap process comprises any of assigning a <

Siwa ID, Siwa Key>

pair;

a network identifier;

one or more security keys assignment; and

a phone number.

9. The process of claim 1, further comprising the step of:

said wireless device selecting network identification for use during said bootstrap process;

wherein said network identification is allocated from a plurality of bootstrap identification numbers known to said network.

10. The process of claim 1, further comprising the step of:

said wireless device selecting network identification for use during said bootstrap process;

wherein said network identification is pre-assigned.

11. The process of claim 1, further comprising the step of:

in the case of a network identification collision between two bootstrapping wireless devices, rejecting either one of said colliding wireless devices from said network.

12. The process of claim 11, further comprising the step of:

said rejected wireless device re-selecting a network identification and accessing the network using its newly selected network identification.

13. The process of claim 1, wherein said bootstrap process comprises a Wireless Session purchase phase, during which a user is acknowledged with a Wireless Session promotion.

14. The process of claim 13, wherein said Wireless Session is purchased from said wireless device itself after user information is collected.

15. The process of claim 14, further comprising the steps of:

said intelligent service manager sending a SessionPromote m essage to said wireless device;

said wireless device returning a SessionPurchase message with said user information; and

returning a SessionGranted message acknowledging said purchase in case of a successful purchase;

or

returning a SessionDenied message indicating a failure.

16. The process of claim 13, wherein said Wireless Session purchase phase includes subscribing the user for postpaid service.

17. The process of claim 13, wherein a Wireless Session is pre-purchased, and wherein said bootstrap process includes a NULL Wireless Session purchase phase, in which no SessionPromote or SessionPurchase messages are exchanged.

18. The process of claim 1, wherein a last unique challenge is used to make sure that both sides are in sync.

19. The process of claim 1, further comprising the step of:

after said at least one wireless device is powered on and after scanning available networks, said at least one wireless device interacting with a user to select a desired network.