Method of and system for authenticating and operating personal communication devices over public safety networks

• US 9,332,431 B2
• Filed: 12/27/2012
• Issued: 05/03/2016
• Est. Priority Date: 12/27/2012
• Status: Active Grant

• Current Assignee: Motorola Solutions, Inc.
• Original Assignee: Motorola Solutions, Inc.
• Inventors: Reitsma, Katrin, Patel, Hemang F., Gilbert, Steven S.
• Primary Examiner(s): Shaheed, Khalid
• Assistant Examiner(s): DONADO, FRANK E
• Application Number:
  US13/728,598
• Publication Number:
  US 20140187189A1
• Time in Patent Office: 1,223 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 76/50 for emergency connections
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

A public safety (PS) person having a PS communications device is able to authenticate and authorize operation of a non-PS, personal communications device over a PS network. The PS device issues a challenge, and the personal device responds to the challenge, when the devices are in close proximity. A conditional token having specified conditions is sent to the personal device, which captures information at an incident scene. The personal device attaches the conditional token to the captured information, and uploads the captured information with the attached token to the PS device to permit distribution of the captured information in accordance with the specified conditions of the attached conditional token.

Claims

1. A method of enabling a public safety (PS) person having a PS communications device operative over a PS network, to authenticate and authorize operation over the PS network of a non-PS, personal communications device, operative over a non-PS network, the method comprising:

generating a challenge;

issuing to the personal device, by a PS device over the PS network, the challenge over a first, wireless channel;

issuing, by the personal device to the PS device, a response to the challenge over a second, wireless channel different from the first channel;

verifying the response;

in response to verifying the response to the challenge over the second, wireless channel, generating a conditional token having specified conditions under which the personal device is permitted to distribute information associated with an emergency incident upon meeting the specified conditions over the PS network;

sending, by the PS device to the personal device, the conditional token;

capturing information at an emergency incident scene by operation of the personal device;

attaching, by the personal device, the conditional token to the captured information, and

uploading, by the personal device, the captured information with the attached conditional token, wherein, upon meeting the specified conditions, the captured information is distributed to one or more other PS devices located at the emergency incident scene over the PS network.

2. The method of claim 1, wherein the issuing of the challenge and the issuing of the response are performed when the PS device and the personal device are in close proximity to each other, and wherein the first channel and the second channel are short-range wireless channels.

3. The method of claim 1, wherein the verifying of the response and the generating the conditional token are performed by the PS device.

4. The method of claim 1,

wherein the generating of the challenge comprises receiving, by the PS device from an authentication server remote from the PS device, the challenge;

wherein the verifying of the response comprises receiving, by the authentication server from the PS device, the response and verifying, by the authentication server, the response; and

wherein the generating of the conditional token comprises generating, by the authentication server, the conditional token and conveying, by the authentication server to the PS device, the conditional token.

5. The method of claim 1, wherein the generating of the conditional token is performed by configuring the specified conditions to include at least one of an expiration time after which the personal device is automatically prevented from distributing the captured information over the PS network, a geographical location of the incident scene, a timestamp, an identifier of the incident scene, an identifier of the jurisdiction, an identifier of the PS device, an identifier of the personal device, and an identifier of the PS person operating the PS device.

6. The method of claim 1, wherein the uploading of the captured information with the attached conditional token is sent to the PS device over the second channel for distribution over a third wireless channel different from the first and second channels over the PS network to other PS devices operated by other PS persons at the incident scene.

7. The method of claim 1, wherein the uploading of the captured information with the attached conditional token is sent to the PS device over a third wireless channel different from the first and second channels for distribution over the third channel over the PS network to other PS devices operated by other PS persons at the incident scene.

8. The method of claim 1, wherein the uploading of the captured information with the attached conditional token is sent to a database of an incident media server remote from the PS device for distribution over the PS network to other PS devices operated by other PS persons at the incident scene.

9. The method of claim 1, wherein the PS device is operated by the PS person, and wherein the personal device is operated by one of the PS person and an authorized person at the incident scene.

10. A system for enabling a public safety (PS) person having a PS communications device operative over a PS network, to authenticate and authorize operation over the PS network of a non-PS, personal communications device, operative over a non-PS network, the system comprising:

the PS device being operated for issuing a challenge to the personal device over a first, wireless channel;

the personal device being operated for issuing a response to the challenge to the PS device over a second, wireless channel different from the first channel;

the system being operative for verifying the response and, in response to verifying the response to the challenge over the second, wireless channel, generating a conditional token having specified conditions under which the personal device is permitted to distribute information associated with an emergency incident upon meeting the specified conditions over the PS network;

the PS device being operated for sending the conditional token to the personal device for acknowledgement;

the personal device being operated for capturing information at an emergency incident scene;

the personal device being operated for attaching the conditional token to the captured information and for uploading the captured information with the attached conditional token, wherein, upon meeting the specified conditions, the captured information is distributed to one or more other PS devices located at the emergency incident scene over the PS network.

11. The system of claim 10, wherein the PS device is operative for issuing the challenge, and wherein the personal device is operative for issuing the response, when the PS device and the personal device are in close proximity to each other, and wherein the first channel and the second channel are short-range, wireless channels.

12. The system of claim 10, wherein the first channel is one of a visual, acoustic, mechanical, and radio frequency channel, and wherein the second channel is one of a Bluetooth®

channel and a near field communication (NFC) channel.

13. The system of claim 10, wherein the PS device is operative for verifying the response, generating the conditional token, and sending the conditional token to the personal device.

14. The system of claim 10, further comprising:

an authentication server remote from the PS device and operative for receiving the response from the PS device, verifying the response, generating the conditional token, and sending the conditional token to the personal device via the PS device.

15. The system of claim 10, wherein the specified conditions include at least one of an expiration time after which the personal device is automatically prevented from distributing the captured information over the PS network, a geographical location of the incident scene, a timestamp, an identifier of the incident scene, an identifier of the jurisdiction, an identifier of the PS device, an identifier of the personal device, and an identifier of the PS person operating the PS device.

16. The system of claim 10, wherein the personal device is operative for the uploading of the captured information with the attached conditional token to the PS device over the second channel for distribution over a third wireless channel different from the first and second channels over the PS network to other PS devices operated by other PS persons at the incident scene.

17. The system of claim 10, wherein the personal device is operative for the uploading of the captured information with the attached conditional token to the PS device over a third wireless channel different from the first and second channels for distribution over the third channel over the PS network to other PS devices operated by other PS persons at the incident scene.

18. The system of claim 17, wherein the third channel is a secure, protected, wireless channel.

19. The system of claim 10, wherein the personal device is operative for the uploading of the captured information with the attached conditional token to a database of an incident media server remote from the PS device for distribution over the PS network to other PS devices operated by other PS persons at the incident scene.