Wireless time of flight security, user authentication, and variable QoS position accuracy protocol

• US 9,654,912 B2
• Filed: 09/24/2012
• Issued: 05/16/2017
• Est. Priority Date: 09/24/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Sirotkin, Alexander Sasha, Schatzberg, Uri, Amizur, Yuval, Banin, Leor
• Primary Examiner(s): Nguyen, Chuong P
• Application Number:
  US13/625,570
• Publication Number:
  US 20160157099A1
• Time in Patent Office: 1,695 Days
• Field of Search: 342457, 342450, 342451
• CPC Class Codes: G01S 5/0054 of actual mobile position, i.e. position calculation on base station
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/024 Guidance services
• CPC Class Codes: H04W 48/20 Selecting an access point
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

Systems and methods are directed to securely identifying positioning information and include a plurality of APs configured to facilitate wireless communications within a servicing area, an infrastructure entity, communicatively coupled to each of the APs, and configured to store and process subscription information, positioning information, QoS information indicative of resolution levels of the positioning information, and encryption/decryption information specific to each of a plurality of subscribing member wireless devices. As a wireless device enters the servicing area, the wireless device establishes a first level of communication with the infrastructure entity via at least one AP, and requests positioning information to the at least one AP which is then forwarded to the infrastructure entity. Upon verifying that the wireless device is a subscribing member, a second level of communication is established that securely provides position information to the wireless device, based on the encryption/decryption information specific to the wireless device.

Claims

1. A secure wireless position identification system,

comprising:

a plurality of access points (APs) configured to facilitate wireless communications within a servicing area;

an infrastructure entity that is communicatively coupled to each of the APs, and in operation, stores and processes subscription information, positioning information, quality of service (QoS) information indicative of resolution levels of the positioning information, and encryption/decryption information specific to each of a plurality of subscribing member wireless devices,

wherein, upon a wireless device entering the servicing area and seeking positioning information, in operation, at least one AP establishes a first level of communication with the wireless device, and receives a request for positioning information from the wireless device, and

wherein, in operation, the infrastructure entity receives the positioning information request from the at least one AP and, upon verifying that the wireless device is one of the subscribing member wireless devices and identifying the QoS level assigned to the wireless device, the QoS indicating the resolution level of the positioning information, a second level of communication is established that securely provides positioning information at the QoS level, based on the encryption/decryption information specific to the wireless device.

2. The secure wireless position identification system of claim 1, wherein the wireless device communicates with the at least one AP, based on pre-specified operational criteria.

3. The secure wireless position identification system of claim 1, wherein upon verifying that the wireless device is one of the subscribing member wireless devices, the infrastructure entity forwards the encryption/decryption information specific to the wireless device to the at least one AP.

4. The secure wireless position identification system of claim 3, wherein the infrastructure entity further forwards the encryption/decryption information specific to the wireless device to neighboring APs of the at least one AP.

5. The secure wireless position identification system of claim 3, wherein the at least one AP forwards the encryption/decryption information specific to the wireless device to neighboring APs by referring to a neighbor list mechanism.

6. The secure wireless position identification system of claim 3, wherein the at least one AP uses the encryption/decryption information specific to the wireless device to encrypt the position information at the QoS level of resolution and transmits the encrypted position information to the wireless device and the wireless devices uses the encryption/decryption information to decrypt the encrypted the position information received from the at least one AP.

7. The secure wireless position identification system of claim 1, wherein the first level of communication comprises one or more of the following operations:

providing identity of the wireless device to the infrastructure entity, authenticating the wireless device by the infrastructure entity, exchanging shared authentication security keys between the infrastructure entity and the wireless device, transmitting association request by the wireless device, processing of the association request by the infrastructure entity, registering the wireless device with the infrastructure entity to establish communication connectivity, and notification of information and available services provided by infrastructure entity to the wireless device.

8. The secure wireless position identification system of claim 7, wherein the wireless device requests positioning information to the at least one AP after receiving notification that the available services includes position identification services.

9. The secure wireless position identification system of claim 1, wherein the infrastructure entity comprises one or more of the following components or a combination thereof:

a database, authentication server, and positioning server.

10. The secure wireless position identification system of claim 9 wherein the verification that the wireless device is one of the subscribing member wireless devices includes examining the information contained in the database, authentication server, and/or positioning server to determine one or more of the following:

whether the wireless device is a registered subscriber to the positioning services provided by the network infrastructure, whether the wireless device has satisfied the subscription criteria, whether the wireless device is current on subscription payments, what level of QoS accuracy is the wireless device entitled to based on its subscription criteria, and/or whether the current location of the wireless device is in an area where positioning information and/or accuracy levels are limited.

11. A method of securely identifying positioning information in a wireless system, the system including a plurality of access points (APs) to facilitate wireless communications within a servicing area and an infrastructure entity communicatively coupled to each of the APs, the method comprising:

storing, by the infrastructure entity, subscription information, positioning information, quality of service (QoS) information indicative of resolution levels of the positioning information, and encryption/decryption information specific to each of a plurality of subscribing member wireless devices,

establishing a first level of communication with the infrastructure entity via at least one AP, by a wireless device entering the servicing area;

receiving, by the infrastructure entity, a request for positioning information request from the wireless device via the at least one AP;

processing, by the infrastructure entity, the positioning information request to verify that the wireless device is one of the subscribing member wireless devices and identify the QoS level assigned to the wireless device, the QoS level indicating the resolution level of the positioning information; and

upon verifying that the wireless device is one of the subscribing member wireless devices and identifying the QoS level, establishing a second level of communication that securely provides the positioning information at the QoS level, based on the encryption/decryption information specific to the wireless device.

12. The secure method of claim 11, wherein the establishing of the first level of communication is based on pre-specified operational criteria.

13. The secure method of claim 11, wherein upon verifying that the wireless device is one of the subscribing member wireless devices, the infrastructure entity forwards the encryption/decryption information specific to the wireless device to the at least one AP.

14. The secure method of claim 13, further comprising the infrastructure entity forwarding the encryption/decryption information specific to the wireless device to neighboring APs of the at least one AP.

15. The secure method of claim 13, further comprising the at least one AP forwarding the encryption/decryption information specific to the wireless device to neighboring APs by referring to a neighbor list mechanism.

16. The secure method of claim 13, wherein the at least one AP uses the encryption/decryption information specific to the wireless device to encrypt the position information at the QoS level of resolution and transmits the encrypted position information to the wireless device and the wireless devices uses the encryption/decryption information to decrypt the encrypted the position information received from the at least one AP.

17. The secure method of claim 11, wherein the first level of communication comprises one or more of the following operations:

providing identity of the wireless device to the infrastructure entity, authenticating the wireless device by the infrastructure entity, exchanging shared authentication security keys between the infrastructure entity and the wireless device, transmitting association request by the wireless device, processing of the association request by the infrastructure entity, registering the wireless device with the infrastructure entity to establish communication connectivity, and notification of information and available services provided by infrastructure entity to the wireless device.

18. The secure method of claim 17, wherein the wireless device requests positioning information to the at least one AP after receiving notification that the available services includes position identification services.

19. The secure method of claim 11, wherein the infrastructure entity comprises one or more of the following components or a combination thereof:

a database, authentication server, and positioning server.

20. The secure method of claim 19, wherein the verifying that the wireless device is one of the subscribing member wireless devices includes examining the information contained in the database, authentication server, and/or positioning server to determine one or more of the following:

whether the wireless device is a registered subscriber to the positioning services provided by the network infrastructure, whether the wireless device has satisfied the subscription criteria, whether the wireless device is current on subscription payments, what level of QoS accuracy is the wireless device entitled to based on its subscription criteria, and/or whether the current location of the wireless device is in an area where positioning information and/or accuracy levels are limited.