Integrated authentication codes for user devices and communication networks

• US 9,992,679 B1
• Filed: 08/25/2016
• Issued: 06/05/2018
• Est. Priority Date: 08/25/2016
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Gorman, Pierce Andrew
• Primary Examiner(s): Bhattacharya, Sam
• Application Number:
  US15/247,035
• Time in Patent Office: 649 Days
• Field of Search: 455410, 455411, 4554141, 370352, 370389
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04M 2203/6045 Identity confirmation
• CPC Class Codes: H04M 2203/6081 Service authorization mechanisms
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/108 Source integrity

Abstract

User Equipment (UE) transfers a session request having a calling party identifier and a digital signature for the calling party identifier. An originating network receives the session request and digitally verifies the calling party digital signature for the calling party identifier. The originating network transfers the session request having the calling party identifier, a user code indicating that the calling party identifier was digitally verified by the originating network, and an originating network digital signature for the originating network. A tandem network receives the session request having the originating network digital signature and digitally verifies the originating network digital signature. The tandem network transfers the communication session request having the calling party identifier and a user/network code indicating that the calling party identifier was digitally verified by the originating communication network and that the originating network was digitally verified by the tandem communication network.

Claims

1. A method of operating a data communication system to transfer user/network authentication information for a communication session wherein first originating User Equipment (UE) transfers a first communication session request having a first calling party identifier and a first calling party digital signature for the first calling party identifier, the method comprising:

a first originating communication network receiving the first communication session request from the first originating UE and verifying the first calling party digital signature for the first calling party identifier;

the first originating communication network transferring the first communication session request having the first calling party identifier, a first user code indicating that the first calling party identifier was digitally verified by the first originating communication network, and a first originating network digital signature for the first originating communication network;

a tandem communication network receiving the first communication session request having the first originating network digital signature for the first originating communication network and verifying the first originating network digital signature for the first originating communication network;

the tandem communication network transferring the first communication session request having the first calling party identifier and a first user/network code indicating that the first calling party identifier was digitally verified by the first originating communication network and that the first originating communication network was digitally verified by the tandem communication network; and

the tandem communication network receiving a second communication session request for a second originating UE from a second originating communication network without a second user code and without a second originating network digital signature and transferring the second communication session request with a second user/network code indicating that the second originating communication network was not digitally verified by the tandem communication network.

2. The method of claim 1 wherein the first user code consists of one or two bits and the first user/network code consists of one or two bits.

3. The method of claim 1 wherein a third originating UE transfers a third communication session request having a third calling party identifier but not a third calling party digital signature for the third calling party identifier, the method further comprising:

the first originating communication network receiving the third communication session request from the third originating UE and transferring the third communication session request having the third calling party identifier, a third user code indicating that the third calling party identifier was not verified by the first originating communication network, and the first originating network digital signature for the first originating communication network;

the tandem communication network receiving the third communication session request having the first originating network digital signature for the first originating communication network and verifying the first originating network digital signature for the first originating communication network; and

the tandem communication network transferring the third communication session request having the third calling party identifier, and a third user/network code indicating that the third calling party identifier was not digitally verified by the first originating communication network and that the first originating communication network was digitally verified by the tandem communication network.

4. The method of claim 3 wherein the third user code consists of one or two bits and the third user/network code consists of one or two bits.

5. The method of claim 1 wherein a third originating UE transfers a third communication session request having a third calling party identifier but not a third calling party digital signature for the third calling party identifier, and further comprising:

the first originating communication network receiving the third communication session request from the third originating UE and transferring the third communication session request having the second third calling party identifier, and the first originating network digital signature for the first originating communication network;

the tandem communication network receiving the third communication session request having the first originating network digital signature for the first originating communication network, verifying the third calling party identifier against a valid calling number block, and verifying the first originating network digital signature for the first originating communication network;

the tandem communication network transferring the third communication session request having the third calling party identifier, a third user/network code indicating that the third calling party identifier was in the valid number block and indicating that the first originating communication network was digitally verified by the tandem communication network.

6. The method of claim 5 wherein the third user/network code consists of one or two bits.

7. The method of claim 1 wherein the second user/network code consists of one or two bits.

8. The method of claim 1 wherein the first origination calling party identifier comprises a telephone number.

9. The method of claim 1 wherein the first communication session request comprises a Session Initiation Protocol (SIP) message.

10. A data communication system to transfer user/network authentication information for a communication session wherein first originating User Equipment (UE) transfers a first communication session request having a first calling party identifier and a first calling party digital signature for the first calling party identifier, the data communication system comprising:

a first originating communication network configured to receive the first communication session request from the first originating UE, verify the first calling party digital signature for the first calling party identifier, and transfer the first communication session request having the first calling party identifier, a first user code indicating that the first calling party identifier was digitally verified by the first originating communication network, and a first originating network digital signature for the first originating communication network;

a tandem communication network configured to receive the first communication session request having the first originating network digital signature for the first originating communication network and verify the first originating network digital signature for the first originating communication network, and transfer the first communication session request having the first calling party identifier, and a first user/network code indicating that the first calling party identifier was digitally verified by the first originating communication network and that the first originating communication network was digitally verified by the tandem communication network; and

the tandem communication network configured to receive a second communication session request for a second originating UE from a second originating communication network without a second user code and without a second originating network digital signature and transfer the second communication session request having a second user/network code indicating that the second originating UE was not digitally verified by the second originating communication network that the second originating communication network was not digitally verified by the tandem communication network.

11. The data communication system of claim 10 wherein the first user code consists of one or two bits and the first user/network code consists of one or two bits.

12. The data communication system of claim 10 wherein a third originating UE transfers a third communication session request having a third calling party identifier but not a third calling party digital signature for the third calling party identifier, the data communication system further comprising:

the first originating communication network configured to receive the third communication session request from the third originating UE and transfer the third communication session request having the third calling party identifier, a third user code indicating that the third calling party identifier was not verified by the first originating communication network, and the first originating network digital signature for the first originating communication network;

the tandem communication network configured to receive the second third communication session request having the first originating network digital signature for the first originating communication network, verify the first originating network digital signature for the first originating communication network, and transfer the third communication session request having the third calling party identifier, and a third user/network code indicating that the third calling party identifier was not digitally verified by the first originating communication network and that the first originating communication network was digitally verified by the tandem communication network.

13. The data communication system of claim 12 wherein the third user code consists of one or two bits and the third user/network code consists of one or two bits.

14. The data communication system of claim 10 wherein a third originating UE transfers a third communication session request having a third calling party identifier but not a third calling party digital signature for the third calling party identifier, and further comprising:

the first originating communication network configured to receive the third communication session request from the third originating UE and transfer the third communication session request having the third calling party identifier and the first originating network digital signature for the first originating communication network;

the tandem communication network configured to receive the third communication session request having the first originating network digital signature for the first originating communication network, verify the first originating network digital signature for the first originating communication network, verify the third calling party identifier against a valid calling number block, and transfer the third communication session request having the third calling party identifier, a third user/network code indicating that the third calling party identifier was in the valid number block and indicating that the first originating network was digitally verified by the tandem communication network.

15. The data communication system of claim 14 wherein the third user/network code consists of one or two bits.

16. The data communication system of claim 10 wherein the second user/network code consists of one or two bits.

17. The data communication system of claim 10 wherein the first origination calling party identifier comprises a telephone number.

18. The data communication system of claim 10 wherein the first communication session request comprises a Session Initiation Protocol (SIP) message.