AUTHENTICATION IN SECURE USER PLANE LOCATION (SUPL) SYSTEMS

• US 20140094147A1
• Filed: 12/04/2013
• Published: 04/03/2014
• Est. Priority Date: 11/06/2010
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Hawkes, Philip Michael, Wachter, Andreas Klaus, Escott, Adrian Edward, Edge, Stephen William
• Granted Patent: US 9,402,177 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

A particular method includes generating, at a secure user plane location (SUPL) server, a message to be sent to a mobile device, the message including: a server certificate including an identifier of the SUPL server and a public key of the SUPL server; and a request for a device certificate of the mobile device. The method also includes receiving a reply from the mobile device that includes a device certificate of the mobile device; and authenticating the mobile device as associated with a SUPL user based on the device certificate.

Claims

1. A method comprising:

generating, at a secure user plane location (SUPL) server, a message to be sent to a mobile device, the message including;

a server certificate including an identifier of the SUPL server and a public key of the SUPL server; and

a request for a device certificate of the mobile device;

receiving a reply from the mobile device that includes a device certificate of the mobile device; and

authenticating the mobile device as associated with a SUPL user based on the device certificate.

2. The method of claim 1, wherein the mobile device comprises a SUPL enabled terminal (SET) and the SUPL server comprises a SUPL location platform (SLP).

3. The method of claim 1, wherein the message is sent in response to receiving from the mobile device an indication of one or more transport layer security (TLS) cipher suites supported by the mobile device, and wherein the message further includes a selection of at least one of the one or more TLS cipher suites.

4. The method of claim 1, wherein the device certificate includes a device identifier of the mobile device.

5. A non-transitory processor-readable medium comprising instructions that, when executed by a processor, cause the processor to:

generate, at a secure user plane location (SUPL) server, a message to be sent to a mobile device, the message including;

a server certificate including an identifier of the SUPL server and a public key of the SUPL server; and

a request for a device certificate of the mobile device;

receive a reply from the mobile device that includes a device certificate of the mobile device; and

authenticate the mobile device as associated with a SUPL user based on the device certificate.

6. The non-transitory processor-readable medium of claim 5, wherein the mobile device comprises a SUPL enabled terminal (SET) and the SUPL server comprises a SUPL location platform (SLP).

7. The non-transitory processor-readable medium of claim 5, wherein the message is sent in response to receiving from the mobile device an indication of one or more transport layer security (TLS) cipher suites supported by the mobile device, and wherein the message further includes a selection of at least one of the one or more TLS cipher suites.

8. The non-transitory processor-readable medium of claim 5, wherein the device certificate includes a device identifier of the mobile device.

9. An apparatus comprising:

a processor; and

a memory coupled to the processor, wherein the memory is configured to store instructions; and

wherein the instructions are executable by the processor to;

generate, at a secure user plane location (SUPL) server, a message to be sent to a mobile device, the message including;

a server certificate including an identifier of the SUPL server and a public key of the SUPL server; and

a request for a device certificate of the mobile device;

receive a reply from the mobile device that includes a device identifier of the mobile device; and

authenticate the mobile device as associated with a SUPL user based on the device certificate.

10. The apparatus of claim 9, wherein the message is sent in response to receiving at the SUPL server from the mobile device an indication of one or more transport layer security (TLS) cipher suites supported by the mobile device, and wherein the message further includes a selection of at least one of the one or more TLS cipher suites.

11. An apparatus comprising:

means for generating, at a secure user plane location (SUPL) server, a message to be sent to a mobile device, the message including;

a server certificate including an identifier of the SUPL server and a public key of the SUPL server; and

a request for a device certificate of the mobile device;

means for receiving a reply from the mobile device that includes a device certificate of the mobile device; and

means for authenticating the mobile device as associated with a SUPL user based on the device certificate.

12. The apparatus of claim 11, wherein the mobile device comprises a SUPL enabled terminal (SET) and the SUPL server comprises a SUPL location platform (SLP).

13. The apparatus of claim 11, wherein the message is sent in response to receiving from the mobile device an indication of one or more transport layer security (TLS) cipher suites supported by the mobile device, and wherein the message further includes a selection of at least one of the one or more TLS cipher suites.

14. The apparatus of claim 11, wherein the device certificate includes a device identifier of the mobile device.