Method and system for secured wireless data transmission to and from a remote device

• US 8,068,609 B2
• Filed: 12/31/2008
• Issued: 11/29/2011
• Est. Priority Date: 01/16/2004
• Status: Expired due to Fees

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Business Global LLC (Verizon Communications Inc.)
• Inventors: Humphries, Laymon Scott, Puranik, Gagan
• Primary Examiner(s): TRUONG, THANHNGA B
• Application Number:
  US12/347,650
• Publication Number:
  US 20090220086A1
• Time in Patent Office: 1,063 Days
• Field of Search: 380/30, 380/270, 713/162, 713/170, 370/338
• US Class Current: 380/270
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819

Abstract

The device tracking location adherence and route adherence technology, according to an exemplary embodiment of this invention, at least provides for secure message reception from a remote device. The present invention allows for secure data transmission between a remote device and while employing a small amount of bandwidth thereby providing a cost-effective data transmission system. This is especially advantageous where a fleet of remote devices is employed within a network.

Claims

1. A method, comprising:

receiving, via a wireless channel, a packetized message at a network device;

obtaining, via the network device, a reverse channel address on the wireless channel, the reverse channel address being associated with the packetized message;

based on the reverse channel address and independent of a content of the packetized message, determining, via the network device, an identity of a remote device associated with the packetized message and a destination address for the packetized message; and

routing via the network device, the packetized message to the destination address.

2. The method of claim 1, further comprising:

reviewing the content to determine when the packetized message includes a registration request; and

when the packetized message includes the registration request, forwarding a response to the remote device to establish key encryption.

3. The method of claim 2, where the key encryption comprises a public/private elliptic curve cryptography key encryption.

4. The method of claim 2, where the response comprises an initiation vector to provide an ephemeral encryption key to the remote device.

5. The method of claim 2, where the registration request is sent by the remote device in response to an initial operation of the remote device.

6. The method of claim 2, where the registration request is sent by the remote device in response to a detected error at the remote device.

7. The method of claim 1, where determining the identity of the remote device and the destination address includes:

retrieving the identity of the remote device based on the reverse channel address;

retrieving a stored profile of the remote device based on the identity of the remote device; and

reviewing the stored profile of the remote device for the destination address.

8. The method of claim 1,

where the packetized message is encrypted, and

where determining the identity of the remote device and the destination address is without decrypting the packetized message.

9. An apparatus comprising:

a processor to;

obtain a reverse channel address associated with a received message,

based on the reverse channel address and independent of a content of the received message, determine an identity of a remote device,

based on the identity of the remote device, retrieve a stored profile of the remote device, where the stored profile includes a destination address for the received message, and

route the received message to the destination address in the stored profile.

10. The apparatus of claim 9, where the processor is further to:

review the content of the received message to determine that the received message includes a registration request; and

when the received message includes the registration request, forward a response to the remote device to establish key encryption.

11. The apparatus of claim 10, where the key encryption comprises a public/private elliptic curve cryptography key encryption.

12. The apparatus of claim 10, where the response comprises an initiation vector to provide an ephemeral encryption key to the remote device.

13. The apparatus of claim 10, where the received message is sent by the remote device in response to an initial operation of the remote device and without user input to the remote device.

14. The apparatus of claim 10, where the message is sent by the remote device in response to a detected error at the remote device.

15. The apparatus of claim 10,

where the registration request comprises a first registration request,

where the processor is further to:

in response to the first registration request, forward an acknowledgment to the remote device, and

after forwarding the acknowledgment, receive a second registration request from the remote device, and

where the response is forwarded in reply to receiving the second registration request.

16. A non-transitory computer-readable medium encoded with instructions capable of being executed by a processor in a network device, the instructions comprising:

one or more instructions for receiving a wireless message at the network device;

one or more instructions for obtaining a reverse channel address associated with the wireless message;

one or more instructions for, based on the reverse channel address and independent of a content of the wireless message, determining an identity of a mobile station associated with the wireless message and a destination address for the wireless message; and

one or more instructions for routing, via the network device, the wireless message to the destination address,

where the one or more instructions for routing the wireless message includes;

one or more instructions for reviewing a header of the wireless message to determine when the wireless message includes a registration request, and

one or more instructions for forwarding, when the wireless message includes the registration request, a response to the mobile station to establish key encryption.

17. The non-transitory computer-readable medium of claim 16,

where the wireless message includes the registration request,

where the registration request comprises a first registration request,

where the instructions for further include:

one or more instructions for forwarding, in response to the first registration request, an acknowledgment to the mobile station, and

one or more instructions for receiving, after forwarding the acknowledgment, a second registration request from the mobile station, and

where the one or more instructions for forwarding the response include;

one or more instructions for forwarding the response in reply to receiving the second registration request.

18. The non-transitory computer-readable medium of claim 16,

where the wireless message includes the registration request, and

where the key encryption comprises a public/private elliptic curve cryptography (ECC) key encryption.

19. The non-transitory computer-readable medium of claim 16,

where the wireless message includes the registration request,

where the response comprises an initiation vector to provide an ephemeral encryption key to the mobile station, and

where the ephemeral encryption key enables the mobile station to form a symmetric encryption key.

20. The non-transitory computer-readable medium of claim 16,

where the wireless message includes the registration request, and

where the wireless message is sent by the mobile station in response to an initial operation of the mobile station.