Method and apparatus for secure access to dedicated network resources

1. A method for providing secure access to resources in a radio communication system including a hub communicating with a plurality of terminals, the method comprising:

determining a quality of service level (QoS) corresponding to one of the terminals;

assigning an identifier to the one terminal for communicating over one of a plurality of return channels that are in the direction of the one terminal to the hub, the identifier associating a subset of the terminals with the QoS level, the subset including the one terminal;

generating a first encrypted message based on an identifier stored at the hub and a time stamp; and

transmitting the first encrypted message to the one terminal, wherein the one terminal is configured to generate a second encrypted message from the assigned identifier and the time stamp and to determine whether the first encrypted message and the second encrypted message match,

wherein if there is a match, use of the one return channel is permitted prior to the terminal transmitting a message to the hub.

2. A method according to claim 1 , wherein the QoS level is predetermined based on a service agreement for the one terminal.

3. A method according to claim 1 , wherein the second encrypted message is encrypted based on an Effective Encryption Master Key (EEMK) unique to the one terminal.

4. A method according to claim 1 , wherein another identifier is associated with another subset of the terminals, and the one return channel is part of a subset of the return channels, the method further comprising:

mapping the identifier and the other identifier to the subset of the return channels.

5. A method according to claim 4 , further comprising:

advertising the associations between the identifiers and the return channels to the terminals.

6. A method according to claim 1 , further comprising:

configuring the one terminal with the identifier during commissioning of the one terminal, wherein the terminals are satellite terminals.

7. A computer-readable storage medium bearing instructions for providing secure access to resources in a radio communication system including a hub communicating with a plurality of terminals, said instruction, being arranged, upon execution, to cause one or more processors to perform the method of claim 1 .

8. A method for accessing resources in a radio communication system, the method comprising:

retrieving an assigned identifier that maps to one or more return channels of the radio communication system, wherein the assigned identifier associates a subset of terminals in the radio communication system with a quality of service (QoS) level;

selecting, based upon the assigned identifier, the one or more of the return channels for transmission of data;

downloading a first encrypted message based on an identifier stored at a hub of the radio communication system and a time stamp with a terminal;

generating a second encrypted message from the assigned identifier and the time stamp with the terminal; and

determining whether the first encrypted message and the second encrypted message match,

wherein if there is a match, use of the selected one or more return channels is permitted prior to the terminal transmitting a message to the hub.

9. A method according to claim 8 , wherein the QoS level is predetermined based on a service agreement.

10. A method according to claim 8 , wherein the second encrypted message is encrypted based on a unique Effective Encryption Master Key (EEMK).

11. A method according to claim 8 , wherein another assigned identifier is associated with another subset of the terminals, and the one or more return channels are part of a subset of the return channels, wherein the assigned identifiers are mapped to the subset of the return channels.

12. A method according to claim 11 , further comprising:

receiving a message, from the hub, specifying the associations between the assigned identifiers and the return channels.

13. A computer-readable storage medium bearing instructions for accessing resources in a radio communication system, said instruction, being arranged, upon execution, to cause one or more processors to perform the method of claim 8 .

14. An apparatus for accessing resources in a radio communication system, the apparatus comprising:

a memory configured to store an encrypted string; and

a processor configured to extract a time stamp and an identifier from the encrypted string, wherein the identifier maps to one or more return channels of the radio communication system and associates a subset of terminals in the radio communication system with a quality of service (QoS) level,

wherein the memory and the processor are configured to operate to:

generate a second encrypted string from the identifier and the time stamp,

determine whether the first encrypted string and the second encrypted string match, and

if a match is determined, permit the use of the identified one or more return channels prior to the terminal transmitting a message to a hub.

15. An apparatus according to claim 14 , wherein the QoS level is predetermined based on a service agreement.

16. An apparatus according to claim 14 , wherein

the second encrypted string is encrypted based on an Effective Encryption Master Key (EEMK) unique to the apparatus.

17. An apparatus according to claim 14 , wherein another identifier is associated with another subset of the terminals, and the one or more return channels are part of a subset of the return channels, wherein the identifier and the other identifier are mapped to the subset of the return channels.

18. An apparatus according to claim 17 , further comprising:

receiving a message, from the hub within the radio communication system, specifying the associations between the identifiers and the return channels.