Method and apparatus for secure immediate wireless access in a telecommunications network
View Patent ↗A wireless telephone and messaging system provides Secure Immediate Wireless Access (SIWA) to wireless telephones onto existing wireless networks, such as GSM, CDMA, TDMA, and analog (AMPS). The SIWA protocol uses existing wireless network messaging to exchange information between wireless devices and a network server, referred to herein as an Intelligent Service Manager (ISM). The ISM acts as a gateway between wireless devices and wireless service provider, and provides the wireless devices with an immediate limited or unlimited access to the wireless network. The ISM can also deny access to the wireless network from unauthorized wireless devices.
1. A bootstrap process for secure immediate wireless access that enables at least one non-active wireless device to activate itself on a wireless network, comprising the steps of:
after said at least one non-active wireless device is powered on, said at least one non-active wireless device detecting that it is not active and generating at least one temporary network identifier from a set of allocated temporary network identifiers; said non-active wireless device gaining access to said wireless network using said at least one temporary network identifier generated by said at least one non-active wireless device;
an intelligent service manager (ISM) server returning a profile for said at least one non-active wireless device to appropriate network elements;
said at least one non-active wireless device authenticating said ISM server;
said ISM server authenticating said wireless non-active device;
said ISM server programming said at least one non-active wireless device with mandatory network identifiers and security keys unique to each wireless technology; and
providing said at least one non-active wireless device with immediate access to said wireless network;
wherein said at least one non-active wireless device and said ISM server exchange information end-to-end between said at least one non-active wireless device and said ISM server, and wherein existing wireless network elements interposed between said ISM server and said at least one non-active wireless device passively route messages between said ISM server and said at least one non-active wireless device as if said at least one non-active wireless device were active;
wherein said information is exchanged via existing wireless network messaging;
wherein said ISM server provides service to a user of said at least one non-active wireless device without a need for manual provision of accounts, so that said user receives access to services offered via said wireless network to said user at the time they are needed by said user.
2. The process of claim 1 , further comprising the steps of:
once a wireless device selects a wireless network and before a network access attempt, either registration or call origination, said wireless device checking for a Wireless Session status;
wherein if a non-active Wireless Session status is detected, said wireless device then changes its state to indicate that a bootstrap process is initiated.
3. The process of claim 2 , wherein said wireless device selects a bootstrap network identity and remains in a bootstrap state until a SessionGranted message is received;
wherein said SessionGranted message provides said wireless device with a network identity.
4. The process of claim 3 , wherein said SessionGranted message returns said bootstrap network identity back to said wireless device for a limited use, which may comprise a one time use, limited time use or limited usage use.
5. The process of claim 3 , further comprising the steps of:
said intelligent service manager providing said wireless device with a network identity;
programming said network identity into said wireless device; and
said wireless device re-initiating its network access using its new identity.
6. The process of claim 5 , further comprising the step of:
said intelligent service manager invalidating a provided Wireless Session as a result of any of an expiration or usage depletion.
7. The process of claim 5 , further comprising the step of:
said wireless device checking Wireless Session status before re-initiating its network access.
8. The process of claim 1 , wherein said bootstrap process comprises any of assigning a <Siwa ID, Siwa Key> pair; a network identifier; one or more security keys assignment; and a phone number.
9. The process of claim 1 , further comprising the step of:
said wireless device selecting network identification for use during said bootstrap process;
wherein said network identification is allocated from a plurality of bootstrap identification numbers known to said network.
10. The process of claim 1 , further comprising the step of:
said wireless device selecting network identification for use during said bootstrap process;
wherein said network identification is pre-assigned.
11. The process of claim 1 , further comprising the step of:
in the case of a network identification collision between two bootstrapping wireless devices, rejecting either one of said colliding wireless devices from said network.
12. The process of claim 11 , further comprising the step of:
said rejected wireless device re-selecting a network identification and accessing the network using its newly selected network identification.
13. The process of claim 1 , wherein said bootstrap process comprises a Wireless Session purchase phase, during which a user is acknowledged with a Wireless Session promotion.
14. The process of claim 13 , wherein said Wireless Session is purchased from said wireless device itself after user information is collected.
15. The process of claim 14 , further comprising the steps of:
said intelligent service manager sending a SessionPromote m essage to said wireless device;
said wireless device returning a SessionPurchase message with said user information; and
returning a SessionGranted message acknowledging said purchase in case of a successful purchase; or
returning a SessionDenied message indicating a failure.
16. The process of claim 13 , wherein said Wireless Session purchase phase includes subscribing the user for postpaid service.
17. The process of claim 13 , wherein a Wireless Session is pre-purchased, and wherein said bootstrap process includes a NULL Wireless Session purchase phase, in which no SessionPromote or SessionPurchase messages are exchanged.
18. The process of claim 1 , wherein a last unique challenge is used to make sure that both sides are in sync.
19. The process of claim 1 , further comprising the step of:
after said at least one wireless device is powered on and after scanning available networks, said at least one wireless device interacting with a user to select a desired network.