IP Library Granted Patent US 9,729,529
Granted Patent B2
US 9,729,529 · App. 12/366,395 · Granted Aug 8, 2017

Device and method for providing bootstrapped application authentication

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,729,529
App. No.
12/366,395
Granted
Aug 8, 2017
Kind
B2
Abstract

The present invention provides a device and a method in a device for authenticating the device for use in a network. The method includes requesting a first security context for use in securing a first type of communication, where as part of requesting the first security context, a second security context is jointly requested for use in securing a second type of communication. The first security context is then received and used to provide secure access and communication via the first type of communication. The second security context is then received and used to provide secure access and communication via the second type of communication.

Claims (26)

1. A method in a device for authenticating the device for use in a network comprising:

transmitting a first request to a serving call session control function, the first request jointly requesting a first security context for use in securing a first type of communication and a second security context for use in securing a second type of communication, the first request initiating a proxy on behalf of the device to obtain authorization for the first security context and in parallel to obtain authorization from a bootstrapping server function for the second security context;

receiving the first security context in response to the first request, and using the first security context to provide secure access and communication via the first type of communication; and

receiving the second security context in response to the first request, and using the second security context to provide secure access and communication via the second type of communication.

2. A method in accordance with claim 1 wherein the request for the second security context is encoded as one or more parameters associated with the request for the first security context.

3. A method in accordance with claim 2 wherein the one or more parameters include information identifying that the user device is requesting authentication for a second security context and information used to execute the authentication protocol in support of requesting the second security context.

4. A method in accordance with claim 1 wherein the request for the first security context is part of a request to establish a session initiation protocol (SIP) type communication connection.

5. A method in accordance with claim 1 wherein the first security context is an Internet protocol multimedia subsystem (IMS) security context.

6. A method in accordance with claim 1 wherein the request for the first security context includes an authentication and a key agreement in support of communications of a first type.

7. A method in accordance with claim 1 wherein the request for the second security context is part of a request to establish a communication connection with a network application function.

8. A method in accordance with claim 7 wherein the network application function includes one or more of accessing a server to modify multimedia telephony settings.

9. A method in accordance with claim 7 wherein the network application function includes one or more of accessing a server to change presence preferences.

10. A method in accordance with claim 7 wherein the network application function includes one or more of accessing a server to pull policies from a server.

11. A method in accordance with claim 7 wherein the network application function includes one or more of accessing a server to request a certificate from a server.

12. A method in accordance with claim 7 wherein the network application function includes one or more of accessing a server to create or edit a resource list on a server.

13. A method in accordance with claim 1 wherein the second security context is a bootstrapped security context.

14. A method in accordance with claim 1 wherein the request for the second security context includes an authentication and a key agreement in support of communications of a second type.

15. A method in accordance with claim 1 wherein the entity which provides the authentication for the first security context includes a proxy, which acts on behalf of the device for requesting authentication for the second security context.

16. A wireless communication device comprising:

a user input adapted for receiving a request to initiate a network service;

a transceiver adapted for communicating with a network; and

a processor coupled to the user input and the transceiver, the processor for generating a first request to a serving call session control function jointly seeking a first security context for use in securing a first type of communication and a second security context for use in securing a second type of communication, the first request initiating a proxy on behalf of the device to obtain authorization for the first security context and in parallel to obtain authorization from a bootstrapping server function for the second security context;

wherein the first request is transmitted by the transceiver; and

wherein the transceiver receives the first security context in response to the first request and receiving the second security context in response to the first request; and the processor adapted for using the first security context to provide secure access and communication via the first type of communication; and using the second security context to provide secure access and communication via the second type of communication.

17. A wireless communication device in accordance with claim 16 wherein the wireless communication device is a radio frequency telephone.

18. A wireless communication device in accordance with claim 17 wherein the radio frequency telephone is a cellular telephone.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 18, 2014
From: MOTOROLA MOBILITY LLC
To: GOOGLE TECHNOLOGY HOLDINGS LLC
Reel/Frame 034371/0612 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 21, 2012
From: MOTOROLA MOBILITY, INC.
To: MOTOROLA MOBILITY LLC
Reel/Frame 028829/0856 →