Authentication in secure user plane location (SUPL) systems

1. A method of authentication, comprising:

receiving, at a mobile device, a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP);

storing, at the mobile device, at least one security credential that is specific to the mobile device, wherein the at least one security credential includes a device identifier of the mobile device; and

transmitting the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is transmitted in a message configured to be decrypted by a secret key of the SLP.

2. The method of claim 1 , wherein the at least one security credential includes a public key of the mobile device.

3. The method of claim 1 , wherein the device identifier includes at least one of an international mobile equipment identity (IMEI), a mobile station identification (MSID), and a serial number of the mobile device.

4. The method of claim 1 , wherein the at least one security credential includes a device certificate of the mobile device.

5. The method of claim 1 , wherein the at least one security credential is stored at a universal integrated smart card (UICC) of the mobile device, a secure portion of a memory of the mobile device, or any combination thereof.

6. The method of claim 1 , wherein the mobile device comprises a SUPL enabled terminal (SET).

7. The method of claim 1 , wherein the mobile device transmits the at least one security credential to the SLP via a network that operates in accordance with an Institute of Electrical and Electronics Engineers (IEEE) 802.11 standard.

8. An apparatus comprising:

a non-transitory memory configured to:

receive a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP) and

store at least one security credential that is specific to a mobile device, wherein the at least one security credential includes a device identifier of the mobile device; and

a processor configured to cause the mobile device to transmit the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is configured to be transmitted in a message configured to be decrypted by a secret key of the SLP.

9. The apparatus of claim 8 , wherein the at least one security credential includes at least one of a device certificate of the mobile device, a public key of the mobile device, an international mobile equipment identity (IMEI), a mobile station identification (MSID), and a serial number of the mobile device.

10. An apparatus comprising:

means for receiving, at a mobile device, a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP);

means for storing at least one security credential that is specific to a mobile device, wherein the at least one security credential includes a device identifier of the mobile device; and

means for causing the mobile device to transmit the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is transmitted in a message configured to be decrypted by a secret key of the SLP.

11. The apparatus of claim 10 , wherein the mobile device comprises a SUPL enabled terminal (SET).

12. A method comprising:

sending a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;

receiving, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;

decrypting the message using a secret key of the web server;

receiving, at the web server, user identification information from the mobile device; and

authenticating the user identification information as identifying an authorized user of a SUPL service.

13. The method of claim 12 , wherein the security credential includes a device certificate that includes a public key of the mobile device.

14. The method of claim 12 , wherein the security credential includes at least one of an international mobile equipment identity (IMEI), a mobile station identification (MSID), and a serial number of the mobile device.

15. The method of claim 12 , wherein the user identification information includes an identifier and a password.

16. An apparatus comprising:

a processor; and

a memory coupled to the processor, wherein the memory is configured to store instructions; and

wherein when the instructions are executed by the processor, the processor is configured to:

send a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;

receive, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;

decrypt the message using a secret key of the web server;

receive, at the web server, user identification information from the mobile device; and

authenticate the user identification information as identifying an authorized user of a SUPL service.

17. The apparatus of claim 16 , wherein the security credential includes a device certificate that includes a public key of the mobile device.

18. An apparatus, comprising:

means for sending a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;

means for receiving, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;

means for decrypting the message using a secret key of the web server;

means for receiving, at the web server, user identification information from the mobile device; and

means for authenticating the user identification information as identifying an authorized user of a SUPL service.

19. The apparatus of claim 18 , wherein the security credential includes a device certificate that includes a public key of the mobile device.

20. A non-transitory processor-readable medium comprising instructions that, when executed by a processor, cause the processor to:

send a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;

receive, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;

decrypt the message using a secret key of the web server;

receive, at the web server, user identification information from the mobile device; and

authenticate the user identification information as identifying an authorized user of a SUPL service.

21. The non-transitory processor-readable medium of claim 20 , wherein the security credential includes a device certificate that includes a public key of the mobile device.

22. A non-transitory processor-readable medium comprising instructions that, when executed by a processor, cause the processor to:

receive a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP) and store at least one security credential that is specific to a mobile device, wherein the at least one security credential includes a device identifier of the mobile device; and

transmit the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is configured to be transmitted in a message configured to be decrypted by a secret key of the SLP.