IP Library Granted Patent US 10,021,563
Granted Patent B2
US 10,021,563 · App. 14/264,923 · Granted Jul 10, 2018

Enhanced authentication for provision of mobile services

Inventors: Ramaswamy Subramanian (Ottawa, CA); Tiru K. Sheth (Ottawa, CA)
Assignee: Alcatel Lucent
H04W12/06H04W12/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,021,563
App. No.
14/264,923
Granted
Jul 10, 2018
Kind
B2
Abstract

Various exemplary embodiments relate to a method, network node, and non-transitory machine-readable storage medium including one or more of the following: instructions for obtaining, by a session establishment device, a subscriber record associated with a subscriber based on the session establishment device receiving a request message for establishment of a session with respect to a user device, wherein the request message includes a received subscriber identifier associated with the subscriber and a received equipment identifier associated with the user device, and wherein the subscriber record stores a stored subscriber identifier and a stored equipment identifier; instructions for comparing the received equipment identifier to the stored equipment identifier to determine whether the user equipment is associated with the subscriber in the subscriber record; and instructions for conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.

Claims (42)

1. A non-transitory machine-readable medium encoded with instructions for performing authentication, the non-transitory machine-readable medium comprising:

instructions for obtaining, by a session establishment device, a subscriber record associated with a subscriber based on the session establishment device receiving a request message for establishment of a session with respect to a user device, wherein the request message includes a received subscriber identifier associated with the subscriber and a received international mobile station equipment identity software version (IMEISV) associated with the user device, and wherein the subscriber record stores a stored subscriber identifier and a stored IMEI;

instructions for comparing the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record; and

instructions for conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.

2. The non-transitory machine-readable medium of claim 1 , wherein the subscriber record further stores an indication of whether services are suspended for the subscriber, the non-transitory machine-readable medium further comprising:

instructions for conditionally rejecting establishment of the session based on the indication of whether services are suspended for the subscriber.

3. The non-transitory machine-readable medium of claim 2 , further comprising:

instructions for setting a value of the indication of whether services are suspended for the subscriber in the subscriber record based on a message received from a user-accessible web portal server.

4. The non-transitory machine-readable medium of claim 1 , wherein the instructions for comparing the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record comprise:

instructions for determining whether the stored IMEI is a substring of the received IMEISV.

5. The non-transitory machine-readable medium of claim 1 , further comprising:

a message processing rule that identifies a comparison between the received IMEISV to the stored IMEI and a result action of rejecting a request based on an outcome of the comparison, wherein the message processing rule comprises the instructions for comparing the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record; and the instructions for conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record; and

instructions for performing interpreted evaluation of the message processing rule.

6. The non-transitory machine-readable medium of claim 1 , wherein the received subscriber identifier comprises at least one of an international mobile subscriber identity (IMSI) and a mobile subscriber integrated services digital network number (MSISDN).

7. The non-transitory machine-readable medium of claim 1 , further comprising:

instructions for comparing the received subscriber identifier to the stored subscriber identifier to determine whether the subscriber identifier is associated with the subscriber in the subscriber record; and

instructions for conditionally rejecting establishment of the session based on the determination of whether the subscriber identifier is associated with the subscriber in the subscriber record.

8. A session establishment device comprising:

a network interface;

a memory device; and

a processor in communication with the memory device and the network interface, the processor being configured to: receive, via the network interface, a request message for establishment of a session with respect to a user device, wherein the request message includes a received subscriber identifier associated with a subscriber and a received international mobile station equipment identity software version (IMEISV) associated with the user device, obtain a subscriber record associated with the subscriber, wherein the subscriber record stores a stored subscriber identifier and a stored IMEI, compare the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record, and conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.

9. The session establishment device of claim 8 , wherein the subscriber record further stores an indication of whether services are suspended for the subscriber, the processor being further configured to: conditionally reject establishment of the session based on the indication of whether services are suspended for the subscriber.

10. The session establishment device of claim 9 , wherein the subscriber record is locally stored in the memory device and the processor is further configured to: set a value of the indication of whether services are suspended for the subscriber in the subscriber record based on a message received from a user-accessible web portal server.

11. The session establishment device of claim 8 , wherein, in comparing the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record, the processor is configured to: determine whether the stored IMEI is a substring of the received IMEISV.

12. The session establishment device of claim 8 , wherein the processor is configured to: perform interpreted evaluation of a message processing rule stored in the memory device, wherein the message processing rule identifies a comparison between the received IMEISV to the stored IMEI and a result action of rejecting a request based on an outcome of the comparison, wherein the message processing rule configures the processor to compare the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record and to conditionally reject establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.

13. The session establishment device of claim 8 , wherein the received subscriber identifier comprises at least one of an international mobile subscriber identity (IMSI) and a mobile subscriber integrated services digital network number (MSISDN).

14. The session establishment device of claim 8 , wherein the processor is further configured to: compare the received subscriber identifier to the stored subscriber identifier to determine whether the subscriber identifier is associated with the subscriber in the subscriber record; and conditionally reject establishment of the session based on the determination of whether the subscriber identifier is associated with the subscriber in the subscriber record.

15. A method for performing authentication, the method comprising:

receiving, at a session establishment device, a request message for establishment of a session with respect to a user device, wherein the request message includes a received subscriber identifier associated with a subscriber and a received international mobile station equipment identity software version (IMEISV) associated with the user device,

obtaining a subscriber record associated with the subscriber, wherein the subscriber record stores a stored subscriber identifier and a stored IMEI;

comparing the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record; and

conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.

16. The method of claim 15 , wherein the subscriber record further stores an indication of whether services are suspended for the subscriber, the method further comprising:

conditionally rejecting establishment of the session based on the indication of whether services are suspended for the subscriber.

17. The method of claim 15 , wherein comparing the IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record comprises:

determining whether the stored IMEI is a substring of the received IMEISV.

18. The method of claim 15 , further comprising:

performing interpreted evaluation of a message processing rule that identifies a comparison between the received IMEISV to the stored IMEI and a result action of rejecting a request based on an outcome of the comparison, wherein the evaluation of the message processing rule includes performing the comparing the received IMEISV to the stored IMEI to determine whether the user equipment is associated with the subscriber in the subscriber record; and the conditionally rejecting establishment of the session based on the determination of whether the user equipment is associated with the subscriber in the subscriber record.

19. The method of claim 15 , wherein the received subscriber identifier comprises at least one of an international mobile subscriber identity (IMSI) and a mobile subscriber integrated services digital network number (MSISDN).

20. The method of claim 15 , further comprising:

comparing the received subscriber identifier to the stored subscriber identifier to determine whether the subscriber identifier is associated with the subscriber in the subscriber record; and

conditionally rejecting establishment of the session based on the determination of whether the subscriber identifier is associated with the subscriber in the subscriber record.

Assignments (3)
RELEASE OF SECURITY INTEREST Recorded Aug 28, 2014
From: CREDIT SUISSE AG
To: ALCATEL-LUCENT CANADA INC.
Reel/Frame 033655/0425 →
SECURITY INTEREST Recorded Aug 7, 2014
From: ALCATEL-LUCENT CANADA INC.
To: CREDIT SUISSE AG
Reel/Frame 033500/0326 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 30, 2014
From: RUBRAMANIAN, RAMASWAMY; SHETH, TIRU K.
To: ALCATEL-LUCENT CANADA, INC.
Reel/Frame 032787/0664 →
Continuity (1)
Related Publication 20150312761A1 · Oct 29, 2015