IP Library Granted Patent US 12,348,957
Granted Patent B2
US 12,348,957 · App. 17/499,391 · Granted Jul 1, 2025

Core network transformation authenticator

Inventors: Joseph Soryal (Glendale, NY); Howard Lang (Wayside, NJ)
Assignee: AT&T Intellectual Property I, L.P.
H04W12/06H04L63/083H04W12/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,348,957
App. No.
17/499,391
Granted
Jul 1, 2025
Kind
B2
Abstract

A system may use information obtained by a communication service provider's core network for multi-factor authentication.

Claims (48)

1. A method comprising:

providing, from a base station of a communications provider to a web server, an identifier of a user associated with a user equipment that is communicatively coupled with the base station;

based on the identifier, receiving, by a secure server of the communications provider from the web server, an authentication request;

sending, from the secure server to the user equipment, a command to generate and send a purposely generated malformed packet;

in response to the command, receiving, at the base station from the user equipment, the malformed packet;

performing, by the base station, a checksum associated with the malformed packet that causes a failure of the checksum with a known value;

providing, by the base station to the secure server, a notification of the failure of the checksum with the known value;

authenticating, by the secure server, the user equipment based on the failure caused by the malformed packet that is purposely generated by the user equipment; and

in response to the authentication request and the authenticating of the user equipment, providing, by the secure server to the web server, an authentication response indicating the user equipment has been authenticated, wherein

the authentication response from the secure server causes the web server to send a notification of authorization to access a service of the web server to the user equipment.

2. The method of claim 1 , wherein the user equipment is a mobile phone, and the communications provider is a wireless service provider.

3. The method of claim 1 , wherein the secure server sends the command to a security application of the user equipment to generate and send the purposely generated malformed packet.

4. The method of claim 1 , wherein a media access control layer of the base station of the communications provider sends an indication that the checksum of the purposely generated malformed packet failed to the secure server.

5. The method of claim 1 , wherein the secure server authenticates the user equipment based on current information of the user equipment that comprises location, operating system version, central processing unit type, or chat behavior.

6. The method of claim 1 , wherein the secure server authenticates the user equipment based on historical information of the user equipment that comprises location, operating system version, central processing unit type, or chat behavior.

7. The method of claim 1 , wherein the secure server authenticates the user equipment based on information from a mobility management entity associated with the user equipment.

8. A system comprising:

a base station of a communications provider, wherein the base station comprises a base station processor; and

a secure server of the communications provider, wherein the secure server comprises a secure server processor;

wherein the base station processor is configured to provide, to a web server, an identifier of a user associated with a user equipment that is communicatively coupled with the base station,

wherein, based on the identifier, the secure server processor is configured to receive, from the web server, an authentication request,

wherein the secure server processor is configured to send, to the user equipment, a command to generate and send a purposely generated malformed packet,

wherein, in response to the command, the base station processor is configured to receive, from the user equipment, the malformed packet,

wherein the base station processor is configured to perform a checksum associated with the malformed packet that causes a failure of the checksum with a known value,

wherein the base station processor is configured to provide, to the secure server, a notification of the failure of the checksum with the known value,

wherein the secure server processor is configured to authenticate the user equipment based on the failure caused by the malformed packet that is purposely generated by the user equipment,

wherein, in response to the authentication request and an authentication of the user equipment, the secure server processor is configured to provide, to the web server, an authentication response indicating the user equipment has been authenticated, and

wherein the web server, according to the authentication response from the secure server, is configured to send a notification of authorization to access a service of the web server to the user equipment.

9. The system of claim 8 , wherein the secure server processor is configured to send the command to a security application of the user equipment to generate and send the purposely generated malformed packet.

10. The system of claim 8 , wherein the identifier is a username and password combination.

11. The system of claim 8 , wherein the communications provider is a wireless service provider.

12. The system of claim 8 , wherein the secure server processor is configured to authenticate the user equipment based on current information of the user equipment that comprises location, operating system version, central processing unit type, or chat behavior, and wherein the user equipment creates the purposely generated malformed packet.

13. The system of claim 8 , wherein the secure server processor is configured to authenticate the user equipment based on historical information of the user equipment that comprises location, operating system version, central processing unit type, or chat behavior.

14. The system of claim 8 , wherein the secure server processor is configured to authenticate the user equipment based on information from a mobility management entity associated with the user equipment.

15. A non-transitory, computer readable storage medium storing computer executable instructions that when executed by a base station processor of a base station and a secure server processor of a secure server of a processing system of a communications provider cause said base station processor and said secure server processor of the processing system to effectuate operations comprising:

providing, from the base station processor to a web server, an identifier of a user associated with a user equipment that is communicatively coupled with the base station;

based on the identifier, receiving, by a secure server processor from the web server, an authentication request;

sending, from the secure server processor to the user equipment, a command to generate and send a purposely generated malformed packet;

in response to the command, receiving, at the base station processor from the user equipment, the malformed packet;

performing, by the base station processor, a checksum associated with the malformed packet that causes a failure of the checksum with a known value;

providing, by the base station processor to the secure server, a notification of the failure of the checksum with the known value;

authenticating, by the secure server processor, the user equipment based on the failure caused by the malformed packet that is purposely generated by the user equipment; and

in response to the authentication request and the authenticating of the user equipment, providing, by the secure server processor to the web server, an authentication response indicating the user equipment has been authenticated, wherein the authentication response from the secure server processor causes the web server to send a notification of authorization to access a service of the web server to the user equipment.

16. The non-transitory, computer readable storage medium of claim 15 , wherein the user equipment is a mobile phone and the user equipment creates the purposely generated malformed packet utilizing a security application.

17. The non-transitory, computer readable storage medium of claim 15 , wherein the identifier is a username and password combination.

18. The non-transitory, computer readable storage medium of claim 15 , wherein the communications provider is a wireless service provider.

19. The non-transitory, computer readable storage medium of claim 15 , wherein the secure server processor authenticates the user equipment based on historical information of the user equipment that comprises operating system version, central processing unit type, or chat behavior.

20. The non-transitory, computer readable storage medium of claim 15 , wherein the secure server processor authenticates the user equipment based on current information of the user equipment that comprises operating system version, central processing unit type, or chat behavior.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 13, 2021
From: SORYAL, JOSEPH; LANG, HOWARD
To: AT&T INTELLECTUAL PROPERTY I, L.P.
Reel/Frame 057776/0440 →
Continuity (1)
Related Publication 20230112126A1 · Apr 13, 2023
References Cited (8)
US 8966638B2 · Dey · 2015 [cited by examiner]
US 20090254969A1 · Parker · 2009 [cited by examiner]
US 20120144461A1 · Rathbun · 2012 [cited by examiner]
US 20140337930A1 · Hoyos · 2014 [cited by examiner]
US 20150350106A1 · Whalley · 2015 [cited by examiner]
US 20170034003A1 · Shevach · 2017 [cited by examiner]
US 20170111341A1 · Huh · 2017 [cited by examiner]
US 20170171256A1 · Liang · 2017 [cited by examiner]