-
公开(公告)号:US20230087211A1
公开(公告)日:2023-03-23
申请号:US17483041
申请日:2021-09-23
Applicant: QUALCOMM Incorporated
Inventor: Philip Michael Hawkes , Sai Yiu Duncan Ho , Jouni Kalevi Malinen , Soo Bum Lee , George Cherian , Anand Palanigounder
IPC: H04W12/06 , H04W12/0431 , H04W12/03 , H04W12/73
Abstract: This disclosure provides methods, devices and systems for using a variable authentication identifier (AID) for access point (AP) privacy. For example, instead of a persistent SSID, an AID is used by a station (STA) to authenticate the AP before connecting to the AP. The AP is associated with a service set, and the STA has stored a secret token associated with the service set. Before connecting to the AP, a broadcasted probe request from the STA includes no identifying information other than the token. The AP generates the AID from the token and provides the AID in a probe response. The STA is able to identify the AP as being associated with a service set and connect to the AP using the token and AID without the token and the AID being used by another device not associated with the service set to identify the AP.
-
公开(公告)号:US11272351B2
公开(公告)日:2022-03-08
申请号:US16375699
申请日:2019-04-04
Applicant: QUALCOMM Incorporated
IPC: H04W8/12 , H04W12/10 , H04W8/20 , H04W12/06 , H04L9/32 , H04W48/18 , H04W12/106 , H04W12/0431 , H04W84/04
Abstract: Aspects directed towards steering of roaming (SoR) are disclosed. In one example, a communication from a public land mobile network (PLMN) is received by a user equipment (UE) in which the communication indicates an acceptance of a UE registration with the PLMN. This example further includes performing a determination of whether an SoR indicator associated with a home PLMN (HPLMN) is embedded within the communication. The UE then manages PLMN selection according to the determination. In another example, a UE is configured to operate according to an SoR configuration in which the UE is configured to ascertain whether an SoR indicator is embedded within a communication from a PLMN. An SoR indicator associated with an HPLMN is then generated and subsequently transmitted from the HPLMN to the UE via the PLMN.
-
103.
公开(公告)号:US11178543B2
公开(公告)日:2021-11-16
申请号:US16591419
申请日:2019-10-02
Applicant: QUALCOMM Incorporated
Inventor: Soo Bum Lee , Adrian Edward Escott , Gavin Bernard Horn , Anand Palanigounder
IPC: H04W12/037 , H04W36/00 , H04W12/043
Abstract: A device that identifies entry into a new service area, transmits a service area update request to a network device associated with a network, receives a control plane message from the network indicating control plane device relocation or a key refresh due to a service area change in response to transmitting the service area update request, and derives a first key based in part on data included in the control plane message and a second key shared between the device and a key management device. Another device that receives a handover command from a network device associated with a network, the handover command indicating a new service area, derives a first key based on data included in the handover command and on a second key shared between the device and a key management device, and sends a handover confirmation message that is secured based on the first key.
-
公开(公告)号:US11071021B2
公开(公告)日:2021-07-20
申请号:US16035239
申请日:2018-07-13
Applicant: QUALCOMM Incorporated
Inventor: Soo Bum Lee , Adrian Edward Escott , Anand Palanigounder
Abstract: Methods, systems, and devices for wireless communication are described that support security key derivation for handover. A network entity (e.g., an access and mobility function (AMF)) may establish an access stratum (AS) key to ensure secure communications between a user equipment (UE) and a base station. If the UE relocates to a new network entity (e.g., target network entity), the initial network entity (e.g., source network entity) may perform a handover procedure to the target network entity. In some aspects, the network entities may derive a unified AS key for the handover procedure. Additionally, the network entities may utilize one or more intermediate keys (e.g., refreshed intermediate keys) derived from, in part, respective freshness parameters for the handover procedure. The target network entity may then utilize the derived intermediate keys to derive the AS key for the handover procedure and establish communications with the UE.
-
公开(公告)号:US11032704B2
公开(公告)日:2021-06-08
申请号:US16201813
申请日:2018-11-27
Applicant: QUALCOMM Incorporated
Inventor: Vinay Joseph , Anand Palanigounder , Michele Berionne , Philip Hawkes , Rajat Prakash
IPC: H04W12/065 , H04W12/40 , H04W12/069 , H04W8/18 , H04W12/06 , H04W48/10 , H04W48/16 , H04W48/18 , H04W12/43
Abstract: Aspects of the present disclosure describe authentication of a user equipment (UE) in a network. It can be determined, by the UE, to access a discovered network for wireless communications, and based on a service provider associated with the discovered network, to use a modified universal subscriber identity module (USIM) subscription stored in the UE for authentication with the discovered network. The UE can obtain a subscriber identifier for authenticating on the discovered network via the authentication, where the subscriber identifier is generated based at least in part on a service provider identifier associated with the service provider and a modified mobile subscriber identity associated with the service provider. The UE can send the subscriber identifier to a node of the discovered network for the authentication.
-
公开(公告)号:US20210112415A1
公开(公告)日:2021-04-15
申请号:US17019169
申请日:2020-09-11
Applicant: QUALCOMM Incorporated
Inventor: Soo Bum Lee , Karl Georg Hampel , Adrian Edward Escott , Anand Palanigounder
Abstract: Methods, systems, and devices for wireless communications are described. A first parent node of a wireless backhaul network may receive, from a donor node of the wireless backhaul network, a token for a child node of the wireless backhaul network, the token being unique to a first wireless link between the first parent node and the child node. The first parent node may determine that a triggering event has occurred for a second wireless link between the first parent node and a second parent node. The first parent node may transmit, in response to determining that the triggering event has occurred, the token to the child node over the first wireless link to indicate for the child node to select a third parent node of the wireless backhaul network.
-
公开(公告)号:US10757572B2
公开(公告)日:2020-08-25
申请号:US16669420
申请日:2019-10-30
Applicant: QUALCOMM Incorporated
Inventor: Soo Bum Lee , Adrian Edward Escott , Gavin Bernard Horn , Anand Palanigounder
Abstract: A network entity may provision a UE and a base station with parameters for securing network communications. The network entity may send a system parameter to a UE and a private security key to a base station. Additionally, the UE and the base station may each receive synchronization information from the network which may be used to create a randomness parameter. The base station may create a signature based on the private security key, a cell identifier, and the randomness parameter and include the signature in a system information message that is to be broadcasted to one or more UEs. A UE connecting to the base station may receive the system information message from the base station, determine the cell identifier, and verify the system information message based on one or more of the cell identifier, the system parameter, or the randomness parameter.
-
108.
公开(公告)号:US20200228510A1
公开(公告)日:2020-07-16
申请号:US16826832
申请日:2020-03-23
Applicant: QUALCOMM INCORPORATED
Inventor: Soo Bum Lee , Gavin Bernard Horn , Anand Palanigounder
Abstract: Techniques are described for wireless communication. A method of wireless communication at a transmitting wireless device includes generating a first Message Authentication Code for a data packet based at least in part on a first security key used to communicate with a receiving wireless device; generating a second message authentication code for the data packet based at least in part on a second security key used to communicate with a relay user equipment (UE), in which the relay UE is included in a data routing path between the transmitting wireless device and the receiving wireless device; and transmitting the data packet to the relay UE with at least the first message authentication code and the second message authentication code.
-
公开(公告)号:US10674360B2
公开(公告)日:2020-06-02
申请号:US16405707
申请日:2019-05-07
Applicant: QUALCOMM Incorporated
Inventor: Soo Bum Lee , Anand Palanigounder , Adrian Edward Escott
IPC: H04L29/06 , H04W12/06 , H04W36/00 , H04L9/08 , H04W12/04 , H04W12/10 , H04W48/02 , H04W60/00 , H04W76/10 , H04W8/24 , H04W12/02
Abstract: A user equipment (UE) may be configured to transmit a registration message to a network to establish a secure connection for non-access stratum (NAS) messages between the network and a UE, the secure connection based at least in part on a UE identifier and security capabilities of the UE included in the registration message. The UE may then exchange NAS methods with the network over the secure connection. The UE may also establish, in response to the registration message, an authentication protocol with the network and encrypt subsequent NAS messages based in part on the authentication protocol.
-
110.
公开(公告)号:US20200029212A1
公开(公告)日:2020-01-23
申请号:US16586464
申请日:2019-09-27
Applicant: QUALCOMM Incorporated
Inventor: Soo Bum Lee , Anand Palanigounder , Adrian Edward Escott
Abstract: Techniques are described for wireless communication. A method for wireless communication at a user equipment (UE) includes performing an extensible authentication protocol (EAP) procedure with an authentication server via an authenticator. The EAP procedure is based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. The method also includes deriving, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters; determining a network type associated with the authenticator; and performing, based at least in part on the determined network type, at least one authentication procedure with the authenticator. The at least one authentication procedure is based on an association of the MSK or the EMSK with the determined network type.
-
-
-
-
-
-
-
-
-