公开(公告)号：US10674360B2

公开(公告)日：2020-06-02

申请号：US16405707

申请日：2019-05-07

Applicant: QUALCOMM Incorporated

Inventor： Soo Bum Lee ,  Anand Palanigounder ,  Adrian Edward Escott

IPC: H04L29/06 ,  H04W12/06 ,  H04W36/00 ,  H04L9/08 ,  H04W12/04 ,  H04W12/10 ,  H04W48/02 ,  H04W60/00 ,  H04W76/10 ,  H04W8/24 ,  H04W12/02

Abstract: A user equipment (UE) may be configured to transmit a registration message to a network to establish a secure connection for non-access stratum (NAS) messages between the network and a UE, the secure connection based at least in part on a UE identifier and security capabilities of the UE included in the registration message. The UE may then exchange NAS methods with the network over the secure connection. The UE may also establish, in response to the registration message, an authentication protocol with the network and encrypt subsequent NAS messages based in part on the authentication protocol.

公开(公告)号：US10582389B2

公开(公告)日：2020-03-03

申请号：US16159210

申请日：2018-10-12

Applicant: QUALCOMM Incorporated

Inventor： Yogesh Bhalchandra Deshpande ,  Mungal Singh Dhanda ,  Adrian Edward Escott

IPC: H04W12/10 ,  H04W12/04 ,  H04W72/04 ,  H04L29/06 ,  H04W12/02 ,  H04L9/08 ,  H04W12/06 ,  H04W68/00

Abstract: Methods, systems, and devices for wireless communication are described. A user equipment (UE) may receive a paging message that includes a secured UE identifier calculated based on a security configuration negotiated between the UE and a trusted source, e.g., a mobility management entity (MME) of the core network. The UE may determine whether the paging message is received from the trusted source or an untrusted source based on the secured UE identifier. The UE may transmit a connection request message based on the determination that the paging message is received from a trusted source.

公开(公告)号：US20200029212A1

公开(公告)日：2020-01-23

申请号：US16586464

申请日：2019-09-27

Applicant: QUALCOMM Incorporated

Inventor： Soo Bum Lee ,  Anand Palanigounder ,  Adrian Edward Escott

IPC: H04W12/04 ,  H04W12/06

Abstract: Techniques are described for wireless communication. A method for wireless communication at a user equipment (UE) includes performing an extensible authentication protocol (EAP) procedure with an authentication server via an authenticator. The EAP procedure is based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. The method also includes deriving, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters; determining a network type associated with the authenticator; and performing, based at least in part on the determined network type, at least one authentication procedure with the authenticator. The at least one authentication procedure is based on an association of the MSK or the EMSK with the determined network type.

公开(公告)号：US20190394640A1

公开(公告)日：2019-12-26

申请号：US16287308

申请日：2019-02-27

Applicant: QUALCOMM Incorporated

Inventor： Soo Bum Lee ,  Anand Palanigounder ,  Adrian Edward Escott ,  Gavin Bernard Horn

IPC: H04W12/02 ,  H04L29/12 ,  H04W8/18 ,  H04W8/04

Abstract: Systems and techniques are disclosed to protect a user equipment's international mobile subscriber identity by providing a privacy mobile subscriber identity instead. In an attach attempt to a serving network, the UE provides the PMSI instead of IMSI, protecting the IMSI from exposure. The PMSI is determined between a home network server and the UE so that intermediate node elements in the serving network do not have knowledge of the relationship between the PMSI and the IMSI. Upon receipt of the PMSI in the attach request, the server generates a next PMSI to be used in a subsequent attach request and sends the next PMSI to the UE for confirmation. The UE confirms the next PMSI to synchronize between the UE and server and sends an acknowledgment token to the server. The UE and the server then each update local copies of the current and next PMSI values.

公开(公告)号：US10334435B2

公开(公告)日：2019-06-25

申请号：US15286002

申请日：2016-10-05

Applicant: QUALCOMM Incorporated

Inventor： Soo Bum Lee ,  Anand Palanigounder ,  Adrian Edward Escott

IPC: H04L29/06 ,  H04W12/06 ,  H04L9/08 ,  H04W12/04 ,  H04W12/10 ,  H04W48/02 ,  H04W60/00 ,  H04W76/10 ,  H04W8/24 ,  H04W12/02

Abstract: A user equipment (UE) may be configured to transmit a registration message to a network to establish a secure connection for non-access stratum (NAS) messages between the network and a UE, the secure connection based at least in part on a UE identifier and security capabilities of the UE included in the registration message. The UE may then exchange NAS methods with the network over the secure connection. The UE may also establish, in response to the registration message, an authentication protocol with the network and encrypt subsequent NAS messages based in part on the authentication protocol.

公开(公告)号：US20140094147A1

公开(公告)日：2014-04-03

申请号：US14097070

申请日：2013-12-04

Applicant: QUALCOMM Incorporated

Inventor： Philip Michael Hawkes ,  Andreas Klaus Wachter ,  Adrian Edward Escott ,  Stephen William Edge

IPC: H04W12/06

CPC classification number: H04W12/08 ,  H04L63/0442 ,  H04L63/062 ,  H04L63/0823 ,  H04L63/0869 ,  H04L63/0876 ,  H04L63/166 ,  H04L63/205 ,  H04W4/02 ,  H04W12/04 ,  H04W12/06

Abstract: A particular method includes generating, at a secure user plane location (SUPL) server, a message to be sent to a mobile device, the message including: a server certificate including an identifier of the SUPL server and a public key of the SUPL server; and a request for a device certificate of the mobile device. The method also includes receiving a reply from the mobile device that includes a device certificate of the mobile device; and authenticating the mobile device as associated with a SUPL user based on the device certificate.

Abstract translation: 特定方法包括在安全用户平面位置（SUPL）服务器处生成要发送到移动设备的消息，该消息包括：包括SUPL服务器的标识符和SUPL服务器的公钥的服务器证书; 以及对移动设备的设备证书的请求。 该方法还包括从移动设备接收包括移动设备的设备证书的回复; 以及基于所述设备证书将所述移动设备认证为与SUPL用户相关联。

公开(公告)号：US12126994B2

公开(公告)日：2024-10-22

申请号：US17025367

申请日：2020-09-18

Applicant: QUALCOMM Incorporated

Inventor： Anand Palanigounder ,  Adrian Edward Escott ,  Soo Bum Lee

IPC: H04W12/08 ,  H04W8/22 ,  H04W12/033 ,  H04W12/06 ,  H04W12/102 ,  H04W76/10 ,  H04W84/04 ,  H04W88/02

CPC classification number: H04W12/033 ,  H04W8/22 ,  H04W12/102 ,  H04W76/10 ,  H04W84/042 ,  H04W88/02

Abstract: Methods, systems, and devices are provided for supporting user plane integrity protection (UP IP) for communications with a radio access network (RAN). Various embodiments may include indicating whether or not a wireless device supports UP IP over Evolved Universal Mobile Telecommunications System (UMTS) Terrestrial Radio Access (eUTRA) by including UP IP support indications in user equipment (UE) security capability information elements (IEs).

公开(公告)号：US12052358B2

公开(公告)日：2024-07-30

申请号：US18094868

申请日：2023-01-09

Applicant: QUALCOMM Incorporated

Inventor： Anand Palanigounder ,  Adrian Edward Escott ,  Soo Bum Lee

IPC: H04W12/04 ,  H04L9/08

CPC classification number: H04L9/088 ,  H04W12/04

Abstract: A user device having a security context with a first network based on a first key may establish a security context with a second network. In a method, the user device may generate a key identifier based on the first key and a network identifier of the second network. The user device may forward the key identifier to the second network for forwarding to the first network by the second network to enable the first network to identify the first key at the first network. The user device may receive a key count from the second network. The key count may be associated with a second key forwarded to the second network from the first network. The user device may generate the second key based on the first key and the received key count thereby establishing a security context between the second network and the user device.

公开(公告)号：US12010508B2

公开(公告)日：2024-06-11

申请号：US17236969

申请日：2021-04-21

Applicant: QUALCOMM Incorporated

Inventor： Karthika Paladugu ,  Hong Cheng ,  Adrian Edward Escott ,  Gavin Bernard Horn ,  Soo Bum Lee

IPC: H04W12/033 ,  H04W12/0471 ,  H04W12/06 ,  H04W76/14 ,  H04W84/04 ,  H04W88/04

CPC classification number: H04W12/033 ,  H04W12/0471 ,  H04W12/06 ,  H04W76/14 ,  H04W84/042 ,  H04W88/04

Abstract: Various aspects pertain to ways to securing a peer-to-peer communication link that serves to relay transmissions to/from a managed mobile network node. A first user equipment may identify a second user equipment that can communicate via a peer-to-peer wireless interface and serve as a relay between the first user equipment and a managed mobile network node. A relay session key material may be obtained from the managed mobile network node. A peer-to-peer communication link between the first user equipment and the second user equipment may be established or modified by, for example, securing the peer-to-peer communication link based on the relay session key material. A protocol data unit session may be established, over the peer-to-peer communication link, between the first user equipment and the managed mobile network node for secured transmissions there between.

公开(公告)号：US11785427B2

公开(公告)日：2023-10-10

申请号：US17653022

申请日：2022-03-01

Applicant: QUALCOMM Incorporated

Inventor： Soo Bum Lee ,  Adrian Edward Escott ,  Anand Palanigounder ,  Hongil Kim

IPC: H04W4/00 ,  H04W4/08 ,  H04W12/03 ,  H04W12/041 ,  H04W12/0431

CPC classification number: H04W4/08 ,  H04W12/03 ,  H04W12/041 ,  H04W12/0431

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may register to a cellular network associated with a multicast/broadcast multimedia service (MBMS). The UE may transmit, to the cellular network, a request to join the MBMS. The UE may receive, from the cellular network and based at least in part on being registered with the cellular network, a response that indicates an MBMS service key (MSK) and MSK identifier pair. Numerous other aspects are described.