# US 10,455,421 B2 · Enabling emergency access to secure wireless communications networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,455,421 B2 - Document ID: US10455421B2 - Status: Granted - Kind: B2 - Application number: 15/606,219 - Filed: 2017-05-26 - Published: 2017-12-21 - Granted: 2019-10-22 - Earliest claimed: 2015-09-25 - Assignees: Mutualink, Inc. - Applicants: Mutualink, Inc. - Inventors: Joseph R. Mazzarella; Michael S. Wengrovitz - Web page: https://patentgrep.com/patent/US10455421B2 ## CPC - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 63/0281: {Proxies} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/10: {for controlling access to devices or network resources} - H04L 67/52: specially adapted for the location of the user terminal - H04W 4/90: Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS] - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 12/069: using certificates or pre-shared keys - H04W 12/08: Access security - H04W 76/50: for emergency connections - H04W 84/12: WLAN [Wireless Local Area Networks] - H04L 2209/80: Wireless - Y04S 40/20: Information technology specific aspects, e.g. CAD, simulation, modelling, system security - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - Y04S: SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS ## Abstract Embodiments include a system, method, and computer program product for improving public safety communications and real-time information sharing to enable a public safety user to access available, secure private wireless communications (PWC) networks within a vicinity of an emergency for communications and data-sharing purposes. In an embodiment, a universal encryption key (UEK) is stored on a public safety access device. The public safety access device is providing access to a secure PWC network. The UEK is a key established by a certificate authority that enables public safety personnel to access the secure PWC network. Then, a public safety encryption key (PSKey) is received by the public safety access device from a user communication device. The public safety access device enables access for the user communication to access the secure PWC network upon a determination that the received PSKey is associated with the UEK. ## Claims ### Claim 1 A public safety access device, comprising: a wi-fi transceiver configurable to connect to, or act as an access point node of, a wi-fi network; a memory device configured to store an encrypted key repository, the encrypted key repository configured to store a universal encryption key (UEK) and public safety encryption (PS) keys, associated with the UEK, to provide access for authorized public safety users to the wi-fi network; and one or more processors configured to execute: a wi-fi controller module configured to control the wi-fi transceiver; a wi-fi network gateway module coupled to the wi-fi controller module and configured to manage the access by authorized public safety users to the wi-fi network; an alert module configured to receive an alarm from a public safety access point (PSAP); and an authentication module configured to receive a PSKey from a user device requesting access to the wi-fi network, and compare the received PSKey with the UEK stored in the encrypted key repository and authenticate one of the authorized public safety users based on the comparison; wherein the alert module is further configured to, responsive to the reception of the alarm, activate a public safety mode that enables the authentication module to authenticate one of the authorized public safety users; and wherein the wi-fi network gateway module is further configured to communicatively connect the user device to the wi-fi network in response to the authentication of the one of the authorized public safety users by the authentication module. ### Claim 2 (depends on 1) The public safety access device of claim 1, wherein the wi-fi network gateway application module is further configured to perform at least one of: enabling the public safety access device to function as a network gateway; and allowing the public safety access device to communicate, send messages, or transmit data to one or more of other public safety access devices via the wi-fi network. ### Claim 3 (depends on 2) The public safety access device of claim 2, further comprising a communications routing protocol that determines which public safety access device will serve as the network gateway for the other public safety access devices. ### Claim 4 (depends on 3) The public safety access device of claim 3, wherein the communications routing protocol determines which public safety access device will serve as the network gateway based on at least one of the following parameters: connectivity to a host router, a wi-fi access point (WAP), data throughput, bit error rate between any of the at least one public safety access device and the host router, bit error rate of the WAP, and concurrent use. ### Claim 5 (depends on 1) The public safety access device of claim 1, wherein the authentication module is further configured to request additional information to validate access to the wi-fi network by the authorized public safety user. ### Claim 6 (depends on 5) The public safety access device of claim 5, wherein the additional information is received from a separate device, module, or application. ### Claim 7 (depends on 1) The public safety access device of claim 1, wherein the public safety access device further comprises an input/output (I/O) interface and the authentication module is coupled to at least one of a physical control device and a graphical user interface (GUI)-based application control connected through the I/O interface. ### Claim 8 (depends on 7) The public safety access device of claim 7, wherein the physical control or GUI-based application control enables at least one of an operator and an administrator to one of allow, disallow, or limit public safety user access through at least one of a PSKey, access limitation, routing, and use rules, wherein the access limitation, the routing, and the use rules limitations are stored locally at one of the public safety access devices or at a remote validation service. ### Claim 9 (depends on 8) The public safety access device of claim 8, wherein the public safety access device is integrated with an electrical receptacle having a common power source. ### Claim 10 (depends on 1) The public safety access device of claim 1, further comprising at least one of: a GPS receiver; an electrical connector; a rules module; an emergency information module configured to store information relevant to an emergency situation; a network interface module; and AC/DC adaptor. ### Claim 11 (depends on 10) The public safety access device of claim 10, wherein the network interface module is configured to enable the public safety access device to function as a hub for other public safety access devices or other wireless devices to access the wi-fi network. ### Claim 12 (depends on 10) The public safety access device of claim 10, wherein the rules module is configured to store rules and parameters. ### Claim 13 (depends on 10) The public safety access device of claim 10, wherein the rules comprise at least one of default settings, rules and parameters received from an authorized public safety user's wireless device. ### Claim 14 (depends on 10) The public safety access device of claim 10, wherein the emergency information module is configured to make information about the wi-fi network available to public safety users. ### Claim 15 (depends on 10) The public safety access device of claim 10, wherein the electrical connector is configured to couple to an electrical outlet without preventing use of the electrical outlet by another device. ### Claim 16 (depends on 1) The public safety access device of claim 1, wherein the alert module is further configured to initiate the use of a virtual local area network (VLAN) to allow the at least one of the public safety access user wireless devices to communicate and transfer data via a logically distinct network space within the wi-fi network. ### Claim 17 (depends on 1) The public safety access device of claim 1, wherein the alert module is further configured to initiate the establishment of a virtual private network (VPN) between the authorized public safety access user wireless devices and the wi-fi network, a wi-fi access point (WAP), or other IP network points provided by a host wi-fi router. ### Claim 18 (depends on 17) The public safety access device of claim 17, wherein a WAP router or a gateway coupled to the WAP router is configured to transmit and receive unicast or multicast messages with WAP router or gateways of other wi-fi networks through the Internet or private IP network. ### Claim 19 (depends on 1) The public safety access device of claim 1, wherein the alert module is further configured to access a separate wi-fi network designated for wireless devices of public safety access users. ### Claim 20 (depends on 1) The public safety access device of claim 1, wherein the public safety access device is further configured to pair to the wi-fi network by utilizing the wi-fi transceiver and connecting a wireless device associated with a public safety user through a proxy gateway wi-fi network by utilizing a second wi-fi transceiver. ### Claim 21 (depends on 20) The public safety access device of claim 20, wherein the wi-fi transceiver and the second wi-fi transceiver operate within the same frequency band using the same communication protocol. ### Claim 22 (depends on 1) The public safety access device of claim 1, wherein the public safety access device is integrated into at least one of a housing, a fixture, an emergency sign, and a device. ### Claim 23 (depends on 1) The public safety access device of claim 1, wherein the public safety access device is further configured to at least one of communicate, send messages, and transmit data to one or more other public safety access devices in the wi-fi network. ### Claim 24 (depends on 23) The public safety access device of claim 23, wherein one or more public safety access devices serve as a network gateway to a host wi-fi router or WAP. ### Claim 25 (depends on 24) The public safety access device of claim 24, wherein the one or more public safety access devices are further configured to be coupled to at least one of: a multiband radio transceiver, a multiprotocol radio transceiver, and at least one radio transceiver module capable of sending and receiving voice or data communications over a radio network. ### Claim 26 (depends on 1) The public safety access device of claim 1, wherein the public safety access device is further configured to dynamically join to other public safety access devices within a network. ### Claim 27 (depends on 26) The public safety access device of claim 26, wherein the public safety access device is portable and is one of dropped, affixed, or plugged into a facility or an infrastructure. ### Claim 28 (depends on 27) The public safety access device of claim 27, wherein a private-public key exchange is enabled between the public safety access device and another public safety access device through wi-fi or other wireless or wired electronic communications in order to establish connectivity between the wi-fi network and the public safety access device. ### Claim 29 (depends on 28) The public safety access device of claim 28, wherein a first public safety access device within the network is further configured to provide a connection between a host wi-fi network and radio network, and wherein IP messages from the wi-fi network are received by the first public safety access device in IP format and are transcoded from IP format to a radio network communications compatible format, and wherein IP messages from the radio network are transcoded into IP format and transmitted by the first public safety access device through the wi-fi network. ### Claim 30 (depends on 1) The public safety access device of claim 1, wherein the wi-fi network gateway module is configured to provide connectivity to a plurality of public safety access devices. ### Claim 31 (depends on 30) The public safety access device of claim 30, wherein the wi-fi network gateway module enables at least one of voice, image, and video media and communications to be shared with other devices connected to the secured network. ### Claim 32 (depends on 30) The public safety access device of claim 30, wherein the wi-fi network gateway module enables ad hoc integration of communication devices. ### Claim 33 (depends on 1) The public safety access device of claim 1, further comprising at least one network interface card (NIC) configured to support at least one standard selected from the group of Ethernet, Wi-Fi, Bluetooth, Zigbee, 3G, 4G, LTE, or WiMAX standards. ### Claim 34 (depends on 33) The public safety access device of claim 33, wherein the NIC is further configured as one of an input device or an output device. ### Claim 35 (depends on 1) The public safety access device of claim 1, wherein the public safety access device comprises a wireless router, a wireless access point, or a smart repeater unit. ### Claim 36 A method for implementing a public safety access device comprising a wi-fi transceiver configurable to connect to, or act as an access point node of, a wi-fi network, a wi-fi controller module configured to control the wi-fi transceiver, and a wi-fi network gateway module coupled to the wi-fi controller module and configured to manage access by authorized public safety users to the wi-fi network, the method comprising: storing, in an encrypted key repository associated with the public safety access device, a universal encryption key (UEK) and public safety encryption (PS) keys, associated with the UEK, to provide the access for authorized public safety users to the wi-fi network; receiving, at an alert module associated with the public safety access device, an alarm from a public safety access point (PSAP); activating, at the alert module, a public safety mode responsive to receiving the alarm; receiving, at an authentication module associated with the public safety access device, a PSKey from a user device requesting access to the wi-fi network; while the public safety mode is activated, comparing, at the authentication module, the PSKey with the UEK stored in the encrypted key repository; authenticating, at the authentication module, one of the authorized public safety users based on the comparison; and communicatively coupling, at the wi-fi network gateway module, the user device to the wi-fi network in response to the authentication of the one of the authorized public safety users; wherein activation of the public safety mode by the alert module enables the authentication module to authenticate the one of the authorized public safety users. ### Claim 37 (depends on 36) The method of claim 36, further comprising at least one of: enabling, at the wi-fi network gateway module, the public safety access device to function as a network gateway; and allowing, by the wi-fi network gateway module, the public safety access device to communicate, send messages, or transmit data to one or more of the other public safety access devices via the wi-fi network. ### Claim 38 (depends on 37) The method of claim 37, further comprising determining, at the wi-fi network gateway module, which public safety access device will serve as the network gateway for the other public safety access devices using a communications routing protocol. ### Claim 39 (depends on 38) The method of claim 38, wherein determining which public safety access device will serve as the network gateway comprises determining which public safety access device will serve as the network gateway based on at least one of the following parameters: connectivity to a host router, a wi-fi access point (WAP), data throughput, bit error rate between any of the at least one public safety access device and the host router, bit error rate of the WAP, and concurrent use. ### Claim 40 (depends on 36) The method of claim 36, further comprising requesting, at the authentication module, additional information to validate access to the wi-fi network at the authorized public safety user. ### Claim 41 (depends on 40) The method of claim 40, wherein the additional information is received from a separate device, module, or application. ### Claim 42 (depends on 36) The method of claim 36, wherein the public safety access device further comprises an input/output (I/O) interface and the authentication module is coupled to at least one of a physical control device and a graphical user interface (GUI)-based application control connected through the I/O interface; and wherein the method further comprises enabling, at the physical control device or GUI-based application control, at least one of an operator and an administrator to one of allow, disallow, or limit public safety user access through at least one of a PSKey, access limitation, routing, and use rules, wherein the access limitation, the routing, and the use rules limitations are stored locally at one of the public safety access devices or at a remote validation service. ### Claim 43 (depends on 36) The method of claim 36, wherein the public safety access device further includes functionality of at least one of: a GPS receiver; an electrical connector; a rules module; an emergency information module configured to store information relevant to an emergency situation; a network interface module; and AC/DC adaptor. ### Claim 44 (depends on 43) The method of claim 43, further comprising enabling, at the network interface module, the public safety access device to function as a hub for other public safety access devices or other wireless devices to access the wi-fi network. ### Claim 45 (depends on 43) The method of claim 43, further comprising storing, at the rules module, rules and parameters. ### Claim 46 (depends on 43) The method of claim 43, wherein the rules comprise at least one of default settings, rules and parameters received from an authorized public safety user's wireless device. ### Claim 47 (depends on 43) The method of claim 43, further comprising providing, by the emergency information module, information about the wi-fi network to public safety users. ### Claim 48 (depends on 36) The method of claim 36, further comprising initiating, at the alert module, the use of a virtual local area network (VLAN) to allow the at least one of the public safety access user wireless devices to communicate and transfer data via a logically distinct network space within the wi-fi network. ### Claim 49 (depends on 36) The method of claim 36, further comprising initiating, at the alert module, the establishment of a virtual private network (VPN) between the authorized public safety access user wireless devices and the wi-fi network, a wi-fi access point (WAP), or other IP network points provided by a host wi-fi router. ### Claim 50 (depends on 49) The method of claim 49, wherein a WAP router or a gateway coupled to the WAP router is configured to transmit and receive unicast or multicast messages with WAP router or gateways of other wi-fi networks through the Internet or private IP network. ### Claim 51 (depends on 36) The method of claim 36, further comprising, accessing, at the alert module, a separate wi-fi network designated for wireless devices of public safety access users. ### Claim 52 (depends on 36) The method of claim 36, further comprising pairing, at the public safety access device, the wi-fi network by utilizing the first wi-fi transceiver and connecting first responder wireless device through a proxy gateway wi-fi network by utilizing a second wi-fi transceiver. ### Claim 53 (depends on 52) The method of claim 52, wherein the first and second wi-fi transceivers operate within the same frequency band using the same communication protocol. ### Claim 54 (depends on 36) The method of claim 36, further comprising dynamically joining, by the public safety access device, to other public safety access devices within a network. ### Claim 55 (depends on 54) The method of claim 54, further comprising enabling, by the public safety access device, a private-public key exchange between the public safety access device and another public safety access device through wi-fi or other wireless or wired electronic communications in order to establish connectivity between the wi-fi network and the public safety access device. ### Claim 56 (depends on 55) The method of claim 55, further comprising: providing, by the public safety access device, a connection between a host wi-fi network and a radio network; receiving, by the public safety access device, IP messages in IP formant; and transcoding, by the public safety access device, the IP messages from the IP format to a radio network communications compatible format. ### Claim 57 (depends on 36) The method of claim 36, further comprising providing, at the wi-fi network gateway module, connectivity to a plurality of public safety access devices. ### Claim 58 (depends on 57) The method of claim 57, further comprising enabling, at the wi-fi network gateway module, at least one of voice, image, and video media and communications to be shared with other devices connected to the secured network. ### Claim 59 (depends on 58) The method of claim 58, further comprising enabling, at the wi-fi network gateway module, ad hoc integration of communication devices. ### Claim 60 (depends on 36) The method of claim 36, wherein the public safety access device further comprises at least one network interface card (NIC) that includes the functionality of supporting at least one standard selected from the group of Ethernet, Wi-Fi, Bluetooth, Zigbee, 3G, 4G, LTE, or WiMAX standards. ### Claim 61 (depends on 60) The method of claim 60, wherein the NIC is further functions as an input device or an output device. ### Claim 62 (depends on 36) The method of claim 36, wherein the public safety access device functions as a wireless router, a wireless access point, or a smart repeater unit.