Multiple Network, Shared Access Security Architecture Supporting Simultaneous Use Of Single SIM Multi-Radio Device And/Or Phone

A method comprising:

• at a server system,
• receiving an access request from a mobile wireless device over a first wireless communication network that utilizes a first wireless communication standard for wireless communication with wireless devices including the wireless device, including receiving device security credentials from the mobile wireless device;
• initiating authentication, authorization or accounting transactions for the mobile wireless device on the first wireless communication network;
• based on the received device security credentials from the mobile wireless device, granting access for the mobile wireless device to the first wireless communication network ;
• and
• based on the authentication, authorization or accounting transactions for the mobile wireless device, communicating a mobile access voucher to a server which controls communication in a second wireless communication network that utilizes a second wireless communication standard for wireless communication with wireless devices including the mobile wireless device, the mobile access voucher configured to cause the server of the second wireless communication network to initiate a wireless communication session between an access point of the second wireless communication network and the mobile wireless device without requiring authentication, authorization or accounting transactions for the mobile wireless device on the second wireless communication network.

A method comprising:

• at a mobile wireless device,
• storing identity credentials in a single subscriber identity module;
• communicating a request for connection from the mobile wireless device to a first network device of a first wireless network that utilizes a first wireless communication standard, the communication of the request for connection in accordance with the first wireless communication standard;
• receiving a security challenge from the first wireless network;
• determining a response to the security challenge using the stored identity credentials;
• communicating the response to the first network device, the first network device operative use the response to authenticate, authorize or manage accounting for the mobile wireless device for communication by the mobile wireless device with the first wireless network, the first network device configured to grant access by the mobile wireless device to one or more other wireless networks in addition to the first wireless network based on a successful authentication, authorization, or accounting management transaction, the first network device further configured to communicate to the one or more other wireless networks a security voucher for the mobile wireless device to access the one or more other wireless networks;
• receiving from the first network device a grant of access to a second wireless network of the one or more other wireless networks, the second wireless network configured to use a different wireless communication standard for wireless communication with devices in a service area of the second wireless network including the mobile wireless device;
• and
• when within the service area of the second wireless network, establishing a wireless communication session with the second wireless network according to the second wireless communication standard while foregoing communication of authorization information to the second network, the communication of authorization information being otherwise required in the absence of the security voucher communicated by the first network device.

A method comprising:

• at a mobile wireless communication device,
• storing identity credentials for the mobile wireless communication device in a single subscriber identity module (SIM);
• communicating with a first network device in a first wireless network that utilizes a first wireless communication standard, including:
• communicating a connection request to the first network device;
• receiving from the first network device a SIM challenge;
• retrieving the stored identity credentials from the single SIM;
• processing the SIM challenge using the retrieved identity credentials to produce a SIM challenge response;
• communicating the SIM challenge response to the first network device;
• receiving from the first network device an indication of a successful SIM challenge response including an access grant for the first wireless network for subsequent communication on the first wireless network;
• receiving from the first network device authorization for access to a second wireless network that utilizes a second wireless communication standard;
• communicating to the first network device a request for a voucher to access the second wireless network based on the access grant for the first wireless network;
• subsequently, communicating with a second network device in the second wireless network that utilizes the second wireless communication standard, including
• foregoing authorization transactions with the second network device, the authorization transactions being otherwise required to initiate communication with the second wireless network in the absence of the received authorization for access to the second wireless network from the first network device;
• initiating a data session with the second network device;
• and
• receiving a session granted message from the second network device based on receipt of the voucher to access the second wireless network by the second network device.