# US 2025/0097698 A1 · Ambient internet of things security architecture > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0097698 A1 - Document ID: US20250097698A1 - Status: Published application - Kind: A1 - Application number: 18/469,741 - Filed: 2023-09-19 - Published: 2025-03-20 - Earliest claimed: 2023-09-19 - Assignees: QUALCOMM Incorporated - Applicants: QUALCOMM Incorporated - Inventors: Soo Bum LEE; Gavin Bernard HORN - Web page: https://patentgrep.com/patent/US20250097698A1 ## CPC - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/0433: Key management protocols - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 12/06: Authentication - H04W 12/069: using certificates or pre-shared keys - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04W 4/50: Service provisioning or reconfiguring - H04W 12/041: Key generation or derivation - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and techniques are provided for wireless communication. For example, a process may include receiving, from a provisioning service, a shared credential, wherein the shared credential is shared between a device and an application function; generating tag information; encoding a portion of the tag information based on the shared credential to generate encoded tag information; and broadcasting the encoded tag information. ## Claims ### Claim 1 A device for wireless communication, comprising: a memory system comprising instructions; and a processor system coupled to the memory system, the processor system configured to: receive, from a provisioning service, a shared credential, wherein the shared credential is shared between the device and an application function; generate tag information, wherein the shared credential comprises a token, wherein the token is included in the tag information, and wherein the tag information is encoded based on a public key of an issuer of the token; encode a portion of the tag information based on the shared credential to generate encoded tag information; and broadcast the encoded tag information. ### Claim 2 (depends on 1) The device of claim 1, wherein the tag information includes a tag identifier (ID) and metadata. ### Claim 3 (depends on 2) The device of claim 2, wherein the tag ID is encoded based on the shared credential, and wherein the tag information further includes routing information. ### Claim 4 (depends on 3) The device of claim 3, wherein the tag ID is further encoded based on a freshness parameter comprising at least one a period of time, counter number, timer, or pseudo-random number. ### Claim 5 (depends on 2) The device of claim 2, wherein the tag ID is encoded based on a tag verification key, and wherein the tag verification key is generated based on the shared credential and one or more configured parameters by the application function. ### Claim 6 (depends on 5) The device of claim 5, wherein the one or more configured parameters includes at least one of an identity of a network, frequency band, the identity of a network device, or any combination thereof. ### Claim 7 (depends on 2) The device of claim 2, wherein the tag ID is encoded based on a public key of a service of a wireless network or a public key of a data clearing house. ### Claim 8 (depends on 1) The device of claim 1 wherein the shared credential comprises a public key of the application function. ### Claim 9 (depends on 1) The device of claim 1, wherein the issuer of the token comprises at least one of a service of a wireless network or a data clearing house coupled to the wireless network. ### Claim 10 (depends on 1) The device of claim 1, wherein the token is received from the application function. ### Claim 11 A method for wireless communications, comprising: receiving, from a provisioning service, a shared credential, wherein the shared credential is shared between a device and an application function; generating tag information, wherein the shared credential comprises a token, wherein the token is included in the tag information, and wherein the tag information is encoded based on a public key of an issuer of the token; encoding a portion of the tag information based on the shared credential to generate encoded tag information; and broadcasting the encoded tag information. ### Claim 12 (depends on 11) The method of claim 11, wherein the tag information includes a tag identifier (ID) and metadata. ### Claim 13 (depends on 12) The method of claim 12, wherein the tag ID is encoded based on the shared credential, and wherein the tag information further includes routing information. ### Claim 14 (depends on 13) The method of claim 13, wherein the tag ID is further encoded based on a freshness parameter comprising at least one a period of time, counter number, timer, or pseudo-random number. ### Claim 15 (depends on 12) The method of claim 12, wherein the tag ID is encoded based on a tag verification key, and wherein the tag verification key is generated based on the shared credential and one or more configured parameters by the application function. ### Claim 16 (depends on 15) The method of claim 15, wherein the one or more configured parameters includes at least one of an identity of a network, frequency band, the identity of a network device, or any combination thereof. ### Claim 17 (depends on 12) The method of claim 12, wherein the tag ID is encoded based on a public key of a service of a wireless network or a public key of a data clearing house. ### Claim 18 (depends on 11) The method of claim 11 wherein the shared credential comprises a public key of the application function. ### Claim 19 (depends on 11) The method of claim 11, wherein the issuer of the token comprises at least one of a service of a wireless network or a data clearing house coupled to the wireless network. ### Claim 20 (depends on 11) The method of claim 11, wherein the token is received from the application function. ### Claim 21 A device for wireless communication by an application function, comprising: a memory system comprising instructions; and a processor system coupled to the memory system, the processor system configured to: provision a wireless device with a shared credential, wherein the shared credential is shared between the device and the wireless device, wherein the shared credential comprises a token, wherein the token is included in tag information, and wherein the tag information is encoded based on a public key of an issuer of the token; provide information associated with the wireless device to a service of a wireless network; receive encoded tag information from the wireless device; and decode at least a portion of the encoded tag information based on the shared credential to obtain tag information from the wireless device. ### Claim 22 (depends on 21) The device of claim 21, wherein the tag information includes an encoded tag identifier (ID) and metadata. ### Claim 23 (depends on 22) The device of claim 22, wherein the information associated with the wireless device provided to the service comprises at least one of: a list of encoded tag IDs; a tag verification key; and a request for a token for a wireless device. ### Claim 24 (depends on 23) The device of claim 23, wherein the information associated with the wireless device provided to the service comprises the list of encoded tag IDs which are valid for a period of time. ### Claim 25 (depends on 23) The device of claim 23, wherein the information associated with the wireless device provided to the service comprises a tag verification key, and wherein the processor system is further configured to: generate the tag verification key based on the shared credential and one or more configured parameters by the application function; and decode the encoded tag ID of the tag information based on the tag verification key. 26 A device for wireless communications by a service of a wireless network, comprising: a memory system comprising instructions; and a processor system coupled to the memory system, the processor system configured to: receive information associated with a wireless device from an application function coupled to the device; receive encoded tag information from the wireless device; and verify the wireless device based on the received information associated with the wireless device and the encoded tag information. ### Claim 27 (depends on 26) The device of claim 26, wherein the tag information includes an encoded tag identifier (ID) and metadata. ### Claim 28 (depends on 27) The device of claim 27, wherein the information associated with the wireless device provided to the service comprises at least one of: a list of encoded tag IDs; a tag verification key; and a request for a token for a wireless device. ### Claim 29 (depends on 27) The device of claim 27, wherein the information associated with the wireless device received from the application function comprises a list of encoded tag IDs, and wherein the processor system is further configured to: store the received tag information; receive, from the application function, a request for the received tag information, the request including an encoded tag ID; determine that the encoded tag ID corresponds to a portion of the stored tag information, wherein verification of the wireless device is based on the determination that the encoded tag ID corresponds to a portion of the stored tag information; and provide the received tag information to the application function. ### Claim 30 (depends on 27) The device of claim 27, wherein the information associated with the wireless device received from the application function comprises a list of encoded tag IDs, and wherein the processor system is further configured to: store the received tag information; determine that the received tag information has been stored for a time period exceeding a threshold period of time without being requested by the application function; and discard the received encoded tag information.