System and method for secure provisioning of a mobile station from a provisioning server using encryption

A wireless network comprising:

• a plurality of base stations, each of said base stations capable of communicating with a plurality of mobile stations;
• and
• a security device coupled by a wireline connection to said wireless network capable of preventing an unprovisioned one of said plurality of mobile stations from accessing an Internet protocol (IP) data network through said wireless network, said security device comprising:
• a first controller capable of receiving an IP data packet transmitted by said unprovisioned mobile station, said IP data packet comprising an IP packet header and an IP packet payload, determining from said IP data packet that said unprovisioned mobile station is unprovisioned and, in response to said determination, encrypting at least a portion of said IP packet payload to thereby generate an encrypted payload that may be decrypted only by a provisioning server of said wireless network.

For use in a wireless network comprising a plurality of base stations, each of the base stations capable of communicating with a plurality of mobile stations, a method of preventing an unprovisioned one of the plurality of mobile stations from accessing an Internet protocol (IP) data network through the wireless network, the method comprising the steps of:

• receiving an IP data packet transmitted by the unprovisioned mobile station in a security device coupled by a wireline connection to the wireless network, the IP data packet comprising an IP packet header and an IP packet payload;
• determining that the unprovisioned mobile station is unprovisioned;
• and
• encrypting at least a portion of the IP packet payload to thereby generate an encrypted payload that may be decrypted only by a provisioning server of said wireless network.