Back to results
US 8,627,422 B2Granted
Authentication in secure user plane location (SUPL) systems
AssigneeQUALCOMM Incorporated
InventorsPhilip Michael Hawkes, Andreas Wachter, Adrian Edward Escott, Stephen William Edge
Life of this patent
Estimating the term…
Abstract
A particular method includes storing, at a mobile device, at least one security credential that is specific to the mobile device. The method also includes transmitting the at least one security credential to a secure user plane location (SUPL) location platform (SLP) to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier.
Claims22
A method of authentication, comprising:
- receiving, at a mobile device, a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP);
- storing, at the mobile device, at least one security credential that is specific to the mobile device, wherein the at least one security credential includes a device identifier of the mobile device;
- and
- transmitting the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is transmitted in a message configured to be decrypted by a secret key of the SLP.
1 more element
An apparatus comprising:
- a non-transitory memory configured to:
- receive a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP) and
- store at least one security credential that is specific to a mobile device, wherein the at least one security credential includes a device identifier of the mobile device;
- and
- a processor configured to cause the mobile device to transmit the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is configured to be transmitted in a message configured to be decrypted by a secret key of the SLP.
2 more elements
An apparatus comprising:
- means for receiving, at a mobile device, a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP);
- means for storing at least one security credential that is specific to a mobile device, wherein the at least one security credential includes a device identifier of the mobile device;
- and
- means for causing the mobile device to transmit the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is transmitted in a message configured to be decrypted by a secret key of the SLP.
1 more element
A method comprising:
- sending a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;
- receiving, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;
- decrypting the message using a secret key of the web server;
- receiving, at the web server, user identification information from the mobile device;
- and
- authenticating the user identification information as identifying an authorized user of a SUPL service.
3 more elements
An apparatus comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory is configured to store instructions;
- and
- wherein when the instructions are executed by the processor, the processor is configured to:
- send a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;
- receive, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;
- decrypt the message using a secret key of the web server;
- receive, at the web server, user identification information from the mobile device;
- and
- authenticate the user identification information as identifying an authorized user of a SUPL service.
8 more elements
An apparatus, comprising:
- means for sending a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;
- means for receiving, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;
- means for decrypting the message using a secret key of the web server;
- means for receiving, at the web server, user identification information from the mobile device;
- and
- means for authenticating the user identification information as identifying an authorized user of a SUPL service.
3 more elements
A non-transitory processor-readable medium comprising instructions that, when executed by a processor, cause the processor to:
- send a server certificate including a public key of a web server to a secure user plane location (SUPL)-enabled mobile device;
- receive, at the web server, a message from the mobile device, wherein the message includes a security credential of the mobile device;
- decrypt the message using a secret key of the web server;
- receive, at the web server, user identification information from the mobile device;
- and
- authenticate the user identification information as identifying an authorized user of a SUPL service.
3 more elements
A non-transitory processor-readable medium comprising instructions that, when executed by a processor, cause the processor to:
- receive a server certificate including a public key of a secure user plane location (SUPL) location platform (SLP) and store at least one security credential that is specific to a mobile device, wherein the at least one security credential includes a device identifier of the mobile device;
- and
- transmit the at least one security credential to the SLP to authenticate the mobile device as associated with a SUPL user based on a comparison of the device identifier to a stored device identifier, wherein the at least one security credential is configured to be transmitted in a message configured to be decrypted by a secret key of the SLP.
Dependencies are inferred from the claim text.