Apparatus and method for sponsored connectivity to wireless networks using application-specific network access credentials

A user device comprising:

• a wireless communication interface adapted to wirelessly communicate with a wireless communication network;
• and
• a processing circuit communicatively coupled to the communication interface, the processing circuit adapted to:
• receive, from an application service provider, an application-specific certificate associated with at least one application service provided by the application service provider;
• determine that a wireless communication network provides application-specific access to the application service provided by the application service provider;
• transmit a registration request including the application-specific certificate to a wireless communication network device of the wireless communication network for verification of the application-specific certificate at the wireless communication network device independent to a home subscriber service (HSS) of the wireless communication network, the application-specific certificate including a public key associated with the application service;
• perform authentication and key agreement with the wireless communication network device of the wireless communication network after verification of the application-specific certificate at the wireless communication network device;
• and
• communicate with the application service after authentication and key agreement is successfully performed.

A user device comprising:

• means for receiving, from an application service provider, an application-specific certificate associated with at least one application service provided by the application service provider;
• means for determining that a wireless communication network provides application-specific access to the application service provided by the application service provider;
• means for transmitting a registration request including the application-specific certificate to a wireless communication network device of the wireless communication network for verification of the application-specific certificate at the wireless communication network device independent to a home subscriber service (HSS) of the wireless communication network, the application-specific certificate including a public key associated with the application service;
• means for performing authentication and key agreement with the wireless communication network device of the wireless communication network after verification of the application-specific certificate at the wireless communication network device;
• and
• means for communicating with the application service after authentication and key agreement is successfully performed.

A method operational at a wireless communication network device associated with a wireless communication network, the method comprising:

• receiving, from an application service provider, an application service provider certificate that includes an application service provider public key, the application service provider certificate received via a communication interface;
• receiving, from a user device, a registration request for application-specific access to an application service provided by the application service provider, the registration request received via a communication interface, the registration request including an application-specific certificate signed by the application service provider, the application-specific certificate further including a public key associated with the application service;
• verifying, via a processing circuit, the application-specific certificate using the application service provider public key at the wireless communication network device independent to a home subscriber service (HSS) of the wireless communication network;
• and
• performing, via the processing circuit, authentication and key agreement with the user device after verification of the application-specific certificate at the wireless communication network device.

A wireless communication network device associated with a wireless communication network, the wireless communication network device comprising:

• a wireless communication interface adapted to wirelessly communicate with at least a user device;
• and
• a processing circuit communicatively coupled to the wireless communication interface, the processing circuit adapted to:
• receive, from an application service provider, an application service provider certificate that includes an application service provider public key;
• receive, from the user device, a registration request for application-specific access to an application service provided by the application service provider, the registration request including an application-specific certificate signed by the application service provider, the application-specific certificate including a public key associated with the application service;
• verify the application-specific certificate using the application service provider public key at the wireless communication network device independent to a home subscriber service (HSS) of the wireless communication network;
• and
• perform authentication and key agreement with the user device after verification of the application-specific certificate at the wireless communication network device.

A wireless communication network device comprising:

• means for receiving, from an application service provider, an application service provider certificate that includes an application service provider public key;
• means for receiving, from a user device, a registration request for application-specific access to an application service provided by the application service provider, the registration request including an application-specific certificate signed by the application service provider, the application-specific certificate including a public key associated with the application service;
• means for verifying the application-specific certificate using the application service provider public key at the wireless communication network device independent to a home subscriber service (HSS) of the wireless communication network;
• and
• means for performing authentication and key agreement with the user device after verification of the application-specific certificate at the wireless communication network device.