Patent US5642929A successfully refreshed from Google Patents.
Patent US6466779B1 successfully refreshed from Google Patents.
US6466779B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for secure provisioning of a mobile station from a provisioning server using IWF-based firewall
Assignee: Samsung Electronics Co Ltd
•
Filing: 2000-03-07
•
Granted: 2002-10-15
•
Expires: 2020-03-07
Abstract
Abstract There is disclosed a security apparatus, for use in a wireless network comprising base stations that communicate with mobile stations, for preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via the wireless network. The security apparatus comprises a database that stores a first server IP address of a first provisioning server in the wireless network, and a first controller for receiving a first IP data packet transmitted by a first mobile station, wherein the first IP data packet comprises a first source IP address and a first destination IP address. The first controller determines if the first mobile station is provisioned and transmits the first IP data packet to the IP data network if the first mobile station is provisioned. If the first mobile station is unprovisioned, the first controller transmits the first IP data packet to the IP data network if the first destination IP address matches the first server IP address and prevents transmission of the first IP data packet to the IP data network if the first destination IP address does not match the first server IP address.
Inventors
- 👤 Bryan J. Moles
- 👤 Sudhindra P. Herle
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-09 14:49
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04M; H04M3/00; H04M3/16
Claims Analysis
Total Claims: 30
Claim 1
Independent Claim
204 words
For use in a wireless network comprising a plurality of base stations capable of communicating with a plurality of mobile stations, a security apparatus for preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via said wireless network, said security apparatus comprising: a database capable of storing a first server IP address of a first provisioning server associated with said wireless network; and a first controller capable of receiving a first IP data packet transmitted by a first one of said plurality of mobile stations, said first IP data packet comprising a first source IP address and a first destination IP address, wherein said first controller is capable of 1) determining if said first mobile station is provisioned, 2) transmitting said first IP data packet to said IP data network if said first mobile station is provisioned, and 3) if said first mobile station is unprovisioned, one of: a) transmitting said first IP data packet to said IP data network if said first destination IP address matches said first server IP address and b) preventing transmission of said first IP data packet to said IP data network if said first destination IP address does not match said first server IP address.
Claim 2
Dependent Claim
204 words
For use in a wireless network comprising a plurality of base stations capable of communicating with a plurality of mobile stations, a security apparatus for preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via said wireless network, said security apparatus comprising: a database capable of storing a first server IP address of a first provisioning server associated with said wireless network; and a first controller capable of receiving a first IP data packet transmitted by a first one of said plurality of mobile stations, said first IP data packet comprising a first source IP address and a first destination IP address, wherein said first controller is capable of 1) determining if said first mobile station is provisioned, 2) transmitting said first IP data packet to said IP data network if said first mobile station is provisioned, and 3) if said first mobile station is unprovisioned, one of: a) transmitting said first IP data packet to said IP data network if said first destination IP address matches said first server IP address and b) preventing transmission of said first IP data packet to said IP data network if said first destination IP address does not match said first server IP address.
Claim 3
Dependent Claim
37 words
The security apparatus as set forth in claim 1 wherein said security apparatus is disposed in an interworking function unit capable of transferring data between said wireless network and IP data network coupled to said wireless network.
Claim 4
Dependent Claim
42 words
The security apparatus as set forth in claim 1 wherein said first controller determines whether said first mobile station is provisioned by comparing said first source IP address to a plurality of IP addresses of provisioned mobile stations stored in said database.
Claim 5
Dependent Claim
42 words
The security apparatus as set forth in claim 1 wherein said first controller determines whether said first mobile station is provisioned by comparing said first source IP address to a plurality of IP addresses of unprovisioned mobile stations stored in said database.
Claim 6
Dependent Claim
33 words
The security apparatus as set forth in claim 1 wherein said first controller is capable of comparing said first destination IP address to a plurality of server IP addresses stored in said database.
Claim 7
Dependent Claim
40 words
The security apparatus as set forth in claim 5 wherein said first controller transmitting said first IP data packet to said IP data network if said first destination IP address matches any one of said plurality of server IP addresses.
Claim 8
Dependent Claim
43 words
The security apparatus as set forth in claim 5 wherein said first controller prevents transmission of said first IP data packet to said IP data network if said first destination IP address does not match any of said plurality of server IP addresses.
Claim 9
Dependent Claim
154 words
The security apparatus as forth in claim 1 wherein said first controller is further capable of receiving from said IP data network a second IP data packet directed to a second one of said plurality of mobile stations, said second IP data packet comprising a second source IP address and a second destination IP address, wherein said first controller is capable of 1) determining if said second mobile station is provisioned, 2) transmitting said second IP data packet to said second mobile station if said second mobile station is provisioned, and 3) if said second mobile station is unprovisioned, one of: a) transmitting said second IP data packet to said second mobile station if said second source IP address matches said first server IP address and b) preventing transmission of said second IP data packet to said second mobile station if said second source IP address does not match said first server IP address.
Claim 10
Dependent Claim
42 words
The security apparatus as set forth in claim 8 wherein said first controller determines whether said second mobile station is provisioned by comparing said second destination IP address to a plurality of IP addresses of provisioned mobile stations stored in said database.
Claim 11
Dependent Claim
42 words
The security apparatus as set forth in claim 8 wherein said first controller determines whether said second mobile station is provisioned by comparing said second destination IP address to a plurality of IP addresses of unprovisioned mobile stations stored in said database.
Claim 12
Dependent Claim
202 words
A wireless network comprising: a plurality of base stations capable of communicating with a plurality of mobile stations; and a security apparatus for preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via said wireless network, said security apparatus comprising: a database capable of storing a first server IP address of a first provisioning server associated with said wireless network; and a first controller capable of receiving a first IP data packet transmitted by a first one of said plurality of mobile stations, said first IP data packet comprising a first source IP address and a first destination IP address, wherein said first controller is capable of 1) determining if said first mobile station is provisioned, 2) transmitting said first IP data packet to said IP data network if said first mobile station is provisioned, and 3) if said first mobile station is unprovisioned, one of: a) transmitting said first IP data packet to said IP data network if said first destination IP address matches said first server IP address and b) preventing transmission of said first IP data packet to said IP data network if said first destination IP address does not match said first server IP address.
Claim 13
Dependent Claim
202 words
A wireless network comprising: a plurality of base stations capable of communicating with a plurality of mobile stations; and a security apparatus for preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via said wireless network, said security apparatus comprising: a database capable of storing a first server IP address of a first provisioning server associated with said wireless network; and a first controller capable of receiving a first IP data packet transmitted by a first one of said plurality of mobile stations, said first IP data packet comprising a first source IP address and a first destination IP address, wherein said first controller is capable of 1) determining if said first mobile station is provisioned, 2) transmitting said first IP data packet to said IP data network if said first mobile station is provisioned, and 3) if said first mobile station is unprovisioned, one of: a) transmitting said first IP data packet to said IP data network if said first destination IP address matches said first server IP address and b) preventing transmission of said first IP data packet to said IP data network if said first destination IP address does not match said first server IP address.
Claim 14
Dependent Claim
37 words
The wireless network as set forth in claim 11 wherein said security apparatus is disposed in an interworking function unit capable of transferring data between said wireless network and IP data network coupled to said wireless network.
Claim 15
Dependent Claim
42 words
The wireless network as set forth in claim 11 wherein said first controller determines whether said first mobile station is provisioned by comparing said first source IP address to a plurality of IP addresses of provisioned mobile stations stored in said database.
Claim 16
Dependent Claim
42 words
The wireless network as set forth in claim 11 wherein said first controller determines whether said first mobile station is provisioned by comparing said first source IP address to a plurality of IP addresses of unprovisioned mobile stations stored in said database.
Claim 17
Dependent Claim
33 words
The wireless network as set forth in claim 11 wherein said first controller is capable of comparing said first destination IP address to a plurality of server IP addresses stored in said database.
Claim 18
Dependent Claim
40 words
The wireless network as set forth in claim 15 wherein said first controller transmitting said first IP data packet to said IP data network if said first destination IP address matches any one of said plurality of server IP addresses.
Claim 19
Dependent Claim
43 words
The wireless network as set forth in claim 15 wherein said first controller prevents transmission of said first IP data packet to said IP data network if said first destination IP address does not match any of said plurality of server IP addresses.
Claim 20
Dependent Claim
154 words
The wireless network as forth in claim 11 wherein said first controller is further capable of receiving from said IP data network a second IP data packet directed to a second one of said plurality of mobile stations, said second IP data packet comprising a second source IP address and a second destination IP address, wherein said first controller is capable of 1) determining if said second mobile station is provisioned, 2) transmitting said second IP data packet to said second mobile station if said second mobile station is provisioned, and 3) if said second mobile station is unprovisioned, one of: a) transmitting said second IP data packet to said second mobile station if said second source IP address matches said first server IP address and b) preventing transmission of said second IP data packet to said second mobile station if said second source IP address does not match said first server IP address.
Claim 21
Dependent Claim
42 words
The wireless network as set forth in claim 18 wherein said first controller determines whether said second mobile station is provisioned by comparing said second destination IP address to a plurality of IP addresses of provisioned mobile stations stored in said database.
Claim 22
Dependent Claim
42 words
The wireless network as set forth in claim 18 wherein said first controller determines whether said second mobile station is provisioned by comparing said second destination IP address to a plurality of IP addresses of unprovisioned mobile stations stored in said database.
Claim 23
Dependent Claim
186 words
For use in a wireless network comprising a plurality of base stations capable of communicating with a plurality of mobile stations, a method of preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via the wireless network, the method comprising the steps of: storing in a database a first server IP address of a first provisioning server associated with the wireless network; receiving a first IP data packet transmitted by a first one of the plurality of mobile stations, the first IP data packet comprising a first source IP address and a first destination IP address; determining if the first mobile station is provisioned; if the first mobile station is provisioned, transmitting the first IP data packet to the IP data network; and if the first mobile station is unprovisioned, one of: transmitting the first IP data packet to the IP data network if the first destination IP address matches the first server IP address; and preventing transmission of the first IP data packet to the IP data network if the first destination IP address does not match the first server IP address.
Claim 24
Dependent Claim
186 words
For use in a wireless network comprising a plurality of base stations capable of communicating with a plurality of mobile stations, a method of preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via the wireless network, the method comprising the steps of: storing in a database a first server IP address of a first provisioning server associated with the wireless network; receiving a first IP data packet transmitted by a first one of the plurality of mobile stations, the first IP data packet comprising a first source IP address and a first destination IP address; determining if the first mobile station is provisioned; if the first mobile station is provisioned, transmitting the first IP data packet to the IP data network; and if the first mobile station is unprovisioned, one of: transmitting the first IP data packet to the IP data network if the first destination IP address matches the first server IP address; and preventing transmission of the first IP data packet to the IP data network if the first destination IP address does not match the first server IP address.
Claim 25
Dependent Claim
44 words
The method as set forth in claim 21 wherein the step of determining whether the first mobile station is provisioned comprises the substep of comparing the first source IP address to a plurality of IP addresses of provisioned mobile stations stored in the database.
Claim 26
Dependent Claim
44 words
The method as set forth in claim 21 wherein the step of determining whether the first mobile station is provisioned comprises the substep of comparing the first source IP address to a plurality of IP addresses of unprovisioned mobile stations stored in the database.
Claim 27
Dependent Claim
30 words
The method as set forth in claim 21 further including the step of comparing the first destination IP address to a plurality of server IP addresses stored in the database.
Claim 28
Dependent Claim
138 words
The method as forth in claim 21 further comprising the steps of: receiving from the IP data network a second IP data packet directed to a second one of the plurality of mobile stations, the second IP data packet comprising a second source IP address and a second destination IP address; determining if the second mobile station is provisioned; if the second mobile station is provisioned, transmitting the second IP data packet to the second mobile station; and if the second mobile station is unprovisioned, one of: transmitting the second IP data packet to the second mobile station if the second source IP address matches the first server IP address; and preventing transmission of the second IP data packet to the second mobile station if the second source IP address does not match the first server IP address.
Claim 29
Dependent Claim
44 words
The method as set forth in claim 25 wherein the step of determining whether the second mobile station is provisioned comprises the substep of comparing the second destination IP address to a plurality of IP addresses of provisioned mobile stations stored in the database.
Claim 30
Dependent Claim
44 words
The method as set forth in claim 25 wherein the step of determining whether the second mobile station is provisioned comprises the substep of comparing the second destination IP address to a plurality of IP addresses of unprovisioned mobile stations stored in the database.
References Cited (Backward Citations)
US5615340A
Cited
US5901142A
Cited
US6118778A
Cited
US6078582A
Cited
US6151628A
Cited
US6092110A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-10-14 | 2006-04-15 | 2006-10-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-10-14 | 2010-04-15 | 2010-10-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-10-14 | 2014-04-15 | 2014-10-15 | $7700.00 | Window Closed / Lapsed |