Enabling secure access to a discovered location server for a mobile device

Patent metadata

Field	Value
Publication number	US-2016373931-A1
Application number	US-201615256473-A
Country	US
Kind code	A1
Filing date	Sep 2, 2016
Priority date	Feb 10, 2012
Publication date	Dec 22, 2016
Grant date	—

Abstract

A method for obtaining a secure connection between a first server and a client. The method may comprise establishing a secure communication session between a second server and the client, wherein the second server is trusted by the first server, and the second server is configured to authenticate the client. The client may receive a client token, wherein the client token contains data associated with the first server, the second server, the client, and a digital signature. Then, the client may request secure communication access to the first server, wherein the request includes transferring the client token to the first server. Finally, the client may receive a grant of secure communication access to the first server based on authentication of the client by the first server, wherein the authentication is based on the client token validating the client and the digital signature validating the client token.

First claim

What is claimed is:

1 . A method for obtaining a secure connection between a first server and a client, the method comprising:
establishing a secure communication session between a second server and the client, wherein the second server is trusted by the first server, and the second server is configured to authenticate the client; receiving, by the client, a client token using the secure communication session, wherein the client token is defined for the first server and contains data associated with the first server, the second server, the client, and a digital signature; requesting, by the client, secure communication access to the first server, wherein the requesting includes transferring the client token to the first server; and receiving, by the client, a grant of secure communication access to the first server based on authentication of the client by the first server, wherein the authentication is based on the client token validating the client and the digital signature validating the client token.

Assignees

• Qualcomm Inc

Inventors

• Edge Stephen William
• Wachter Andreas Klaus
• Hawkes Philip Michael

Classifications

• H04W4/029

  Location-based management or tracking services · CPC title

• H04W8/06

  Registration at serving network Location Register, VLR or user mobility server · CPC title

• H04W8/02

  Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04L63/0884

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title