Method and system for providing controlled access to information stored on a portable recording medium |
| The above object is achieved and the disadvantages of the prior art are overcome in accordance with ... |
|
Automated unmanned rental system and method |
| OF THE INVENTION FIG. 1 shows a schematic/block diagram of an embodiment of an automated unmanned ... |
|
Method, apparatus and system for directing access to content on a computer network |
| OF PREFERRED EMBODIMENTS Preferred embodiments of the instant invention employ a network of ... |
|
Flexible computer resource manager |
| The subject invention improves upon existing resource management techniques by providing an ... |
|
Dynamic modification of multimedia content |
| FIG. 1 depicts an example of an Internet environment having features of the present invention. As ... |
|
Networked appliance for recording, storing and serving digital images |
| An improved image server is provided by virtue of the present invention. In one embodiment of an ... |
|
System and method for processing a request for information in a network |
| From the foregoing, it may be appreciated by those skilled in the art that a need has arisen for a ... |
|
|
Method and system for validating subscriber identities in a communications network
| Details |
Inventors: Owens, Leslie D.; Plecity, Mark S.; Davis, Alvah B.; Kiswani, David T.; Yu, I-Hsiang;
Assignee: Iridium LLC (Arlington, VA)
Primary Examiner: Peeso; Thomas R.
Assistant Examiner:
Attorney, Agent or Firm: Baker & Hostetler LLP
A method and/or system for validating subscribers includes an insecure communications network, such as, an IS-41 wireless telephone network connecting a plurality of telephone switches. A subscriber or user of the system enters a sequence of digits, namely, a random PIN (personal identification number), and a telephone number of whom he wishes to call. The random PIN provides effectively a "digital signature" to the telephone number. A second number is dialed to effect call completion. An authentication center exists which authenticates the user by verifying the digital signature and updating a user profile to permit a call only to the telephone number in the sequence dialed by the user. The profile is sent to the serving switch which permits calls only to the destination in the profile. This technique eliminates fraudulent users from stealing telephone identities, "cloning" phones and placing calls. Calls are optionally completed only to destinations that have been validated. |
|
DETAILED DESCRIPTION It is therefore, a feature and advantage of the instant invention to address, from a fraud perspective, the mismatch between authenticating and non-authenticating wireless networks, or network elements, including but not limited to, the mismatch between GSM and IS-41 networks. It is another feature and advantage of the present invention to authenticate subscribers in non-authenticating wireless networks, thereby providing fraud protection with the potential to be roughly equivalent to, or superior to, that of GSM and CAVE-based IS-41 networks. It is also a feature and advantage of the instant invention to provide a method and/or a system whereby a subscriber carries a cryptographic token, such as a dynamic personal identification number (PIN) generator, which is authenticated at a central host computer. The user or subscriber may enter a PIN when placing a call and is either denied or allowed access. This token-based authentication may be performed on at least one call or registration when accessing mobile switching centers that do not support authentication. This invention further may also be used as a back up or secondary authentication mechanism. This invention supports the interworking of authenticating an non-authenticating networks or network elements and supports a constant blanket of cryptographic coverage for subscribers. More specifically, the instant invention provides a system for validating an identity of a subscriber in a communications network. The system includes at least one communication server having a database mapping valid communications device identification numbers to respective cryptographic keys, an input including a device identification number, and an output including a valid cryptographic key mapped thereto, if the possible device identification number is included in the database. The system also includes at least one authentication server including a first time-varying element for generating a time-varying value, and a processor. The time-varying element may be a clock, counter, and/or derivative thereof
|
|