Abstract: There is disclosed a security device for use in a wireless network comprising a group of base stations that communicate with numerous mobile stations. The security device prevents an unprovisioned one of the mobile stations from accessing an Internet protocol (IP) data network through the wireless network. The security device comprises a first controller for receiving from the unprovisioned mobile station an IP data packet comprising an IP packet header and an IP packet payload. The first controller replaces the IP packet header with a replacement IP packet header containing an IP address of a selected provisioning server of the wireless network. The first controller selects the provisioning server by selecting the IP address in the replacement IP packet header according to a load spreading algorithm.

Abstract: A software upgrade server that remotely links a software upgrade file as a DLL and transmits the DLL to a mobile station via a wireless network. The mobile station comprises a memory for storing the software file and a controller that communicates with the software upgrade server. The controller receives a message from the software upgrade server indicating a software file is available for upgrading. The controller determines an available space in the memory where the available software file may be installed and transmits to the software upgrade server a target address at the start of the available memory space. The server uses the target address to link a plurality of object files into a DLL and transmits the DLL to the mobile station.

Abstract: A software upgrade server capable of upgrading a wireless mobile station via a wireless network. The software upgrade server comprises: 1) a database for storing a plurality of software upgrade files as a plurality of object files and a plurality of image files suitable for use in the wireless mobile station; and 2) an upgrade controller associated with the database for communicating with the mobile station via the wireless network. The upgrade controller receives from the mobile station a select message selecting one of the software upgrade files and a target address associated with an original image file in a memory of the mobile station. The upgrade controller links selected object files to form a dynamically linked library (DLL) file based on the target address.

Abstract: An access point for communicating with mobile stations in an integrated wireless network. The access point comprises a first transceiver for communicating with selected mobile stations within a short distance of the access point and an input/output interface that couples the access point to an external mobile station via a communication bus. The externally coupled mobile station communicates with a first base station in a wireless public network. The access point further comprises a data processor that communicates with the externally coupled mobile station via the input/output interface and interconnection circuitry that transfers data traffic between the first transceiver and the data processor. The access point enables the selected mobile stations to communicate with the first base station via the externally coupled mobile station.

Abstract: There is disclosed a service provisioning system for use in a wireless network containing a group of base stations that communicate with mobile stations. The service provisioning system comprises: 1) a database for storing a service provisioning file comprising a mobile station service provisioning program in interpreted byte-code format; and 2) a provisioning controller coupled to the database that receives a notification indicating that a first mobile station is unprovisioned and, in response thereto retrieves the service provisioning file from the database and transmits the service provisioning file to the first mobile station. Receipt of the service provisioning file causes the mobile station to execute the mobile station service provisioning program in the service provisioning file. There also is disclosed a mobile station capable of being provisioned from a wireless network by an over-the-air (OTA) service provisioning process.

Abstract: There is disclosed a mobile station diagnostic testing system for use in a wireless network comprising a plurality of base stations capable of communicating with a plurality of mobile stations. The mobile station diagnostic testing system tests the operation of a first mobile station. The mobile station diagnostic testing system comprises: 1) a database for storing a mobile station diagnostic testing file comprising a mobile station diagnostic testing program in interpreted byte-code format; and 2) a diagnostics controller coupled to the database for receiving a notification indicating that a fault has occurred in the first mobile station. In response to receipt of the notification, the mobile diagnostics testing system retrieves the mobile station diagnostic testing file from the database and transmits it to the first mobile station. Receipt of the mobile station diagnostic testing file causes the mobile station to execute the mobile station diagnostic testing program.

Abstract: There is disclosed a security device for use in a wireless network comprising a plurality of base stations that communicate with a plurality of mobile stations. The security device prevents unprovisioned mobile stations from accessing an Internet protocol (IP) data network through the wireless network. The security device comprises a first controller for receiving from the unprovisioned mobile station an IP data packet comprising an IP packet header and an IP packet payload and encrypting at least a portion of the IP payload. The security device also comprises a second controller for determining that the unprovisioned mobile station is, in fact, unprovisioned. In one embodiment, the first controller comprises a data processor that executes an encryption program stored in a memory associated with the data processor.

Abstract: An access point for communicating with mobile stations in an integrated wireless network. The access point comprises a first transceiver for communicating with selected mobile stations within a short distance of the access point and an input/output interface that couples the access point to an external mobile station via a communication bus. The externally coupled mobile station communicates with a first base station in a wireless public network. The access point further comprises a data processor that communicates with the externally coupled mobile station via the input/output interface and interconnection circuitry that transfers data traffic between the first transceiver and the data processor. The access point enables the selected mobile stations to communicate with the first base station via the externally coupled mobile station.

Abstract: An apparatus and method is disclosed for storing and accessing wireless device e-mail attachments. Some wireless devices (such as basic cell phones) have insufficient memory and processing power to read e-mail attachments. Prior art e-mail systems delete e-mail attachments if a wireless device is not capable of receiving attachments to an e-mail message. The present invention prevents the loss of e-mail attachments by storing the e-mail attachments in an e-mail attachment database for later retrieval by the recipient of the e-mail message. The present invention notifies the recipient of the location of the e-mail attachments with an e-mail attachment notification message that contains a network address and password.

Abstract: A display filter for preventing the display of sensitive information on the display of a processing system. The display filter comprises: 1) a data processor; 2) a memory for storing user application programs executable by the data processor and user documents associated with the user application programs; and 3) a display filter application program stored in the memory and executable by the data processor. The data processor, under control of the display filter application program, identifies sensitive information in a first selected user document and causes the first selected user document to be displayed on the display with the sensitive information obscured.

Abstract: There is disclosed an interworking function unit for transferring data between a wireless network and an Internet protocol (IP) data network coupled to the wireless network. The interworking function unit comprises a protocol conversion controller that receives incoming data packets from the wireless network, wherein the incoming data packets are generated by a first mobile station and are formatted according to a protocol associated with the wireless network. The interworking function unit converts the incoming data packets to IP data packets formatted according to an Internet protocol of the IP data network. The interworking function unit also comprises a first security controller for preventing unprovisioned mobile stations from accessing the IP data network through the wireless network. The first security controller receives the IP data packets and replaces each original IP packet header with a replacement IP packet header containing the IP address of a provisioning server.

Abstract: A software upgrade server capable of upgrading a wireless mobile station via a wireless network. The software upgrade server comprises: 1) a database for storing a plurality of software upgrade files as a plurality of object files and a plurality of image files suitable for use in the wireless mobile station; and 2) an upgrade controller associated with the database for communicating with the mobile station via the wireless network. The upgrade controller receives from the mobile station a select message selecting one of the software upgrade files and a target address associated with an original image file in a memory of the mobile station. The upgrade controller links selected object files to form a dynamically linked library (DLL) file based on the target address.

Abstract: A software upgrade server that remotely links a software upgrade file as a DLL and transmits the DLL to a mobile station via a wireless network. The mobile station comprises a memory for storing the software file and a controller that communicates with the software upgrade server. The controller receives a message from the software upgrade server indicating a software file is available for upgrading. The controller determines an available space in the memory where the available software file may be installed and transmits to the software upgrade server a target address at the start of the available memory space. The server uses the target address to link a plurality of object files into a DLL and transmits the DLL to the mobile station.

Abstract: There is disclosed a provisioning system for use in a wireless network comprising a group of base stations that communicate with mobile stations. The provisioning system provisions unprovisioned mobile stations and prevents unprovisioned mobile stations from accessing an Internet protocol (IP) data network through the wireless network. The provisioning system comprises a provisioning controller that retrieve provisioning data from a provisioning server associated with the IP data network and causes a first base station to transmit the retrieved provisioning data to a first unprovisioned mobile station in a first traffic channel established between the first base station and the first unprovisioned mobile station. The provisioning system prevents any unprovisioned mobile station from accessing the wireless network except by means of a traffic channel, thereby preventing the unprovisioned mobile station from making an unauthorized access to the Internet via a data call to a base station.

Abstract: A wireless communication device capable of being upgraded from a software upgrade server via a wireless communication network. The wireless communication device comprises: 1) a memory capable of storing a user profile, wherein the user profile is suitable for managing an un-attended software download; and 2) a message processor associated with the memory capable of communicating with the software upgrade server via the wireless communication network, wherein the message processor receives at least a first un-attended notification message from the software upgrade server identifying a new software update to be applied to the wireless communication device.

Abstract: There is disclosed, for use in a wireless network comprising a group of base stations that communicate with a group of mobile stations, an apparatus for automatically gathering configuration data associated with the mobile stations. The apparatus comprises: 1) a database for storing a plurality of mobile station configuration records, wherein each of the mobile station configuration records stores configuration data gathered from a selected one of the mobile stations; and 2) an update controller for transmitting to a first mobile station a mobile station configuration request message and for receiving from the first mobile station first configuration data transmitted by the first mobile station in response to receipt of the mobile station configuration request message. The update controller stores the first configuration data in a first configuration record.

Abstract: There is disclosed a service provisioning system for use in a wireless network containing a group of base stations that communicate with mobile stations. The service provisioning system comprises: 1) a database for storing a service provisioning file comprising a mobile station service provisioning program in interpreted byte-code format; and 2) a provisioning controller coupled to the database that receives a notification indicating that a first mobile station is unprovisioned and, in response thereto retrieves the service provisioning file from the database and transmits the service provisioning file to the first mobile station. Receipt of the service provisioning file causes the mobile station to execute the mobile station service provisioning program in the service provisioning file. There also is disclosed a mobile station capable of being provisioned from a wireless network by an over-the-air (OTA) service provisioning process.

Abstract: There is disclosed, for use in a wireless communication device capable of communicating with a base station of a wireless network in a slotted mode of operation and in a non-slotted mode of operation, an apparatus capable of controlling the slotted mode of operation and the non-slotted mode of operation. The apparatus comprises: 1) a power monitor for determining if an external power supply is providing external power to the wireless communication device and generating a first signal indicating whether external power is being provided; and 2) a slotted mode power controller coupled to the power monitor and for receiving the first signal. The slotted mode power controller terminates the slotted mode of operation whenever the first signal indicates that the external power is being provided.

Abstract: In a wireless mobile station of the type having a position locating system capable of determining the location of the wireless mobile station, there is disclosed control circuitry capable of being selectively set to disable the transmission of information concerning the location of the wireless mobile station. The control circuitry also comprises a directory of telephone numbers of locations authorized to receive information concerning the location of the wireless mobile station. Also disclosed is control circuitry capable of receiving a code that causes the wireless mobile station to transmit information concerning the location of the wireless mobile station. Also disclosed are methods for selectively disabling the transmission of information concerning the location of the wireless mobile station.

Abstract: There is disclosed a security apparatus, for use in a wireless network comprising base stations that communicate with mobile stations, for preventing unprovisioned mobile stations from accessing an Internet protocol (IP) data network via the wireless network. The security apparatus comprises a database that stores a first server IP address of a first provisioning server in the wireless network, and a first controller for receiving a first IP data packet transmitted by a first mobile station, wherein the first IP data packet comprises a first source IP address and a first destination IP address. The first controller determines if the first mobile station is provisioned and transmits the first IP data packet to the IP data network if the first mobile station is provisioned.