Abstract: A priority access channel assignment system and a messaging protocol allow wireless mobile stations to place calls having differing priority levels. A mobile station originates a call, which may automatically include a request for priority access or may require manual intervention by the user to request priority access. If system resources are unavailable to process the call immediately, the origination message is processed by a base station and a mobile switching center using a plurality of messaging protocols to determine the time at which the call was originated and a priority level associated with the call. Based on the priority level and arrival time, the base station places the call in an appropriate position within a queue. Higher priority calls are placed in a higher position in the queue than lower priority calls. Calls having identical priority are placed in the queue in order of the time of arrival.

Abstract: An apparatus and method for authentication having a processor and at least one activator coupled to the processor is claimed. A signature generator is coupled to the processor and capable of generating a secure identifier. An emitter coupled to the signal generator capable of emitting the secure identifier. A receiver receives the emitted secure identifier and verifies that the secure identifier was appropriately transmitted. The public key corresponding to the key identifier transmitted is accessed to determine the validity of the secure identifier using the accessed key and that the time indicated in the received secure identifier is verified to be within acceptable time tolerances.

Abstract: In a disclosed embodiment, a visitor location register first initializes an assignment table to store N entries. Next, the visitor location register waits until a TMSI assignment is needed. Then, a counter is maintained in memory and is incremented. The value of the counter is then hashed to produce an assignment table index. Beginning at the assignment table index, the assignment table is searched for an available entry. The counter is then encrypted to produce a TMSI. The IMSI corresponding to the TMSI assignment is then stored in the assignment table.

Abstract: A system and method for encrypting all channels of a wireless spread spectrum communication at the chip level. The PN sequence is encrypted with one or more encryption sequences and then used to spread the signal.

Abstract: In a communication system (100), a method and apparatus provides for message integrity regardless of the operating version of an authentication center (198) or an interface (197) between the authentication center (198) and a mobile switching center (199). The method and apparatus include generating a cellular message encryption algorithm (CMEA) key, and generating a CMEA-key-derived integrity key (CIK) based on the CMEA key for message integrity between a mobile station and a base station. The mobile station transmits a registration message to the base station, and determines an operating version of the authentication center (198) in communication with the base station based on whether the mobile station receives a registration accepted order or some elements of an authentication vector from the base station. The CIK is generated based on the CMEA key, if the mobile station receives a valid registration accepted order from the base station.

Abstract: Techniques for efficient storage and retrieval of Preferred Roaming Lists are disclosed. In one aspect, PRL entries are stored in two tables. One table contains records that are common to two or more PRL entries. Another table stores any information that is unique to a PRL entry, as well as an indicator of which common record is associated with it. The common record is concatenated with the unique information to generate the uncompressed PRL entry. Various other aspects of the invention are also presented. These aspects have the benefit of reducing the memory requirements for storing a PRL. In addition, time required to download the compressed PRL is reduced.

Abstract: A method and an apparatus for generating encryption stream ciphers are based on a recurrence relation designed to operate over finite fields larger than GF(2). A non-linear output can be obtained by using one or a combination of non-linear processes to form an output function. The recurrence relation and the output function can be selected to have distinct pair distances such that, as the shift register is shifted, no identical pair of elements of the shift register are used twice in either the recurrence relation or the output function. Under these conditions, the recurrence relation and the output function also can be chosen to optimize cryptographic security or computational efficiency. Moreover, it is another object of the present invention to provide a method of assuring that the delay that results for the encryption process does not exceed predetermined bounds.

Abstract: Method and apparatus for secure transmissions. Each user is provided a registration key. A long-time updated broadcast key is encrypted using the registration key and provided periodically to a user. A short-time updated key is encrypted using the broadcast key and provided periodically to a user. Broadcasts are then encrypted using the short-time key, wherein the user decrypts the broadcast message using the short-time key. One embodiment provides link layer content encryption. Another embodiment provides end-to-end encryption.

Abstract: Methods and apparatus are presented for providing local authentication of subscribers travelling outside their home systems. A subscriber identification token 230 provides authentication support by generating a signature 370 based upon a key that is held secret from a mobile unit 220. A mobile unit 220 that is programmed to wrongfully retain keys from a subscriber identification token 230 after a subscriber has removed his or her token is prevented from subsequently accessing the subscriber's account.

Abstract: A priority access channel assignment system and a messaging protocol allow wireless mobile stations to place calls having differing priority levels. A mobile station originates a call, which may automatically include a request for priority access or may require manual intervention by the user to request priority access. If system resources are unavailable to process the call immediately, the origination message is processed by a base station and a mobile switching center using a plurality of messaging protocols to determine the time at which the call was originated and a priority level associated with the call. Based on the priority level and arrival time, the base station places the call in an appropriate position within a queue. Higher priority calls are placed in a higher position in the queue than lower priority calls. Calls having identical priority are placed in the queue in order of the time of arrival.

Abstract: A short Personal Identification Number (PIN) is used to transfer a subscription for wireless service to a new wireless terminal 104, thereby providing enhanced personal mobility to the subscriber. The transfer is rendered secure by the exchange of Diffie-Hellnan Encrypted Key Exchange (DH-EKE) messages 110, 114.

Abstract: A short Personal Identification Number (PIN) is used to transfer a subscription for wireless service to a new wireless terminal 104, thereby providing enhanced personal mobility to the subscriber. The transfer is rendered secure by the exchange of Diffie-Hellman Encrypted Key Exchange (DH-EKE) messages 110, 114.

Abstract: A cellular digital packet data (CDPD) system includes a mobile data base station (MDBS) configured to interface easily with an advanced mobile phone system (AMPS). The elements of the MDBS are arranged on modules and the functionality of the MDBS is divided among the modules to facilitate flexibility, compactness and quick expansion of the MDBS. To further facilitate compactness, the MDBS includes a transceiver/modem board which uses a single chip to carry out delta-sigma modulation. In order to maintain the integrity of CDPD transmission, a channel hopping scheme is used based upon avoidance of AMPS channel use. A distinctive protocol is used to encapsulate control/query/response data for transmission throughout the CDPD system. This protocol also facilitates easy control of each MDBS throughout the system.