Abstract: A selective Global Service Redirection mechanism allows a service provider, for instance, to instruct only CDMA2000 (MOB_P_REV=6) mobiles to access specific carrier that is deployed to support advanced services known as 3G services. In another embodiment, data-only CDMA2000 mobiles are instructed to access specific carrier that is optimized to support high speed data services. Additionally, data-only CDMA2000 mobiles may be instructed to access a specific carrier that is optimized to support high speed data services. Pre-CDMA2000 mobiles (MOB_P_REV<6) are redirected by a conventional Global Service Redirection Message to another carrier, while CDMA2000 mobiles (MOB_P_REV=<6) are instructed to ignore this redirection.

Abstract: Methods and apparatus for enhanced CMEA, or ECMEA, processing. A forward ECMEA and a reverse ECMEA process are provided. The forward ECMEA process decrypts text encrypted by the reverse ECMEA process and the reverse ECMEA process decrypts text encrypted by the forward ECMEA process. The forward ECMEA process employs a first transformation, an iteration of the CMEA process, and a second transformation. The reverse ECMEA process employs a first inverse transformation, an iteration of the CMEA process, and a second inverse transformation. The transformations and inverse transformations, and the iterations of the CMEA process, employ secret offsets to improve security. The transformations and the iteration of the CMEA process also employ an enhanced tbox function using an involutary lookup table.

Abstract: A system (100) that is capable of transmitting a displayable message to a short message entity (102, 104 or 105) in more than one data package over a conveying network. The system (100) uses a capacity determiner (206) to determine a capacity of the conveying network for transmitting data. Based on this capacity of the conveying network, a fragmenter (204) divides the displayable message into fragments at an application protocol layer. The size of a fragment does not exceed the capacity of the conveying network. Finally, a packager (208) packages the fragments into data packages. The data packages are operable to be separately transmitted by a short message service over the conveying network. The data packages may include a reference parameter corresponding to the position of the fragment in the displayable message. Further, a reference parameter may indicate the total size of the displayable message being fragmented and packaged.

Abstract: A system for updating a communications key(s) performs an authentication(s) of the unit and/or of the communications system using an update key. By using the update key to perform the authentication(s), the key update system can reduce communications between a home communications system and a visiting communications system by sending the update key to the visiting communications system while maintaining the communications key at the home communication system. For example, in performing a key update, the home communications system generates a communications key, such as a new authentication key SSD-A-NEW, using a sequence RANDSSD generated at the home communications system and a secret key A-KEY maintained at the home communications system and at the unit. The home communications system generates the update key SSD-KEY also using the sequence RANDSSD and the secret key A-KEY.

Abstract: A key update system uses information in an update message from a communications system to generate a new key and perform a bidirectional validation of the new key. After a unit validates the new key, at least a portion of information from the update message is used by the communications system to validate the new key. As a result, the communications system is not required to generate and transmit a separate authentication challenge to validate the new key. For example, a wireless communications system can send an update message with a sequence RANDSSD to the wireless unit. The wireless unit generates a new SSD using at least a portion of the sequence RANDSSD, and the wireless unit uses at least a portion of the new SSD to generate a signature value AUTHBS to validate the new key and thereby the home authentication center that initiated the update of the SSD.

Abstract: A paging signal is detected where the paging signal is intended for a mobile-telephone having a paging channel frequency that is different than a paging channel frequency associated with a concentrator. A base station transmits a base station-to-mobile-telephone (BS-MT) paging message by including such BS-MT paging message in a base station-to-concentrator (BS-C) paging message. The BS-MT paging message includes a message portion and a mobile-telephone identifier portion, wherein the mobile-telephone identifier portion indicates the mobile-telephone to which the BS-MT paging message is intended. The BS-C paging message includes the MT paging message and a concentrator identifier portion for indicating the concentrator to which the BS-C is intended. The BS-C paging message is transmitted over a paging channel on a frequency f1 associated with the intended concentrator (i.e., concentrator through which the mobile-telephone is linked to the base station).

Abstract: An apparatus and method for transmitting and receiving cryptographic information which provide a mechanism for resynchronization between a transmitter and receiver of the cryptographic information. A cryptographic synchronization counter at the transmitter generates a transmitter signature tag. A corresponding cryptographic synchronization counter at the receiver generates a receiver signature tag. Information is ciphered and the transmitter signature tag is appended to the ciphered information. The ciphered information is received. The transmitter signature tag is compared to the receiver signature tag and the cipher text is decipher into plain text if the tags are equal. If the tags are not equal, the receiver crypto-sync counter is incremented and a new receiver signature tag is calculated to determine if the receiver is resynchronized (i.e., tags are equal) to the transmitter. If after a certain number of increments, resynchronization does not occur, a resynchronization procedure is initiated.

Abstract: A method and apparatus enhancing the security of an encrypted cryptographic key by storing its key re-transforming information in a decryption store that is separate from a cryptographic key store, which stores the encrypted cryptographic key, from which accessing circuitry is able to access the encrypted cryptographic key. The cryptographic key store may be a disk drive of a computer, the decryption store may be a network access card installed in that computer or a mobile terminal coupled to that computer, and the accessing circuitry may be the computer's controller. Decryption of the encrypted cryptographic key is carried out in the decryption store, as is the subsequent encryption or decryption using the decrypted cryptographic key.

Abstract: A selective Global Service Redirection mechanism allows a service provider, for instance, to instruct only CDMA2000 (MOB_P_REV=6) mobiles to access specific carrier that is deployed to support advanced services known as 3G services. In another embodiment, data-only CDMA2000 mobiles are instructed to access specific carrier that is optimized to support high speed data services. Additionally, data-only CDMA2000 mobiles may be instructed to access a specific carrier that is optimized to support high speed data services. Pre-CDMA2000 mobiles (MOB_P_REV<6) are redirected by a conventional Global Service Redirection Message to another carrier, while CDMA2000 mobiles are instructed to ignore this redirection.

Abstract: A self-inverting enhanced CMEA encryption system suitable for use in wireless telephony. An unprocessed text message is introduced into the system and subjected to a first iteration of a CMEA process, using a first CMEA key to produce a first intermediate message, a first intermediate processed text message, a first intermediate ciphertext message or the like. The first intermediate processed text message is subjected to a further iteration of the CMEA process, using a second CMEA key, to produce a second intermediate processed text message. The second intermediate processed text message is subjected to a final iteration of the CMEA process, using the first CMEA key, to produce the final processed text message. Security may be additionally enhanced by subjecting each message to an input/output transformation before and after each iteration of the CMEA process.

Abstract: A selective Global Service Redirection mechanism allows a service provider, for instance, to instruct only CDMA2000 (MOB_P_REV=6) mobiles to access specific carrier that is deployed to support advanced services known as 3G services. In another embodiment, data-only CDMA2000 mobiles are instructed to access specific carrier that is optimized to support high speed data services. Additionally, data-only CDMA2000 mobiles may be instructed to access a specific carrier that is optimized to support high speed data services. Pre-CDMA2000 mobiles (MOB_P_REV<6) are redirected by a conventional Global Service Redirection Message to another carrier, while CDMA2000 mobiles (MOB_P_REV=>6) are instructed to ignore this redirection.

Abstract: The wireless CDMA system includes a base station which generates a configuration channel as one of the forward control channels. The message slots in the configuration channel only include overhead messages. The base station also generates at least one other forward control channel, but these other forward control channels do not need to include overhead messages in any of their message slots. The mobiles in the system determine the location of the configuration channel from information in a sync channel generated by the base station. By camping onto the configuration channel, a mobile can quickly obtain the overhead parameters in the overhead messages. Because obtaining overhead parameters and keeping an updated version of the overhead parameters is an important factor in overall performance, the significant decrease in overhead message access time provided by the provision of the configuration channel greatly improves performance.

Abstract: Methods and apparatus for enhanced CMEA, or ECMEA, processing. A forward ECMEA and a reverse ECMEA process are provided. The forward ECMEA process decrypts text encrypted by the reverse ECMEA process and the reverse ECMEA process decrypts text encrypted by the forward ECMEA process. The forward ECMEA process employs a transformation, an iteration of the CMEA process, and an inverse transformation. The reverse ECMEA process employs a reverse transformation, an iteration of the CMEA process, and a reverse inverse transformation. The transformations and inverse transformations, and the iteration of the CMEA process, employ secret offsets to improve security. The transformations and the iteration of the CMEA process also employ an enhanced tbox function using an involutary lookup table.

Abstract: A wireless communications system (110) with increased privacy. The system (110) transmits an encrypted signal between a base station (112) and a wireless terminal (122). In the forward channel, the base station (112) includes an encryptor (130) with a long code mask generator (200) that generates a rolling long code mask. The wireless terminal (122) similarly includes a decryptor (164) with a long code mask generator (208) that creates a rolling long code mask.

Abstract: An enhanced CMEA encryption system suitable for use in wireless telephony. A plaintext message is introduced into the system and subjected to a first iteration of a CMEA process, using a first CMEA key to produce an intermediate ciphertext. The intermediate ciphertext is then subjected to a second iteration of the CMEA process using a second CMEA key to produce a final ciphertext. Additional security is achieved by subjecting the plaintext and intermediate ciphertext to input and output transformations before and after each iteration of the CMEA process. The CMEA iterations may be performed using an improved use of a tbox function which adds permutations to a message or intermediate crypto-processed data. Decryption is achieved by subjecting a ciphertext message to the reverse order of the steps used for encryption, replacing the input and output transformations by inverse output and inverse input transformations, respectively, as appropriate.

Abstract: Disclosed is an encrypting speech processor architecture that provides enhanced security without the use of external cryptosync and with minimal speech degradation. This is accomplished by incorporating a block encryptor and a keystream generator (instead of a fixed secret mask encryption scheme, such as those implemented in voice ciphers) for encrypting blocks of encoded speech bits at a transmitter side. The block encryptor employs an invertible cryptographic algorithm and internal cryptosync to convert a first block of encoded speech bits into a first ciphertext block. The first ciphertext block is used to generate a keystream, which is then used to encrypt a second ciphertext block.

Abstract: An enhancement to the use of a tbox function for CMEA encryption. Offsets are generated for application of the tbox function to a message, using secret values and previously encrypted message octets. The offsets are used to permute the message for application of the tbox function. For the first message of a call, the previously encrypted message octets are replaced by an initialization value. In a system employing a single iteration of CMEA encryption, first and second offsets are generated. In a system employing two iterations of CMEA encryption, first, second, third and fourth offsets are generated, with the first and second offsets being used in the first iteration of CMEA encryption and the third and fourth offsets being used in the second iteration of CMEA encryption.

Abstract: A system (100) that is capable of transmitting a displayable message to a short message entity (102, 104 or 105) in more than one data package over a conveying network. The system (100) uses a capacity determiner (206) to determine a capacity of the conveying network for transmitting data. Based on this capacity of the conveying network, a fragmenter (204) divides the displayable message into fragments at an application protocol layer. The size of a fragment does not exceed the capacity of the conveying network. Finally, a packager (208) packages the fragments into data packages. The data packages are operable to be separately transmitted by a short message service over the conveying network. The data packages may include a reference parameter corresponding to the position of the fragment in the displayable message. Further, a reference parameter may indicate the total size of the displayable message being fragmented and packaged.

Abstract: A system for delivering a security code to a cellular telephone. The cellular telephone holds a key X. The cellular telephone requests that an Authorization Center, AC, assign a security code to the cellular telephone. The AC selects a security code, and encrypts it, such that key X is effective to de-crypt the code, yet the AC does not know key X.

Abstract: A system (100) that is capable of transmitting a displayable message to a short message entity (102, 104 or 105) in more than one data package over a conveying network. The system (100) uses a capacity determiner (206) to determine a capacity of the conveying network for transmitting data. Based on this capacity of the conveying network, a fragmenter (204) divides the displayable message into fragments at an application protocol layer. The size of a fragment does not exceed the capacity of the conveying network. Finally, a packager (208) packages the fragments into data packages. The data packages are operable to be separately transmitted by a short message service over the conveying network. The data packages may include a reference parameter corresponding to the position of the fragment in the displayable message. Further, a reference parameter may indicate the total size of the displayable message being fragmented and packaged.