Abstract: We disclose various embodiments that enable a mobile terminal to confirm authenticity of a base station before the mobile terminal proceeds to camp on the corresponding cell. In an example embodiment, the authentication processing includes the mobile terminal tuning to a selected control channel of the base station to monitor RF signals transmitted thereon. The base station is deemed to be authentic if the monitored RF signals indicate the presence of live traffic between the base station and one or more other mobile terminals. The control channel can be selected from a fixed set of uplink and/or downlink control channels that are typically used by a legitimate base station. The presence of live traffic on the selected control channel can be detected by detecting certain control messages that are typically transmitted on that control channel between the base station and one or more mobile terminals served by that base station.

Abstract: Embodiments provide a mobile communications device that includes a processor configured to communicate with a transceiver and a memory. The transceiver is configured to exchange control signals with a network node. The memory contains instructions that when executed by the processor configure the processor to operate the transceiver to exchange the control signals. The instructions further configure the processor to pass a first proper subset of the control signals to a remote device without operating according to the control signals, and to operate according to control signals in a second proper subset of the control signals. The processor is thereby configured to operate on behalf of a remote communication device to support communication between the remote communication device and the network node.

Abstract: The present invention provides a method of relocating functional entities in access service networks during mobility events. One embodiment of the method includes providing context information representative of two or more functional entities from a source access service network (ASN) to a target ASN. Another embodiment of the method includes receiving context information representative of two or more functional entities at a target ASN from a source ASN. The context information for the functional entities is associated with an access terminal and is provided in response to the source ASN receiving a relocation notification from the target ASN as a result of a handoff request or a location update message.

Abstract: Embodiments provide a user equipment (UE) device that includes a memory and a processor configured to execute instructions stored in said memory. The processor is configured by the instructions to receive a first evolved packet system (EPS) mobility management (EMM) attach reject message in response to an attempt to attach to a first eNode B (eNB) of a radio access network (RAN). If the attach reject message includes an Evolved Packet System mobility management (EMM) error code, the processor directs an attach request to a second, confirming eNB. The processor may be further configured by the instructions to receive a second attach reject message from the second eNB and enter a lock state only the condition that the second attach reject message also includes an EMM error code, optionally the same EMM error code received in the first attach reject message.

Abstract: A mobility management entity (MME) receives a request for a key to establish a security context for communication between a base station and a user equipment in response to the user equipment requesting connectionless service with the base station. In response to receiving the request, the MME transmits a cookie to identify the security context stored by the base station.

Abstract: In one embodiment, multiple keys are generated in user equipment of a communication system based at least in part on a designated key expansion multiplier. A key identifier is received in the user equipment from a base station of the communication system. The user equipment selects a particular one of the keys as a function of the received key identifier, and utilizes the selected one of the keys to secure data sent from the user equipment to the base station. For example, the keys may comprise respective portions of a key stream generated by the user equipment responsive to a message received from the base station, with the keys being shared by the user equipment and the base station through independent generation of the key stream in the base station. The base station may illustratively comprise an evolved Node B (eNB) of an Evolved Universal Terrestrial Radio Access Network (E-UTRAN).

Abstract: A first security context is established between a given user computing device and a first network computing device to enable a secure data connection between the given user computing device and the first network computing device. A second security context is established between the given user computing device and a second network computing device to enable a secure data connection between the given user computing device and the second network computing device simultaneous with the secure data connection between the given user computing device and the first network computing device. Establishment of the second security context includes the first network computing device sending the given user computing device a simultaneous secure data connection parameter useable by the given user computing device to establish the second security context with the second network computing device.

Abstract: A first security context is established between a given user computing device and a first network computing device to enable a secure data connection between the given user computing device and the first network computing device. A second security context is established between the given user computing device and a second network computing device to enable a secure data connection between the given user computing device and the second network computing device simultaneous with the secure data connection between the given user computing device and the first network computing device. Establishment of the second security context includes the first network computing device sending the given user computing device a simultaneous secure data connection parameter useable by the given user computing device to establish the second security context with the second network computing device.

Abstract: A first security context is established between a given user computing device and a first network computing device associated with a first network cell of a communications network to enable a secure data connection between the given user computing device and the first network computing device. A second security context is established between the given user computing device and a second network computing device associated with a second network cell of the communications network to enable a secure data connection between the given user computing device and the second network computing device simultaneous with the secure data connection between the given user computing device and the first network computing device. Establishment of the second security context includes the first network computing device sending the given user computing device a simultaneous secure data connection parameter useable by the given user computing device to establish the second security context with the second network computing device.

Abstract: In one embodiment, multiple keys are generated in user equipment of a communication system based at least in part on a designated key expansion multiplier. A key identifier is received in the user equipment from a base station of the communication system. The user equipment selects a particular one of the keys as a function of the received key identifier, and utilizes the selected one of the keys to secure data sent from the user equipment to the base station. For example, the keys may comprise respective portions of a key stream generated by the user equipment responsive to a message received from the base station, with the keys being shared by the user equipment and the base station through independent generation of the key stream in the base station. The base station may illustratively comprise an evolved Node B (eNB) of an Evolved Universal Terrestrial Radio Access Network (E-UTRAN).

Abstract: The disclosed subject provides embodiments of a method of allocating network identifiers to access terminals. One embodiment of the method includes allocating a fixed length identifier to an access terminal on initial entry of the access terminal to a network. The access terminal is identified by one of a plurality of mode-dependent identifiers in communication over an air interface between the access terminal and the network. The mode-dependent identifier is selected based on an operational mode of the access terminal. The method also includes providing the fixed length identifier to one or more entities in the network.

Abstract: An example method includes receiving at a User Equipment (UE) a value for an Access Mode identifier and a value for a Closed Subscriber Group (CSG) identifier in one or more cell advertisements, selecting a cell based on the or more cell advertisements, and reporting in a message the value of the Access Mode identifier and the value CSG identifier for the cell advertisement of the cell selected. A core network element receives a first Access Mode identifier value and a first CSG identifier value, these first values associated with a cell advertisement of a cell selected by a UE; receives a second Access Mode identifier value and a second CSG identifier value, these second values reported by the cell selected by the UE; performs a comparison of first and second Access Mode identifier value and/or first and second CSG identifier values; and takes action based on the comparison.

Abstract: A mobility management entity (MME) receives a request for a key to establish a security context for communication between a base station and a user equipment in response to the user equipment requesting connectionless service with the base station. In response to receiving the request, the MME transmits a cookie to identify the security context stored by the base station.

Abstract: A first security context is established between a given user computing device and a first network computing device associated with a first network cell of a communications network to enable a secure data connection between the given user computing device and the first network computing device. A second security context is established between the given user computing device and a second network computing device associated with a second network cell of the communications network to enable a secure data connection between the given user computing device and the second network computing device simultaneous with the secure data connection between the given user computing device and the first network computing device. Establishment of the second security context includes the first network computing device sending the given user computing device a simultaneous secure data connection parameter useable by the given user computing device to establish the second security context with the second network computing device.

Abstract: Example embodiments relate a method for managing a status of a mobile station in a wireless network. The method includes receiving, at an accounting network element, a report message indicating a state change of the mobile station. The method may also include sending, by the accounting network element, a notice to a network serving element in response to receiving the report message, the notice message indicating the state change of the mobile station.

Abstract: The present invention provides a method for paging legacy and advanced access terminals. One embodiment of the method comprises receiving a notification that an access terminal is entering an idle mode and determining whether the access terminal is a legacy device identified by a fixed length identifier or an advanced device identified by one of a plurality of mode-dependent identifiers. The mode-dependent identifier is used to identify the advanced device in the idle mode. This embodiment may also include allocating one or more first paging cycles to the access terminal when it is a legacy device or one or more second paging cycles to the access terminal when it is an advanced device. The first and second paging cycles are different.

Abstract: Example embodiments relate a method for managing a status of a mobile station in a wireless network. The method includes receiving, at an accounting network element, a report message indicating a state change of the mobile station. The method may also include sending, by the accounting network element, a notice to a network serving element in response to receiving the report message, the notice message indicating the state change of the mobile station.

Abstract: The present invention provides a method for paging legacy and advanced access terminals. One embodiment of the method comprises receiving a notification that an access terminal is entering an idle mode and determining whether the access terminal is a legacy device identified by a fixed length identifier or an advanced device identified by one of a plurality of mode-dependent identifiers. The mode-dependent identifier is used to identify the advanced device in the idle mode. This embodiment may also include allocating one or more first paging cycles to the access terminal when it is a legacy device or one or more second paging cycles to the access terminal when it is an advanced device. The first and second paging cycles are different.

Abstract: The disclosed subject provides embodiments of a method of allocating network identifiers to access terminals. One embodiment of the method includes allocating a fixed length identifier to an access terminal on initial entry of the access terminal to a network. The access terminal is identified by one of a plurality of mode-dependent identifiers in communication over an air interface between the access terminal and the network. The mode-dependent identifier is selected based on an operational mode of the access terminal The method also includes providing the fixed length identifier to one or more entities in the network.

Abstract: The present invention provides a method of relocating functional entities in access service networks during mobility events. One embodiment of the method includes providing context information representative of two or more functional entities from a source access service network (ASN) to a target ASN. Another embodiment of the method includes receiving context information representative of two or more functional entities at a target ASN from a source ASN. The context information for the functional entities is associated with an access terminal and is provided in response to the source ASN receiving a relocation notification from the target ASN as a result of a handoff request or a location update message.