Telecommunication Systems, Inc.

Kambiz Ghozati

Dara Ung

William Wells

Kyle Greenwell

Tojo Thomas

Paul Thompson

Gordon John Hines

Joseph Hannan

Lynne Seitz

Keith McFarland

John Stevens

Wiliam P Wells

A Secure Location Session Manager (SLSM) is an intelligent router for open mobile alliance (OMA) Secure User Plane Location (SUPL) Version 1.0 (and later) messages best implemented when multiple, geo-diverse SUPL servers are deployed in a distributed environment, such as an active-active redundant configuration within a wireless carrier's network. In a standalone option, the SLSM acts as a 'middleman' for all SUPL positioning messages between a mobile device and a responsible SUPL server. In an embedded option, the SLSM resides within an existing server. The SLSM manages and stores session information for all pending and ongoing SUPL positioning sessions in internal tables for routing and load balancing purposes. The external interfaces of the SLSM consist of OMA ULP messages.

Secure location session manager

A practical inter-carrier roaming solution by way of a roaming location protocol (RLP) router that provides consistent location support across heterogeneous wireless network standards. The RLP router maintains connectivity to each location server in a roaming ecosystem, alleviating the need for an expensive and impractical mesh network of location servers. When a home location server (H-LS) determines it cannot locate a subscriber device because the subscriber device is roaming, the H-LS sends an RLP request to the RLP router. The RLP router then routes the RLP request to a serving location server (S-LS), which subsequently returns location information for the roaming subscriber device. The RLP router maintains mobile switching center ID (MSCID) to location based services (LBS) mappings for routing RLP requests. The RLP router may also maintain rough MSC-level positioning data for each MSCID to enable the RLP router to resolve certain location fixes without utilizing an S-LS.

RLP router

Enhanced intelligent routing logic for routing and load balancing a SET-initiated SUPL session request based on SET capabilities (e.g. SET-supported positioning protocols) and a roaming status identified for a requesting SET. When a SET capabilities parameter in a SUPL START message initiated by a requesting SET indicates that the SET supports a LTE positioning protocol (LPP), only, enhanced intelligent routing logic routes the SUPL session request to newly configured SUPL servers that support the LTE positioning protocol (LPP), only. Alternatively, when SET capabilities indicate that a requesting SET supports a radio resource location services protocol (RRLP), in addition to or in exclusion of a LPP, the intelligent router routes the session request message to SUPL servers that support the RRLP, in addition to or in exclusion of the LPP. Intelligent routing logic may also be enhanced to support SUPL intelligent off load (SI-OL) based on SET capabilities.

Intelligent load balancer enhanced routing

An authentication credentials push service (ACPS) that securely pushes non-privileged authentication credentials to registered client entities. The ACPS comprises a classification server and a push server to provide access to non-privileged authentication credentials absent a pull transaction. The classification server in the ACPS classifies authentication credentials as either privileged (i.e. private, forgeable) or non-privileged (i.e. non-forgeable, non-sensitive). Credentials identified as being of a privileged nature are treated with restricted access. Alternatively, credentials classified as being of a non-privileged nature are made available for the push service. Authentication servers register with the ACPS to become consumers of the push service. A push server within the ACPS pushes non-privileged authentication credentials to registered authentication servers at predetermined intervals. Individual authentication credentials push services (ACPS) have access to different authentication credentials. An authentication server can use a dynamic name service (DNS) lookup to find a specific authentication credentials push service (ACPS).

Secure distribution of non-privileged authentication credentials

Growing community of inventors

Ellicott City, MD, United States of America

Kambiz Ghozati