Telecommunication Systems, Inc.

Telecommunications Systems, Inc.

Keith McFarland

John L Griffin

William Wells

Vishal Jain

Kambiz Ghozati

Vineet Sachdev

John Stevens

Wiliam P Wells

An anonymous communication module that provides full conversational anonymous messaging and voice/video communication between two or more parties interacting over a wireless/landline network. An anonymous messaging module accepts an anonymous initiation message to a public address to trigger the start of an anonymous voice/video conversation between a message originator and a message recipient. An anonymous communication module performs intercept and address substitution on a message and/or voice/video call transmitted between two or more parties via an anonymous communication service. The anonymous communication module substitutes a real address in the source field of an intercepted message and/or voice/video call, with an anonymous address mapped to that real address, and substitutes an anonymous address in the destination field of an intercepted message and/or voice/video call with a real address mapped to that anonymous address. The anonymous communication module then forwards the newly formatted message and/or voice/video call to an intended message/call destination.

Anonymous messaging conversation

Anonymous voice conversation

Authenticating cloud computing enabling secure services (ACCESS) offloads 'client authentication' activity onto a third-party authenticating cloud computing enabling secure services (ACCESS) node. Instead of having a client device authenticate itself directly to a network server, the client device instead authenticates itself to a third-party authenticating cloud computing enabling secure services (ACCESS) node. The authenticating cloud computing enabling secure services (ACCESS) node then provides credentials that are used by the client device to communicate directly with the server (and utilize the service) without any further authentication being necessary.

Authenticating cloud computing enabling secure services

An authentication credentials push service (ACPS) that securely pushes non-privileged authentication credentials to registered client entities. The ACPS comprises a classification server and a push server to provide access to non-privileged authentication credentials absent a pull transaction. The classification server in the ACPS classifies authentication credentials as either privileged (i.e. private, forgeable) or non-privileged (i.e. non-forgeable, non-sensitive). Credentials identified as being of a privileged nature are treated with restricted access. Alternatively, credentials classified as being of a non-privileged nature are made available for the push service. Authentication servers register with the ACPS to become consumers of the push service. A push server within the ACPS pushes non-privileged authentication credentials to registered authentication servers at predetermined intervals. Individual authentication credentials push services (ACPS) have access to different authentication credentials. An authentication server can use a dynamic name service (DNS) lookup to find a specific authentication credentials push service (ACPS).

Secure distribution of non-privileged authentication credentials

Motion of a wireless device is pre-registered as authentication credentials, then later matched, to provide motion-based authentication for access to software, service, etc. The wireless device may contain any number of gyroscopic, distance, positional or compass sensors&#x2014;any or all of which are measured during a physical gesture or motion or the wireless device while the user is holding the wireless device. Recorded measurements of the specific motion then identifies the authorized user. If measurements of an attempted motion suitably matches the pre-registered and valid authentication credentials for the service or device, then the motioned wireless device is authenticated for use by the user. Such motion is difficult, if not impossible, for a user to pass on to another individual&#x2014;even if they wanted to, making it the ultimate security technique.

Authentication via motion of wireless device movement

Conventional quality of service (QoS) treatment is extended to over-the-top (OTT) applications transmitting data over a commercial wireless network via a virtual private network (VPN) tunnel. An over-the-top (OTT) application server and a VPN client/server routing data to/from that OTT application server via a VPN tunnel, are integrated with a quality of service (QoS) server to enable the OTT application server and/or VPN client/server to request and get desired QoS treatment for application data routed by the OTT application server over the VPN tunnel. The QoS server forwards QoS rules received in a QoS request message to a policy and charging rules function (PCRF) on the OTT application/VPN client devices' home mobile network operator (MNO). If the client device is roaming, the PCRF on the home MNO forwards QoS rules to a PCRF on a serving MNO. QoS treatment is then carried out by the PCRF in a conventional manner.

Growing community of inventors

Annapolis, MD, United States of America

Keith McFarland