Qualcomm Incorporated

Other

Philip Michael Hawkes

Gregory Gordon Rose

Stephen William Edge

George Cherian

Andreas Klaus Wachter

Michael William Paddon

Michael Paddon

Santosh Paul Abraham

Anand Palanigounder

James Semple

Alexander Gantman

Adrian Edward Escott

Jouni Kalevi Malinen

Craig Matthew Brown

Sai Yiu Duncan Ho

Roy Franklin Quick, Jr

Miriam M Wiggers De Vries

Gregory G Rose

Hemanth Sampath

Craig William Northway

Rajat Prakash

Jun Wang

Sven Fischer

Ramin Rezaiifar

Kirk Allan Burroughs

Raymond T Hsu

Lu Xiao

Mahesh Dandapani Iyer

John W Noerenberg, Ii

Cameron A McDonald

Miriam Wiggers De Vries

Maarten Menzo Wentink

Parag Arun Agashe

Miguel Griot

Soo Bum Lee

Paul E Bender

Richard Dominic Wietfeldt

Michaela Catalina Vanderveen

Nikolai Konrad Leung

Arungundram C Mahendran

Charles Nung Lo

Vinay Joseph

Nikolai K N Leung

Jonathan Petit

Lakshminath Reddy Dondeti

William Whyte

Pooja Aggarwal

Michele Berionne

Manu Sharma

Christopher Rudolf Wingert

Guilherme Luiz Karnas Hoefel

Can Acar

James Alan Misener

Bijan Ansari

Jessica M Purser

Panagiotis Thomas

Steve Millendorf

Roy Franklin Quick

This disclosure provides methods, devices, and systems for lightweight, low-latency authentication and association between STAs and APs in wireless local area networks (WLANs). In various aspects, an apparatus may transmit, over a WLAN prior to authentication by an access point (AP), a first Extensible Authentication Protocol Over a Local Area Network (EAPoL) frame including first information associated with an EAPoL protocol and second information associated with an encryption protocol. The apparatus may further receive, over the WLAN, a second EAPoL frame indicating successful authentication by the AP in accordance with the EAPoL protocol, the second EAPoL frame including third information associated with the encryption protocol.

Common frames for authentication and encryption

Aspects relate to changing at least one communication parameter. In some examples, the at least one communication parameter may include at least one of an association identifier (AID), a packet number (PN), a sequence number (SN), a traffic identifier (TID), a timing synchronization function (TSF) value, or a combination thereof. In some examples, a first apparatus provides an indication of a change associated with at least one of the AID, the PN, the SN, the TID, the TSF value, or a combination thereof to a second apparatus.

Communication security based on parameter change

A method for managing a plurality of imaging devices in a vehicle includes determining that a change of data security mode is indicated for frames of image data transmitted over a first data communication link, determining whether a sensor management system has sufficient processing capacity to support the change of data security mode, increasing the processing capacity of the sensor management system by modifying data security settings for at least one other data communication link when the processing capacity of the sensor management system is insufficient to support the change of data security mode, and initiating the change of data security mode when the sensor management system has sufficient processing capacity to support the change of data security mode. The change of data security mode may include a change from an application-based to a link-based data security mode or a change from the link-based to the application-based data security mode.

Mode switch for link-based and application-based security operations

Certain aspects of the present disclosure relate to wireless communications. According to certain aspects, a method that may be performed by an access point (AP) includes outputting, for transmission to an access point (AP), a request to associate with the AP, wherein the request is encrypted with a first set of one or more keys; obtaining, from the AP, a response to the request; decrypting the response, based on the first set of keys, to obtain a second set of one or more keys; and using the second set of keys for secure data exchange with the AP.

Association protection for wireless networks

Aspects of the present disclosure relate to wireless communications, and more particularly, to techniques for increasing local area network (LAN) device privacy. One aspect provides a method for wireless communications at an access point (AP). The method generally includes: determining a mapping between a first distribution system (DS) medium access control (MAC) address and a second DS MAC address; obtaining, from a source access terminal, a frame having the second DS MAC address; and sending at least a portion of the frame to a target access terminal based on the mapping between the first MAC address and the second MAC address.

Local area network (LAN) device privacy

Methods, devices, non-transitory processor-readable media of various embodiments provide for routing Misbehavior Detection Reports from vehicle-to-everything (V2X) onboard equipment to an associated entity. Various embodiments may include storing, within a Misbehavior Report Router resulting from provisioning of a certificate to a V2X onboard equipment, information that enables a Misbehavior Detection Report to be routed to the entity associated with misbehaving V2X onboard equipment, examining a Misbehavior Detection Report received from a reporting V2X onboard equipment to identify a Pseudonym Certificate Authority Misbehavior Report Router of the entity associated with misbehaving V2X onboard equipment, passing the Misbehavior Detection Report to the identified Pseudonym Certificate Authority Misbehavior Report Router, using information in the Misbehavior Detection Report with information stored in the Pseudonym Certificate Authority Misbehavior Report Router to route the Misbehavior Detection Report to the associated entity.

Method and system for onboard equipment misbehavior detection report routing

Aspects of the present disclosure describe authentication of a user equipment (UE) in a network. It can be determined, by the UE, to access a discovered network for wireless communications, and based on a service provider associated with the discovered network, to use a modified universal subscriber identity module (USIM) subscription stored in the UE for authentication with the discovered network. The UE can obtain a subscriber identifier for authenticating on the discovered network via the authentication, where the subscriber identifier is generated based at least in part on a service provider identifier associated with the service provider and a modified mobile subscriber identity associated with the service provider. The UE can send the subscriber identifier to a node of the discovered network for the authentication.

Techniques for subscription-based authentication in wireless communications

Methods and devices are provided for generating, delegating, and/or authenticating hierarchical globally unique identifier (HGUID) certificates that are arranged in domain-name form to permit delegation and authentication as a Fully Qualified Domain Name (FQDN). A first hierarchical device certificate is obtained that includes at least part of a first unique device identifier for a first device and a base domain name, wherein the first hierarchical device certificate includes a fully qualified domain name and the first unique device identifier includes at least one of a type/model identifier or an origin/manufacturer of the first device. The first hierarchical device certificate is sent to an authenticating device to prove the first device has authority to perform a transaction within a restricted domain as defined by the first hierarchical device certificate. An indication may then be received from the authenticating device that the first device has been authenticated to perform the transaction.

Representing unique device identifiers in hierarchical device certificates as fully qualified domain names (FQDN)

Various features pertain to the authentication of mobile devices or other User Equipment. In some aspects, a Retail-based Neutral Host LTE is provided for use with Long Term Evolution (LTE) networks that, among other features, provides a WiFi Alliance HotSpot 2.0 (HS2.0) user experience using LTE technology for non-mobile network operator (non-MNO) Service Providers (SPs), while maintaining high security assurances as with LTE. That is, in some examples, Retail Neutral Host-LTE is configured to provide the same or similar security assurances as with MNO-based LTE. Moreover, retail Neutral Host-LTE offers options for provisioning credentials and authentication with the AAA that are analogous to the options for HS2.0, that is: username/password, SP-issued certificate, and pre-configured mobile device certificate. This is achieved, at least in part, while providing or ensuring that Retail Neutral Host-LTE security provides similar security assurances to MNO-based LTE.

LTE-level security for neutral host LTE

Electronic devices are adapted to generate cryptographic keys from one or more biometrics. According to one examples, an electronic device can obtain a non-encoded bit string associated with biometric information for an individual. The non-encoded bit string can be treated as if it were encoded and a decoding operation may be applied to the bit string, resulting in a modified bit string. One or more cryptographic keys can then be generated based at least in part on the modified bit string. Other aspects, embodiments, and features are also included.

Devices and methods for facilitating generation of cryptographic keys from a biometric

Techniques are provided which may be implemented in various methods, apparatus, and/or articles of manufacture to allow a mobile device to obtain certain location service(s) and/or the like from one or more computing devices that have been authorized for use. For example, in certain implementations, a location server may comprise a proxy location server for an authorizing location server and may indicate one or more other location servers as being authorized for location service related access by a mobile device.

Methods, apparatuses and articles for identifying and authorizing location servers and location services using a proxy location server

A particular method includes generating, at a secure user plane location (SUPL) server, a message to be sent to a mobile device, the message including: a server certificate including an identifier of the SUPL server and a public key of the SUPL server; and a request for a device certificate of the mobile device. The method also includes receiving a reply from the mobile device that includes a device certificate of the mobile device; and authenticating the mobile device as associated with a SUPL user based on the device certificate.

Authentication in secure user plane location (SUPL) systems

Methods, systems, and devices are described for wireless communication at a wireless station. Specifically, the present disclosure prevents a station from decrypting unauthorized messages transmitted by wireless device(s) impersonating an AP. In some examples, the AP may continuously and periodically alter the keys for each transmitted message transmitted to prevent malicious interference by unauthorized devices. In some examples, the method may use a symmetric cipher (e.g., Message Integrity Code) for a message using an undisclosed MIC key.

Authenticating messages in a wireless communication

Various techniques are provided for Location Services (LCS) Assistance Data broadcast, for example for implementation in LTE and LTE-A systems. The embodiments described herein may use the LPP/LPPe positioning protocol, by making use of existing unsolicited Provide Assistance Data (PAD) messages. Embodiments avoid the need to define and implement a separate broadcast Assistance Data protocol. Additional exemplary embodiments for scheduling and verifying of the broadcast Assistance Data messages are described herein.

Verifying generic broadcast of location assistance data

Techniques are provided which may be implemented in various methods, apparatus, and/or articles of manufacture to allow a mobile device to obtain certain location service(s) and/or the like from one or more computing devices that have been authorized for use. For example, in certain implementations, an authorizing location server may obtain a first message from a mobile device indicating a first set of location servers, determine a second set of location servers based, at least in part, on the first set of location servers, and transmit a second message to the mobile device indicating that the second set of location servers are authorized for location service related access by the mobile device.

Methods and apparatus for identifying and authorizing location servers and location services

Growing community of inventors

Warrimoo, Australia

Philip Michael Hawkes