T-Mobile USA, Inc.

Shawn David Corey

Andrew Lee Watts

Michael A Bishop

Ahmad Arash Obaidi

Eric W Yocam

Michael Cleat Bishop, Ii

Michael Bishop

Systems and methods for encrypting and decrypting data sent to and received from a peripheral device physically coupled to a hardware interface of a user equipment. In some examples, the user equipment may include an encrypting/decryption component that is configured to physically between a hardware interface of the user equipment and the other components of the user equipment. The encrypting/decryption component may be configured to receive a plurality of encryption/decryption schemes from a remote system. The encrypting/decryption component may select and apply one or more of the plurality of encryption/decryption schemes to data being downloaded and/or uploaded to the peripheral device.

Host-based hardware encryption system

Systems and methods for authenticating a peripheral device prior to allowing the peripheral device access to components and data stored on user equipment. In some examples, the user equipment may include an authorization component that is configured to physically decouple a hardware interface from other components of the user equipment until the authorization component is able to authenticate the peripheral device. Both authorized peripheral devices and the user equipment may be provisioned with authorization data and/or credentials from a system outside the control of the individual users of the user equipment.

Host-based hardware peripheral authorization system

Technologies for using edge devices in a cellular network as compute nodes to participate in a blockchain network are described. A cellular network may provision one or more edge devices in communication with the cellular network to instantiate a virtual machine on the edge device to act as a compute node. The cellular network may submit a bid to solve a blockchain hash function using the compute nodes and may instruct the edge to solve the blockchain hash function.

Provisioning edge devices in a mobile carrier network as compute nodes in a blockchain network

Systems and techniques are provided for detecting rogue base stations and preventing malicious actors from intercepting and stealing data traffic from mobile devices through rogue base stations. Upon connecting to a newly detected base station for a cellular network service, a mobile device attempts to validate the cellular base station with a validation server before any data is transmitted over the new connection. If the mobile device does not receive a confirmation of validity from the validation server, the mobile device would identify the cellular base station as a rogue base station, disconnect from the rogue base station, and search for a valid base station for connection to the cellular network.

Network assisted validation of secure connection to cellular infrastructure

In a wireless communication network such as a cellular network, cellular devices may receive over-the-air (OTA) configuration commands that specify requested device configuration settings. For example, an OTA configuration command may be a binary short message service (SMS) message specifying a configuration parameter and a requested value of the configuration parameter. Upon receiving an OTA configuration command, the cellular device refers to a blockchain that specifies permissible values for various configuration parameters. If a requested configuration parameter value is not indicated by the blockchain to be permissible, the cellular device disregards the OTA configuration command and refuses to implement the requested setting. The cellular device may periodically retrieve updates to the blockchain and may attempt to validate any updated blocks, based on previously validated blocks. If the updates cannot be validated, the cellular device may decline to implement any requested configuration settings.

Validating over-the-air configuration commands

A temporal identity vault used to authenticate an individual is described herein. User identifying input is received on a device, such as a cell phone. The identifying input is, in some examples, encrypted and stored as a temporal identity vault. The temporal identity vault is configured for a use. The use may be a time, location, or the like. A beacon is associated with the temporal identity vault. If the beacon is at a location relative to an object, the authentication process is started. The information stored in the temporal identity vault is authenticated at a central service. Upon authentication, the user is permitted to operate an object. The temporal identity vault may thereafter be deleted.

Growing community of inventors

Kenmore, WA, United States of America

Shawn David Corey