Motorola Solutions, Inc.

Timothy Woodward

Chris A Kruegel

Thomas J Senese

Nathanael P Kuehner

James E Eastwood

Todd A Leigh

Gerald R Drobka

Dipendra M Chowdhary

Michael W Bright

John G Lambrou

Larry Murrill

A method and Key Management Facility (KMF) for managing keys of a single user having a plurality of devices is provided. The KMF receives an Over-The-Air Rekeying (OTAR) message relating to a first device and including an interworking bit. If the interworking bit is set, the KMF retrieves a main source RSI and a Sub-RSI field from the OTAR message. If the main source RSI matches other main source RSIs from other devices, the KMF manages keys for all devices that have the same main source RSI in an identical manner.

Method and key management facility for managing keys of a single user having a plurality of mobile devices

A radio is authenticated at the site and unique authentication information for the radio is stored at the site. A subsequent non-authentication message from the radio is received at the site and authentication information in the non-authentication message is identified. The unique authentication information stored at the site is compared with authentication information identified in the non-authentication message. If there is a match, the non-authentication message is authenticated with an authentication code included in the non-authentication message, wherein a predefined portion of the authentication code is obtained from at least one of a header portion or a data portion of the non-authentication message. Upon successfully completing authentication, the site repeats the non-authentication message towards destination radios indicated in non-authentication message.

Method and apparatus for authenticating a digital certificate status and authorization credentials

A method for operating with KMFs includes a communication device having a memory device: receiving a designation of a primary KMF for the communication device, wherein only one primary KMF is designated for the communication device at any given time instance; receiving a designation of a secondary KMF for the communication device; storing, within the memory device, a first and a second set of crypto groups, wherein each crypto group within each set of crypto groups comprises at least one keyset, wherein each set of crypto groups is associated, within the memory device, to only one KMF identifier; associating, within the memory device, the first set of crypto groups to an identifier for the primary KMF; and associating, within the memory device, the second set of crypto groups to an identifier for the secondary KMF.

Method for a communication device to operate with multiple key management facilities

A method for selecting a channel for group communications in a conventional multi-channel communication system comprises receiving, for a plurality of channels in the multi-channel communication system, a talkgroup assignment list for the channels that identifies a set of talkgroups assigned to use the corresponding channels. A subscriber unit receives talkgroup assignment lists for multiple different channels, determines a desired talkgroup, and selects a channel assigned to the desired talkgroup using the received talkgroup assignment. The talkgroup assignment list is developed for at least one channel in the multi-channel communication system and identifies a set of talkgroups assigned to use the corresponding channel. The list is transmitted for the channel to a subscriber unit and is used by the subscriber unit to register with the system and affiliate with a talkgroup supported by the channel in the conventional multi-channel communication system.

Method for selecting a channel in a multi-channel communication system

A method for indicating the status of communication channels assigned to a talkgroup includes: determining the channels in various sites in a conventional communication system that service a talkgroup for media transmissions between subscribers of the talkgroup; receiving notification of the status of transmission activity on the channels; and based on the notification, providing an indication of the status of the channels assigned to the talkgroup so that the talkgroup or subscribers of the talkgroup can choose to proceed with a talkgroup communication. The notification may be received by an infrastructure device in an RF site or a central controlling entity. The indication may be that the channel is free for transmissions or is busy.

Method to indicate status of channels assigned to a talkgroup in a multi-site conventional communication system

Disclosed is a method for encrypted communications. A first IPsec endpoint selects a security association (SA) from a security association database (SAD) by using a selector and then extracts an indexing parameter from SA. The indexing parameter is used to determine an active key location from a key storage database (KSD). Data packets are then encrypted using a key from the active key location. The first IPsec endpoint also forms a security parameter index (SPI) in a header of the data packet by using a keyID from the active key location and transmits the encrypted data packet with the header indicating the SPI to a second IPsec endpoint.

Growing community of inventors

Tempe, AZ, United States of America

Timothy Woodward