Ticket-based spectrum authorization and access control

Abstract

Aspects describe spectrum authorization, access control, and configuration parameters validation. Devices in an ad-hoc or peer-to-peer configuration can utilize a licensed spectrum if the devices are authorized to use the spectrum, which can be determined automatically. Aspects relate to distribution of authorization tickets by an authorization server as a result of validating a device's credentials and services to which the device is entitled. An exchange and verification of authorization tickets can be performed by devices as a condition for enabling a validated wireless link using the spectrum.

What is claimed is: 
     
         1 . A method for spectrum authorization and access control by a spectrum provider authorization server, comprising:
 receiving, by the spectrum provider authorization server, a request from a first wireless device for system access;   authenticating the first device;   determining system access that can be authorized for the first device;   creating an authorization ticket for the first device based on the system access determined for the first device, the authorization ticket including a first licensed radio frequency spectrum use authorization information indicating that the first device is allowed to use a licensed radio frequency spectrum for data communication;   creating a second authorization ticket for a second wireless device, based on authorized system access permitted to the second device, the second authorization ticket including a second licensed radio frequency spectrum use authorization information indicating that the second device is allowed to use the licensed radio frequency spectrum for data communication;   sending the first licensed radio frequency spectrum use authorization information to the second device from the first device;   authenticating use of the licensed radio frequency spectrum by the first device;   establishing a validated communication session between the first device and the second device using the first licensed radio frequency spectrum use authorization information; and   permitting use by the first device of only the services allowed on the licensed radio frequency spectrum based on the first licensed radio frequency spectrum use authorization information.   
     
     
         2 . The method of  claim 1 , wherein the authorization ticket for the first device includes an IP address. 
     
     
         3 . The method of  claim 1 , wherein determining system access comprises consulting a configuration parameters database that contains a listing of a plurality of devices that are authorized to access the system. 
     
     
         4 . The method of  claim 1 , wherein the authorization ticket includes a public key associated with the first device. 
     
     
         5 . The method of  claim 4 , wherein the authenticating or the system access is determined by credentials associated with the first device, and wherein the credentials are at least one of shared secret keys, public keys, authorization information, a list of services, or billing information. 
     
     
         6 . The method of  claim 1 , wherein the authorization ticket comprises an identity of the first device. 
     
     
         7 . The method of  claim 1 , wherein the authorization ticket further comprises a validity range during which the authorization ticket is valid, and a cryptographic signature. 
     
     
         8 . The method of  claim 1 , wherein the authorization ticket further includes device configuration information. 
     
     
         9 . A wireless communications apparatus for spectrum authorization and access control by a spectrum provider, comprising:
 a memory that retains instructions related to:
 receiving, by the spectrum provider, a request from a first wireless device for system access, 
 authenticating the first device, 
 determining system access that can be authorized for the first device, 
 generating an authorization ticket for the first device based in part on the system access determined the first device, the authorization ticket including a first licensed radio frequency spectrum use authorization information indicating that the first device is allowed to use a licensed radio frequency spectrum for data communication, 
 generating a second authorization ticket for a second wireless device, based in part on authorized system access permitted to the second device, the second authorization ticket including a second licensed radio frequency spectrum use authorization information indicating that the second device is allowed to use the licensed radio frequency spectrum for data communication, 
 sending the first licensed radio frequency spectrum use authorization information to the second device from the first device, 
 authenticating use of the licensed radio frequency spectrum by the first device, 
 establishing a validated communication session between the first device and the second device using the first licensed radio frequency spectrum use authorization information, and 
 permitting use by the first device of only the services allowed on the licensed radio frequency spectrum based on the first licensed radio frequency spectrum use authorization information; and 
   a processor, coupled to the memory, configured to execute the instructions retained in the memory.   
     
     
         10 . The wireless communications apparatus of  claim 9 , wherein the authorization ticket for the first device includes an IP address. 
     
     
         11 . The wireless communications apparatus of  claim 9 , wherein determining system access comprises consulting a configuration parameters database that contains a listing of a plurality of devices that are authorized to access the system. 
     
     
         12 . The wireless communications apparatus of  claim 9 , wherein the authenticating or the system access is determined by credentials associated with the first device, and wherein the credentials include at least one of shared secret keys, public keys, authorization information, a list of services, or billing information. 
     
     
         13 . The wireless communications apparatus of  claim 9 , wherein the authorization ticket comprises an identity of the first device, a validity period during which the authorization ticket is valid, and a cryptographic signature. 
     
     
         14 . A wireless communications apparatus that provides spectrum authorization, comprising:
 means for receiving, by the spectrum provider, a request from a first wireless device for system access;   means for authenticating the first device;   means for determining system access that can be provided to the first device;   means for generating an authorization ticket for the first device based on the system access determined for the first device, the authorization ticket including a first licensed radio frequency spectrum use authorization information indicating that the first device is allowed to use a licensed radio frequency spectrum for data communication;   means for generating a second authorization ticket for a second wireless device, based on authorized system access permitted to the second device, the second authorization ticket including a second licensed radio frequency spectrum use authorization information indicating that the second device is allowed to use the licensed radio frequency spectrum for data communication;   means for sending the first licensed radio frequency spectrum use authorization information to the second device from the first device;   means for authenticating use of the licensed radio frequency spectrum by the first device;   means for establishing a validated communication session between the first device and the second device using the first licensed radio frequency spectrum use authorization information; and   means for permitting use by the first device of only the services allowed on the licensed radio frequency spectrum based on the first licensed radio frequency spectrum use authorization information   
     
     
         15 . The wireless communications apparatus of  claim 14 , wherein the authorization ticket for the first device includes an IP address. 
     
     
         16 . The wireless communications apparatus of  claim 14 , further comprising means for consulting a configuration parameters database that contains a listing of a plurality of devices that are authorized to access the system. 
     
     
         17 . A computer program product for spectrum authorization and access control by a spectrum provider, comprising:
 a non-transitory computer-readable medium comprising:
 a first set of codes for causing a computer to receive, by the spectrum provider, a request from a first device for system access, the first device being a first wireless device; 
 a second set of codes for causing the computer to perform authentication of the first device; 
 a third set of codes for causing the computer to determine system access that can be authorized for the first device; 
 a fourth set of codes for causing the computer to generate an authorization ticket for the first device based on the system access determined for the first device, the authorization ticket including a first licensed radio frequency spectrum use authorization information indicating that the first device is allowed to use a licensed radio frequency spectrum for data communication; and 
 a fifth set of codes for causing the computer to generate a second authorization ticket for a second device, the second device being a second wireless device, based on authorized system access permitted to the second device, the second authorization ticket including a second licensed radio frequency spectrum use authorization information indicating that the second device is allowed to use the licensed radio frequency spectrum for data communication; 
 a sixth set of codes for causing the computer to send the first licensed radio frequency spectrum use authorization information to the second device from the first device; 
 a seventh set of codes for causing the computer to authenticate use of the licensed radio frequency spectrum by the first device; 
 an eighth set of codes for causing the computer to establish a validated communication session between the first device and the second device using the first licensed radio frequency spectrum use authorization information; and 
 a ninth set of codes for causing the computer to permit use by the first device of only the services allowed on the licensed radio frequency spectrum based on the first licensed radio frequency spectrum use authorization information. 
   
     
     
         18 . The computer program product of  claim 17 , wherein determining system access comprises consulting a configuration parameters database that contains a listing of a plurality of devices that are authorized to access the system, and wherein the authenticating or the system access is determined based on credentials associated with the first device, wherein the credentials include at least one of shared secret keys, public keys, authorization information, a list of services, or billing information. 
     
     
         19 . The computer program product of  claim 17 , wherein the authorization ticket comprises an identity of the first device, a validity range during which the authorization ticket is valid, and a cryptographic signature. 
     
     
         20 . The computer program product of  claim 17 , wherein the authorization ticket comprises a public key associated with the first device, and wherein the validated communication session is configured to carry data of a type and manner specified in a list of allowed services included in the authorization ticket and the second authorization ticket.