Patent ID: 7995994

Claim:
A method of preventing theft of service by a compromised access point and detecting unauthorized identifiers in a communication system comprising (i) a first communication system comprising a core network and a licensed radio access network, and (ii) a wireless second communication system comprising a particular access point that operates using licensed wireless frequencies covering a short-range distance and a network controller communicatively coupling the particular access point to the core network, the network controller maintaining a list of UE identities recognized by the core network to use the particular access point, the method comprising: creating a session comprising a session identity for a first user equipment (UE), said session for communicatively coupling the first UE with the core network through the particular access point, the first UE comprising an identity included in the list of UE identities recognized by the core network to use the particular access point; associating the identity of the first UE with the session as an identity of a UE authorized to use the session; and rejecting a message routed from the particular access point to the network controller when said message comprises (i) the session identity of the session for the first UE and (ii) an identity of a second UE, the second UE comprising an identity different than the identity of the first UE associated with the session, wherein the message is an attempt by the particular access point to steal service based on the identity of the second UE by reusing the session of the first UE and replacing the identity of the first UE with the identity of the second UE.