LAN user protocol

• US 20020034298A1
• Filed: 09/17/2001
• Published: 03/21/2002
• Est. Priority Date: 09/15/2000
• Status: Abandoned Application

• Current Assignee: ROKE Manor Research Limited (Chemring Group PLC)
• Original Assignee: ROKE Manor Research Limited (Chemring Group PLC)
• Inventors: Hancock, Robert, Gallagher, Michael
• Application Number:
  US09/953,369
• Publication Number:
  US 20020034298A1
• Time in Patent Office: Days
• US Class Current: 380/247
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

The invention provides an operating protocol for Local Area Network (LAN) systems capable of coping with the problems of user-mobility between LANs. Such mobility is afforded particularly by wireless LAN (WLAN) systems, whereby a user subscribing to a LAN operated by a so-called Home Operator connects, as a “visitor”, to one or more other LAN sites; basing such connection, for charging and other operational purposes, on that user'"'"'s subscription with its Home Operator. The inventive protocol links a user'"'"'s identity with the address of the Home Operator, and stores this information at the visited LAN site, thereby permitting a visiting user, once authenticated by user-interaction, as a visitor with regard to a particular LAN, to revisit that LAN for as long as its authentication with the Home Operator remains sound, without the need for further user intervention.

Claims

1. A user protocol for W-LAN systems whereby the operator of each LAN administers home (H) network and Visitor (V) network authentication, authorisation and accounting (AAA) servers and wherein a subscriber to a first LAN wishing to connect for the first time to a second LAN conveys to the operator of the second LAN, by user intervention, information, identifying both the subscriber and the operator of the first LAN, sufficient to enable the V-AAA server of the second LAN to communicate with the H-AAA server of the first LAN so as to authenticate the proposed connection;

the V-AAA storing information linking the subscriber to the operator of the first LAN for so long as the subscriber remains authorised by the operator of the first LAN, whereby subsequent connections by the subscriber to the second LAN may be made without user intervention.

2. A protocol according to claim 1 wherein the subscriber'"'"'s identity, when announced to the second LAN as part of the routine connect procedure, is correlated by the V-AAA server with the previously-given identity of the H-AAA server for that subscriber, and the V-AAA automatically communicates with the H-AAA to derive the necessary authentication and authorisation and subsequently delivers accounting information.

3. A protocol according to claim 2 wherein the V-AAA stores the subscriber/H-AAA linking data until such time as the H-AAA supplies it with information to the effect that the subscriber'"'"'s authorisation is no longer valid or until an authentication transaction fails.

4. A protocol according to claim 3 wherein, in order to re-establish connection to the second LAN, the subscriber demonstrates, as a result of further user-intervention, authorisation deriving from an H-AAA server of another LAN system.

5. A protocol according to any preceding claim wherein the information supplied by the subscriber, by way of user intervention, includes the subscriber'"'"'s MAC address or any other automatically presented identifier and an identifier that allows the operator of the subscriber'"'"'s Home Network to be identified.

6. A protocol according to claim 5 wherein said identifier comprises a user name or MSISDN number.

7. A protocol according to claim 5 or claim 6 wherein the V-AAA server of the second LAN operator utilises the identifier to locate the H-AAA server of the Home Operator for that subscriber, and to request the H-AAA server to authenticate the desired connection.

8. A W-LAN protocol substantially as herein described with reference to the accompanying drawing.