Integrating public and private network resources for optimized broadband wireless access and method

• US 20020075844A1
• Filed: 04/10/2001
• Published: 06/20/2002
• Est. Priority Date: 12/15/2000
• Status: Abandoned Application

• Current Assignee: NTT Docomo Dcmr Communications Laboratories USA, Inc.
• Original Assignee: NTT Docomo Dcmr Communications Laboratories USA, Inc.
• Inventors: Hagen, W. Alexander
• Application Number:
  US09/832,679
• Publication Number:
  US 20020075844A1
• Time in Patent Office: Days
• US Class Current: 370/351
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/16 Implementing security features at a particular protocol layer
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 28/16 Central resource management; Negotiation of resources or communication parameters, e.g. negotiating bandwidth or QoS [Quality of Service]
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 80/00 Wireless network protocols or protocol adaptations to wireless operation
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A system and method are disclosed for providing ubiquitous public network access to wireless, mobile terminals using private networks having private network access points and connections with the public network. The wireless, mobile terminals are permitted to use wireless, radio frequency communication devices comprising private network access points. A network access server (NAS) is associated with each wireless, radio frequency communication device and provides an interface between the wireless, mobile terminals and the private network. The NAS controls registration of wireless, mobile terminals as subscribers, and provides public network access to the mobile terminals through the private network'"'"'s access point and public network connection. The NAS also restricts access by the mobile terminals to the private network, meters network useage by the mobile terminals, and controls use of bandwidth by the mobile terminals. The NAS also interfaces with integration operator distributed services over the public network. The integration operator services include databases and servers for storing and providing subscriber and network provider information for subscriber registration, network access and useage control, and accounting purposes. The NAS may be provided as a standalone element embodied in a computer, or may be integrated with the wireless radio frequency device and/or a network adaptor device for the private network.

Claims

1. A system for providing terminals controlled access to a public network using the public network connection of a private network, comprising:

a network access point for establishing a network connection with a said terminal;

a network access server;

a first network interface between said network access server and said network access point;

a second network interface between said network access server and said public network connection of said private network;

said network access server being configured to establish and control a network connection between a said terminal having a network connection with said network access point and said public network through said public network connection of said private network without a network connection being established between said terminal and said private network.

2. The system of claim 1 wherein said network access point has a wireless network interface for establishing a wireless network connection with a said terminal.

3. The system of claim 2 wherein said terminal has a wireless network interface for establishing a wireless network connection with said network access point.

4. The system of claim 3 wherein said terminal is a mobile terminal.

5. The system of claim 4 wherein said terminal and said network access point communicate via Bluetooth protocol.

6. The system of claim 4 wherein said terminal and said network access point communicates via IEEE 802.11X wireless LAN protocol.

7. The system of claim 1 including a third network interface between said network access server and said private network to enable network communication between said network access server and said private network.

8. The system of claim 1 wherein said network access server is resident in said network access point.

9. The system of claim 1 wherein said network access server and said network access point are co-resident in a computer.

10. The system of claim 1 wherein said network access server is resident in a computer and wherein said computer comprises an interface between said network access point and said private network.

11. The system of claim 7 wherein said network access server is resident in said third network interface.

12. The system of claim 11 wherein said third network interface comprises a local area network adaptor.

13. The system of claim 1 wherein said network access server comprises software to register terminals and software to limit access to the public network to registered terminals.

14. The system of claim 7 wherein said network access server comprises facilities to prevent access by said terminals to said private network.

15. The system of claim 14 wherein said facilities include facilities to configure separate public access and private access subnetworks.

16. The system of claim 14 wherein said facilities include an IP address filter.

17. The system of claim 7 wherein said network access server comprises software to facilitate encrypting and decrypting data sent and received by said mobile terminal over said public network.

18. The system of claim 1 wherein said network access server comprises facilities for dynamically providing network configuration data to said terminals.

19. The system of claim 1 wherein said network access server comprises facilities to route data communicated to and from said mobile terminal over said public network.

20. The system of claim 1 wherein said network access server comprises software for controlling bandwidth useage by said terminals.

21. The system of claim 1 wherein said network access server comprises software to monitor and record network useage by said terminals.

22. The system of claim 1 wherein said network access server comprises software to provide mobile IP support for said wireless, mobile terminals.

23. The system of claim 1 wherein said network access server comprises a database for maintaining selected information concerning registered terminals.

24. The system of claim 1 wherein said network access server comprises facilities for providing telephony services to said mobile terminals.

25. The system of claim 1 including an integration operator network adapted to communicate with said network access server over said public network, said integration operator network comprising facilities to manage public network access by said mobile terminal through said network access server.

26. The system of claim 25 wherein said integration operator network comprises a central database for maintaining selected information about said network access servers and said registered terminals, and selected network access and useage policies.

27. The system of claim 25 wherein said selected information about said network access servers includes at least one of provider identification, network configuration information, data encryption information, network useage policy information, and provider accounting information.

28. The system of claim 25 wherein said selected information about said registered terminals includes at least one of authorized user identity, terminal address, terminal security policy, terminal service plan identification, data encryption information, terminal status in network, network useage accounting information.

29. The system of claim 25 wherein said selected network access and useage policies include at least one of public network access policy information, bandwidth useage policy information, and network traffic priority policy information.

30. A method for providing terminals controlled access to a public network using the public network connection of a private network, comprising:

providing a network access point for establishing a network connection with a said terminal;

providing a network access server;

providing a first network interface between said network access server and said network access point;

providing a second network interface between said network access server and said public network connection of said private network;

configuring said network access server to establish and control a network connection between a said terminal having a network connection with said network access point and said public network through said public network connection of said private network without a network connection being established between said terminal and said private network.

31. The method of claim 30 including providing said network access point with a wireless network interface for establishing a wireless network connection with a said terminal.

32. The method of claim 31 including providing said terminal with a wireless network interface for establishing a wireless network connection with said network access point.

33. The method of claim 32 wherein said terminal is a mobile terminal.

34. The method of claim 33 wherein said terminal and said network access point communicate via Bluetooth protocol.

35. The method of claim 33 wherein said terminal and said network access point communicate via IEEE 802.11X wireless LAN protocol.

36. The method of claim 30 including providing a third network interface between said network access server and said private network to enable network communication between said network access server and said private network.

37. The method of claim 30 including incorporating said network access server in said network access point.

38. The method of claim 30 including integrating said network access server and said network access point in a computer.

39. The method of claim 30 including incorporating said network access server in a computer that comprises an interface between said network access point and said private network.

40. The method of claim 36 including incorporating said network access server in said third network interface.

41. The method of claim 40 wherein said third network interface comprises a local area network adaptor.

42. The method of claim 30 including providing said network access server with software to register terminals and software to limit access to the public network to registered terminals.

43. The method of claim 42 wherein said software to register terminals is operative to automatically begin a registration process with respect to a said terminal when said terminal is comes within communication range of said network access point.

44. The method of claim 36 including providing said network access server with facilities to prevent access by said terminals to said private network.

45. The method of claim 44 wherein said facilities include facilities to configure separate public access and private access subnetworks.

46. The method of claim 44 wherein said facilities include an IP address filter.

47. The method of claim 30 including providing said network access server with software to facilitate encrypting and decrypting data sent and received by said mobile terminal over said public network.

48. The method of claim 30 including providing said network access server with facilities for dynamically providing network configuration data to said terminals.

49. The method of claim 30 including providing said network access server with facilities to route data communicated to and from said mobile terminal over said public network.

50. The method of claim 30 including providing said network access server with software for controlling bandwidth useage by said terminals.

51. The method of claim 30 including providing said network access server with software to monitor and record network useage by said terminals.

52. The method of claim 33 including providing said network access server with software to provide mobile IP support for said wireless, mobile terminals,.

53. The method of claim 30 including providing said network access server with a database for maintaining selected information concerning registered terminals.

54. The method of claim 30 including providing said network access server with facilities for providing telephony services to said terminals.

55. The method of claim 30 including providing an integration operator network adapted to communicate with said network access server over said public network, said integration operator network comprising facilities to manage public network access by said mobile terminal through said network access server.

56. The method of claim 55 including providing said integration operator network with a central database for maintaining selected information about said network access servers and said registered terminals, and selected network access and useage policies.

57. The method of claim 55 wherein said selected information about said network access servers includes at least one of provider identification, network configuration information, data encryption information, network useage policy information, and provider accounting information.

58. The method of claim 55 wherein said selected information about said registered terminals includes at least one of authorized user identity, terminal address, terminal security policy, terminal service plan identification, data encryption information, terminal status in network, network useage accounting information.

59. The method of claim 55 wherein said selected network access and useage policies include at least one of public network access policy information, bandwidth useage policy information, and network traffic priority policy information.

60. An apparatus for providing mobile terminals controlled access to a public network using the resources of a private network having a network access point for connecting with said mobile terminals and a public network connection for connecting with said public network, comprising:

a network access server having a network interface for making a network connection with said access point and a network interface for making a network connection with said public network connection;

said network access server being operational to control connection between said mobile terminals and said public network through said private network'"'"'s public network connection without permitting said mobile terminals access to said private network.

61. A distributed system for providing mobile terminals controlled access to a public network using the public network connections of a plurality of private networks, comprising:

a plurality of geographically distributed network access points for establishing network connections with one or more of said mobile terminals;

a plurality of geographically distributed network access servers;

a plurality of first network interfaces, each first network interface for connecting a said network access server with a selected group of said network access points;

a plurality of second network interfaces, each second network interface for connecting a said network access server with a said public network connection of a said private network;

each said network access server being configured to establish and control a network connection between a said mobile terminal having a network connection with a said network access point and said public network through a said public network connection of a said private network without a network connection being established between said terminal and said private network; and

an integration operator network located remotely from at least some of said plurality of network access servers and adapted to communicate with each of said network access servers over said public network, said integration operator network comprising facilities to form said network access servers into a distributed public network access network.