Method and system for re-authentication in IP multimedia core network system (IMS)

• US 20030186681A1
• Filed: 12/02/2002
• Published: 10/02/2003
• Est. Priority Date: 03/28/2002
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Nokia Corporation
• Inventors: Gabor, Bajko
• Granted Patent: US 6,859,651 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/61 Time-dependent

Abstract

A method and system for authentication of a mobile device that includes a mobile device and a network element in a communications network. The network element may be a call state control function. If the network element detects an incorrect event related to a mobile device, the network element shortens a registration validity time for the mobile device and sends the mobile device a notification to re-authenticate. The incorrect event can be, for example, an incorrect authentication response, an incorrect action by the mobile device, a session over a time maximum, traffic generated being over a maximum, or credit run out. The mobile device is de-registered if the mobile device fails to re-authenticate within the shortened registration validity time, and re-registered if the mobile device re-authenticates within the shortened registration validity time. The registration validity time for the mobile device is extended after re-registration.

Claims

1. A method for authentication of a mobile device in a communications network comprising:

detecting an incorrect event at a network element on the network, the incorrect event being related to a mobile device;

shortening a registration validity time for the mobile device; and

sending the mobile device a notification to re-authenticate.

2. The method according to claim 1, further comprising de-registering the mobile device if the mobile device fails to re-authenticate within the shortened registration validity time.

3. The method according to claim 1, wherein the notification contains information indicating that the mobile device has to perform re-authentication in order to remain registered.

4. The method according to claim 1, wherein the notification is a NOTIFY request according to a Session Initiation Protocol (SIP) protocol.

5. The method according to claim 1, wherein the communications network is an IP Multimedia Network (IMN).

6. The method according to claim 1, further comprising registering the mobile device if the mobile device re-authenticates within the shortened registration validity time.

7. The method according to claim 6, further comprising extending the shortened registration validity time either back to an original or to a new registration validity time if the mobile device re-authenticates within the shortened registration validity time.

8. The method according to claim 1, wherein the network element comprises a call state control function.

9. The method according to claim 8, wherein the network element comprises a serving call state control function (S-CSCF).

10. The method according to claim 1, wherein the incorrect event comprises an incorrect authentication response.

11. The method according to claim 10, wherein the incorrect authentication response comprises an incorrect RES value.

12. The method according to claim 1, wherein the incorrect event comprises an incorrect action by the mobile device.

13. The method according to claim 1, wherein the incorrect event comprises a session over a time maximum.

14. The method according to claim 1, wherein the incorrect event comprises traffic generated being over a maximum.

15. The method according to claim 1, wherein the incorrect event comprises credit run out.

16. The method according to claim 1, wherein the mobile device comprises one of a mobile phone and a Personal Digital Assistant (PDA).

17. A network element in a communications network, the network element performing an authentication process comprising:

detecting an incorrect event at the network element, the incorrect event being related to a mobile device;

shortening a registration validity time for the mobile device; and

sending the mobile device a notification to re-authenticate.

18. The network element according to claim 17, the authentication process further comprising de-registering the mobile device if the mobile device fails to re-authenticate within the shortened registration validity time.

19. The network element according to claim 17, wherein the notification contains information indicating that the mobile device has to perform re-authentication in order to remain registered.

20. The network element according to claim 17, wherein the notification is a NOTIFY request according to a Session Initiation Protocol (SIP) protocol.

21. The network element according to claim 17, wherein the communications network is an IP Multimedia Network (IMN).

22. The network element according to claim 17, the authentication process further comprising registering the mobile device if the mobile device re-authenticates within the shortened registration validity time.

23. The network element according to claim 22, the authentication process further comprising extending the shortened registration validity time either back to an original or to a new registration validity time if the mobile device re-authenticates within the shortened registration validity time.

24. The network element according to claim 17, wherein the network element comprises a call state control function.

25. The network element according to claim 24, wherein the network element comprises a serving call state control function (S-CSCF).

26. The network element according to claim 17, wherein the incorrect event comprises an incorrect authentication response.

27. The network element according to claim 26, wherein the incorrect authentication response comprises an incorrect RES value.

28. The network element according to claim 17, wherein the incorrect event comprises an incorrect action by the mobile device.

29. The network element according to claim 17, wherein the incorrect event comprises a session over a time maximum.

30. The network element according to claim 17, wherein the incorrect event comprises traffic generated being over a maximum.

31. The network element according to claim 17, wherein the incorrect event comprises credit run out.

32. The network element according to claim 17, wherein the mobile device comprises one of a mobile phone and a Personal Digital Assistant (PDA).

33. A mobile device in a communications network, the mobile device performing an authentication process comprising:

receiving a notification to re-authenticate from a network element on the network; and

re-authenticating with the network element within a shortened registration validity time.

34. The mobile device according to claim 33, wherein the notification contains information indicating that the mobile device has to perform re-authentication in order to remain registered.

35. The mobile device according to claim 33, wherein the notification is a NOTIFY request according to a Session Initiation Protocol (SIP) protocol.

36. The mobile device according to claim 33, wherein the communications network is an IP Multimedia Network (IMN).

37. The mobile device according to claim 33, wherein the network element comprises a call state control function.

38. The mobile device according to claim 37, wherein the network element comprises a serving call state control function (S-CSCF).

39. The mobile device according to claim 33, wherein the mobile device comprises one of a mobile phone and a Personal Digital Assistant (PDA).

40. A system for authentication of a mobile device comprising:

at least one mobile device, the at least one mobile device operatively connected to a communications network;

a network element, the network element operatively connected to the communications network, the network element;

detecting an incorrect event related to a mobile device, shortening a registration validity time for the mobile device after receiving the response, and sending the mobile device a notification to re-authenticate.

41. The system according to claim 40, the network element de-registering the mobile device if the mobile device fails to re-authenticate within the shortened registration validity time.

42. The system according to claim 40, wherein the notification contains information indicating that the mobile device has to perform re-authentication in order to remain registered.

43. The system according to claim 42, wherein the notification is a NOTIFY request according to a Session Initiation Protocol (SIP) protocol.

44. The system according to claim 40, wherein the communications network is an IP Multimedia Network (IMN).

45. The system according to claim 40, the network element registering the mobile device if the mobile device re-authenticates within the shortened registration validity time.

46. A system according to claim 45, the network element extending the shortened registration validity time either back to an original or to a new registration validity time if the mobile device re-authenticates within the shortened registration validity time.

47. The system according to claim 40, wherein the network element comprises a call state control function.

48. The system according to claim 47, wherein the network element comprises a serving call state control function (S-CSCF).

49. The system according to claim 40, wherein the incorrect event comprises an incorrect authentication response.

50. The system according to claim 49, wherein the incorrect authentication response comprises an incorrect RES value.

51. The system according to claim 40, wherein the incorrect event comprises an incorrect action by the mobile device.

52. The system according to claim 40, wherein the incorrect event comprises a session over a time maximum.

53. The system according to claim 40, wherein the incorrect event comprises traffic generated being over a maximum.

54. The system according to claim 40, wherein the incorrect event comprises credit run out.

55. The system according to claim 40, wherein the mobile device comprises one of a mobile phone and a Personal Digital Assistant (PDA).