Network access management

• US 20040088550A1
• Filed: 11/01/2002
• Published: 05/06/2004
• Est. Priority Date: 11/01/2002
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Maste, Rolf
• Application Number:
  US10/285,685
• Publication Number:
  US 20040088550A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 24/04 Arrangements for maintaining operational condition
• CPC Class Codes: H04W 36/0038 of security context information
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

An access management system for managing access of wireless terminals to a wireless communications network. The access management system comprises an access control unit for permitting use of the network by a wireless terminal; an access element arranged to provide access to the network for the wireless terminal if use is permitted by the access control unit; and a network means configured to receive and store information indicating that the wireless terminal is permitted to use the network. The network means is arranged to, if the access element is unable to provide the wireless terminal with access to the network, use the stored information to determine that the wireless terminal is permitted to use the network and, having so determined, provide an alternative access to the network for the wireless terminal.

Claims

1. An access management system for managing access of wireless terminals to a wireless communications network, the access management system comprising:

an access control unit for permitting use of the network by a wireless terminal;

an access element arranged to provide access to the network for the wireless terminal if use is permitted by the access control unit; and

a network means configured to receive and store information indicating that the wireless terminal is permitted to use the network,

wherein the network means is arranged to, if the access element is unable to provide the wireless terminal with access to the network, use the stored information to determine that the wireless terminal is permitted to use the network and, having so determined, provide an alternative access to the network for the wireless terminal.

2. An access management system according to claim 1, wherein the access control unit uses information identifying the wireless terminal to permit use of the network by the wireless terminal.

3. An access management system according to claim 1, wherein the access element is further arranged to provide the access control unit with information identifying the wireless terminal.

4. An access management system according to claim 1, wherein the access element is further arranged to receive notification from the access control unit that the wireless terminal is permitted to use the network, and, after receiving the said notification, to provide said alternative access to the network for the wireless terminal.

5. An access management system according to claim 1, wherein the network means is further configured to receive and store information identifying the wireless terminal.

6. An access management system according to claim 1, wherein the network means is arranged to additionally perform its other network activity.

7. An access management system according to claim 1, wherein the network means is arranged to provide the said alternative access to the network for the wireless terminal without the access control unit re-permitting use of the network by the wireless terminal.

8. An access management system according to claim 1, wherein the access element is further arranged to receive a request for access to the network from a wireless terminal, the said request including information identifying the wireless terminal.

9. An access management system according to claim 1, wherein the network means is further arranged to determine whether the wireless terminal is in an active connection with the network, and if the wireless terminal is in an active connection with the network, to provide said alternative access to the network for the wireless terminal without disrupting the active connection.

10. An access management system according to claim 1, wherein the network comprises a register of wireless terminals and the access control unit is arranged to access the register to determine if the wireless terminal is registered in order to permit use of the network by the wireless terminal.

11. An access management system according to claim 10, wherein the register is configured to send security data for the wireless terminal to the access control unit.

12. An access management system according to claim 11, wherein the access control unit is arranged to send the security data to the access element.

13. An access management system according to claim 12, wherein the access element is arranged to send the security data to the wireless terminal.

14. An access management system according to claim 11, wherein the access control unit uses the security data to permit use of the network by the wireless terminal.

15. An access management system according to claim 11, wherein the network means is arranged to use the security data to determine that the wireless terminal is permitted to use the network.

16. An access management system according to claim 11, wherein the security data comprises Security Association Data.

17. An access management system according to claim 11, wherein the security data comprises an encryption key.

18. An access management system according to claim 1, wherein the network is a local area network.

19. An access management system according to claim 18, wherein the access element is an access point (AP) to the network.

20. An access management system according to claim 1, wherein the network means is a second access element.

21. An access management system according to claim 1, wherein the network means and the access control unit are a single unit, and the access control unit provides said alternative access to the network for the wireless terminal via a second access element.

22. An access management system according to claim 1, comprising multiple network elements, each configured to receive and store information identifying one or more wireless terminals and information indicating that those wireless terminals are allowed to use the network, and to provide said alternative access to the network for the said one or more wireless terminals if the access element is unable to provide those wireless terminals with access to the network.

23. A method of managing access of wireless terminals to a wireless communications network, the method comprising the steps of deciding whether to permit a wireless terminal to use the network;

if so permitted, providing access to the network for the wireless terminal via an access element;

using a network means to receive and store information indicating that the wireless terminal is permitted to use the network,

wherein the network means is arranged to, if the access element is unable to provide the wireless terminal with access to the network, use the stored information to determine that the wireless terminal is permitted to use the network and, having so determined, provide an alternative access to the network for the wireless terminal.

24. A network element for a wireless communications network which network provides an access to the network for a wireless terminal, the network element comprising:

means configured to receive and store information indicating that a wireless terminal is permitted to use the network,

means arranged to, in the event that the wireless terminal requests an alternative access to the network than its current access, use the stored information to determine that the wireless terminal is permitted to use the network; and

means arranged to, after such determination, provide an alternative access to the network for the wireless terminal.

25. A network element according to claim 24, arranged to use security data to determine that the wireless terminal is permitted to use the network.

26. A network element according to claim 25, arranged to receive the security data from a register of the network.

27. A network element according to claim 25, wherein the security data comprises Security Association Data.

28. A network element according to claim 25, wherein the security data comprises an encryption key.

29. A network element according to claim 28, arranged to calculate an authentication number for the wireless terminal using the encryption key.

30. A network element according to claim 29, arranged to use the encryption key and the authentication number to determine that the wireless terminal is permitted to use the network.

31. A network element according to claim 24, further configured to receive and store information identifying the wireless terminal.

32. A network element according to claim 24, further arranged to perform other network activity.

33. A network element according to claim 24, arranged to provide the said alternative access to the network for the wireless terminal without obtaining permission from any other part of the network for the wireless terminal to access the network.

34. A network element according to claim 24, wherein the network means is further arranged to determine whether the wireless terminal is in an active connection with the network, and if the wireless terminal is in an active connection with the network, to provide said alternative access to the network for the wireless terminal without disrupting the active connection.

35. A network element according to claim 24, which is an access controller.

36. A network element according to claim 24, which is an access point.

37. A register of wireless terminals permitted to access a wireless communications network, the register comprising:

means for receiving a query from a network element as to whether a wireless terminal is registered;

means for, in response to such a query, determining whether the wireless terminal is registered;

means for, if it is determined that the wireless terminal is registered, responding to the query and sending security data for the wireless terminal to the network element.

38. A register according to claim 37, wherein the security data comprises Security Access Data 39. A register according to claim 37, wherein the security data comprises an encryption key.