Packet filtering for level of service access in a packet data network communication system

• US 20040190522A1
• Filed: 03/31/2003
• Published: 09/30/2004
• Est. Priority Date: 03/31/2003
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Pecen, Mark E., Aerrabotu, Naveen, Zhao, Yilin
• Granted Patent: US 7,539,186 B2
• Time in Patent Office: Days
• US Class Current: 370/395.3
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 76/50 for emergency connections
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/00 Wireless network protocols or protocol adaptations to wireless operation

Abstract

A method and apparatus method of filtering packet data for an anonymous user device in a packet data network communication system includes a first step of initiating a call from an anonymous user device on a home network. A next step includes assigning an interim identity and interim IP address to the user device. A next step includes determining a level of service access of the data packets from the user device. A next step includes mapping the level of service access of the user device to the IP address. A next step includes defining permissible routing identities per the level of service access. A next step includes routing the data packets of the call along with the associated IP address to only those location addresses from the defining step.

Claims

1. A method of filtering packet data for an anonymous user device in a packet data network communication system, the method comprising the steps of:

initiating a call from an anonymous user device on a home network;

determining a level of service access of the data packets from the user device;

assigning an interim identity and interim IP address to the user device;

mapping the level of service access of the user device to the IP address;

defining permissible routing identities per the level of service access; and

routing the data packets of the call along with the associated IP address to only those location addresses from the defining step.

2. The method of claim 1, wherein the initiating step includes an emergency call from the anonymous user device, the determining step includes determining an emergency level of service access for the user device, and the defining step permits emergency call centers as the only routing identities.

3. The method of claim 1, further comprising the step of restricting access to data packets addressed to the assigned interim IP address of the anonymous user device that are not from a defined routing identity.

4. The method of claim 3, further comprising the step of redirecting the restricted data packets of the restricting step for reviewing by a third party.

5. The method of claim 1, further comprising the steps of blocking access to data packets addressed to the assigned interim IP address of the user device that are not from a defined routing identity, and redirecting the blocked data packets for reviewing by a third party.

6. The method of claim 1, wherein the list of interim IP addresses for assigning to anonymous user devices in the assigning step is controlled by an emergency packet data network associated with each packet data network.

7. The method of claim 1, further comprising the steps of blocking data packets from the user device that do not have the proper level of service access.

8. A method of filtering packet data for an anonymous user device in a packet data network communication system, the method comprising the steps of:

initiating an emergency call from the user device having a missing identity on a home network;

detecting a missing valid identity of the user device;

assigning an interim identity and interim IP address to the user device;

mapping an emergency service access of the user device to the IP address;

routing the call data packets along with the associated interim IP address to an known IP address of an emergency calling center; and

restricting access to data packets addressed to the assigned interim IP address of the anonymous user device that are not from the known IP address of the emergency calling center.

9. The method of claim 8, further comprising the step of redirecting the restricted data packets of the restricting step for reviewing by a third party.

10. The method of claim 8, further comprising the steps of blocking access to data packets addressed to the assigned interim IP address of the user device that are not from the known IP address of the emergency calling center, and redirecting the blocked data packets for reviewing by a third party.

11. The method of claim 8, further comprising the steps of blocking data packets from the user device that do not have the proper level of service access.

12. The method of claim 8, further comprising a step of providing a packet filter that is separate from a Gateway GPRS Service Node (GGSN) of the packet data network.

13. A communication system to filter packet data for an anonymous user device in a packet data network, the communication system comprising:

a user device capable of anonymously accessing a home packet data network in the absence of an identity, the user device capable of generating an equipment identity;

a home packet data network operable to provide communications between the anonymous user device with an assigned IP address and an emergency calling center with a known IP address, the packet data network operable to detect a missing identity of the user device;

an emergency packet data network coupled to the home packet data network, wherein upon notification from the packet data network that a user device has no valid identity, the emergency packet data network is operable to assign and map an interim IP address corresponding to the user device and route the call packets with the associated interim IP address to the emergency calling center; and

a packet filter coupled with the packet data network and the emergency packet data network, the packet filter operable to pass only those data packets between the user device and emergency call center that are authorized as emergency communications.

14. The system of claim 13, wherein the packet filter can redirect unauthorized data packets for review by a third party.

15. The system of claim 13, wherein the packet filter can block access to data packets addressed to the assigned interim IP address of the user device that are not from the known IP address of the emergency calling center, and redirect the blocked data packets for review by a third party.

16. The system of claim 13, wherein the packet filter can block unauthorized data packets from the user device.

17. The system of claim 13, wherein the packet filter is separate from a Gateway GPRS Service Node (GGSN) of the packet data network.

18. The system of claim 13, wherein the emergency packet data network is contained within a Gateway GPRS Service Node (GGSN) of their associated packet data network.