Method and associated apparatus for pre-authentication, preestablished virtual private network in heterogeneous access networks

• US 20040192309A1
• Filed: 04/11/2002
• Published: 09/30/2004
• Est. Priority Date: 04/11/2002
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: DOCOMO Communications Laboratories USA, Inc.
• Inventors: Watanabe, Fujio, Kurakake, Shoji, Cao, Jingjun, Shoaib, Shahid
• Granted Patent: US 7,072,657 B2
• Time in Patent Office: Days
• US Class Current: 455/439
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 36/0038 of security context information
• CPC Class Codes: H04W 36/14 Reselecting a network or an air interface

Abstract

A method of coordinating the handoff of a mobile carrier between a first access network and a second access network. The method including establishing a contract between a user of a mobile carrier and a hyper operator and attempting a hand off from a first access network that the mobile carrier is currently operating within to a second access network, wherein the attempting includes authenticating at the hyper operator only that the user may have access to the second access network via the contract. Handing off to the second access network if the authenticating is successful.

Claims

1. A method of coordinating the handoff of a mobile carrier between a first access network and a second access network, the method comprising:

establishing a contract between a user of a mobile carrier and a hyper operator;

attempting a hand off from a first access network that said mobile carrier is currently operating within to a second access network, wherein said attempting comprises authenticating at said hyper operator only that said user may have access to said second access network via said contract; and

handing off to said second access network if said authenticating is successful.

2. The method of claim 1, wherein said mobile carrier comprises a cell phone.

3. The method of claim 1, wherein said mobile carrier comprises a lap top computer.

4. The method of claim 1, further comprising coordinating said handing off based on charges to be assumed by said user upon said handing off being successful.

5. The method of claim 1, wherein said handing off is possible even if said user does not have a contractual relationship with said first access network and/or said second access network.

6. The method of claim 1, wherein a virtual private network is established between said first access network and a node prior to said attempting and handing off.

7. The method of claim 6, wherein said handing off comprises establishing a second virtual private network from said second access network to said node.

8. The method of claim 7, wherein said handing off further comprises establishing a third virtual private network between said node and a home network.

9. The method of claim 8, wherein said home network is an intranet.

10. The method of claim 7, further comprising retaining said virtual private network between said first access network and said node after handing off to said second access network.

11. The method of claim 7, wherein said establishing said second virtual private network comprises establishing a pre-virtual private network between said second access network and said node prior to said attempting.

12. The method of claim 1, wherein said hyper operator is in communication with said first access network and said second access network.

13. The method of claim 11, wherein said hyper operator is in

communication with said first access network and said second access network at a common node.

14. The method of claim 11, wherein said hyper operator is in communication with said first access network at a first node and with said second access network at a second node that is separate from said first node.

15. The method of claim 14, wherein said authenticating comprises transferring authentication information from said first node to said second node.

16. The method of claim 8, wherein said authenticating comprises generating a key that is shared between said home network and said first access network, said key is specific to said user and said second virtual private network.

17. A handoff system for coordinating the handoff of a mobile carrier between a first access network and a second access network, said handoff system comprising:

a first access network in communication with a mobile carrier of a user;

a second access network;

a hyper operator in communication with said first access network, wherein said hyper operator hands off communication between said mobile carrier and said first access network so that said mobile carrier is in communication with said second access network, wherein said hyper operator authenticates only that said user may have access to said second access network based on a contract between said user and said hyper operator.

18. The handoff system of claim 17, wherein said mobile carrier comprises a cell phone.

19. The handoff system of claim 17, wherein said mobile carrier comprises a lap top computer.

20. The handoff system of claim 17, further comprising a virtual private network between said first access network and said hyper operator.

21. The handoff system of claim 20, wherein said hyper operator establishes a second virtual private network from said second access network to said hyper operator upon successful authentication of said user by said hyper operator.

22. The handoff system of claim 21, wherein said hyper operator establishes a third virtual private network between said hyper operator and a home network.

23. The handoff system of claim 22, wherein said home network is an intranet.

24. The handoff system of claim 17, wherein said hyper operator comprises a hyper operator distributed center in communication with said first access network and said second access network, said hyper operator distributed center enables a user of said mobile carrier to have access to either said first access network or said second access network without a service agreement between said user and said first access network or said second access network.

25. The handoff system of claim 24, further comprising a virtual private network between said first access network and said hyper operator distributed center.

26. The handoff system of claim 25, wherein said hyper operator distributed center establishes a second virtual private network from said second access network to said hyper operator distributed center upon successful authentication of said user by said hyper operator.

27. The handoff system of claim 26, wherein said hyper operator distributed center establishes a third virtual private network between said hyper operator and a home network.

28. The handoff system of claim 27, wherein said home network is an intranet.

29. The handoff system of claim 17, wherein said hyper operator is in communication with said second access network.

30. The handoff system of claim 29, wherein said hyper operator is in communication with said first access network and said second access network at a common node.

31. The handoff system of claim 29, wherein said hyper operator is in communication with said first access network at a first node and with said second access network at a second node that is separate from said first node.

32. The handoff system of claim 31, wherein said hyper operator comprises:

a first hyper operator distributed center at said first node; and

a second hyper operator distributed center at said second node, wherein said second hyper operator distributed center is in communication with said first hyper operator distributed center so as to receive authentication information therefrom.

33. The handoff system of claim 31, wherein said communication between said hyper operator and said first access network comprises a single connection therebetween.

34. The handoff system of claim 31, wherein said communication between said hyper operator and said first access network comprises multiple connections therebetween.