Authentication of mobile devices via proxy device

• US 20040219905A1
• Filed: 04/30/2004
• Published: 11/04/2004
• Est. Priority Date: 05/02/2003
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Steven Blumenthal
• Inventors: Ibe, Oliver C., Blumenthal, Steven
• Granted Patent: US 7,203,482 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 80/045 involving different protocol versions, e.g. MIPv4 and MIPv6
• CPC Class Codes: H04W 84/04 Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A mechanism to permit the cryptographic authentication of a mobile device in the cellular carrier'"'"'s network when the device is present in the 802.11 network, wireless LAN, served by a Cellular Controller and not connected directly to the cellular carrier'"'"'s network via a radio link is disclosed. The Cellular Controller acts as a proxy for the mobile device when the device is in a building served by an 802.11 wireless LAN. The solutions features the separation of a mobile device'"'"'s radio function from its ANSI-41 authentication mechanism to permit the proxy function to work and to not have to duplicate the ANSI-41 authentication data and CAVE algorithm.

Claims

1. A method comprising:

emulating a mobile terminal, or a group of mobile terminals on a wide area wireless network using a fixed radio terminal; and

establishing a communication path passing from the wide area wireless network through the fixed radio terminal over a local network to the mobile terminal or group of mobile terminals.

2. The method of claim 1 wherein the step of emulating the mobile terminal includes passing authentication data between the wide area wireless network and the mobile terminal over the local network.

3. The method of claim 1 further comprising hosting functions of an ANSI-41 authentication mechanism at the mobile terminal.

4. The method of claim 1 further comprising hosting functions of a GSM authentication mechanism at the mobile terminal.

5. The method of claim 1 further comprising passing voice or data communication between the mobile terminal and the wide area wireless network over the established communication path.

6. The method of claim 1 further comprising hosting voice or data encryption functions at the mobile terminal for processing the voice communication.

7. The method of claim 6 wherein the step of hosting the voice or data encryption functions at the mobile terminal includes hosting a CAVE algorithm.

8. The method of claim 6 wherein step of hosting the voice or data encryption functions at the mobile terminal includes hosting a GSM algorithm.