Method and apparatus for switching access between mobile networks

• US 20050013264A1
• Filed: 12/18/2002
• Published: 01/20/2005
• Est. Priority Date: 12/20/2001
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Sundberg, Per-Erik
• Granted Patent: US 7,460,856 B2
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 36/0038 of security context information
• CPC Class Codes: H04W 36/14 Reselecting a network or an air interface
• CPC Class Codes: H04W 36/1446 wherein at least one of the networks is unlicensed

Abstract

A method and apparatus for switching access between mobile networks for a mobile terminal comprising a first and a second radio device capable of communication with a first and a second mobile network, respectively. The second mobile network has priority over the first mobile network. A first connection is authorised and established between the firstradio device and the first mobile network. When it is detected that the mobile terminal moves into a coverage area of the second mobile network, a second connection is authorised and established between the second radio device and the second mobile network based on the authorising made for the first connection with the first mobile network. Both connections can then rely on the authorisation of the first connection.

Claims

1. A method of switching access for a mobile terminal between a first mobile network and a second different mobile network, the mobile terminal comprising a first radio device and a second radio device capable of communication with the first and second mobile networks, respectively, wherein the first and second radio devices are interconnected and the second mobile network has priority over the first mobile network, the method comprising the steps of:

A) making an access request to the first mobile network by the mobile terminal using the first radio device, and

B) authorising and establishing a first connection between the first radio device and the first mobile network, characterised by the following further steps;

C) exchanging authentication information between the first radio device and an authentication unit in the first mobile network, when it is detected that the mobile terminal is present in a coverage area of the second mobile network, and

D) authorising and establishing a second connection between the second radio device and the second mobile network based on the authorising step B) for the first connection with the first mobile network, wherein the authentication information exchanged in step C) is used by the second radio device for accessing the second mobile network.

2. A method according to claim 1, wherein the exchanged authentication information comprises login information according to a predetermined authentication agreement between the first and second mobile networks.

3. A method according to claim 2, wherein the exchanged authentication information further comprises one or more encryption keys according to the predetermined authentication agreement.

4. A method according to claim 3, wherein payload data is communicated between the second radio device and the second mobile network in the connection authorised in step D), wherein the communicated payload data is protected by said one or more exchanged encryption keys.

5. A method according to claim 1, wherein the mobile terminal presence in the coverage area of the second mobile network is detected by the second radio device detecting an identification signal transmitted by the second mobile network.

6. A method according to claim 1, wherein the mobile terminal presence in the coverage area of the second mobile network is detected by the second mobile network detecting an identification signal transmitted by the second radio device.

7. A method according to claim 1, wherein the mobile terminal presence in the coverage area of the second mobile network is detected by a locating function determining that the mobile terminal is located within the coverage area of the second mobile network.

8. A method according to claim 1, wherein the first radio device is a mobile phone, the first mobile network is a GSM/GPRS network, the second radio device is a PCCARD in a laptop computer being connected to the mobile phone, and the second mobile network is a WLAN.

9. A method according to claim 1, wherein the first mobile network covers a wide geographical area, and the second mobile network covers a limited overlapping spot area.

10. A mobile terminal comprising a first radio device and a second radio device which are capable of communication with a first mobile network and a second different mobile network, respectively, wherein the first and second radio devices are interconnected and the second mobile network has priority over the first mobile network, the first radio device comprising:

means for making an access request to the first mobile network, and

means for authorising and establishing a first connection between the first radio device and the first mobile network,

wherein the first radio device further comprises;

means for exchanging authentication information with an authentication unit in the first mobile network, when it is detected that the mobile terminal is present in a coverage area of the second mobile network,

and that the second radio device comprises;

means for authorising and establishing a second connection with the second mobile network by using the authentication information exchanged between the first radio device and the authentication unit in the first mobile network.

11. A mobile terminal according to claim 10, wherein the first radio device further includes means for receiving login information according to a predetermined authentication agreement between the first and second mobile networks.

12. A mobile terminal according to claim 11, wherein the first radio device further includes means for receiving one or more encryption keys according to the predetermined authentication agreement.

13. A mobile terminal according to claim 10, wherein the second radio device further comprises means for detecting an identification signal, transmitted by the second mobile network.

14. A mobile terminal according to claim 10, wherein the first radio device is a mobile phone capable of communication with a GSM/GPRS network, and the second radio device is a PCCARD in a laptop computer capable of communication with a WLAN.

15. An authentication unit for authenticating a mobile terminal comprising a first radio device and a second radio device, capable of communication with a first mobile network and a second different mobile network, respectively, wherein the first and second radio devices are interconnected and the second mobile network has priority over the first mobile network, the authentication unit comprising:

means for authorising and establishing a first connection between the first radio device and the first mobile network in response to an access request from the first radio device,

wherein the authentication unit further comprises;

means for exchanging authentication information with the first radio device, when it is detected that the mobile terminal is present in a coverage area of the second mobile network, wherein the exchanged authentication information can be used by the second radio device for accessing the second mobile network.

16. An authentication unit according to claim 15, characterised by means for transmitting login information to the mobile terminal according to a predetermined authentication agreement between the first and second mobile networks.

17. An authentication unit according to claim 16, characterised by means for transmitting one or more encryption keys to the mobile terminal according to the predetermined authentication agreement.

18. An authentication unit according to claim 15, wherein the authentication unit belongs to the first mobile network.

19. An authentication unit according to claim 18, wherein the authentication unit also belongs to the second mobile network.