System for managing the identity of mobile stations roaming between mobile radio networks

• US 20050130654A1
• Filed: 01/28/2003
• Published: 06/16/2005
• Est. Priority Date: 02/06/2002
• Status: Active Grant

• Current Assignee: Mma-Marconi Mobile Access SPA (Marconi Holdings Company Limited), Telecom Italia S.p.A.
• Original Assignee: Mma-Marconi Mobile Access SPA (Marconi Holdings Company Limited), Telecom Italia S.p.A.
• Inventors: Tomaselli, Guglielmo, Eynard, Carlo, Di Claudio, Valerio, Riccobono, Salvatore
• Granted Patent: US 7,031,704 B2
• Time in Patent Office: Days
• US Class Current: 455/433
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/06 Registration at serving network Location Register, VLR or user mobility server
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data
• CPC Class Codes: H04W 92/02 Inter-networking arrangements
• CPC Class Codes: H04W 92/14 between access point controllers and backbone network device

Abstract

System for managing the identities of mobile stations roaming between mobile radio networks, operating within a private mobile radio network, constituted by one or more base transceiver stations (BTS; Node B) and by a reference base station controller (BSC; RNC), which realise a normal base station subsystem (BSS; RNS) within the public mobile radio network, characterised in that upon registration of the roaming mobile station (MS), authorised to access the private mobile radio network, the system (VIM) simulates, from the base station subsystem (BSS; RNS) towards the mobile switching centre (MSC) of the competent network switching subsystem (NSS), the behaviour of the mobile station, whereto it has associated the identity profile selected from a group of identity profiles held by the operator of the visited network, and in wholly similar form, from the mobile switching centre (MSC) towards the base station subsystem (BSS), the system (VIM) simulates the behaviour of the competent network switching subsystem (NSS) during the salient steps of the registration of the roaming mobile station, in such a way as to assure the correct execution of the procedure itself.

Claims

1. System for managing the identities of mobile stations roaming between mobile radio networks, operating within a private mobile radio network, constituted by one or more base transceiver stations (BTS;

Node B) and by a reference base station controller (BSC;

RNC), which realise a normal base station subsystem (BSS;

RNS) within the public mobile radio network, characterised in that upon registration of the roaming mobile station (MS), authorised to access the private mobile radio network, the system (VIM) simulates, from the base station subsystem (BSS;

RNS) towards the mobile switching centre (MSC) of the competent network switching subsystem (NSS), the behaviour of the mobile station, whereto it has associated the identity profile selected from a group of identity profiles held by the operator of the visited network, and in wholly similar form, from the mobile switching centre (MSC) towards the base station subsystem (BSS), the system (VIM) simulates the behaviour of the competent network switching subsystem (NSS) during the salient steps of the registration of the roaming mobile station, in such a way as to assure the correct execution of the registration procedure itself.

2. System as claimed in claim 1, characterised in that, when the mobile station of the user enters into the coverage of said private mobile radio network and is forced to present itself with its own identifier (IMSI), it verifies whether the user is enabled to replace the identity profile, and, if so, it records said identifier (IMSI) and the mobile terminal code (IMEI) in its interior, associating to the ordered set of data, which define the identity profile of the card of origin present in the mobile station (MS), a second set of data, formally similar to the first and representing the identity profile of the card issued by the visited network operator adopting one of the mobile terminal codes (IMEI) It has available, in replacement of the code of origin of the mobile terminal.

3. System as claimed in claim 2, characterised in that said replacement is made operating on the message carried within the common channel signalling stream between the mobile switching centre (MSC) and the base radio station controller (BSC;

RNC) located at the visited company, and in particular extracting each of the time slots on the physical layer to identify and filter a component (DTAP;

RANAP), containing the user'"'"'s identifying parameters, in order subsequently to read, analyse and modify mobility management contents and call control management contents associated to the new identity profile, then reassembling, once the processing operations are complete, the messages with said processed component (DTAP;

RANAP).

4. System as claimed in claim 3, characterised in that, after the identity profile replacement is complete, it informs the user of its new identity, adopted for the exchange of signalling information with the public mobile radio network, through the transmission of a message which also contains additional parameters, such as the new mobile station ISDN number (MSISDN).

5. System as claimed in claim 1, characterised in that it acquires all time slots coming from the controller (BSC;

RNC) carrying signalling data by means of a first withdrawal element (MSN), which extracts therefrom the content relating to said component (DTAP;

RANAP) of the message, whilst it passes the content not relating to said component (DTAP;

RANAP) to a second injection element (MI), which, once the processing is complete, reassembles the original contents and those processed in the signalling time slots and reinserts the result into the stream directed towards the mobile switching centre (MSC).

6. System as claimed in claim 1, characterised in that it delivers the content relating to said component (DTAP;

RANAP) of the message to a third element (MMSH), where it is processed in the part relating to mobility management, performing the following operations;

it uniquely identifies the message carried by the signalling time slot;

it reads the corresponding signalling data, representative of the identity profile of the SIM card of origin of the roamer user, in the part pertaining to the mobility management protocol layer;

it acquires from a database (DB), internal to the system (VIM), a set of data representative of the profile of the mobile station;

it acquires from a reader (SCR) the identity profile of the card made available by the operator of the visited country;

it exchanges in orderly fashion the identity profile of the card of the mobile station, contained in the signalling message, with the new identity profile of the card read by the reader (SCR)

it analyses whether the message carried by the signalling time slot contains data whose processing is the competence of the call management layer of the component (DTAP;

RANAP) itself.

7. System as claimed in claim 6, characterised in that if the aforesaid analysis yields a positive response, the message is sent to another element (CMSH), which processes the information carried by the signalling message at the upper call management layer of the protocol stack relating to said component (DTAP;

RANAP), performing;

the exchange of call management data relating to the identity profile of the card of the mobile station with the data representative of the identity profile of the card issued by the operator, necessary to assure the completion of call management procedures;

the transmission of the message containing said component (DTAP;

RANAP) thus processed to the second injection element (MI), which inserts it into the appropriate signalling streams.

8. System as claimed in claim 1, characterised in that it comprises the following physical modules:

a system controller (SC), which provides for the management of all buses, interfaces and signalling and voice processing cards, providing all processing resources not subject to the real time constraint necessary for the execution of the telephone application, and it is provided with a serial port (PS), used to exchange data with said reader (SCR) and with an Ethernet port (IA″

), used to share Operation &

Maintenance information and the information contained in a storage subsystem (DB);

said storage subsystem (DB) comprising one or more storage supports of the Hard Disk (HD) and CD ROM (CD) type, containing all the mass memories of the system, both those necessary to the operating system and to the applications, and those necessary to the database of the users who are employees of the company, and accessible to the system controller (SC) through a bus (CM);

said card reader (SCR), which houses at least a card of the operator of the visited network;

a signalling processor and IP Gateway (SP), which analyses, filters, masks and generates signalling messages on common channel no. 7 (CCSS no. 7;

BB CCSS no.

     7), both relating to an interface A (IF′

, IF″

), that connects the mobile switching centre (MSC) with the base radio station controller (BSC;

RNC) of the base station subsystem (BSS;

RNS) located at the visited company, and relating to the interface (PRI) used to transfer the primary ISDN access streams from and to a private switchboard (PBX), using a first data transfer port (IE), and which exchanges data towards an Ethernet network using a second port (IA), also operating as Gateway for the transport of the signalling from the circuit switched network to the Internet, the time slots carrying the aforesaid signalling messages being extracted or inserted directly through a bus (TDM);

a gateway (GF) which processes the voice information transferred between the circuit switched and packet switched networks, using appropriate audio transcoders, and is provided with a third data transfer port (IE′

) through which transit the voice and signalling (CCSS no. 7;

BB CCSS no.

     7) streams from and towards the switching centre (MSC), with a fourth port (IE″

) through which the voice and signalling (PRI ISDN) streams are exchanged with the switch (PBX) and with a fifth port (IA′

) used to transfer the Ethernet streams, a second system bus (PCI) interconnecting both the signalling processor and IP Gateway (SP) and the gateway (GF) to the system controller (SC);

an Ethernet switch (ES), which combines together the voice streams (C3), the signalling streams (C4) and the information (C7) coming from the system controller (SC);

a routing apparatus (IR), which joins the local area network (LAN) of the visited company with the Internet Protocol transport network (WAN) connected to the connection (C6), through an appropriate IP network interface, enabled to transmit voice and signalling (CCSS no.7;

BB CCSS no.

     7).

9. System as claimed in claim 8, characterised in that upon the activation of the registration procedure, said system controller (SC) verifies the presence of said identifier (IMSI) and of said code (IMEI), present respectively in the card of origin and in the mobile terminal in the storage subsystem (DB) and, if the result of the verification is positive, it requests the reader (SCR) to read a new identity profile present in the card belonging to the operator of the visited network, obtaining the related identifier (IMSI) through a first serial port (PS) and a new identifier (IMEI), enabled by the operator of the visited network, provided by the storage subsystem (DB).

10. System as claimed in claim 8, characterised in that every time a voice and signalling stream arrives from the base station subsystem (BSS;

NSS) to a second port (IE′

) of said gateway (GF), it is transferred by means of said bus (TDM) to the signalling processor and IP Gateway (SP), which extracts the signalling informations (CCSS no. 7;

BB CCSS no.

     7) and performs the following operations;

processing the “

Mobility Management” and

“

Call Control Management”

parts of the component (DTAP;

RANAP), to replace the identity profile of the card present in the mobile station (MS) with the identity profile of the card read by the reader (SCR);

at the end of the aforesaid processing, reassembling in the signalling time slot the contents not relating to said component (DTAP) and the “

Mobility Management” and

“

Call Control Management”

contents, relating to the component (DTAP;

RANAP);

subjected to processing;

once the call is set up, inserting by means of the bus (TDM the signalling informations into the corresponding voice stream transiting on a connection (C1) towards the mobile switching centre (MSC).

11. System as claimed in claim 1, characterised in that, to complete the procedure for authenticating the mobile station with the visited mobile radio network, the calculation of the response parameter (SRES) is conducted using the reader (SCR), which provides for:

reading a key (Ki) present in the card housed therein;

reading a number (RAND) transmitted on the signalling channel (CCSS no. 7;

BB CCSS no.

     7) on the connection (C1) by the mobile radio network of the operator of the visited country, intercepted by the signalling processor and IP Gateway (SP) on the bus (TDM) and delivered by means of the second system bus (PCI) to the system controller (SC), which forwards it through said serial port (PS) to the card present in the reader;

reading the parameter (SRES), obtained as a result of the authentication operation performed inside the card, present in the reader;

communicating the parameter (SRES) thus obtained to the system controller (SC) through the serial port (PS), which provides for transmitting it on the second bus (PCI) to the signalling processor and IP Gateway (SP), which in turn inserts, by means of the bus (TDM), the signalling time slot bearing the parameter (SRES) into the corresponding signalling stream (CCSS no. 7;

BB CCSS no.

     7) transiting on the connection (C1) towards the mobile switching centre (MSC).

12. System as claimed in claim 1, characterised in that in all cases in which the mobile radio switching network of the visited nation requests the base station controller (BSC;

RNC) of the base station subsystem (BSS;

NSS) of the mobile radio access network to enable the encryption operation by transmitting appropriate signalling messages (BSSAP;

RANAP), the system (VIM) captures these messages, processes them in such a way as always to disable the encryption operation and forwards the messages thus processed both to the base transceiver station (BTS;

Node B) of the corresponding controller (BSC;

RNC), and to the mobile station (MS) connected thereto.

13. System as claimed in claim 1, characterised in that it is connected through said IP network interfaces to other systems (VIM) which, mutually interconnected, form an international network and allow to activate a second registration procedure with the system (VIM) of the private mobile radio network of origin, in order to locate the mobile station situated within the visited private mobile radio coverage of another nation, after replacing the identity profile of the original card with the identity profile of the card owned by the operator of the visited network, the system (VIM) of the visited private mobile radio network being the reference system to assure the correct sequence of the registration procedure.

14. System as claimed in claim 13, characterised in that for the activation of said second registration procedure it uses the authentication parameters of the original card, transmitted through said IP network interface.

15. System as claimed claim 1, characterised in that said mobile and base transceiver stations and said mobile radio networks operate according to the GSM standard.

16. System as claimed claim 1, characterised in that said cards are SIM cards.

17. System as claimed in claim 1, characterised in that said mobile and base transceiver stations and said mobile radio networks operate according to the UMTS standard.

18. System as claimed claim 17, characterised in that said cards are USIM cards.

19. System as claimed in claim 1, characterised in that said roaming occurs internationally.