Method and control member for controlling access to a radio communication cellular system through a wireless local netwrok

• US 20050233729A1
• Filed: 06/26/2003
• Published: 10/20/2005
• Est. Priority Date: 07/05/2002
• Status: Abandoned Application

• Current Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Stojanovski, Saso, Fauconnier, Denis, Steer, David
• Application Number:
  US10/519,976
• Publication Number:
  US 20050233729A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

The cellular system has a radio access network comprising base stations and a controller to which a wireless local area network is linked. A terminal is authenticated with the cellular system through the radio access network, and in response an authentication token allocated thereto. The allocated token is transmitted from the controller to the terminal through the radio access network. The allocated token and an identifier of the terminal are further transmitted from the controller to an authentication server accessible through said wireless network. The terminal is authenticated with the wireless network by verifying that the terminal possesses the token transmitted to said authentication server.

Claims

1. A method for controlling access to at least one cellular radio communication system through a wireless local area network, the cellular system having a radio access network comprising base stations and a controller to which said wireless network is linked, the method comprising the steps of:

authenticating a terminal with the cellular system through the radio access network;

allocating an authentication token to said terminal;

transmitting the allocated token from the controller to the terminal through the radio access network;

transmitting the allocated token and an identifier of the terminal from the controller to an authentication server accessible through said wireless network; and

authenticating the terminal with the wireless network by verifying that the terminal possesses the token transmitted to said authentication server.

2. The method as claimed in claim 1, wherein the allocation of the authentication token is performed by the controller.

3. The method as claimed in claim 2, wherein terminals adapted to the cellular system each transmit a respective list of features to the controller, and wherein the allocation of an authentication token to a terminal authenticated with the cellular system is performed on condition that the list transmitted by said terminal indicates a capability to access the wireless network.

4. The method as claimed in claim 1, wherein the authentication token is allocated temporarily to the terminal.

5. The method as claimed in claim 1, wherein the authentication token is transmitted to the terminal with identification information pertaining to the wireless local area network.

6. The method as claimed in claim 5, wherein the wireless local area network to which said identification information pertains is selected on the basis of a locating of the terminal in the radio access network.

7. The method as claimed in claim 1, wherein the wireless network is linked to the controller through an IP network.

8. The method as claimed in claim 7, wherein the authentication token is transmitted to the terminal with addressing information in said IP network.

9. The method as claimed in claim 8, wherein said addressing information comprises an IP subnetwork broadcasting address employed by the controller to broadcast system information through the wireless local area network.

10. The method as claimed in claim 8, wherein the authentication server is a server of said IP network, and wherein said addressing information comprises an IP address of the authentication server.

11. The method as claimed in claim 8, wherein said addressing information comprises an IP address of the controller.

12. A controller for a radio access network of a cellular radio communication system, comprising:

means for interfacing with at least one base station of the cellular system;

means for interfacing with a wireless local area network;

means for allocating an authentication token to a terminal authenticated with the cellular system through the radio access network;

means for transmitting the allocated token to the terminal through the radio access network; and

means for transmitting the allocated token and an identifier of the terminal to an authentication server accessible through said wireless network, so that the terminal is authenticated with the wireless network by verification that the terminal possesses the token transmitted to said authentication server.

13. The controller as claimed in claim 12, comprising means for receiving a respective list of features of a terminal adapted to the cellular system, and wherein the means for allocating an authentication token to a terminal authenticated with the cellular system are activated on condition that the list transmitted by said terminal indicates a capability to access the wireless network.

14. The controller as claimed in claim 12, wherein the authentication token is allocated temporarily to the terminal.

15. The controller as claimed in claim 12, wherein the authentication en is transmitted to the terminal with identification information pertaining to the wireless local area network.

16. The controller as claimed in claim 15, wherein the wireless local area network to which said identification information pertains is selected on the basis of a locating of the terminal in the radio access network.

17. The controller as claimed in claim 12, wherein the means for interfacing with the wireless local area network comprise an IP interface.

18. The controller as claimed in claim 17, wherein the authentication token is transmitted to the terminal with IP addressing information.

19. The controller as claimed in claim 18, wherein said addressing information comprises an IP subnetwork prefix employed to broadcast system information through the wireless local area network.

20. The controller as claimed in claim 18, wherein said addressing information comprises an IP address of the authentication server.

21. The controller as claimed in claim 18, wherein said addressing information comprises an IP address of the controller.