Method and system for providing access via a first network to a service of a second network

• US 20050272465A1
• Filed: 10/01/2002
• Published: 12/08/2005
• Est. Priority Date: 10/01/2002
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Haverinen, Henry, Ahmavaara, Kalle
• Granted Patent: US 8,233,934 B2
• Time in Patent Office: Days
• US Class Current: 455/552.100
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04M 2207/20 hybrid systems
• CPC Class Codes: H04M 7/121 Details of network access arrangements or protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 8/265 for initial activation of new user
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

The present invention relates to a method and system for providing access from a first network (30) to a service of a second network, wherein an authentication signaling is used to transfer a service selection information to the second network (70). Based on the service selection information, a connection can be established to access the desired service. Thereby, cellular packet-switched services can be accessed over networks which do not provide a context activation procedure or corresponding control plane signaling function.

Claims

1. A method of providing access via a first network to a service facilitated by a second network, said method comprising the steps of:

a) using an authentication message to signal a service selection information via said first network to an authentication server means of said second network; and

b) using said service selection information to connect to services provided over an access point indicated by said service selection information.

2. A method according to claim 1, wherein said first network is a wireless local area network.

3. A method according to claim 1, wherein said second network is a cellular packet-switched network.

4. A method according to claim 3, wherein said cellular packet-switched network is a GPRS network.

5. A method according to claim 1, wherein said authentication message is an EAP message.

6. A method according to claim 5, wherein said EAP message is an EAP SIM or EAP AKA message.

7. A method according to claim 5, wherein said authentication message is an EAP Challenge Response message.

8. A method according to claim 1, wherein said service selection information comprises at least one APN parameter.

9. A method according to claim 8, wherein said at least one APN parameter comprises an APN, a username and a password.

10. A method according to claim 7, wherein said APN parameter is encrypted in said authentication message.

11. A method according to claim 9, wherein at least one of said APN parameters is encrypted so that it can only be decrypted at the network defined by the APN.

30. A computer program product embodied on a computer readable medium comprising code means configured to produce the steps of claim 1 when run on a computer device.

31. A processor device configured to produce the steps of claim 1.

12. An authentication server device for providing an authentication mechanism, said authentication server being configured:

a) to extract from a received authentication message a service selection information for selecting a service; and

b) to use said service selection information for establishing a connection to services provided over an access point indicated by said service selection information.

13. An authentication server according to claim 12, wherein said authentication mechanism is based on an EAP protocol.

14. An authentication server according to claim 13, wherein said received authentication message is an EAP Challenge Response message.

15. An authentication server according to claim 12, wherein said authentication server is a standalone WLAN authentication server.

16. An authentication server according to claim 12, wherein said authentication server is a GGSN.

17. An authentication server device according to claim 12, wherein said service selection information comprises at least one APN parameter.

18. An authentication server according to claim 17 , wherein said APN parameter is encrypted in said authentication message.

19. An authentication server according to claim 17, wherein at least one of said APN parameters is decrypted in said authentication server.

20. An authentication server according to claim 17, wherein at least one of said APN parameter is forwarded by the authentication server to said access point in an encrypted manner.

21. A terminal device for providing access to a network service, said device being configured to set in an authentication message a service selection information for selecting said network service.

22. A device according to claim 21, wherein said authentication message is an EAP message.

23. A device according to claim 22, wherein said EAP message is an EAP Challenge Response message.

24. A device according to claim 23, wherein said EAP Challenge Response message is an EAP SIM or EAP AKA Challenge Response message.

25. A device according to claim 21, wherein said service selection information comprises at least one APN parameter.

26. A device according to claim 21, wherein said service is a GPRS service.

27. A system for providing access from a first network to a service of a second network, said system comprising;

a terminal device connected to the first network, said terminal device configured to provide access to a network service, said terminal device configured to set in an authentication message a service selection information for selecting said network service; and

an authentication server device connected to the second network, said authentication server device for providing an authentication mechanism, said authentication server device being configured to extract from a received authentication message a service selection information for selecting a service, and to use said service selection information for establishing a connection to services provided over an access point indicated by said service selection information.

28. A method of providing an authentication mechanism, said method comprising the steps of:

a) extracting from a received authentication message a service selection information for selecting a service; and

b) using said service selection information for establishing a connection to services provided over an access point indicated by said service selection information.

33. A computer program product embodied on a computer readable medium, said computer program product comprising code means configured to produce the steps of claim 28 when run on a computer device.

35. A processor device configured to produce the steps of claim 28.

29. A method of providing access to a network service, said method comprising the step of setting in an authentication message a service selection information for selecting said network service at a terminal device.

34. A computer program product embodied on a computer readable medium, said computer program product comprising code means configured to produce the steps of claim 29 when run on a computer device.

36. A processor device configured to produce the steps of claim 29.

32. A data structure of an authentication message, said data structure being configured to include a service selection information for selecting a service.