System and method for automated provisioning of wireless access gateways

• US 20060104214A1
• Filed: 11/18/2004
• Published: 05/18/2006
• Est. Priority Date: 11/18/2004
• Status: Abandoned Application

• Current Assignee: UTStarcom Incorporated (UTStarcom Holdings Corp.)
• Original Assignee: UTStarcom Incorporated (UTStarcom Holdings Corp.)
• Inventors: Borella, Michael S.
• Application Number:
  US10/993,464
• Publication Number:
  US 20060104214A1
• Time in Patent Office: Days
• US Class Current: 370/252
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/16 Communication-related supplementary services, e.g. call-transfer or call-hold
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 80/10 adapted for application session management, e.g. SIP [Session Initiation Protocol] connection management H04W76/00; arrangements for session management H04L67/14
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

Provisioning of network wireless access gateways is provided through standard heartbeat communications between device management systems and the controlled devices. Security associations for use by the devices such as PDSNs in communication with other devices such as PCFs associated with the network is downloaded from the management system to the PDSNs in the heartbeat communication channel. Peer operation of the device management systems under a network management system allows input of the security authorizations at any of the management system levels with upload and download to peer components for transmission to their associated devices.

Claims

1. A method for provisioning wireless access gateways in an Internet Protocol network, comprising the steps of:

providing a first plurality packet data serving nodes (PDSNs) to act as foreign agents for mobile nodes communicating through a second plurality of radio network nodes;

providing a foreign agent control node (FACN) for redirecting incoming calls from a mobile node to a selected PDSN;

providing an interface between the PDSNs and the FACN for heartbeat and control communication; and

,

downloading access authorization information for the plurality of radio network nodes from the FACN to the PDSNs over the interface.

2. A method as defined in claim 1 wherein the radio network nodes include packet control functions (PCF) and the authorization information includes PCF IP addresses, secrets and SPIs.

3. A method as defined in claim 2 wherein the step of downloading comprises the steps of:

sending an information update from the FACN to the PDSNs; and

,

acknowledging receipt of the information update by the PDSNs to the FACN.

4. A method as defined in claim 2 wherein the step of downloading includes population of a table with authorization information for a plurality of PCFs by the PDSN.

5. A method as defined in claim 3 wherein the step of sending an information update is accomplished to each PDSN upon heartbeat initialization by that PDSN.

6. A method as defined in claim 3 wherein the step of sending an information update is accomplished responsive to a predetermined trigger.

7. A method as defined in claim 6 wherein the predetermined trigger comprises updating a table of PCF addresses, secrets and SPIs in the FACN.

8. A method as defined in claim 4 wherein the step of downloading includes sensing an indicator for replacement of the entire table.

9. A method as defined in claim 4 wherein the step of downloading includes sensing indicators for selective replacement of the information for each PCF.

10. A method as defined in claim 4 further comprising the step of notifying the FACN by each PDSN of anomalies in the update.

11. A method as defined in claim 1 further comprising the steps of:

providing a second FACN connected to the interface with the PDSNs;

downloading access authorization information for the plurality of radio network nodes from the first FACN to the second FACN over a communication link.

12. A method as defined in claim 11 wherein the PDSNs conduct heartbeat communications with both the first and second FACN.

13. A method for provisioning wireless access gateways in an Internet Protocol network, comprising the steps of:

providing a first plurality first managed components engaged in communicating with a second plurality of second managed components;

providing an Element Management System (EMS) for the first managed components;

providing an interface between the EMS and the first managed components for heartbeat and control communication; and

,

downloading security associations for the second plurality of second managed components from the EMS to the first managed components over the interface.

14. A method as defined in claim 13 further comprising the steps of:

providing a Network Management System (NMS) in communication with the EMS;

inputting security associations for the second plurality of second managed components to the NMS;

and wherein the step of downloading comprises the initial steps of;

pushing down the security associations from the NMS to the EMS; and

converting the security associations in the EMS to a format compatible with the first managed components.

15. A method as defined in claim 14 further comprising the steps of:

providing a second EMS in communication with the NMS for the second plurality of second managed components;

providing an interface between the second EMS and the second managed components for heartbeat and control communication;

pushing down security associations from the NMS to the second EMS;

converting the security associations in the second EMS to a format compatible with the second managed components; and

downloading security associations from the second EMS to the second managed components over the interface.

16. A method as defined in claim 13 further comprising the steps of:

providing a second EMS for the second plurality of second managed components;

providing a NMS in communication with the first and second EMS;

inputting security associations for the second plurality of second managed components into the second EMS;

converting the security associations in the second EMS to a generic format;

uploading the converted security associations from the second EMS to the NMS;

pushing down the security associations from the NMS to the EMS;

converting the security associations in the EMS to a format compatible with the first managed components; and

downloading the security associations from the EMS to the first managed components over the interface.