Generation of service agreements for the use of network internal functions in telecommnication networks

• US 20060111087A1
• Filed: 06/11/2003
• Published: 05/25/2006
• Est. Priority Date: 07/15/2002
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Leitgeb, Manfred, Swetina, Joerg
• Application Number:
  US10/521,314
• Publication Number:
  US 20060111087A1
• Time in Patent Office: Days
• US Class Current: 455/414.100
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 8/14 between corresponding nodes

Abstract

Network internal functions of a telecommunication network can be access from an external site (Se), for example, a server, for the running of external services for network users (Mo), whereby the access is achieved by means of a secure service interface device (S2) on a network (“access network”) on the basis of a service agreement, valid for said service interface, in the favour of the external site (Se). According to the invention, in order to achieve access to functions in an other network (target network), as a result of a request (3) for a network internal function, sent to the interface device (S2) from the external site (Se), said interface checks for whether the request comprises the use of a function of the target network. Where the above is the case, a service agreement (4) (transitive agreement) is concluded between the interface device (S2) and a secure service interface device (S1) of B the target network. The request (5) is further transmitted and processed by means of the interface devices (S1,S2) on the basis of said transitive agreement.

Claims

1. A method for accessing network-internal functions of telecommunication networks, from an external site, with access taking place via a secure service interface device of a network based on a service level agreement valid for the service interface in favor of the external site, comprising:

verifying, on the part of the interface device, based on a request sent to it from the external site relating to a network-internal function, whether the request involves use of a function of another network; and

when the request uses a function of another network, exchanging a second request relating to the functions of the network between the interface devices based on the a service level agreement concluded between the interface device and a secure service interface device of the target network.

2. The method according to claim 1, wherein

access takes place in the context of a service, which is executed by the external site for a user, the home network of which is the target network.

3. The method according to claim 1, wherein

the service level agreement is generated in a manner favorable to the external site, such that a roaming agreement exists between the networks set up as mobile radio networks and the service level agreement exists on a part of the access network favorable to the external site.

4. The method according to claim 1, wherein the external site is a server for external services, which are executed in an area of the access network or a visited network accessible via the access network using network-internal services for users that are connected or logged in.

5. The method according to claim 1, wherein

messages exchanged further to the second request between the external site and the target network are transmitted via the interface devices, with the interface device of the access network forwarding messages exchanged between the external site and the interface device of the target network in a transparent manner.

6. The method according to claim 1, wherein

messages exchanged further to the second request between the external site and network centers of the target network are transmitted via the interface device of the access network, with the interface device forwarding the messages as a transparent proxy server.

7. A network device of a telecommunication network, which is set up as a secure service interface device to verify, on the part of an interface device, based on a request sent thereto from an external site relating to a network-internal function, whether the request involves use of a function of another network;

and when the request uses a function of another network, exchanging a second request relating to the functions of the network between the interface devices based on a service level agreement concluded between the interface device and a secure service interface device of the target network.