Method and system to support fast hand-over of mobile subscriber stations in broadband wireless networks

• US 20060111111A1
• Filed: 11/24/2004
• Published: 05/25/2006
• Est. Priority Date: 11/24/2004
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Intel Corporation
• Inventors: Ovadia, Shlomo
• Granted Patent: US 7,369,856 B2
• Time in Patent Office: Days
• US Class Current: 455/439
• CPC Class Codes: H04L 2463/081 applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/5003 Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 36/38 by fixed network equipment

Abstract

Method and system to support fast hand-over of mobile subscriber stations in broadband wireless networks. In connection with a hand-over process, a determination is made to which target base station (BS) an air interface for a mobile subscriber station (MSS) is to be handed-over. Various service requirements are requested by the MSS, including a Quality of Service (QoS) level. Based on feedback from potential target BSs, a target BS for hand-over is selected. Current connection context data corresponding to current service flows provided by a serving BS is passed to the target BS to pre-provision service such that a minimal amount of re-entry messaging is required. In one embodiment, a Management Information Base (MIB) instance is maintained at each BS in a broadband wireless network. To pre-provision service, applicable connection context data are transferred between MIB instances at the serving and target BS using Simple Network Management Protocol (SNMP) messaging.

Claims

1. A method for performing a fast hand-over in a broadband wireless network, comprising:

identifying a target base station (BS) to which an air interface between a mobile subscriber station (MSS) and a serving BS is to be handed-off;

forwarding connection context information corresponding to a current air interface of a serving BS from the serving BS to the target BS; and

pre-provisioning service corresponding to a migrated air interface to the MSS via the target BS using the connection context information.

2. The method of claim 1, wherein the connection context information includes security data used to support secure communication over the air interface, the method further comprising employing the security data for communication over the migrated air interface, wherein security management messaging is omitted during re-entry of the broadband wireless network.

3. The method of claim 1, wherein the connection context information includes MSS registration data used to register the MSS with the broadband wireless service, and wherein the operations of pre-provisioning the service includes pre-registering the MSS such that the MSS does not have to perform register messaging upon re-entering the broadband wireless network.

4. The method of claim 1, wherein the broadband wireless network comprises a WiMAX network operated in conformance with an IEEE (Institute of Electrical and Electronic Engineering) 802.16-based wireless broadband standard.

5. The method of claim 1, further comprising:

authenticating the target BS prior to handing over the air interface from the serving BS to the target BS.

6. The method of claim 5, wherein the target BS is authenticated by an authentication server (AS) communicatively-coupled to a radio access node (RAN) for each of the serving and target BSs.

7. The method of claim 5, further comprising:

storing an initial set of authentication credentials for each BS on the authentication server;

submitting an authentication request from the serving BS to the AS identifying the target BS;

sending an authentication challenge to the target BS;

returning a current set of authentication credentials for the target BS to the AS;

comparing the initial set of authentication credentials with the current set of authentication credentials to authenticate the target BS; and

if the target BS is authenticated,

returning an authentication confirmation to the serving BS;

otherwise

returning an authentication denial to the serving BS if the target BS is not authenticated.

8. The method of claim 7, further comprising:

generating an attestation identity key (AIK) key pair including a public AIK key and a private AIK key using a trusted platform module (TPM) at the target BS;

sending the public AIK key to the authentication server during a credential initialization operation; and

, in response to the authentication challenge,

sending data digitally signed with the private AIK key to the AS; and

using the public AIK to decrypt the digital signature and authenticate the target BS.

9. The method of claim 1, further comprising:

using Simple Network Management Protocol (SNMP) messaging to forward the connection context information from the serving BS to the target BS.

10. The method of claim 1, further comprising:

storing subscriber service flow provisioning information in a service flow database managed by a broadband wireless service provider;

storing a sub-set of the subscriber service flow provisioning information in a Management Information Base (MIB) at the serving BS and the target BS;

storing parameters corresponding to a current connection context for the MSS-to-serving BS air interface in the MIB at the serving BS;

generating an MIB sub-tree structure containing the parameters corresponding to a current connection context;

sending the MIB sub-tree structure from the serving BS to the target BS;

extracting the parameters corresponding to the current connection context from the MIB sub-tree; and

inserting the parameters corresponding to the current connection context into the MIB at the target BS to pre-provision the service.

11. The method of claim 10, further comprising:

sending a copy of the parameters that are inserted into the MIB at the target BS to a central service flow database after the hand-over is completed.

12. The method of claim 1, further comprising:

releasing the MSS at the serving BS after the hand-over is completed.

13. The method of claim 1, wherein identification of the target BS to which the air interface is to be handed off to is determined by the serving BS.

14. The method of claim 1, wherein identification of the target BS to which the air interface is to be handed off to is determined by the MSS.

15. The method of claim 1, further comprising:

sending a hand-over pre-notification message to at least one target BS being considered for a hand-over, the pre-notification message containing a set of connection parameters and Quality of Service (QoS) level information relating to a requested QoS level to be provided after the hand-over; and

receiving a hand-over pre-notification response message from each of the at least one target BS, each hand-over pre-notification response message indicating whether that target BS can provide the requested QoS level.

16. A machine-readable medium to store instructions, which if executed at a base station (BS) of a broadband wireless network perform operations comprising:

maintaining connection context information corresponding to a current air interface to a mobile subscriber station (MSS) for which the base station is providing a current service flow; and

, in response to a request to hand-over the air interface to a target BS;

forwarding connection context information corresponding to the current air interface to the target BS;

17. The machine-readable medium of claim 16, wherein execution of the instructions perform further operations including:

storing connection context information corresponding to current service flows provided by the base station in a Management Information Base (MIB);

generating an MIB sub-tree containing connection context information pertaining to an MSS air interface for which a hand-over is requested; and

sending a Simple Network Management Protocol (SNMP) message containing the MIB sub-tree to the target BS.

18. The machine-readable medium of claim 16, wherein execution of the instructions perform further operations including:

identifying a target base station (BS) to which the current air interface is to be handed-off.

19. The machine-readable medium of claim 18, wherein execution of the instructions perform further operations including:

receiving a hand-off request from the MSS identifying one or more potential target BSs to which the current air interface may be handed-over;

sending a hand-off pre-notification message to the one or more potential target BSs, each hand-off pre-notification message containing information identifying a Quality of Service (QoS) level requested to be provided by a target BS after a hand-off to that target BS;

receiving a hand-off pre-notification response message from the one or more potential target BSs, each hand-off pre-notification response message containing information identifying whether the target BS sending the response can support the QoS level that is requested; and

selecting a target base station (BS) to which the current air interface is to be handed-off in view of the hand-off pre-notification response messages.

20. The machine-readable medium of claim 16, wherein execution of the instructions perform further operations including:

sending a target BS authentication request to an authentication server (AS);

receiving one of an authentication confirmation or authentication denial message from the AS; and

in response thereto,

sending one of a hand-over cancellation or hand-over rejection message to the MSS if an authentication denial message is received;

otherwise

continuing hand-over operations to complete hand-over of the air interface to the target BS if an authentication confirmation message is received.

21. The machine-readable medium of claim 16, wherein execution of the instructions perform further operations including:

retrieving a public attestation identification key (AIK) key comprising the public key half of an AIK key pair generated by a trusted platform module (TPM) hosted by BS, the AIK pair further including a private AIK key;

sending the public AIK key to an authentication server (AS),

and in response to an authentication challenge issued by the AS to the apparatus,

generating a manifest;

retrieving the private AIK key;

digitally signing the manifest with the AIK private key; and

sending the digitally-signed manifest to the AS.

22. An apparatus, comprising:

a processor;

a plurality of broadband wireless network components compliant with the IEEE (Institute of Electronic and Electrical Engineers) P802.16-based broadband wireless standard, operatively coupled to the processor, the broadband wireless components to facilitate communications over a IEEE P802.16-based broadband wireless network; and

at least one storage device, operatively coupled to the processor and having instructions stored therein, which when executed by the processor perform operations including;

maintaining connection context information corresponding to a current air interface to a mobile subscriber station (MSS) for which the apparatus is providing a current service flow; and

, in response to a request to hand-over the air interface to a target base station (BS);

forwarding connection context information corresponding to the current air interface to the target BS.

23. The apparatus of claim 22, wherein execution of the instructions performs further operations including:

storing connection context information corresponding to current service flows provided by the apparatus in a Management Information Base (MIB);

generating an MIB sub-tree containing connection context information pertaining to an MSS air interface for which a hand-over is requested; and

sending a Simple Network Management Protocol (SNMP) message containing the MIB sub-tree to the target BS.

24. The apparatus of claim 22, further comprising:

a trusted platform module (TPM), operatively coupled to the processor,

and wherein execution of the instructions perform further operations including,

causing the TPM to generate an attestation identification key (AIK) key pair including public AIK key and a private AIK key;

sending the public AIK key to an authentication server (AS),

and in response to an authentication challenge issued by the AS to the apparatus,

generating a manifest;

digitally signing the manifest with the AIK private key; and

sending the digitally-signed manifest to the AS.

25. The apparatus of claim 22, wherein execution of the instructions performs further operations including:

receiving information from one of the MSS or one or more target BSs identifying availability and Quality of Service (QoS) levels that can be expected to be provided by the one or more target BSs if the current air interface is handed-off to one of the target BSs; and

identifying a target base station (BS) to which the current air interface is to be handed-off in view of the availability and QoS information received.

26. A system, comprising:

a radio access node (RAN);

a plurality of base stations (BS), each communicatively coupled to the RAN, each BS comprising;

a processor;

a plurality of broadband wireless network components compliant with the IEEE (Institute of Electronic and Electrical Engineers) P802.16-based broadband wireless standard, operatively coupled to the processor, the broadband wireless components to facilitate communications over a IEEE P802.16-based broadband wireless network; and

at least one storage device, operatively coupled to the processor and having instructions stored therein, which when executed by the processor perform operations including;

maintaining connection context information corresponding to a current air interface to a mobile subscriber station (MSS) for which the BS is providing a current service flow; and

, in response to a request to hand-over the air interface to another BS comprising a target base station (BS);

forwarding connection context information corresponding to the current air interface to the target BS.

27. The system of claim 26, further comprising:

an authentication server, communicatively-coupled to the RAN, the authentication server to store BS authentication data and to provide BS authentication services.

28. The system of claim 26, further comprising:

a network management system, communicatively-coupled to the RAN via a network, the network management system to manage each of the base stations using Simple Network Management Protocol (SNMP) messaging.

29. The system of claim 26, further comprising:

a service flow database, communicatively-coupled to the RAN via a network;

a Management Information Base (MIB) instance hosted by each of the BSs, each MIB instance to store service flow data related to MSSs currently being served by the BS hosting that MIB instance.