Unitary management authentication device

• US 20060135124A1
• Filed: 01/13/2004
• Published: 06/22/2006
• Est. Priority Date: 01/30/2003
• Status: Abandoned Application

• Current Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Iwama, Tomohiro, Uno, Satoshi, Kaneko, Tomoharu, Kito, Tsutomu
• Application Number:
  US10/544,170
• Publication Number:
  US 20060135124A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 36/0016 Hand-off preparation specially adapted for end-to-end data sessions

Abstract

Respective location information of wireless terminal apparatuses 30-1 to 30-4 and service area information of each of wireless LAN networks 2-1 to 2-n is managed, and authentication information is notified to authentication apparatus 20 of a wireless LAN network before each wireless terminal apparatus moves to the wireless LAN network around the current location of the wireless terminal apparatus. The authentication time is thus shortened in migration inside the same wireless LAN network or between different wireless LAN networks of the wireless terminal apparatus, thereby reducing the interval required for handover, and as a result, quality deterioration does not occur such as packet loss due to the handover.

Claims

1. A centralized management authentication apparatus that performs centralized management of authentication to enable a wireless terminal apparatus to perform roaming on a plurality of wireless networks each having at least one radio base station, comprising:

an information acquirer that acquires service area information of each of the plurality of wireless networks and information of a current location of the wireless terminal apparatus;

an authentication information notification destination searcher that specifies at least one of the wireless networks that provides communication services in a peripheral area of the current location of the wireless terminal apparatus based on the acquired service area information and information of the current location; and

an authentication information manager that notifies authentication information required for authentication of the wireless terminal apparatus to the at least one of the wireless networks specified in the authentication information notification destination searcher before the wireless terminal apparatus moves to the at least one of the wireless networks.

2. The centralized management authentication apparatus according to claim 1, wherein the plurality of wireless networks has a cellular wireless network provided with a function of managing the location of the wireless terminal apparatus, and the authentication information notification destination searcher acquires the information of the current location of the wireless terminal apparatus from the cellular wireless network.

3. The centralized management authentication apparatus according to claim 1, wherein the authentication information manager notifies one of the wireless networks that requests the authentication information of the authentication information generated by an authentication information generating apparatus of the cellular wireless network.

4. The centralized management authentication apparatus according to claim 2, wherein the authentication information notification destination searcher acquires the service area information of each of the wireless networks from the cellular wireless network.

5. The centralized management authentication apparatus according to claim 2, wherein a location management apparatus of the cellular wireless network manages the service area information and the information of the current location of the wireless terminal apparatus, and based on the service area information and wireless terminal location information managed by the location management apparatus of the cellular wireless network, the authentication information notification destination searcher specifies at least one of the wireless networks that provides communication services in a peripheral area of the current location of the wireless terminal apparatus.

6. A cellular wireless network comprising the centralized management authentication apparatus according to claim 1.

10. A wireless communication system comprising:

the cellular wireless network according to claim 6;

an authentication apparatus comprising an authentication information holder that holds authentication information obtained by making a request for authentication information to a centralized management authentication apparatus that performs centralized management of authentication in movement to each of a plurality of wireless networks of a wireless terminal apparatus, and an authentication performer that uses the authentication information held in the authentication information holder in authentication of the wireless terminal apparatus in a service area of a movement destination when the wireless terminal apparatus moves between service areas of a wireless network to which the authentication apparatus belongs;

the a wireless terminal apparatus comprising a first receiver that receives a signal transmitted from a GPS (Global Positioning System) satellite, a first current location measurer that measures a current location using the signal received from the GPS satellite, and a first current location information notifier that notifies a cellular wireless network of the current location measured in the first current location measurer; and

a radio base station constituting a wireless network and comprising a second receiver that receives a signal transmitted from a GPS (Global Positioning System) satellite, a second current location measurer that measures a current location using the signal received from the GPS satellite, and a second current location information notifier that notifies a cellular wireless network of the current location measured in the second current location measurer.

11. An authentication provider unit that manages entire wireless networks, comprising the centralized management authentication apparatus according to claim 1.

12. The authentication provider unit according to claim 11, further comprising:

a location management apparatus that manages the service area information of each of a plurality of wireless networks and current location information of a wireless terminal apparatus, wherein the location management apparatus acquires the location information of the wireless terminal apparatus from a cellular wireless network that performs location management of the wireless terminal apparatus.

7. An authentication apparatus comprising:

an authentication information holder that holds authentication information obtained by making a request for authentication information to a centralized management authentication apparatus that performs centralized management of authentication in movement to each of a plurality of wireless networks of a wireless terminal apparatus; and

an authentication performer that uses the authentication information held in the authentication information holder in authentication of the wireless terminal apparatus in a service area of a movement destination when the wireless terminal apparatus moves between service areas of a wireless network to which the authentication apparatus belongs.

13. A wireless communication system comprising:

the authentication apparatus according to claim 7;

a wireless terminal apparatus comprising a first receiver that receives a signal transmitted from a GPS (Global Positioning System) satellite, a first current location measurer that measures a current location using the signal received from the GPS satellite, and a first current location information notifier that notifies a cellular wireless network of the current location measured in the first current location measurer;

a radio base station constituting a wireless network and comprising a second receiver that receives a signal transmitted from a GPS (Global Positioning System) satellite, a second current location measurer that measures a current location using the signal received from the GPS satellite, and a second current location information notifier that notifies a cellular wireless network of the current location measured in the second current location measurer; and

an authentication provider unit that manages entire wireless networks and that comprises a centralized management authentication apparatus that performs centralized management of authentication to enable a wireless terminal apparatus to perform roaming on a plurality of wireless networks each having at least one radio base station, said centralized management authentication apparatus comprising an information acquirer that acquires service area information of each of the plurality of wireless networks and information of a current location of the wireless terminal apparatus, an authentication information notification destination searcher that specifies at least one of the wireless networks that provides communication services in a peripheral area of the current location of the wireless terminal apparatus based on the acquired service area information and information of the current location, and an authentication information manager that notifies authentication information required for authentication of the wireless terminal apparatus to the at least one of the wireless networks specified in the authentication information notification destination searcher before the wireless terminal apparatus moves to the at least one of the wireless networks.

8. A wireless terminal apparatus comprising:

a receiver that receives a signal transmitted from a GPS (Global Positioning System) satellite;

a current location measure that measures a current location using the signal received from the GPS satellite; and

a current location information notifier that notifies a cellular wireless network of the current location measured in the current location measurer.

9. A radio base station constituting a wireless network, comprising:

a receiver that receives a signal transmitted from a GPS (Global Positioning System) satellite;

a current location measure that measures a current location using the signal received from the GPS satellite; and

a current location information notifier that notifies a cellular wireless network of the current location measured in the current location measurer.

14. A wireless terminal authentication method in a wireless communication system comprised of a plurality of wireless networks each having at least one radio base station, comprising:

an information acquiring step of acquiring location information of a wireless terminal apparatus and service area information of each of the plurality of wireless networks;

an identifying step of identifying at least one of the wireless networks that provides communication services in a peripheral area of a location where the wireless terminal apparatus exists based on the acquired location information of the wireless terminal apparatus and service area information of each of the plurality of wireless networks; and

an authentication information notifying step of notifying the identified wireless network of authentication information of the wireless terminal apparatus before the wireless terminal apparatus moves to the network.