Authentication of a wlan connection using gprs/umts infrastructure

• US 20060179474A1
• Filed: 03/18/2004
• Published: 08/10/2006
• Est. Priority Date: 03/18/2003
• Status: Abandoned Application

• Current Assignee: Thomson Licensing (Vantiva SA)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Bichot, Guillaume
• Application Number:
  US10/549,299
• Publication Number:
  US 20060179474A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 76/30 Connection release
• CPC Class Codes: H04W 80/00 Wireless network protocols or protocol adaptations to wireless operation
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method for communicating between a cellular system and a client terminal such as a mobile terminal by way of a standard wireless LAN and the Internet allows data communications to traverse the core of the cellular network, thereby allowing monitoring of the time and volume usage by the subscriber for billing purposes. The mobile terminal has a communication protocol for communicating with the wireless LAN, over which is a EAP/EAPOL protocol. A Radio Adaptation Layer protocol overlies the EAP/EAPOL protocol. At the cellular system, a Serving GPRS Support Node establishes initial control contact with the mobile terminal by way of EAP/EAPOL. During authentication, the Support Node gives the mobile terminal parameters for an alternative tunnel connection. Once authorization is complete, the mobile terminal closes the EAP/EAPOL connection and opens a new connection tunnel to the Support Node using the parameters.

Claims

1. A method for establishing a signaling connection between a client terminal and a communications network, the method comprising the steps of:

establishing an authentication connection between the client terminal and the communications network;

transmitting an authentication message from the communications network to the client terminal;

transmitting set-up parameters from the communications network to the client terminal, the set-up parameters including information for establishing a signaling connection tunnel between the client terminal and the communications network for transferring control data;

establishing the control data signaling connection tunnel using the set-up parameters;

transmitting signaling information between the client terminal and the communications network via the control data signal connection tunnel; and

closing the authentication connection.

2. The method according to claim 1, further comprising the step of transmitting from the client terminal to the communications network acknowledgement of receipt of the set-up parameters.

3. The method according to claim 1, wherein the control data signal connection tunnel is a dedicated signaling tunnel.

4. The method according to claim 1, wherein the client terminal is a mobile terminal and the communications network is a 3G network.

5. The method according to claim 1, wherein the step of establishing an authentication connection between the client terminal and the communications network is performed by way of a path including a wireless network which complies with IEEE 802.11 standards.

6. The method according to claim 1, wherein the step of establishing an authentication connection between the client terminal and the communications network includes the steps of establishing EAPOL and DIAMETER connections.

7. The method according to claim 1 wherein the control data signal connection tunnel is a general packet radio services (GPRS) tunneling protocol (GTP) tunnel, and the step of transmitting set-up parameters includes the step of transmitting at least one of an IP address and a tunnel ID.

8. The method according to claim 7 wherein the step of transmitting set-up parameters includes the step of transmitting QOS parameters.

9. The method according to claim 1 wherein the control data signaling connection tunnel is a dedicated GTP tunnel, and the step of transmitting set-up parameters includes the step of transmitting both an IP address and a tunnel ID.

10. A method for implementing communications, said method comprising the steps of:

providing a wireless local area network access point having protocol stacks;

initially establishing an EAP/EAPOL connection by way of said wireless local area network access point between a mobile terminal and a cellular system server for the flow of authentication and control information including parameters for a control data signaling connection tunnel;

following authentication by said server, closing said EAP/EAPOL connection and opening a corresponding control data signaling connection tunnel using said parameters.

11. The method according to claim 10, wherein said step of establishing an EAP/EAPOL connection includes the step of transmitting parameters for a GTP tunnel;

and

said step of opening a control data signaling connection tunnel includes the step of opening a GTP tunnel.

12. The method according to claim 10, wherein said step of closing said EAP/EAPOL path is performed after said control data signaling connection tunnel is opened.

13. The method according to claim 10, comprising the further step, following authentication by said server, of transmitting authorization to said access point to pass user data for said mobile terminal.

14. The method according to claim 13, wherein said step of transmitting authorization to said access point is performed using DIAMETER protocol.

15. The method according to claim 10, further comprising the step, following said authentication by said server, of reporting to said mobile terminal the success of said authentication.

16. The method according to claim 10, wherein said step of closing said EAP/EAPOL path is performed before said control data signaling connection tunnel is opened.

17. The method according to claim 10, wherein said step of closing said EAP/EAPOL path is performed concurrently with opening of said control data signaling connection tunnel.

18. A method for operating a client terminal to establish a control connection to a communications network, said method comprising the steps of:

from said client terminal, establishing an authentication connection between said client terminal and said communications network, and requesting authentication;

at said client terminal, receiving an authentication message from said communication network, said authentication message including set-up parameters defining a control data signaling connection tunnel between said client terminal and said communications network;

from said client terminal, setting up said control data signaling connection tunnel by use of said set-up parameters;

transmitting control information between said client terminal and said communications network via said control data signaling connection tunnel; and

closing said authentication connection.

19. The method according to claim 18, wherein said step of closing said authentication connection is performed after said step of transmitting control information between said client terminal and said communications network via said control data signaling connection tunnel.

20. The method according to claim 18, wherein said steps of (a) establishing an authentication connection and (b) transmitting control information are performed by way of a wireless access point.