Service access control interface for an unlicensed wireless communication system

• US 20060223498A1
• Filed: 02/06/2006
• Published: 10/05/2006
• Est. Priority Date: 10/17/2003
• Status: Active Grant

• Current Assignee: Ribbon Communications Operating Company, Inc. (Ribbon Communications, Inc.)
• Original Assignee: Kineto Wireless Incorporated (Ribbon Communications, Inc.)
• Inventors: Gupta, Rajeev, Gallagher, Michael D., Khetawat, Amit, Sethi, Swaran Singh
• Granted Patent: US 7,283,822 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 12/73 Access point logical identity
• CPC Class Codes: H04W 60/04 using triggered events
• CPC Class Codes: H04W 76/30 Connection release
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/16 WPBX [Wireless Private Branch Exchange]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/12 Access point controller devices
• CPC Class Codes: H04W 88/16 Gateway arrangements
• CPC Class Codes: H04W 92/02 Inter-networking arrangements
• CPC Class Codes: H04W 92/06 : between gateways and public network devices

Abstract

Some embodiments provide a system for authorization and authentication of an unlicensed mobile access (UMA) subscriber. The system includes an UMA network controller (UNC) which is communicatively coupled to a licensed wireless communication system. The system also includes an access point (AP) that serves a wireless local area network (WLAN). The system further includes a mobile station (MS) that is communicatively coupled to the AP and the licensed wireless communication system. The system also includes an authentication server that is communicatively coupled to the UNC. The authentication server authenticates a UMA subscriber for accessing an unlicensed mobile access network (UMAN) that includes the UNC and the AP. Some embodiments define an interface between the UNC and the authentication server uses Remote Access Dial-In User Service (RADIUS) protocol. In some embodiments, the authentication server is an Authorization, Authentication, and Accounting (AAA) server.

Claims

1. A system for authorization and authentication of an unlicensed mobile access (UMA) subscriber, the system comprising:

a) an UMA network controller (UNC) communicatively coupled to a licensed wireless communication system;

b) an access point (AP) serving a wireless local area network (WLAN), wherein the UNC and the AP are connected through a broadband access network;

c) a mobile station (MS) communicatively coupled to the AP and the licensed wireless communication system; and

d) a first server communicatively coupled to the UNC;

wherein the first server authenticates a UMA subscriber for accessing an unlicensed mobile access network (UMAN) comprised of the UNC and the AP.

2. The system of claim 1, wherein the UNC and the first server communicate using remote access dial-in user service (RADIUS) protocol.

3. The system of claim 1, wherein the first server is communicatively coupled to the licensed wireless communication system home location register (HLR) and a set of databases comprising authorization, authentication, and accounting data.

4. The system of claim 1, wherein the first server is an authorization, authentication, and accounting (AAA) server.

5. The system of claim 1, wherein the UNC is comprised of:

a) an IP network controller (INC) communicatively coupled to the first server;

b) a security gateway communicatively coupled to the AP, the INC, and the first server;

c) a media and signaling gateway communicatively coupled to the INC, the security gateway, and the licensed wireless communication system.

6. A method of authorization and authentication of an unlicensed mobile access (UMA) subscriber, the method comprising:

a) receiving at an UMA network controller (UNC) data from a mobile station (MS) as part of UMA registration process, wherein the UNC is communicatively coupled to a licensed wireless communication system;

b) sending from the UNC said UMA registration process data to a first server;

c) performing a set of authorization checks by the first server by accessing a set of databases; and

d) sending a message from the first server to the UNC to inform the UNC whether the UMA subscriber is authorized to access an unlicensed mobile access network (UMAN) comprised of the UNC and an access point (AP) serving a wireless local area network (WLAN), wherein the UNC and the AP are connected through a broadband access network.

7. The method of claim 6, wherein said UMA registration process data is comprised of UMA subscriber'"'"'s international mobile subscriber identity (IMSI).

8. The method of claim 6, wherein said UMA registration process data is comprised of media access control (MAC) address of the AP.

9. The method of claim 6, wherein said UMA registration process data is comprised of service set identifier (SSID) of the AP.

10. The method of claim 6, wherein said UMA registration process data is comprised of cell global identification (CGI) of the licensed wireless communication system.

11. The method of claim 6, wherein said performing a set of authorization checks by the first server is comprised of verifying whether the UMA subscriber has a valid UMA subscription.

12. The method of claim 6, wherein said performing a set of authorization checks by the first server is comprised of verifying whether the AP is a valid access point.

13. The method of claim 6, wherein said performing a set of authorization checks by the first server is comprised of verifying whether the AP is located within a valid public land mobile network (PLMN).

14. The method of claim 6, wherein said performing a set of authorization checks by the first server is comprised of obtaining the location of the AP from a database.