LAN-based UMA network controller with aggregated transport

• US 20060276139A1
• Filed: 05/10/2006
• Published: 12/07/2006
• Est. Priority Date: 05/10/2005
• Status: Active Grant

• Current Assignee: Ribbon Communications Operating Company, Inc. (Ribbon Communications, Inc.)
• Original Assignee: Network Equipment Technologies Incorporated (Ribbon Communications, Inc.)
• Inventors: Harty, Talbot, Isacks, Kevin, Hardie, Terry, Pummill, Troy T.
• Granted Patent: US 8,224,333 B2
• Time in Patent Office: Days
• US Class Current: 455/67.110
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 40/00 Communication routing or communication path finding
• CPC Class Codes: H04W 76/00 Connection management
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 76/12 Setup of transport tunnels
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 80/10 adapted for application session management, e.g. SIP [Session Initiation Protocol] connection management H04W76/00; arrangements for session management H04L67/14
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 92/02 Inter-networking arrangements
• CPC Class Codes: H04W 92/14 between access point controllers and backbone network device

Abstract

A method for managing UMA communications within a local area network and a network controller are disclosed. The method includes establishing a first connection between a first UMA device and a LAN-based UMA network controller (LAN-UNC) and establishing a second connection between a second UMA device and the LAN-UNC. The first and second connections are carried over the local area network. The first and second UMA devices are connected to the same local area network. The method provides establishing a third connection between the LAN-UNC and a UMA network controller (UNC). The UNC is connected to an external network and the third connection extends over the external network. The method includes transporting packets received using the first and second connections to the UNC using the third connection. Packets received using the third connection are transported to the first UMA device using the first connection and to the second UMA device using the second connection.

Claims

1. A method for managing unlicensed mobile access (UMA) devices connected to a local area network (LAN), the method comprising:

establishing a first connection between a LAN-based UMA network controller (LAN-UNC) and a first UMA device, wherein the first connection is inside the LAN and the first UMA device is connected to the LAN;

establishing a second connection between the LAN-LNC and a second UMA device, wherein the second connection is inside the LAN and the second UMA device is connected to the LAN;

establishing a third connection between the LAN-UNC and a UMA network controller (UNC), wherein the third connection extends over an external network and the UNC is connected to the external network;

transporting packets received using the first and second connections to the UNC using the third connection; and

transporting packets received using the third connection to the first UMA device using the first connection and to the second UMA device using the second connection.

2. The method of claim 1 wherein the external network is the internet.

3. The method of claim 1 wherein the first connection comprises a first IPsec (IP security) tunnel and the second connection comprises a second IPsec tunnel.

4. The method of claim 1 wherein the third connection comprises a GRE (Generic Routing Encapsulation) tunnel.

5. The method of claim 1 wherein the third connection comprises a third IPsec tunnel.

6. The method of claim 5 further comprising forming the IPsec tunnel using an automated process.

7. The method of claim 6 further comprising:

detecting a USB-SIM device; and

initiating the automated IPsec tunnel formation process when the USB-SIM device is detected.

8. The method of claim 1 further comprising:

monitoring an authentication process whereby the first UMA device is authorized to access a cellular network; and

detecting when the authentication process has been successfully completed.

9. The method of claim 8 wherein the step of monitoring further comprises transporting authentication packets exchanged by the first UMA device and the UNC using the third connection.

10. The method of claim 8 wherein the step of monitoring further comprises receiving authentication data from the UNC using the third connection.

11. The method of claim 8 wherein the step of monitoring further comprises receiving authentication data from the first UMA device using the first connection.

12. The method of claim 10 wherein the authentication data is cellular triplets.

13. The method of claim 1 further comprising:

forming a multiplexed packet with data from packets received on the first and second connections; and

sending the multiplexed packet to the UNC on the third connection.

14. The method of claim 1 further comprising:

compressing packets received using the first and second connections; and

transporting the compressed packets to the UNC using the third connection.

15. The method of claim 1 further comprising:

modifying a security association of the third IPsec tunnel to control access to the third connection by UMA devices connected to the LAN.

16. An apparatus for managing unlicensed mobile access (UMA) devices connected to a local area network (LAN), the apparatus comprising:

a controller configured to establish a first connection to a first UMA device, the first connection is inside the LAN and the first UMA device is connected to the LAN;

wherein the controller is further configured to establish a second connection to a second UMA device, the second connection is inside the LAN and the second UMA device is connected to the LAN;

wherein the controller is further configured establish a third connection to a UMA network controller (UNC), the third connection extends over an external network and the UNC is connected to the external network;

wherein the controller is further configured to transport packets received using the first and second connections to the UNC using the third connection; and

the controller is further configured to transport packets received using the third connection to the first UMA device using the first connection and to the second UMA device using the second connection.

17. The apparatus of claim 16 wherein the external network is the internet.

18. The apparatus of claim 16 wherein the first connection comprises a first IPsec (IP security) tunnel and the second connection comprises a second IPsec tunnel.

19. The apparatus of claim 16 wherein the third connection comprises a GRE (Generic Routing Encapsulation) tunnel.

20. The apparatus of claim 16 wherein the third connection comprises a third IPsec tunnel.

21. The apparatus of claim 20 wherein the controller is further configured to form the IPsec tunnel using an automated process.

22. The apparatus of claim 21 further comprising:

a USB-SIM device; and

wherein the controller is further configured to initiate the automated IPsec tunnel formation process when the USB-SIM device is detected.

23. The apparatus of claim 16 wherein the controller is further configured to monitor an authentication process whereby the first UMA device is authorized to access a cellular network;

and

the controller is further configured to detect when the authentication process has been successfully completed.

24. The apparatus of claim 23 wherein the controller is further configured to transport authentication packets exchanged by the first UMA device and the UNC using the third connection.

25. The apparatus of claim 23 wherein the controller is further configured to receive authentication data from the UNC using the third connection.

26. The apparatus of claim 23 wherein the controller is further configured to receive authentication data from the first UMA device using the first connection.

27. The apparatus of claim 25 wherein the authentication data is cellular triplets.

28. The apparatus of claim 16 wherein the controller is further configured to form a multiplexed packet with data from packets received on the first and second connections;

and

the controller is further configured send the multiplexed packet to the UNC on the third connection.

29. The apparatus of claim 16 wherein the controller is further configured to compress packets received using the first and second connections;

and

the controller is configured to transport the compressed packets to the UNC using the third connection.

30. The apparatus of claim 16 wherein the controller is further configured to modify a security association of the third IPsec tunnel to control access to the third connection by UMA devices connected to the LAN.