System and method for enabling VPN-less session setup for connecting mobile data devices to an enterprise data network

• US 20070206572A1
• Filed: 10/26/2006
• Published: 09/06/2007
• Est. Priority Date: 03/02/2006
• Status: Active Grant

• Current Assignee: Tango Networks Incorporated
• Original Assignee: Tango Networks Incorporated
• Inventors: Silver, Andrew, Schmid, Glen
• Granted Patent: US 7,873,001 B2
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/103 in the network
• CPC Class Codes: H04L 65/104 in the network
• CPC Class Codes: H04M 15/8044 Least cost routing
• CPC Class Codes: H04M 15/8228 Session based
• CPC Class Codes: H04Q 2213/1307 Call setup
• CPC Class Codes: H04Q 2213/13091 CLI, identification of calling line
• CPC Class Codes: H04Q 2213/13098 Mobile subscriber
• CPC Class Codes: H04Q 2213/13103 Memory
• CPC Class Codes: H04Q 2213/13109 Initializing, personal profile
• CPC Class Codes: H04Q 2213/13141 Hunting for free outlet, circuit or channel
• CPC Class Codes: H04Q 2213/13152 Callback
• CPC Class Codes: H04Q 2213/13176 Common channel signaling, CCS7
• CPC Class Codes: H04Q 2213/1318 Ringing
• CPC Class Codes: H04Q 2213/13196 Connection circuit/link/trunk/junction, bridge, router, gateway
• CPC Class Codes: H04Q 2213/13206 User-to-user signaling, UUS
• CPC Class Codes: H04Q 2213/1322 PBX
• CPC Class Codes: H04Q 2213/13336 Store & forward, messaging systems
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 88/16 : Gateway arrangements

Abstract

A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network is provided. The mobile application gateway includes a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control. A gateway GPRS support node (GGSN) is configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a GPRS tunneling protocol (GTP) tunnel between a carrier-hosted serving GPRS support node (SGSN) and the GGSN.

Claims

1. A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network, comprising:

a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control; and

a gateway GPRS support node (GGSN) configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a GPRS tunneling protocol (GTP) tunnel between a carrier-hosted serving GPRS support node (SGSN) and the GGSN.

2. The gateway of claim 1 further comprising a gateway server of the cellular network (GS-C) located in the cellular network that interfaces with an enterprise network gateway server (GS-E) in the enterprise network.

3. The gateway of claim 2 wherein the GS-E in the enterprise network interfaces with a plurality GS-Cs in various carrier networks.

4. The gateway of claim 2 wherein the mobile application gateway is configured to add selectable security and encryption between the cellular network and the enterprise network.

5. The gateway of claim 4 wherein the selectable security and encryption is setup automatically when the secure data session is established between the mobile communications device and the enterprise network.

6. The gateway of claim 4 wherein the selectable security and encryption is specific to the cellular network.

7. The gateway of claim 5 in which the mobile communications device is configured to require routing of the secure data session in accordance with the selectable security and encryption.

8. The gateway of claim 2 wherein the GS-E is configured to provide the GTP tunnel and a secure encrypted data session.

9. The gateway of claim 1 wherein a secure firewall of the enterprise network is configured to support the secure data session.

10. The gateway of claim 2 further comprising charging records generated from the GS-C supporting billing within the cellular network.

11. The gateway of claim 10 wherein the charging records can be generated from the GS-E.

12. A mobile application gateway configured to interconnect mobile communication devices on a cellular network with an enterprise network, comprising:

a voice and data signaling gateway configured to provide routing functionalities, service functionalities and admission control; and

a home agent (HA) configured to establish a secure data session between one or more of the mobile communication devices and the enterprise network by establishing a secure tunneling protocol between a carrier-hosted serving foreign agent (FA) and the HA.

13. The gateway of claim 12 further comprising a gateway server of the cellular network (GS-C) located in the cellular network that interfaces with an enterprise network gateway server (GS-E) in the enterprise network.

14. The gateway of claim 13 wherein the GS-E in the enterprise network interfaces with a plurality GS-Cs in various carrier networks.

15. The gateway of claim 13 wherein the mobile application gateway is configured to add selectable security and encryption between the cellular network and the enterprise network.

16. The gateway of claim 15 wherein the selectable security and encryption is setup automatically when the secure data session is initiated between the mobile device and the enterprise network.

17. The gateway of claim 15 wherein the selectable security and encryption is specific to the cellular network.

18. The gateway of claim 16 in which the mobile communications device is configured to require routing of the data session in accordance with the selectable security and encryption.

19. The gateway of claim 13 wherein the GS-E is configured to provide the GTP tunnel and a secure encrypted data session.

20. The gateway of claim 12 wherein a secure firewall of the enterprise network is configured to support the secure data session.

21. The gateway of claim 13 further comprising charging records generated from the GS-C supporting billing within the cellular network.

22. The gateway of claim 21 wherein the charging records can be generated from the GS-E.