System and method for authorizing access to a UMA network based on access point identifier

• US 20070268908A1
• Filed: 05/17/2006
• Published: 11/22/2007
• Est. Priority Date: 05/17/2006
• Status: Abandoned Application

• Current Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Original Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Inventors: Linkola, Janne P., Caldwell, Christopher E.
• Application Number:
  US11/435,504
• Publication Number:
  US 20070268908A1
• Time in Patent Office: Days
• US Class Current: 370/395.200
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

A system and method are arranged to evaluate registration requests associated with a mobile subscriber (MS) in a fixed-mobile converged network. The fixed-mobile converged network consists of at least one fixed network topology (e.g., IP) and at least one mobile network topology (e.g., CDMA, TDMA, GSM, etc.). Registration request are received by the system from the MS. The registration request includes information identifying an access point (AP) where the MS obtained access to the fixed network. The identifying information is used to query a database to determine if the MS is authorized for access through the AP. The database can identify the AP in any number of ways, including but not limited to MAC address, IP address, and FQDN. The results form the database query are evaluated and the requested registration from the MS is either completed or rejected based on the access authorization associated with the AP.

Claims

1. A computer-implemented method for evaluating registration requests associated with a mobile subscriber (MS) in a fixed-mobile converged network, wherein the fixed-mobile converged network includes an Internet Protocol Network and a Carrier Network, the computer-implemented method comprising:

receiving a registration request from the MS, wherein the registration request is associated with a request to register the MS with the Internet Protocol Network;

identifying an access point (AP) that is associated with the registration request;

querying a database (dB) with at least one identifier associated with the AP session, wherein the dB includes entries associated with identifiers for APs;

receiving a reply from the dB;

evaluating the reply to determine an authorization status for the registration request, wherein the determined authorization status corresponds to at least one of access permitted and access denied;

rejecting the registration request when the determined authorization status corresponds to deny access; and

completing the registration request when the determined authorization status corresponds to grant access.

2. The computer-implemented method of claim 1, wherein the at least one identifier corresponds to at least one of:

a Media Access Control (MAC) address that is assigned to the AP, an Internet Protocol (IP) address that is assigned to the AP, a fully-qualified domain name (FQDN) that is assigned to the AP, the Media Access Control (MAC) address that is assigned to a router that is serving the AP, an IP address that is assigned to the router that is serving the AP, and a fully-qualified domain name (FQDN) that is assigned to the router that is serving the AP.

3. The computer-implemented method of claim 2, wherein the entries in the dB correspond to at least one of:

a MAC address, a range of MAC addresses, a list of MAC addresses, an IP address, a range of IP addresses, a list of IP addresses, a FQDN, and a list of FQDNs.

4. The computer-implemented method of claim 1, further comprising:

comparing the at least one identifier associated with the AP to entries in the dB in response to the query, and identifying an authorization status as deny access when the at least one identifier is found in an entry of the dB.

5. The computer-implemented method of claim 1, further comprising:

comparing the at least one identifier associated with the AP to entries in the dB in response to the query, and identifying an authorization status as grant access when at least one identifier is found in an entry of the dB.

6. The computer-implemented method of claim 1, wherein the entries associated with the dB correspond to at least one of:

a blacklist, a whitelist, an authorization access list, and an authorization rejection list.

7. A system for evaluating registration requests associated with a mobile subscriber (MS) in a in a fixed-mobile converged network, wherein the fixed-mobile converged network includes a UMA Network and a Carrier Network, the method comprising:

an access point (AP) that is arranged to coordinate communication between the MS and the UMA Network;

a security gateway (SGW) that is arranged to;

communicate with the MS via the AP, receive a registration request from the MS, and communicate a registration challenge to the MS, wherein the registration request is associated with a request to register with the UMA Network;

a UMA database (dB) that is indexed according to at least one identifier associated with at least one AP; and

a UMA controller (UNC) that is arranged in communication with the UMA dB and the SGW, wherein the UNC is arranged to;

evaluate the registration request;

retrieve an identifier associated with the AP associated with the registration request;

query the UMA dB with the retrieved identifier;

receive a reply from the UMA dB;

evaluate the reply from the UMA dB for an authorization status, and

reject the registration request when the determined authorization status corresponds to deny access; and

grant the registration request when the determined authorization status corresponds to grant access.

8. The system of claim 7, wherein the identifier corresponds to at least one of:

a Media Access Control (MAC) address that is assigned to the AP, an Internet Protocol (IP) address that is assigned to the AP, a fully-qualified domain name (FQDN) that is assigned to the AP, the Media Access Control (MAC) address that is assigned to a router that is serving the AP, an IP address that is assigned to the router that is serving the AP, and a fully-qualified domain name (FQDN) that is assigned to the router that is serving the AP.

9. The system of claim 8, wherein entries in the UMA dB correspond to at least one of:

a MAC address, a range of MAC addresses, a list of MAC addresses, an IP address, a range of IP addresses, a list of IP addresses, a FQDN, and a list of FQDNs.

10. The system of claim 7, the UMA dB further comprising:

a means for comparing the identifier associated with the AP to entries in the UMA dB in response to the query, and a means for identifying an authorization status as deny access when the at least one identifier is found in an entry of the UMA dB.

11. The system of claim 7, the UMA dB further comprising:

a means for comparing the identifier associated with the AP to entries in the UMA dB in response to the query, and a means for identifying an authorization status as grant access when the at least one identifier is found in an entry of the UMA dB.

12. The system of claim 7, wherein the entries associated with the UMA dB correspond to at least one of:

a blacklist, a whitelist, an authorization access list, and an authorization rejection list.

16. The system of claim 7, further comprising:

a means for identifying the AP on at least one of;

a blacklist, a whitelist, an access authorization list, and an access rejection list.

17. The system of claim 7, further comprising at least one of:

a means for adding another identifier to a blacklist in the UMA dB, a means for removing the other identifier from the blacklist in the UMA dB, a means for adding the other identifier to a whitelist in the UMA dB, a means for removing the other identifier from the whitelist in the UMA dB, wherein the other identifier is associated with another AP.

13. An Unlicensed Mobile Access Network Controller (UNC) for managing access authorization between a mobile subscriber (MS) and an Unlicensed Mobile Access (UMA) Network, the UNC comprising:

a means for monitoring registration requests associated with a mobile subscriber (MS) that is managed in the UMA Network;

a means for identifying an access point that is associated with the call connection of the MS to the UMA network, wherein the access point is identified by at least one of a Media Access Control (MAC) address, an Internet Protocol (IP) address, an a fully qualified domain name (FQDN);

a means for retrieving an authorization status associated with the identified AP from a UMA database (dB), wherein the authorization status corresponds to one of;

access granted, and access denied; and

a means for rejecting the registration request from the MS when the retrieved authorization status corresponds to access denied.

a means for accepting the registration request from the MS when the retrieved authorization status corresponds to access granted.

14. The UNC of claim 13, further comprising:

a means for querying the UMA dB with the identified associated with the AP, and a means for receiving a reply from the UMA dB, wherein the reply from the UMA dB includes the authorization status associated with the AP.

15. The UNC of claim 13, wherein entries in the UMA dB correspond to at least one of:

a MAC address, a range of MAC addresses, a list of MAC addresses, an IP address, a range of IP addresses, a list of IP addresses, a FQDN, and a list of FQDNs.