Method, System And Apparatus To Support Mobile Ip Version 6 Services in Cdma Systems

• US 20070274266A1
• Filed: 06/15/2004
• Published: 11/29/2007
• Est. Priority Date: 06/18/2003
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Larsson, Tony, Kato, Ryoji, Oyama, Johnson, Rune, Johan
• Application Number:
  US10/595,014
• Publication Number:
  US 20070274266A1
• Time in Patent Office: Days
• US Class Current: 370/335
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

The invention provides authentication and authorization support for MIPv6 in a CDMA framework by transferring MIPv6-related information in an, preferably extended, authentication protocol in an end-to-end procedure between a mobile node in a visited network and the home network of the mobile node over an AAA infrastructure. Preferably, the end-to-end procedure is executed between the mobile node and an AAA server (34) of the home network In the visited network, after lower-layer setup, point-to-point communication is established between the mobile node and an internetworking access server (22). The access server then communicates with the AAA home server for MIPv6 authentication and authorization of the mobile node. A preferred embodiment uses EAP as basis for the extended authentication protocol. EAP extensions are then used for MIPv6 initiation and re-authentication, while CHAP can be beneficial for MIPv6 hand-in.

Claims

1. A method of authentication and authorization support for Mobile IP version 6 (MIPv6) in a CDMA system, the method comprising transferring, between a mobile node in a visited network and a home network of the mobile node, MIPv6-related authentication and authorization information in an authentication protocol in an end-to-end procedure transparent to the visited network over an AAA infrastructure.

3. The method of claim 1, wherein the end-to-end procedure is executed between the mobile node and an AAA server in the home network, and nodes in the visited network act as mere pass-through agents in the end-to-end procedure.

4. The method of claim 3, wherein the MIPv6-related information is transferred in the authentication protocol between the mobile node and the AAA home network server via an internetworking access server located in the visited network.

6. The method of claim 4, wherein point-to-point communication between the mobile node and the internetworking access server is configured based on the CSD-PPP protocol.

15. The method of claim 1, wherein said method further comprises the step of performing, for the purpose of MIPv6 hand-in, CHAP authentication between the mobile node and the home network.

18. The method of claim 1, wherein the MIPv6-related information is transferred over the AAA infrastructure for allocation of a home agent, for establishing a MIPv6 security association between the mobile node and the home agent and for establishing a binding for the mobile node in the home agent.

20. The method of claim 4, wherein the internetworking access server offers the mobile node the possibility to use PPP or CSD-PPP by sending out a standard PPP/LCP packet and at least a PPP/EAP packet.

23. The method of claim 20, wherein the internetworking access server also sends out a PPP/CHAP packet together with the PPP/LCP and PPP/EAP packets.

2. (canceled)

8. The method of claim 2, wherein the authentication protocol is an extended Extensible Authentication Protocol (EAP) and the MIPv6-related authentication and authorization information is incorporated as additional data in the EAP protocol stack.

10. The method of claim 8, wherein the MIPv6-related information is transferred in a generic container attribute available for any EAP method.

11. The method of claim 8, wherein the MIPv6-related information is transferred in a method-specific generic container attribute of the method layer in the EAP protocol stack.

5. (canceled)

7. (canceled)

9. (canceled)

12-14. -14. (canceled)

16-17. -17. (canceled)

19. (canceled)

21-22. -22. (canceled)

24-26. -26. (canceled)

27. A system for authentication and authorization support for Mobile IP version 6 (MIPv6) in a CDMA system, comprising means for transferring between a mobile node in a visited network and a home network of the mobile node, MIPv6-related authentication and authorization information in an authentication protocol in an end-to-end procedure transparent to the visited network over an AAA infrastructure.

29. The system of claim 27, wherein the end-to-end procedure is between the mobile node and an AAA server in the home network, and nodes in the visited network act as mere pass-through agents in the end-to-end procedure.

30. The system of claim 29, wherein the MIPv6-related information is transferred in the authentication protocol between the mobile node and the AAA home network server via an internetworking access server located in the visited network.

32. The system of claim 30, further comprising means for configuring point-to-point communication between the mobile node and the internetworking access server based on the CSD-PPP protocol.

34. The system of claim 27, wherein the authentication protocol is an extended Extensible Authentication protocol (EAP) and the MIPv6-related authentication and authorization information is incorporated as additional data in the EAP protocol stack.

36. The system of claim 34, wherein said means for transferring MIPv6-related information comprises means for transferring the MIPv6-related information in a generic container attribute available for any EAP method.

37. The system of claim 34, wherein said means for transferring MIPv6-related information comprises means for transferring the MIPv6-related information in a method-specific generic container attribute of the method layer in the EAP protocol stack.

41. The system of claim 27, wherein said system further comprises means for performing, for the purpose of MIPv6 hand-in, CHAP authentication between the mobile node and the home network.

43. The system of claim 27, wherein said means for transferring MIPv6-related information is operable for transferring the MIPv6-related information over the AAA infrastructure for allocation of a home agent, for establishing a MIPv6 security association between the mobile node and the home agent, and for establishing a binding for the mobile node in the home agent.

46. The system of claim 30, wherein the internetworking access server (22) is operable for offering the mobile node the possibility to use PPP or CSD-PPP by sending out a standard PPP/LCP packet and at least a PPP/EAP packet.

49. The system of claim 46, wherein the internetworking access server is operable for sending out a PPP/CHAP packet together with the PPP/LCP and PPP/EAP packets.

28. (canceled)

31. (canceled)

33. (canceled)

35. (canceled)

38-40. -40. (canceled)

42. (canceled)

44-45. -45. (canceled)

47-48. -48. (canceled)

50-52. -52. (canceled)

53. A system for Mobile IP version 6 (MIPv6) hand-in within a CDMA framework, characterized by means for performing CHAP authentication between a mobile node in a visited network and an AAA server in a home network of the mobile node over an AAA infrastructure.

54-57. -57. (canceled)