Access control in a cellular system

• US 20080026726A1
• Filed: 06/12/2007
• Published: 01/31/2008
• Est. Priority Date: 07/11/2006
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: RadioFrame Networks, Inc. (Motorola Solutions, Inc.)
• Inventors: Wahlstrom, Donald, Zhang, Yan, Hoole, Elliott, Tariq, Ahmed, Sukumaran, Jayesh
• Granted Patent: US 7,949,336 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Controlling use of a mobile network element is disclosed. An indication is received that a mobile station associated with a mobile network is attempting to access the mobile network via a base transceiver station that (1) the mobile station is not authorized to use and (2) is located within a geographic area from which the mobile station is authorized to access the mobile network. The mobile station is prevented from accessing the mobile network via the base transceiver station.

Claims

1. A method of controlling use of a mobile network element, comprising:

receiving an indication that a mobile station associated with a mobile network is attempting to access the mobile network via a base transceiver station that (1) the mobile station is not authorized to use and (2) is located within a geographic area from which the mobile station is authorized to access the mobile network; and

preventing the mobile station from accessing the mobile network via the base transceiver station.

2. A method as recited in claim 1, wherein the base transceiver station comprises a small scale base transceiver station.

3. A method as recited in claim 1, further comprising determining that the mobile station is not authorized to access the mobile network via the base transceiver station.

4. A method as recited in claim 3, wherein determining that the mobile station is not authorized to access the mobile network via the base transceiver station comprises checking a database to determine whether an first identifier associated with the mobile station is associated with a second identifier associated with the base transceiver station.

5. A method as recited in claim 4, wherein the first identifier comprises an IMSI.

6. A method as recited in claim 4, wherein the second identifier comprises a location area code.

7. A method as recited in claim 1, further comprising associating with the base transceiver station a location area code specific to the base transceiver station or a set of base transceiver stations which set includes the base transceiver station.

8. A method as recited in claim 7, wherein said location area code comprises a first location area code and further comprising not associating the base transceiver station with a second location area code associated with the geographic area.

9. A method as recited in claim 1, wherein receiving an indication that the mobile station is attempting to access the mobile network via the base transceiver station comprises one or more of the following:

an indication that the mobile station is attempting to perform via the base transceiver station a location update;

an indication that the mobile station has performed via the base transceiver station a location update;

an indication that the mobile station is attempting to establish via the base transceiver station a call or other communication session;

an indication that a call or other communication session terminated to or originated by the mobile station has been connected via the base transceiver station;

an indication that an attempt is being made to hand the mobile station over to the base transceiver station; and

an indication that the mobile station has been handed over to the base transceiver station while a call or other communication session is in progress.

10. A method as recited in claim 1, wherein preventing the mobile station from accessing the mobile network via the base transceiver station comprising providing an indication that the mobile station is not associated with a location area with which the base transceiver station is associated.

11. A method as recited in claim 10, wherein the geographic area is associated with a second location area served by one or more other base transceiver stations via which the mobile station is authorized to access the mobile network.

12. A method as recited in claim 1, wherein preventing the mobile station from accessing the mobile network via the base transceiver station comprises forcing a handover to a second base transceiver station.

13. A method as recited in claim 12, wherein forcing a handover comprises sending from a base station controller a handover command that identifies the second base transceiver station.

14. A method as recited in claim 12, further comprising configuring a base station controller or other node to force the handover in the event any mobile station that is associated with the mobile network but which is not associated with the base transceiver station attempts to access the mobile network via the base transceiver station.

15. A method as recited in claim 14, further comprising making available to the base station controller or other node a database that associates with the base transceiver station one or more authorized mobile stations authorized to access the mobile network via the base transceiver station.

16. A method as recited in claim 1, wherein preventing the mobile station from accessing the mobile network via the base transceiver station comprises causing the mobile station to drop a call or other communication session.

17. A method as recited in claim 15, further comprising downloading to and installing on the mobile station a SIM toolkit (STK) application configured to cause the mobile station to drop a call or other communication session connected via or handed over to the base transceiver station.

18. A method as recited in claim 16, wherein the STK application is further configured to instruct a mobile equipment comprising the mobile station to inform the STK application in the event a call or other communication session is connected via the base transceiver station.

19. A mobile network element, comprising:

a communication interface configured to receive an indication that a mobile station associated with a mobile network is attempting to access the mobile network via a base transceiver station that (1) the mobile station is not authorized to use and (2) is located within a geographic area from which the mobile station is authorized to access the mobile network; and

a processor couple to the communication interface and configured to prevent the mobile station from accessing the mobile network via the base transceiver station.

20. A computer program product for controlling use of a mobile network element, the computer program product being embodied in a computer readable medium and comprising computer instructions for:

receiving an indication that a mobile station associated with a mobile network is attempting to access the mobile network via a base transceiver station that (1) the mobile station is not authorized to use and (2) is located within a geographic area from which the mobile station is authorized to access the mobile network; and

preventing the mobile station from accessing the mobile network via the base transceiver station.