Authentication Interworking

• US 20080092212A1
• Filed: 10/17/2006
• Published: 04/17/2008
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Mavenir Systems Incorporated (Mavenir Group Holdings Ltd.)
• Original Assignee: Mavenir Systems Incorporated (Mavenir Group Holdings Ltd.)
• Inventors: Ali, Rashad Mohammad, Patel, Pulin R., Lubenski, Zeev V.
• Granted Patent: US 8,887,235 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

The present disclosure includes a method and system for authentication interworking. In some embodiments, a method includes receiving, from a communication device, a request for services from a core network. The communication device is foreign to the core network. Authentication internetworking is provided to the foreign device to enable access to services provided by the core network.

Claims

1. A method, comprising:

receiving, from a communication device, a request for services from a core network, the communication device foreign to the core network; and

providing authentication internetworking to the foreign device to enable access to services provided by the core network.

2. The method of claim 1, the first device comprising a broadband device.

3. The method of claim 1, the core network comprising mobile core network.

4. A method, comprising:

receiving, from a first device, a request for services from a core network, the communication device foreign to the core network;

identifying information for authenticating a second device with the core network, the second device configured to receive services from the core network; and

representing the first device as the second device to the core network for authenticating the first device with the core network.

5. The method of claim 4, further comprising translating services to a form compatible with the first device.

6. The method of claim 4, the communication device comprising a broadband device.

7. The method of claim 4, the core network comprising a mobile core network.

8. A method, comprising:

receiving a message to authenticate a first network device associated with a first communication technology, the authentication message from a second network device associated with a second communication technology, the first communication technology different from the second communication technology;

automatically identifying information for authenticating the first network device, the authentication information associated with a third network device, the third network device associated with the second communication technology; and

automatically transmitting the authentication information to the second network device associated with the second communication technology for authenticating the first network device associated with the first communication technology.

9. The method of claim 8, further comprising:

receiving a request to authenticate the first network device with the second network device, the authentication request compatible with the first communication technology;

converting the authentication request to a form compatible with the second communication technology; and

transmitting the converted authentication request to the second device.

10. The method of claim 8, further comprising:

automatically identifying an authentication string included in the received message;

transmitting, to the third device, the authentication string in a message compatible with the second communication technology; and

receiving a response from the third device including the authentication information.

11. The method of claim 10, the third network device comprising a Subscriber Identity Module.

12. The method of claim 8, the received message encoded in a first protocol, the authentication information encoded in a second protocol.

13. The method of claim 12, the first protocol different from the second protocol.

14. The method of claim 8, further comprising storing authentication information for each of a plurality of network devices, the authentication information for each network device associated with a different communication technology.

15. A system, comprising:

a receiver configured to receive, from a communication device, a request for services from a core network, the communication device foreign to the core network; and

an authentication element configured to provide authentication internetworking to the foreign device to enable access to services provided by the core network.

16. The system of claim 15, the first device comprising a broadband device.

17. The system of claim 15, the core network comprising mobile core network.

18. A system, comprising:

a receiver configured to receiving, from a first device, a request for services from a core network, the communication device foreign to the core network; and

an authentication element configured to;

identify information for authenticating a second device with the core network, the second device configured to receive services from the core network; and

represent the first device as the second device to the core network for authenticating the first device with the core network.

19. The system of claim 18, further comprising a translator configured to translate services to a form compatible with the first device.

20. The system of claim 18, the communication device comprising a broadband device.

21. The system of claim 18, the core network comprising a mobile core network.

22. A system, comprising:

a receiver configured to receive a message to authenticate a first network device associated with a first communication technology, the authentication message from a second network device associated with a second communication technology, the first communication technology different from the second communication technology;

an authentication element configured to automatically identify information for authenticating the first network device, the authentication information associated with a third network device, the third network device associated with the second communication technology; and

a transmitter configured to automatically transmit the authentication information to the second network device associated with the second communication technology for authenticating the first network device associated with the first communication technology.

23. The system of claim 22, further comprising:

a request element configured to receive a request to authenticate the first network device with the second network device, the authentication request compatible with the first communication technology;

a converter configured to convert the authentication request to form a compatible with the second communication technology; and

a transmitter configured to transmit the converted authentication request to the second device.

24. The system of claim 22, further comprising:

a first element configured to automatically identifying an authentication string included in the received message;

a second element configured to transmit, to the third device, the authentication string in a message compatible with the second communication technology; and

a third element configured to receive a response from the third device including the authentication information.

25. The system of claim 24, the third network device comprising a Subscriber Identity Module.

26. The system of claim 22, the received message encoded in a first protocol, the authentication information encoded in a second protocol.

27. The system of claim 26, the first protocol different from the second protocol.

28. The system of claim 22, further comprising memory configured to store authentication information for each of a plurality of network devices, the authentication information for each network device associated with a different communication technology.