Method, a device for configuring at least one firewall and a system comprising such device

• US 20080229088A1
• Filed: 03/12/2008
• Published: 09/18/2008
• Est. Priority Date: 03/12/2007
• Status: Active Grant

• Current Assignee: Nokia Solutions and Networks GmbH & Co. KG (Nokia Corporation)
• Original Assignee: Nokia Siemens Networks GmbH & Company KG (Nokia Corporation)
• Inventors: Carle, Georg, Fessi, Ali, Barth, Antje, Fouquet, Marc, Schlager, Morten
• Granted Patent: US 8,046,442 B2
• Time in Patent Office: Days
• US Class Current: 713/1
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A method and a device to configure at least one firewall are provided comprising the steps of (i) transmitting at least one mobility report to a firewall controller; (ii) transmitting at least one session report to the firewall controller; and (iii) configuring the at least one firewall according to the information obtained by the at least one mobility report and by the at least one session report.

Claims

1. A method of configuring at least one firewall comprising:

transmitting at least one mobility report to a firewall controller;

transmitting at least one session report to the firewall controller;

configuring the at least one firewall according to the information obtained by the at least one mobility report and by the at least one session report.

2. The method according to claim 1, wherein the at least one firewall is configured by adding, removing or modifying at least one firewall rule.

3. The method according to claim 1, wherein the firewall controller receives the at least one mobility report from an Inter Access System Anchor.

4. The method according to claim 1, wherein the at least one mobility report provides information relating to the location of a terminal.

5. The method according to claim 4, wherein the terminal is a mobile terminal (UE).

6. The method according claim 4, wherein the at least one mobility report comprises information due to roaming of a terminal.

7. The method according to claim 1, wherein the at least one session report provides information about a new session.

8. The method according to claim 7, wherein the at least one session report contains information due to roaming of a terminal.

9. The method according to claim 1, wherein the firewall controller receives the at least one session report from an application function of communication networks comprising a Call Session Control Function (CSCF).

10. The method according to claim 1, wherein the at least one firewall is part of a 3GPP access gateway comprising a GGSN and/or a WLAN access gateway, or part of a 3GPP security gateway.

11. The method according to claim 1, wherein the method is performed by the firewall controller.

12. The method according to claim 11, wherein the firewall controller is a network component comprising a firewall controller functionality.

13. The method according to claim 12, wherein the firewall controller functionality is part of or associated with a Policy Control and Charging Rules Function (PCRF).

14. A device, comprising:

a mobility report configured to receive at least one mobility report;

a session report configured to receive at least one session report; and

a processor to configure at least one firewall based on information received from the at least one mobility report and from the at least one session report.

15. The device according to claim 14, wherein said device is a communication device comprising a firewall controller.

16. The device according to claim 14, wherein the device is associated with or part of a Policy Control and Charging Rules Function (PCRF).

17. The device according to claim 14, wherein the at least one firewall is configured by adding, removing or modifying at least one firewall rule.

18. The device according to claim 14, wherein the mobility report receiver receives the at least one mobility report from an Inter Access System Anchor.

19. The device according to claim 14, wherein the at least one mobility report provides information relating to the location of a terminal.

20. The device according to claim 19, wherein the terminal is a mobile terminal (UE).

21. The device according to claim 19, wherein the at least one mobility report comprises information due to roaming of a terminal.

22. The device according to claim 14, wherein the at least one session report provides information about a new session.

23. The device according to claim 22, wherein the at least one session report contains information due to roaming of a terminal.

24. The device according to claim 14, wherein the session report receiver receives the at least one session report from an application function of communication networks comprising a Call Session Control Function (CSCF).

25. The device according to claim 14, wherein the at least one firewall is part of a 3GPP access gateway comprising a GGSN and/or a WLAN access gateway, or part of a 3GPP security gateway.

38. A communication system comprising the device according to claim 14.

26-37. -37. (canceled)

39. (canceled)