GW coupled SIP proxy

• US 20080254794A1
• Filed: 04/11/2007
• Published: 10/16/2008
• Est. Priority Date: 04/11/2007
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Grayson, Mark, Rosenberg, Jonathan D.
• Granted Patent: US 7,764,963 B2
• Time in Patent Office: Days
• US Class Current: 455/435.1
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

In one embodiment, a method can include: (i) performing an initial authentication with a mobile device in an access gateway, the access gateway being a point of attachment; (ii) forwarding a first message from the mobile device to an edge proxy; (iii) receiving a second message from the edge proxy; and (iv) returning a modified version of the second message to the edge proxy for a final authentication of the mobile device.

Claims

1. A method, comprising:

performing an initial authentication with a mobile device in an access gateway, the access gateway being a point of attachment;

forwarding a first message from the mobile device to an edge proxy;

receiving a second message from the edge proxy; and

returning a modified version of the second message to the edge proxy for a final authentication of the mobile device.

2. The method of claim 1, wherein the performing the initial authentication comprises using general packet radio service (GPRS) tunneling protocol (GTP) or point-to-point protocol (PPP).

3. The method of claim 1, wherein the first and second messages comprise session initiation protocol (SIP) messages.

4. The method of claim 1, wherein the access gateway comprises a gateway GPRS support node (GGSN) or packet data serving node (PDSN).

5. The method of claim 1, wherein the edge proxy comprises a proxy call session control function (P-CSCF).

6. The method of claim 1, further comprising returning an SIP message to the mobile device.

7. The method of claim 1, wherein the first message comprises an invite or registration message.

8. The method of claim 1, wherein the second message comprises a query for a visited network identification.

9. The method of claim 1, further comprising denying or allowing network access.

10. The method of claim 1, further comprising analyzing an asserted identity from the access gateway.

11. The method of claim 1, further comprising deriving media quality statistics in the access gateway.

12. The method of claim 1, further comprising accessing services from a home-based network.

13. A method, comprising:

receiving in an edge proxy, a first message from a mobile device via an access gateway;

sending a second message to the access gateway; and

receiving a modified version of the second message for a final authentication of the mobile device.

14. The method of claim 13, wherein the first and second messages comprise session initiation protocol (SIP) messages.

15. The method of claim 13, wherein the access gateway comprises a gateway general packet radio service (GPRS) support node (GGSN) or packet data serving node (PDSN).

16. The method of claim 13, wherein the edge proxy comprises a proxy call session control function (P-CSCF).

17. The method of claim 13, further comprising returning an SIP message to the mobile device.

18. The method of claim 13, wherein the first message comprises an invite or registration message.

19. The method of claim 13, wherein the second message comprises a query for a visited network identification.

20. The method of claim 13, further comprising denying or allowing network access.

21. The method of claim 13, further comprising analyzing an asserted identity from the access gateway.

22. The method of claim 13, further comprising deriving media quality statistics in the access gateway.

23. The method of claim 13, further comprising accessing services from a home-based network.

24. A means for protecting a session initiation protocol (SIP) infrastructure, the means comprising:

a means for performing an initial authentication with a mobile device in an access gateway, the access gateway being a point of attachment;

a means for forwarding a first message from the mobile device to an edge proxy;

a means for receiving a second message from the edge proxy; and

a means for returning a modified version of the second message to the edge proxy for a final authentication of the mobile device.

25. A means for protecting a session initiation protocol (SIP) infrastructure, the means comprising:

a means for receiving in an edge proxy, a first message from a mobile device via an access gateway;

a means for sending a second message to the access gateway; and

a means for receiving a modified version of the second message for a final authentication of the mobile device.