METHOD FOR IMPLEMENTING AN INTERNET PROTOCOL (IP) CHARGING AND RATING MIDDLEWARE PLATFORM AND GATEWAY SYSTEM

• US 20090133114A1
• Filed: 11/03/2008
• Published: 05/21/2009
• Est. Priority Date: 01/23/2003
• Status: Active Grant

• Current Assignee: Redknee Inc.
• Original Assignee: Redknee Inc.
• Inventors: Rahim, Rubens, Ramakrishnan, Karthik, Collett, Ian Gordon
• Granted Patent: US 7,644,158 B2
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method for Internet Protocol (IP) charging and rating gateway within a system having: (i) a proxy server for connection to an Authentication, Authorization, and Accounting (AAA) server; (ii) an access gateway, (iii) an IP classification engine for connection between a data network and the access gateway; and (iv) a gateway controller connected to the proxy server and the IP classification engine, including the steps of: (a) receiving IP packets at the IP classification engine, the IP packets originating from the data network and destined for a subscriber device via the access gateway; (b) classifying the IP packets according to the protocol of each of the packets at the IP classification engine; and (c) selectively instructing the IP classification engine to permit or deny the flow of IP packets between the data network and the access gateway at the gateway controller. Preferably, the proxy server is configured to emulate the access gateway and the AAA server.

Claims

1. A method for Internet Protocol (IP) charging and rating gateway within an IP charging and rating gateway system, said system comprising:

(i) a proxy server for connection to an Authentication, Authorization, and Accounting (AAA) server;

(ii) an access gateway, said proxy server configured to reside between said AAA server and said access gateway, said proxy server further configured to emulate said access gateway such that when said AAA server communicates with said proxy server said AAA server presupposes that said AAA server is communicating with said access gateway, said proxy server further configured to emulate said AAA server such that when said access gateway communicates with said proxy server said access gateway presupposes said access server is communication with said AAA server;

(iii) an IP classification engine for connection between a data network and said access gateway; and

(iv) a gateway controller connected to said proxy server and said IP classification engine, said method comprising;

receiving IP packets at said IP classification engine, said IP packets originating from said data network and destined for a subscriber device via said access gateway;

classifying said IP packets according to the protocol of each of said packets at said IP classification engine; and

selectively instructing said IP classification engine to permit or deny the flow of IP packets between said data network and said access gateway at said gateway controller.

2. The method of claim 1, wherein a set of rating rules for classifying said IP packets are loaded into said IP classification engine.

3. The method of claim 2, wherein a series of system level triggers in said IP Classification Engine are armed on a real-time basis providing application control for, at least one of protocol state, destination URL or address;

or according to said protocol of each said packet, said protocols of each packet including at least one of HTTP, POP3, SMTP, MMS, FTP, and WAP.

4. The method of claim 3, where a series of system level triggers in said IP Classification Engine are armed based on attributes associated with OSI layers 2-7 including protocol-specific attributes and according to said protocol of each said packet, said protocols of each packet including, at least one of HTTP, POP3, SMTP, MMS, FTP, and WAP.

5. The method of claim 4, wherein a decision tree is created based upon a plurality of rating rules for analyzing and determining each packet type.

6. The method of claim 5, wherein each said packet is analyzed using said decision tree.

7. The method of claim 1, wherein said system further comprises an open charging middleware gateway for connection between a subscriber account server and said gateway controller, and wherein said method further comprises:

at said gateway controller, modifying, subscriber information stored in said subscriber account server and associated with said subscriber device according to classes of IP packets as classified by said IP classification engine as said IP packets flow to or from said data network or to or from said access gateway.

8. The method of claim 1, wherein said system further comprises an open charging middleware gateway for connection between a subscriber account server and said gateway controller;

said subscriber account server maintaining information associated with said subscriber device, and wherein said method further comprises;

instructing said IP classification engine to deny or redirect the flow of IP packets to or from said data network to or from said subscriber device via said access gateway if subscriber information in said subscriber account server indicates that flow of IP packets is not permitted.

9. The method of claim 1, wherein the access gateway comprises a Gateway GPRS Support Node (GGSN).

10. The method of claim 1, wherein the access gateway comprises a Packet Data Service Node (PDSN).

11. The method of claim 1, where the Authentication, Authorization, and Accounting server comprises a Remote Authentication Dial-In User Service (RADIUS) server.

12. The method of claim 1, further comprising, at said gateway controller, instructing said IP classification engine to redirect traffic from said data network if subscriber information in said subscriber account server indicates that flow of IP packets to or from said subscriber device is not permitted.

13. The method of claim 1, further comprising, at said IP classification engine, denying or redirecting IP packets according to how said IP packets are classified.

14. The method of claim 1, wherein said IP packets can be classified according to one or more of:

a protocol type, a protocol state, a destination Uniform Resource Locator (“

URL”

), an address, a time of day, a message content, or a message type.

15. The method of claim 1, further comprising, at said IP classification engine, denying or redirecting IP packets according to a particular protocol into which said IP packets are classified.

16. The method of claim 1, wherein said IP packets can be classified according to one or more of the following protocols:

Hyper Text Transfer Protocol (“

HTTP”

), Post Office Protocol (“

POP3”

), Simple Mail Transfer Protocol (“

SMTP”

), File Transfer Protocol (“

FTP”

), Multi-media Messaging Service (“

MMS”

), Wireless Application Protocol (“

WAP”

), Real Time Protocol (“

RTP”

), and Real Time Streaming Protocol (“

RTSP”

).

17. The method of claim 1, further comprising, at said proxy server, confirming if a subscriber'"'"'s account is active via either the Lightweight Directory Access Protocol (“

LDAP”

) or the Remote Authentication Dial In User Service (“

RADIUS”

) protocol.