Method and System for Supporting SIP Session Policy Using Existing Authorization Architecture and Protocols

• US 20100142517A1
• Filed: 11/10/2009
• Published: 06/10/2010
• Est. Priority Date: 11/10/2008
• Status: Abandoned Application

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Allen, Andrew, Buckley, Adrian, Montemurro, Michael
• Application Number:
  US12/615,528
• Publication Number:
  US 20100142517A1
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 63/16 Implementing security features at a particular protocol layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 69/24 Negotiation of communication capabilities
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 76/12 Setup of transport tunnels
• CPC Class Codes: H04W 76/20 Manipulation of established connections
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

A method for sending a session policy request to a network component is provided. The method comprises a user agent sending the session policy request to the network component using a lower layer protocol. The lower layer protocol is at least one of Extensible Authentication Protocol (EAP), Point to Point Protocol (PPP), and General Packet Radio Service (GPRS) Activate Packet Data Protocol (PDP) context.

Claims

1. A method for sending a session policy request to a network component, comprising:

a user agent sending the session policy request to the network component using a lower layer protocol, wherein the lower layer protocol is at least one of;

Extensible Authentication Protocol (EAP),

Point to Point Protocol (PPP), and

General Packet Radio Service (GPRS) Activate Packet Data Protocol (PDP) context.

2. The method of claim 1, wherein the network component is at least one of:

a policy server;

an authentication server;

a policy control and charging rules function;

a policy control and enforcement function;

a network access server;

a gateway; and

a router.

3. The method of claim 1, wherein the session policy request passes through an intermediate component between the user agent and the network component, and wherein the intermediate component is at least one of:

a gateway;

an access point; and

a network access server.

4. The method of claim 3, wherein the user agent connects to the intermediate component via a connectivity access network comprising at least one of:

General Packet Radio Service (GPRS);

Global System for Mobile Communications (GSM);

Enhanced Data rates for GSM Evolution (EDGE);

UMTS (Universal Mobile Telecommunications System) Terrestrial Radio Access Network (UTRAN);

Evolved UTRAN (E-UTRAN);

Third Generation Partnership Project (3GPP) UTRAN;

3GPP2 Code Division Multiple Access (CDMA);

802.11 Wireless Local Area Network (WLAN);

802.16 Wireless Metropolitan Area Network (WMAN);

802.20 Wireless Wide Area Network (WWAN);

802.22 Wireless Regional Area Network (WRAN);

Data Over Cable Service Interface Specification (DOCSIS); and

Telecoms and Internet converged Services and Protocols for Advanced Networks (TISPAN), including the xDSL family of protocols.

5. The method of claim 3, wherein the at least one lower layer protocol is used for transporting the session policy request between the user agent and the intermediate component, and at least one lower layer protocol frame transports the session policy request between the intermediate component and the network component using at least one of:

a DIAMETER protocol; and

a RADIUS protocol.

6. The method of claim 1, wherein a type-length-value structure capability in the at least one lower layer protocol is used to express the session policy request.

7. The method of claim 1, wherein the network component provides a policy document to the user agent in response to the session policy request, and wherein the policy document is converted to binary to decrease its size.

8. The method of claim 1, wherein the user agent contacts the network component using a Uniform Resource Identifier (URI) in a Session Initiation Protocol (SIP) message received by the user agent.

9. The method of claim 8, wherein the URI is in a Policy-Contact header of the SIP message.

10. The method of claim 8, wherein the user agent contacts a plurality of network components via a single session policy request sent to a single network component, the single network component contacting the remainder of the network components, aggregating policy information from the remainder of the network components, and providing the aggregated policy information to the user agent.

11. A user agent for a session policy request to a network component, comprising:

a processor configured to send the session policy request to the network component using a lower layer protocol, wherein the lower layer protocol is at least one of;

Extensible Authentication Protocol (EAP),

Point to Point Protocol (PPP), and

General Packet Radio Service (GPRS) Activate Packet Data Protocol (PDP) context.

12. The user agent of claim 11, wherein the network component is at least one of:

a policy server;

an authentication server;

a policy control and charging rules function;

a policy control and enforcement function;

a network access server;

a gateway; and

a router.

13. The user agent of claim 11, wherein the session policy request passes through an intermediate component between the user agent and the network component, and wherein the intermediate component is at least one of:

a gateway;

an access point; and

a network access server.

14. The user agent of claim 13, wherein the at least one lower layer protocol is used for transporting the session policy request between the user agent and the intermediate component, and at least one lower layer protocol frame transports the session policy request between the intermediate component and the network component using at least one of:

a DIAMETER protocol; and

a RADIUS protocol.

15. The user agent of claim 13, wherein the user agent connects to the intermediate component via a connectivity access network comprising at least one of:

General Packet Radio Service (GPRS);

Global System for Mobile Communications (GSM);

Enhanced Data rates for GSM Evolution (EDGE);

UMTS (Universal Mobile Telecommunications System) Terrestrial Radio Access Network (UTRAN);

Evolved UTRAN (E-UTRAN);

Third Generation Partnership Project (3GPP) UTRAN;

3GPP2 Code Division Multiple Access (CDMA);

802.11 Wireless Local Area Network (WLAN);

802.16 Wireless Metropolitan Area Network (WMAN);

802.20 Wireless Wide Area Network (WWAN);

802.22 Wireless Regional Area Network (WRAN);

Data Over Cable Service Interface Specification (DOCSIS); and

Telecoms and Internet converged Services and Protocols for Advanced Networks (TISPAN), including the xDSL family of protocols.

16. The user agent of claim 11, wherein a type-length-value structure capability in the at least one lower layer protocol is used to express the session policy request.

17. The user agent of claim 11, wherein the network component provides a policy document to the user agent in response to the session policy request, and wherein the policy document is converted to binary to decrease its size.

18. The user agent of claim 11, wherein the user agent contacts the network component using a Uniform Resource Identifier (URI) in a Session Initiation Protocol (SIP) message received by the user agent.

19. The user agent of claim 18, wherein the URI is in a Policy-Contact header of the SIP message.

20. The user agent of claim 18, wherein the user agent contacts a plurality of network components via a single session policy request sent to a single network component, the single network component contacting the remainder of the network components, aggregating policy information from the remainder of the network components, and providing the aggregated policy information to the user agent.

21. A network component for providing session policy, the network component comprising:

an authentication component configured to receive a session policy request sent a lower layer protocol, wherein the lower layer protocol is at least one of;

Extensible Authentication Protocol (EAP),

Point to Point Protocol (PPP), and

General Packet Radio Service (GPRS) Activate Packet Data Protocol (PDP) context.

22. The network component of claim 21, wherein the authentication component is at least one of:

a policy server;

an authentication server;

a policy control and charging rules function;

a policy control and enforcement function;

a network access server;

a gateway; and

a router.

23. The network component of claim 21, wherein the session policy request passes from a user agent through an intermediate component to the network component, and wherein the intermediate component is at least one of:

a gateway;

an access point; and

a network access server.

24. The network component of claim 23, wherein the at least one lower layer protocol is used for transporting the session policy request between the user agent and the intermediate component, and at least one lower layer protocol frame transports the session policy request between the intermediate component and the network component using at least one of:

a DIAMETER protocol; and

a RADIUS protocol.

25. The network component of claim 23 wherein the user agent connects to the intermediate component via a connectivity access network comprising at least one of:

General Packet Radio Service (GPRS);

Global System for Mobile Communications (GSM);

Enhanced Data rates for GSM Evolution (EDGE);

UMTS (Universal Mobile Telecommunications System) Terrestrial Radio Access Network (UTRAN);

Evolved UTRAN (E-UTRAN);

Third Generation Partnership Project (3GPP) UTRAN;

3GPP2 Code Division Multiple Access (CDMA);

802.11 Wireless Local Area Network (WLAN);

802.16 Wireless Metropolitan Area Network (WMAN);

802.20 Wireless Wide Area Network (WWAN);

802.22 Wireless Regional Area Network (WRAN);

Data Over Cable Service Interface Specification (DOCSIS); and

Telecoms and Internet converged Services and Protocols for Advanced Networks (TISPAN), including the xDSL family of protocols.

26. The network component of claim 21, wherein a type-length-value structure capability in the at least one lower layer protocol is used to express the session policy request.

27. The network component of claim 21, wherein the authentication component provides a policy document to the user agent in response to the session policy request, and wherein the policy document is converted to binary to decrease its size.

28. The network component of claim 21, wherein the user agent contacts the authentication component using a Uniform Resource Identifier (URI) in a Session Initiation Protocol (SIP) message received by the user agent.

29. The network component of claim 28, wherein the URI is in a Policy-Contact header of the SIP message.

30. The network component of claim 28, wherein the user agent contacts a plurality of authentication components via a single session policy request sent to a single authentication component, the single authentication component contacting the remainder of the authentication components, aggregating policy information from the remainder of the authentication components, and providing the aggregated policy information to the user agent.