METHOD AND DEVICE FOR AUTHENTICATION AND AUTHORIZATION CHECKING ON LBS IN WIMAX NETWORK

• US 20100186069A1
• Filed: 06/12/2008
• Published: 07/22/2010
• Est. Priority Date: 06/12/2007
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Liu, Meili
• Granted Patent: US 8,442,551 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A device for performing authentication and authorization checking on Location-based service (LBS) in Wimax network comprises a location assessment module (LA) adapted to performing location assessment, a location coordination and control module (LC) adapted to initiate LBS assessment, location calculation; a memory included in AAA and adapted to store LBS subscription information; an authentication processing module included in AAA and responsible for LBS authentication; an authorization list memory included in LS; and an authorization checking module included in LS and responsible for authorization checking on MO MS. Present invention provides a method for authentication and authorization checking on LBS in Wimax network. This strengthens security for LBS in Wimax network, protects privacy right of subscribers to LBS, and fills up the blankness in the current Wimax standards.

Claims

1. A device for performing authentication and authorization checking on Location-based service (LBS) in Wimax network, comprising

a location agent (LA) adapted to performing location measurement,

a location controller (LC) adapted to initiate LBS measurement, location calculation;

an authentication and authorization information memory in AAA;

an authentication processing module included in AAA and responsible for authentication on a LBS service;

an authorization checking processing module included in AAA and responsible for authorization checking on a LBS client and a MS requesting for LBS.

2. The device according to claim 1, wherein the authentication and authorization information memory in AAA is designed as an upgraded database by adding LBS subscription information to an existing database in AAA, or as an independent memory module.

3. The device according to claim 1, wherein AAA performs authentication on the LBS service so as to guarantee that only a subscribe LBS service can pass the authentication.

4. The device according to claim 1, wherein the authorization list in AAA saves a list of LBS clients permitted to locating.

5. The device according to claim 1, wherein the authorization list in AAA saves a list of MO MSs permitted to locating.

6. The device according to claim 1, wherein the authorization list in AAA saves a list of MO MSs prohibited from locating.

7. The device according to claim 1, wherein said authorization checking processing module guarantees only a MO MS that is permitted by a MT MS can locate the latter MS.

8. The device according to claim 3, wherein an operator can add, delete or modify the LBS subscription information in AAA according to a user'"'"'s requirement.

9. The device according to claim 4, wherein said AAA performs authorization checking on an external LBS client and on a MS requesting for location service.

10. The device according to claim 5, wherein a user can add, delete or modify the list of MO MSs permitted to locating in LS.

11. The device according to claim 6, wherein a user can add, delete or modify the list of MO MSs prohibited from locating in LS.

12. A signaling procedure for successful authentication and authorization checking on Location-based service (LBS) in Wimax network, comprising steps ofsending by LS an authentication and authorization checking request message to AAA after the LS receives a location request;

2) performing authentication and authorization checking in AAA;

3) finding a serving LC for a MS if the authentication and authorization checking succeeds;

4) sending by LS a location report request to the serving LC;

5) performing an intra-ASN location determination process;

6) sending by the LC a location report response to LS, with the response containing the obtained location of a target MS;

7) sending by LS a location response to the location requestor; and

8) sending LS the updated accounting data to an accounting server.

13. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, AAA first performs authentication on a LBS service with respect to a location request initiated by a MS.

14. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, AAA performs authentication on a LBS service after the authorization checking on an external LBS client succeeds, if a location request is initiated by the external LBS client.

15. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, the authentication on a LBS service is checked in AAA whether the LBS service is a subscribed service and whether its QoS matches.

16. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, AAA performs authorization checking on a MO MS after the authentication on an external LBS client and the LBS service succeeds, if a location request is initiated by the external LBS client.

17. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, AAA performs authorization checking on a MO MS after the authentication on the LBS service succeeds, if a location request is initiated by a MS.

18. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, the authorization checking on a MO MS is checking whether the user who initiates the location request has the right to locate a target user.

19. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, for said authorization checking on a MO MS, it is first checked whether the MO MS is in the access-permitted list of a MT MS, and if yes, the authorization checking on the MO MS succeeds.

20. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, for said authorization checking on a MO MS, it is first checked whether the MO MS is in the access-permitted list of a MT MS, and if not, it is checked whether the MO MS is in the access-prohibited list of the MT MS;

If yes, the authorization checking on the MO MS fails, and a location response message is directly sent to the LBS initiator, with the message indicating that the location fails and carrying a reason value that the authorization checking on the MO MS fails.

21. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, for said authorization checking on a MO MS, it is first checked in the LS whether the MO MS is in the access-permitted list of a MT MS, and if not, it is checked whether the MO MS is in the access-prohibited list of the MT MS;

if not, the MT MS is queried as to whether it permits the MO MS to locate it;

if the user of the MT MS can make a choice of permission or prohibition.

22. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, for said authorization checking on a MO MS, it is first checked whether the MO MS is in the access-permitted list of a MT MS, and if not, it is checked whether the MO MS is in the access-prohibited list of the MT MS;

if not, the MT MS is queried as to whether it permits the MO MS to locate it;

if the user of the MT MS chooses permission, the authorization checking on the MO MS succeeds.

23. The method according to claim 12, wherein, during the process of the authentication and authorization checking by AAA, for said authorization checking on a MO MS, it is first checked whether the MO MS is in the access-permitted list of a MT MS, and if not, it is checked whether the MO MS is in the access-prohibited list of the MT MS;

if not, the MT MS is queried as to whether it permits the MO MS to locate it;

if the user of the MT MS chooses prohibition, the authorization checking on the MO MS fails;

the MT MS sends to the LS a response to the query to indicate that the location is prohibited;

then the LS sends a location response message to the LBS initiator, with the message indicating that the location fails and carrying a reason value that the authorization checking on the MO MS fails.

24. A method for failed authentication and authorization checking on Location-based service (LBS) in Wimax network, comprising steps ofSending by LBS Client a Location Request to LS in order to locate MS;

2) sending by LS an authentication and authorization checking request to AAA after the LS receives a location request;

3) performing authentication and authorization checking in AAA; and

4) sending a location response to a location request initiator, if the authentication and authorization checking fails.

25. The method according to claim 24, wherein LS sends the authentication and authorization checking message to AAA after receiving the locating request from a MS or a LBS client.

26. The method according to claim 24, wherein, in the Wimax network, said AAA performs authentication on a LBS service to guarantee that only a subscribed LBS can obtain the LBS service.

27. The method according to claim 24, wherein, in the Wimax network, said AAA performs authorization checking on LBS to guarantee that only a legal LBS client can obtain the LBS service.

28. The method according to claim 24, wherein, in the Wimax network, said AAA performs authorization checking on a MS requesting for LBS to guarantee that only a legal MS requestor can obtains the LBS service.

29. The method according to claim 24, wherein said location response includes the indication of location failure and carrying a reason value for failure.

30. The method according to claim 24, wherein, in the Wimax network, if the authorization checking on the LBS client does not succeed in AAA, the authentication and authorization checking fails, and LS sends a location response message to the location requestor, with the message indicating the failure of location and carrying a reason value for failure.

31. The method according to claim 24, wherein, in the Wimax network, if the authorization checking on the requesting MS does not succeed in AAA, the authentication and authorization checking fails, and LS sends a location response message to the location requestor, with the message indicating the failure of location and carrying a reason value for failure.

32. The method according to claim 24, wherein, during the location processing process in the Wimax network, if the authentication or the authorization checking does not succeed, a location response message is sent to the location requestor, with the included reason for failure being that the authentication and authorization checking fails.

33. The method according to claim 24, wherein, during the location processing process in the Wimax network, if the authentication or the authorization checking does not succeed, a location response message is sent to the location requestor, with the included reason for failure being that the client requesting for location has no right or the requesting MS has no right.