NETWORK ELEMENT AND METHOD FOR PROVIDING ACCESS CONTROL FOR A CELLULAR COMMUNCIATION NETWORK

• US 20130040608A1
• Filed: 10/17/2012
• Published: 02/14/2013
• Est. Priority Date: 09/29/2006
• Status: Active Grant

• Current Assignee: Ipaccess Limited (Mavenir Group Holdings Ltd.)
• Original Assignee: Ipaccess Limited (Mavenir Group Holdings Ltd.)
• Inventors: Moore, Trevor, Piercy, Neil Philip, NEIL, DAVID
• Granted Patent: US 8,571,523 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

A network element (130, 330), for providing access control to a core network (120) of a cellular communication network (100) for a wireless communication unit (150) operating within a communication cell supported by the network element (130, 330), comprises a receiver for receiving a message (425) from the wireless communication unit (150) comprising identity information. The network element further comprises logic (160), operably coupled to the receiver, for determining whether to permit the mobile communication unit (150) access to the core network (120), based at least in part on the received identity information.

Claims

1. A network element for providing access control to a core network of a cellular communication network for a wireless communication unit operating within a communication cell supported by the network element, wherein the network element comprises:

a receiver for receiving a message from the wireless communication unit comprising identity information and

logic, operably coupled to the receiver, for determining whether to permit the mobile communication unit access to the core network, based at least in part on the received identity information,

wherein the logic is arranged to construct a User Authentication Request message comprising an invalid Authentication Token in response to the logic determining that the wireless communication unit is not permitted access to the core network.

2. The network element of claim 1 further comprising a transmitter for transmitting an Identity Request message to the wireless communication unit, and the message received from the wireless communication unit comprising identity information is received in response thereto.

3. The network element of claim 2 wherein the receiver of the network element receives a Location Update Request message from the wireless communication unit attempting to connect to the core network and the transmitter transmits the Identity Request message to the wireless communication unit in response thereto.

4. The network element of claim 3 wherein the Location Update Request message is intended for the core network, and the logic in the network element is arranged to intercept the Location Update Request message.

5. The network element of claim 4 wherein the Location Update Request message is in a form of a Mobility Management (MM) message, intended for receipt by the core network.

6. The network element of claims 3 wherein the network element comprises a memory element, operably coupled to the logic, and arranged to store the Location Update Request message such that the logic retrieves the Location Update Request message from the memory element and forwards the message to the core network, if the logic determines that the wireless communication unit is permitted access to the core network.

7. The network element of claim 6 further characterised in that the logic is arranged to send a null message to the core network in addition to forwarding the message to the core network.

8. The network element of claim 7 wherein the logic is arranged to construct the null message with a same sequence number as that of the message received from the wireless communication unit comprising identity information.

9. The network element of claim 1 wherein the logic sends the User Authentication Request message to the wireless communication unit.

10. The network element of claim 9 wherein the logic, upon receipt of a User Authentication Reject message from the wireless communication unit, re-sends the User Authentication Request message comprising the invalid Authentication Token to the wireless communication unit.

11. The network element of claim 1 wherein the communication cell supported by the network element is allocated a unique location area code.

12. The network element of claim 11 wherein a Location Update Request message is received from the wireless communication unit as a consequence of the wireless communication unit identifying the locally unique location area code.

13. The network element of claim 1 wherein the message comprises an International Mobile Subscriber Identity (IMSI) number of the wireless communication unit.

14. The network element of claim 13 further comprising a memory element arranged to store a plurality of IMSI'"'"'s for a plurality of wireless communication units permitted access to the core network via the communication cell.

15. The network element of claim 14 wherein the logic is arranged to determine whether to permit the wireless communication unit access to the core network by comparing the IMSI for that wireless communication unit received within the message to the plurality of IMSI'"'"'s stored in the memory element.

16. The network element of claim 1 wherein the network element is at least one from a group of:

an access point base station;

a radio network sub-system comprising an access point base station controller, via which the access to the core network is supported;

a Node-B arranged to support communication over a Universal Mobile Telecommunications System (UMTS) network.

17. A method for providing access control to a core network of a cellular communication network for a wireless communication unit operating within a communication cell supported by the network element, the method comprising:

receiving a message from the wireless communication unit comprising identity information;

determining whether to permit the wireless communication unit access to the core network, based at least in part on the received identity information and

constructing a User Authentication Request message comprising an invalid Authentication Token in response to the determining that the wireless communication unit is not permitted access to the core network.

18. A non-transitory computer-readable medium having computer-readable instructions stored thereon for execution by a processor to perform a method for providing access control to a core network of a cellular communication network for a wireless communication unit operating within a communication cell supported by the network element, the computer-readable code operable for:

receiving a message from the wireless communication unit comprising identity information;

determining whether to permit the wireless communication unit access to the core network, based at least in part on the received identity information and

constructing a User Authentication Request message comprising an invalid Authentication Token in response to the logic determining that the wireless communication unit is not permitted access to the core network.

19. The non-transitory computer readable medium of claim 18 comprising at least one of a hard disk, a CD-ROM, an optical storage device, a ROM (Read Only Memory), a PROM (Programmable Read Only Memory), a EPROM (Erasable Programmable Read Only Memory), EEPROM (Electrically Erasable Read Only Memory).