CONNECTING METHOD FOR SECURE CONNECTING OF A MOBILE DEVICE SYSTEM TO A NETWORK

• US 20150237500A1
• Filed: 01/22/2015
• Published: 08/20/2015
• Est. Priority Date: 01/23/2014
• Status: Abandoned Application

• Current Assignee: Vodafone Holding GmbH (Vodafone Group PLC)
• Original Assignee: Vodafone Holding GmbH (Vodafone Group PLC)
• Inventors: MUDDASSIR, Khan
• Application Number:
  US14/602,522
• Publication Number:
  US 20150237500A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

The invention is related to a Connecting method for secure connecting of a Mobile Device System (10) to a Network (100), comprising the following steps:

• • Sending a communication request (20) from the Mobile Device System (10) to a Network Operator (30) requesting a communication to the Network (100),
  • Receiving the communication request (20) at the Network Operator (30) and extracting at least one specification information (22) out of the communication request (20) specifying the Mobile Device System (10),
  • Forwarding the communication request (20) via a private Access Point Network (APN) to a Cleaning Hub (50) based on the specification information (22),
  • Comparing the communication request (20) at the Cleaning Hub (50) to at least one communication policy (40),
  • Allowing or denying the communication of the Mobile Device System (10) to the Network (100) requested with the communication request (20) based on the result of the comparison to the at least one communication policy (40).

Claims

1. Connecting method for secure connecting of a Mobile Device System (10) to a Network (100), comprising the following steps:

Sending a communication request (20) from the Mobile Device System (10) to a Network Operator (30) requesting a communication to the Network (100),

Receiving the communication request (20) at the Network Operator (30) and extracting at least one specification information (22) out of the communication request (20) specifying the Mobile Device System (10),

Forwarding the communication request (20) via a private Access Point Network (APN) to a Cleaning Hub (50) based on the specification information (22),

Comparing the communication request (20) at the Cleaning Hub (50) to at least one communication policy (40),

Allowing or denying the communication of the Mobile Device System (10) to the Network (100) requested with the communication request (20) based on the result of the comparison to the at least one communication policy (40).

2. Connecting method according to claim 1 characterized in that the specification information (22) is based on information stored in a Subscriber Identity Module (SIM) and/or can comprise a Mobile Device Number.

3. Connecting method according to claim 1 characterized in that the Network Operator (30) carries out a comparison of the specification information (22) with a connection list (32), whereby based on that comparison the forwarding of the communication request (20) is carried out.

4. Connecting method according to claim 1 characterized in that the specification information (22) comprises a trigger information (24) causing the Network Operator (30) to forward the communication request (20) to the Cleaning Hub (50) via a specific private Access Point Network (APN).

5. Connecting method according to claim 1 characterized in that the Mobile Device System (10) comprises at least one Mobile Device (12) and one Mobile WiFi Device (14), whereby the at least one Mobile Device (12) is coupled with the Mobile WiFi Device (14) via a wireless communication and the communication request (20) is sent from the Mobile WiFi Device (14) to the Network Operator (30).

6. Connecting method according to claim 5 characterized in that the Mobile WiFi Device comprises a private Access Point Network (APN) configuration so that the communication request (20) is sent from the Mobile WiFi Device (14) to the Cleaning Hub (50) via the private Access Point Network (APN).

7. Connecting method according to claim 1 characterized in that the Network Operator (30) comprises a private Access Point Network (APN) configuration so that based on the specification information (22) the communication request (20) is sent from the Mobile Device System to the Cleaning Hub (50) via the private Access Point Network (APN).

8. Connecting method according to claim 1 characterized in that a secure communication channel (60) is built up from the Cleaning Hub (50) to the Network (100) the Mobile Device System (10) requested to connect to.

9. Connecting method according to claim 1 characterized in that a secure communication channel (60) is built up from the private Access Point Network (APN) to the Cleaning Hub (50).

10. Connecting method according to claim 1 characterized in that the specification information (22) comprises at least one user specification (26), whereby that user specification (26), in particular in form of a password, is forwarded to the Network (100) the Mobile Device System (10) requested to connect to.

11. Connecting method according to claim 1 characterized in that the communication policy (40) comprises at least one of the following information:

Black list of banned web pages

White list of allowed web pages

user specific lists.

12. Connecting method according to claim 1 characterized in that the Cleaning Hub (50) checks all data traffic between the Network (100) and the Mobile Device System (10), even after requested communication has been allowed.

15. Communication Network (100), comprising at least one Network Operator (30), at least one private Access Point Network (APN) and at least one Cleaning Hub (50), characterized in that the at least one Network Operator (30) and/or the at least one private Access Point Network (APN) and/or the at least one Cleaning Hub (50) are configured to carry out a method according to claim 1.

16. Connecting method according to claim 2 characterized in that the Network Operator (30) comprises a private Access Point Network (APN) configuration so that based on the specification information (22) the communication request (20) is sent from the Mobile Device System to the Cleaning Hub (50) via the private Access Point Network (APN).

17. Connecting method according to claim 3 characterized in that the Network Operator (30) comprises a private Access Point Network (APN) configuration so that based on the specification information (22) the communication request (20) is sent from the Mobile Device System to the Cleaning Hub (50) via the private Access Point Network (APN).

18. Connecting method according to claim 4 characterized in that the Network Operator (30) comprises a private Access Point Network (APN) configuration so that based on the specification information (22) the communication request (20) is sent from the Mobile Device System to the Cleaning Hub (50) via the private Access Point Network (APN).

19. Connecting method according to claim 5 characterized in that the Network Operator (30) comprises a private Access Point Network (APN) configuration so that based on the specification information (22) the communication request (20) is sent from the Mobile Device System to the Cleaning Hub (50) via the private Access Point Network (APN).

20. Communication Network (100), comprising at least one Network Operator (30), at least one private Access Point Network (APN) and at least one Cleaning Hub (50), characterized in that the at least one Network Operator (30) and/or the at least one private Access Point Network (APN) and/or the at least one Cleaning Hub (50) are configured to carry out a method according to claim 2.

13. Computer program product being stored on a non transitory computer readable medium, comprising the following:

non transitory computer readable program means, initiating the computer to send a communication request (20) from a Mobile Device System (10) to a Network Operator (30) requesting a communication to a Network (100),

non transitory computer readable program means, initiating the computer to receive the communication request (20) at the Network Operator (30) and extract at least one specification information (22) out of the communication request (20) specifying the Mobile Device System (10),

non transitory computer readable program means, initiating the computer to forward the communication request (20) via a private Access Point Network (APN) to a Cleaning Hub (50) based on the specification information (22),

non transitory computer readable program means, initiating the computer to compare the communication request (20) at the Cleaning Hub (50) to at least one communication policy (40),

non transitory computer readable program means, initiating the computer to allow or deny the communication of the Mobile Device System (10) to the Network (100) requested with the communication request (20) based on the result of the comparison to the at least one communication policy (40).

14. Computer program product according to claim 13 characterized in that it comprises computer readable program means, initiating the computer to carry out the method comprising the following steps:

Sending the communication request (20) from the Mobile Device System (10) to the Network Operator (30) requesting a communication to the Network (100),

Receiving the communication request (20) at the Network Operator (30) and extracting at least one specification information (22) out of the communication request (20) specifying the Mobile Device System (10),

Forwarding the communication request (20) via the private Access Point Network (APN) to the Cleaning Hub (50) based on the specification information (22),

Comparing the communication request (20) at the Cleaning Hub (50) to at least one communication policy (40),

Allowing or denying the communication of the Mobile Device System (10) to the Network (100) requested with the communication request (20) based on the result of the comparison to the at least one communication policy (40).