WI-FI INTEGRATION FOR NON-SIM DEVICES

• US 20160261596A1
• Filed: 04/15/2015
• Published: 09/08/2016
• Est. Priority Date: 04/15/2014
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: KHELLO, Robert, DUAN, Pengbo, CHEN, Ping
• Granted Patent: US 9,648,019 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

The embodiments herein relate to a method performed by an AAA server (113) for enabling a non-SIM device (101b) to access a first network (100a) via a second network (100b). Based on a request for authorization to the first network (100a) from the non-SIM device (101b), the AAA server (113) obtains an identity associated with the non-SIM device (101b). The AAA server (113) transmits a request for a user profile associated with a user of the non-SIM device (101b) to the subscriber database (110). The request comprises the obtained identity for the non-SIM device (101b). The AAA server (113) receives, from the subscriber database (110), the requested user profile for the non-SIM device (101b). Based on the received user profile, the AAA server (113) authorizes the non-SIM device (101b) to access the first network (100a) via the second network (100b).

Claims

1. A method performed by an Authentication, Authorization, and Accounting, AAA, server for enabling a non-Subscriber Identity Module, non-SIM, device to access a first network via a second network, the method comprising:

based on a request for authorization to the first network from the non-SIM device, obtaining an identity associated with the non-SIM device;

transmitting a request for a user profile associated with a user of the non-SIM device to the subscriber database, which request comprises the obtained identity for the non-SIM device;

receiving, from the subscriber database, the requested user profile for the non-SIM device; and

based on the received user profile, authorizing the non-SIM device to access the first network via the second network.

2. The method according to claim 1, further comprising:

transmitting information indicating that the non-SIM device was successfully authorized to access the first network via the second network.

3. The method according to claim 1, further comprising:

determining that the received user profile is associated with a device without a SIM; and

wherein the non-SIM device is authorized to access the first network via the second network when the user profile is associated with a device without a SIM.

4. The method according to claim 1, further comprising:

receiving the request for authorization to the first network from the non-SIM device, wherein the request comprises information identifying the non-SIM device.

5. The method according to claim 1, wherein the first network is a Third Generation Partnership Project, 3GPP, network and the second network is a Wi-Fi network.

25. The first computer program comprising instructions which, when executed on at least one processor, cause the at least one processor to carry out the method according to claim 1.

26. The first carrier comprising the first computer program of claim 25, wherein the first carrier is one of an electronic signal, optical signal, radio signal or computer readable storage medium.

6. A method performed by an Application Server, AS, for enabling a non-Subscriber Identity Module, non-SIM, device to access a first network via a second network, the method comprising:

creating an association between a SIM device and the non-SIM device;

creating a user profile associated with a user of the non-SIM device; and

transmitting at least part of the user profile for the non-SIM device to a subscriber database and to a Certificate Authority, CA, server to be used in authentication and authorization of the non-SIM device to access the first network via the second network.

7. The method according to claim 6, further comprising:

transmitting a request for a certificate for the non-SIM device to the CA server;

receiving, from the CA server, the requested certificate for the non-SIM device; and

transmitting information indicating the certificate for the non-SIM device to the SIM device.

8. The method according to claim 6, further comprising:

receiving, from the SIM device, information about the SIM device and its associated non-SIM device; and

wherein the association between the SIM device and the non-SIM device is created by the AS based on the information received from the SIM device.

9. The method according to claim 8, wherein the information received from the SIM device is user identities associated with the SIM device and the non-SIM device.

10. The method according to claim 6, wherein the creation of the user profile comprises creation of at least one of a virtual International Mobile Subscriber Identity, IMSI, for the non-SIM device, a default Access Point Name, APN, for the non-SIM device and a Packet Data Network, PDN, parameter for the non-SIM device.

11. The method according to claim 10, wherein the virtual IMSI indicates that the non-SIM device is a device which does not have a SIM.

12. The method according to claim 6, wherein the first network is a Third Generation Partnership Project, 3GPP, network and the second network is a Wi-Fi network.

27. The second computer program comprising instructions which, when executed on at least one processor, cause the at least one processor to carry out the method according to claim 6.

28. The second carrier comprising the second computer program of claim 27, wherein the second carrier is one of an electronic signal, optical signal, radio signal or computer readable storage medium.

13. An Authentication, Authorization, and Accounting, AAA, server for enabling a non-Subscriber Identity Module, non-SIM, device to access a first network via a second network, the AAA server being arranged to:

based on a request for authorization to the first network from the non-SIM device, obtain an identity associated with the non-SIM device;

transmit a request for a user profile associated with a user of the non-SIM device to the subscriber database, which request comprises the obtained identity for the non-SIM device;

receive, from the subscriber database, the requested user profile for the non-SIM device; and

to

based on the received user profile, authorize the non-SIM device to access the first network via the second network.

14. The AAA server according to claim 13, being further arranged to:

transmit information indicating that the non-SIM device was successfully authorized to access the first network via the second network.

15. The AAA server according to claim 13, being further arranged to:

determine that the received user profile is associated with a device without a SIM; and

wherein the non-SIM device is arranged to be authorized to access the first network via the second network when the user profile is associated with a device without a SIM.

16. The AAA server according to claim 13, being further arranged to:

receive the request for authorization to the first network from the non-SIM device, wherein the request comprises information identifying the non-SIM device.

17. The AAA server according to claim 13, wherein the first network is a Third Generation Partnership Project, 3GPP, network and the second network is a Wi-Fi network.

18. An Application Server, AS, for enabling a non-Subscriber Identity Module, non-SIM, device to access a first network via a second network, the AS being arranged to:

create an association between a SIM device and the non-SIM device;

create a user profile associated with the user of the non-SIM device; and

transmitting at least part of the user profile for the non-SIM device to a subscriber database and to a Certificate Authority, CA, server to be used in authentication and authorization of the non-SIM device to access the first network via the second network.

19. The AS according to claim 18, being further arranged to:

transmit a request for a certificate for the non-SIM device to the CA server;

receive, from the CA server, the requested certificate for the non-SIM device; and

to

transmit information indicating the certificate for the non-SIM device to the SIM device.

20. The AS according to claim 18, being further arranged to:

receive, from the SIM device, information about the SIM device and its associated non-SIM device; and

wherein the association between the SIM device and the non-SIM device is created by the AS based on the information received from the SIM device.

21. The AS according to claim 20, wherein the information received from the SIM device is user identities associated with the SIM device and the non-SIM device.

22. The AS according to claim 18, wherein the creation of the user profile comprises creation of at least one of a virtual International Mobile Subscriber Identity, IMSI, for the non-SIM device, a default Access Point Name, APN, for the non-SIM device and a Packet Data Network, PDN, parameter for the non-SIM device.

23. The AS according to claim 22, wherein the virtual IMSI indicates that the non-SIM device is a device which does not have a SIM.

24. The AS according to claim 18, wherein the first network is a Third Generation Partnership Project, 3GPP, network and the second network is a Wi-Fi network.

29. A method for enabling a non-Subscriber Identity Module, non-SIM, device to access a first network via a second network, the method comprising:

creating, at an Application Server, AS, an association between a SIM device and the non-SIM device;

creating, at the AS, a user profile associated with a user of the non-SIM device;

transmitting at least part of the user profile for the non-SIM device from the AS to a subscriber database and to a Certificate Authority, CA, server to be used in authentication and authorization of the non-SIM device to access the first network via the second network;

based on a request for authorization to the first network from the non-SIM device to an Authentication, Authorization, and Accounting, AAA, server,

obtaining, at the AAA server, an identity associated with the non-SIM device;

transmitting a request for a user profile associated with a user of the non-SIM device from the AAA server to the subscriber database, which request comprises the obtained identity for the non-SIM device;

receiving, at the AAA server from the subscriber database the requested user profile for the non-SIM device; and

based on the received user profile, authorizing, at the AAA server, the non-SIM device to access the first network via the second network.

30. A communications system for enabling a non-Subscriber Identity Module, non-SIM, device to access a first network via a second network, the communications system comprises an Authentication, Authorization, and Accounting, AAA, server and an Application Server, AS, wherein the AAA server is arranged to:

based on a request for authorization to the first network from the non-SIM device, obtain an identity associated with the non-SIM device;

transmit a request for a user profile associated with a user of the non-SIM device to the subscriber database, which request comprises the obtained identity for the non-SIM device;

receive, from the subscriber database the requested user profile for the non-SIM device; and

to

based on the received user profile, authorize the non-SIM device to access the first network via the second network; and

wherein the AS is arranged to;

create an association between a SIM device and the non-SIM device;

create a user profile associated with the user of the non-SIM device; and

to

transmitting at least part of the user profile for the non-SIM device to a subscriber database and to a Certificate Authority, CA, server to be used in authentication and authorization of the non-SIM device to access the first network via the second network.