ENHANCED HOTSPOT 2.0 MANAGEMENT OBJECT FOR TRUSTED NON-3GPP ACCESS DISCOVERY

• US 20170055302A1
• Filed: 08/18/2015
• Published: 02/23/2017
• Est. Priority Date: 08/18/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Niranjan, Wang, Shu
• Granted Patent: US 10,057,929 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 48/14 using user query or user detection
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 72/0453 Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 76/12 Setup of transport tunnels
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

User equipment (UE) includes a transceiver configured to transmit and receive information to/from a Wireless Fidelity (WiFi) access point. The UE includes processing circuitry coupled to the transceiver and configured to: determine a service provider associated with the WiFi access point based on a response to an ANQP query. The UE is configured to receive at least a portion of a management object (MO). The MO includes a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider. The UE is configured to: in response to determining that the WiFi access point is trusted, send an L3 attach trigger. The UE is configured to: in response to determining that the WiFi access point is not trusted, establish an Internet Protocol security (IPsec) tunnel that the UE to an Evolved Packet Data Gateway through the untrusted WiFi access point.

Claims

1. An apparatus comprising:

a transceiver configured to transmit information to and receive information from a Wireless Fidelity (WiFi) access point;

processing circuitry coupled to the transceiver and configured to;

determine a service provider associated with the WiFi access point based on a response to an Access Network Query Protocol (ANQP) query,

receive at least a portion of a management object (MO), the MO including a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider;

in response to determining that the WiFi access point is trusted, send an L3 attach trigger; and

in response to determining that the WiFi access point is not trusted, establish an Internet Protocol security (IPsec) tunnel that connects the apparatus to an Evolved Packet Data Gateway (ePDG) through the untrusted WiFi access point.

2. The apparatus of claim 1, further configured to:

based the determination that the WiFi access point is trusted, connect to EPC PDN GW through a direct connection between the trusted WiFi access point and the EPC PDN GW.

3. The apparatus of claim 1, further configured to, in response to determining that the WiFi access point is not trusted:

discover the Evolved Packet Data Gateway (ePDG),

establish the IPsec tunnel with the ePDG, and

connect to the EPC PDN GW through the IPsec tunnel that connects the untrusted WiFi access point to an Evolved Packet Data Gateway (ePDG) and connects the EPC PDN GW to the ePDG.

4. The apparatus of claim 1, wherein the at least the portion of the MO comprises an initial provisioning of a whole of the MO.

5. The apparatus of claim 1, wherein:

the at least the portion of the MO comprises a whole of the MO; and

the apparatus is further configured to initiate provisioning of an update of the whole MO.

6. The apparatus of claim 1, wherein:

the at least the portion of the MO comprises a whole of the MO; and

the apparatus is further configured to receive a pushed update of the whole MO.

7. The apparatus of claim 1, wherein:

the at least the portion of the MO comprises a pushed field update to a parameter that defines a frequency of initiating provisioning of the update of a whole of the MO;

the apparatus is further configured to in response to receiving the pushed field update, change the frequency of initiating provisioning of the update of the whole MO; and

initiate a subsequent provisioning of the update of the whole MO according to the changed frequency.

8. An apparatus comprising:

an input/output terminal configured to output information to and receive information from a user equipment (UE) through a Wireless Fidelity (WiFi) access point;

processing circuitry coupled to the input/output terminal and configured to;

in response to a receiving a request to an Access Network Query Protocol (ANQP) query, output a response indicating a service provider associated with the WiFi access point;

generate and provision to the UE at least a portion of a management object (MO), the MO including a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider.

9. The apparatus of claim 8, wherein:

the at least the portion of the MO comprises a whole of the MO; and

the apparatus is further configure to initiate an initial provisioning of the whole MO to the UE.

10. The apparatus of claim 8, wherein:

the at least the portion of the MO comprises a whole of the MO; and

the apparatus is further configure to initiate provisioning of an update of the whole MO to the UE.

11. The apparatus of claim 8, wherein:

the at least the portion of the MO comprises a whole of the MO; and

the apparatus is further configured to push an update of the whole MO to the UE.

12. The apparatus of claim 8, wherein:

the at least the portion of the MO comprises a field update to a parameter that defines a frequency of initiating provisioning of the update of a whole of the MO;

the apparatus is further configured to change the frequency of initiating provisioning, and push the field update to the UE; and

subsequently provision the update of the whole MO according to the changed frequency.

13. A method comprising:

receiving information from a Wireless Fidelity (WiFi) access point;

determining, by processing circuitry, a service provider associated with the WiFi access point based on a response to an Access Network Query Protocol (ANQP) query,

receiving at least a portion of a management object (MO), the MO including a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider;

in response to determining that the WiFi access point is trusted, sending an L3 attach trigger; and

in response to determining that the WiFi access point is not trusted, establishing an Internet Protocol security (IPsec) tunnel that connects a user equipment to an Evolved Packet Data Gateway (ePDG) through the untrusted WiFi access point.

14. The method of claim 13, further comprising:

based the determination that the WiFi access point is trusted, connecting to EPC PDN GW through a direct connection between the trusted WiFi access point and the EPC PDN GW.

15. The method of claim 13, further comprising, in response to determining that the WiFi access point is not trusted:

discovering the Evolved Packet Data Gateway (ePDG),

establishing the IPsec tunnel with the ePDG, and

connecting to the EPC PDN GW through the IPsec tunnel that connects the untrusted WiFi access point to an Evolved Packet Data Gateway (ePDG) and connects the EPC PDN GW to the ePDG.

16. The method of claim 13, wherein the at least the portion of the MO comprises an initial provisioning of a whole of the MO.

17. The method of claim 13, wherein:

the at least the portion of the MO comprises a whole of the MO; and

the method further comprises initiating a provisioning of an update of the whole MO.

18. The method of claim 13, wherein:

the at least the portion of the MO comprises a whole of the MO; and

the method further comprises receiving a pushed update of the whole MO.

19. The method of claim 13, wherein:

the at least the portion of the MO comprises a pushed field update to a parameter that defines a frequency of initiating provisioning of the update of a whole of the MO;

the method further comprising;

to in response to receiving the pushed field update, changing the frequency of initiating provisioning of the update of the whole MO; and

initiating a subsequent provisioning of the update of the whole MO according to the changed frequency.