NETWORK SERVICE ACCESS CONTROL BY AUTHORIZATION SERVER

• US 20190190996A1
• Filed: 12/20/2017
• Published: 06/20/2019
• Est. Priority Date: 12/20/2017
• Status: Abandoned Application

• Current Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Original Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Inventors: Sabeur, Nassereddine, Ball, Raymond Thomas
• Application Number:
  US15/848,844
• Publication Number:
  US 20190190996A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/104 in the network
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 65/765 intermediate
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 36/00226 wherein the core network technologies comprise IP multimedia system [IMS], e.g. single radio voice call continuity [SRVCC]
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 60/04 using triggered events
• CPC Class Codes: H04W 8/08 Mobility data transfer
• CPC Class Codes: H04W 8/12 between location registers or mobility servers
• CPC Class Codes: H04W 8/16 selectively restricting mobility data tracking
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier

Abstract

In some implementations, a telecommunications network can include an authorization server, e.g., a Diameter Routing Agent. The authorization server can receive service data associated with a network terminal from a home authorization server. The authorization server can determine that a portion of the service data corresponds with a predetermined network service and remove the portion of the service data to provide modified service data. The authorization server can transmit the modified service data to a control device of the network. In some examples, the control device can determine a gateway device identified in the modified service data and transmit an association message to the gateway device on behalf of the terminal. In some examples, the control device can receive a request for a network service from the terminal, determine that the modified service data does not authorize the network service, and transmit a rejection message to the terminal.

Claims

1. A method comprising, by an authorization server of a telecommunications network:

determining that a terminal is roaming in the telecommunications network;

receiving service data associated with the terminal of the telecommunications network from a home authorization server of a home network via a communications interface;

determining that a portion of the service data corresponds with a predetermined network service not supported by the telecommunications network;

determining modified service data to remove the ability of the terminal to use the predetermined network service not supported by the telecommunications network but supported by the home network at least partly by removing the portion of the service data; and

transmitting, via the communications interface, the modified service data to a control device of the telecommunications network.

3. The method according to claim 1, further comprising, by the authorization server, determining the portion of the service data excludes a flag indicating whether voice sessions are permitted over packet-switched transports.

4. The method according to claim 1, further comprising, by the authorization server, determining the portion of the service data comprises a service-selection value.

5. The method according to claim 1, further comprising, by the authorization server:

receiving, via the communications interface, identification information associated with the terminal; and

retrieving the service data associated with the terminal from the home authorization server associated with the identification information via the communications interface.

6. The method according to claim 1, wherein the predetermined network service comprises a packet-switched media service.

7. The method according to claim 6, wherein the packet-switched media service comprises Voice over Long-Term Evolution (VoLTE) and the authorization server comprises a Diameter Routing Agent (DRA).

2. (canceled)

8. A system, comprising:

an authorization server of a telecommunications network, the authorization server configured to;

receive service data associated with a terminal roaming in the telecommunications network from a home authorization server of a home network via a communications interface;

determine that a portion of the service data corresponds with a predetermined network service not supported by the telecommunications network;

determine modified service data to remove the ability of the terminal to use the predetermined network service not supported by the telecommunications network but supported by the home network at least partly by removing the portion of the service data; and

transmit, via the communications interface, the modified service data to a control device of the telecommunications network;

a control device of a telecommunications network, the control device configured to;

receive the modified service data;

determine a gateway device identified in the modified service data; and

transmit, via the communications interface, an association message to the gateway device on behalf of the terminal.

10. The system according to claim 8, wherein the authorization server is further configured to determine the portion of the service data excludes a flag indicating whether voice sessions are permitted over packet-switched transports.

11. The system according to claim 8, wherein the authorization server is further configured to determine the portion of the service data comprises a service-selection value.

12. The system according to claim 8, wherein the authorization server is further configured to:

receive, via the communications interface, identification information associated with the terminal; and

retrieve the service data associated with the terminal from the home authorization server associated with the identification information via the communications interface.

13. The system according to claim 8, wherein the control device is further configured to:

receive an association response from the gateway device; and

transmit at least a portion of the association response to the terminal via the communications interface.

9. (canceled)

14. A system, comprising:

an authorization server of a telecommunications network, the authorization server configured to;

receive service data associated with a terminal of the telecommunications network from a home authorization server of a home network via a communications interface, wherein the terminal is roaming;

determine that a portion of the service data corresponds with a predetermined network service not supported by the telecommunications network;

determine modified service data to remove the ability of the terminal to use the predetermined network service not supported by the telecommunications network but supported by the home network at least partly by removing the portion of the service data; and

transmit, via the communications interface, the modified service data to a control device of the telecommunications network;

a control device of a telecommunications network, the control device configured to;

receive the modified service data;

receive a request for a network service from the terminal;

determine that the modified service data does not authorize the network service; and

transmit, via the communications interface, a rejection message to the terminal.

16. The system according to claim 14, wherein the authorization server is further configured to determine the portion of the service data excluding a flag indicating whether voice sessions are permitted over packet-switched transports.

17. The system according to claim 14, wherein the authorization server is further configured to determine the portion of the service data comprising a service-selection value.

18. The system according to claim 14, wherein the authorization server is further configured to:

receive, via the communications interface, identification information associated with the terminal; and

retrieve the service data associated with the terminal from the home authorization server associated with the identification information via the communications interface.

19. The system according to claim 14, wherein:

the request for the network service includes a service-selection value;

the modified service data comprises one or more permitted service-selection values; and

the determining that the modified service data does not authorize the network service comprises determining that the one or more permitted service-selection values do not include the service-selection value.

20. The system according to claim 14, wherein the predetermined network service comprises Voice over Long-Term Evolution (VoLTE) and the control device comprises a Mobility Management Entity (MME).

15. (canceled)