Authentication and handover methods and systems for radio personal communications

• US 5,598,459 A
• Filed: 06/29/1995
• Issued: 01/28/1997
• Est. Priority Date: 06/29/1995
• Status: Expired due to Term

• Current Assignee: Ericsson, Inc. (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Ericsson, Inc. (Telefonaktiebolaget LM Ericsson)
• Inventors: Haartsen, Jacobus C.
• Primary Examiner(s): Kuntz, Curtis
• Assistant Examiner(s): Maung, Nay Aung
• Application Number:
  US08/496,353
• Time in Patent Office: 579 Days
• Field of Search: 379/58, 379/59, 455/11.1, 455/33.1, 455/54.1
• US Class Current: 455/411
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 36/00 Hand-off or reselection arrangements
• CPC Class Codes: H04W 84/105 PBS [Private Base Station] network H04W84/12 - H04W84/16 take precedence
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

During handover of a cellular terminal from a wide area cellular network to a base station, authentication messages are relayed between the base station and the wide area cellular network via the cellular terminal. Communications between the cellular terminal and the wire telephone network via the base station are prevented until after authentication takes place. Accordingly, the cellular terminal relays authentication messages between the base station and the wide area cellular network. Use of the wire telephone network for authentication between the cellular terminal and the base station is avoided. Secure handover is thereby provided without incurring excess overhead to the system and without adding unnecessary wire network charges to the cellular terminal user.

Claims

1. An authentication method between a cellular terminal and a telephone base station, the telephone base station connecting a wire telephone network to the cellular terminal within a local region in a cell of a wide area cellular network which uses a plurality of channels within a cellular network spectrum, said authentication method comprising the steps of:

detecting that said cellular terminal is within said local region;

transferring an authentication challenge from said wide area cellular network to said telephone base station via radio communication with said cellular terminal;

transferring an authentication response from said base station to said wide area cellular network via radio communication with said cellular terminal; and

in response to a valid authentication response, initiating communication between said wire telephone network and said cellular terminal, via said base station.

2. An authentication method according to claim 1 wherein said step of transferring an authentication challenge from said wide area cellular network to said base station comprises the steps of:

transferring said authentication challenge from said wide area cellular network to said cellular terminal using a first channel selected from said plurality of channels within said cellular network spectrum; and

transferring said authentication challenge from said cellular terminal to said base station using a second channel selected from said plurality of channels within said cellular network spectrum.

3. An authentication method according to claim 2 wherein said step of transferring an authentication response comprises the steps of:

transferring said authentication response from said base station to said cellular terminal using said second channel; and

transferring said authentication response from said cellular terminal to said wide area cellular network using said first channel.

4. An authentication method according to claim 1 wherein said detecting step comprises the step of detecting a telephone base station beacon at said cellular terminal, said telephone base station beacon being free of information which identifies said telephone base station.

5. An authentication method according to claim 4 wherein said initiating step is preceded by the step of comparing the authentication response to a plurality of valid authorization responses which are associated with said cellular terminal.

6. An authentication method according to claim 1 wherein said wide area cellular network is a Time-Division-Multiple-Access (TDMA) cellular network operating at a predetermined rate and wherein said transferring steps are performed at half said predetermined rate.

7. An authentication method according to claim 1 wherein said wide area cellular network is a Time-Division-Multiple-Access (TDMA) cellular network and wherein said transferring steps are performed using at least four nonoverlapping TDMA slots.

8. An authentication method between a cellular terminal and a telephone base station, the telephone base station connecting a wire telephone network to the cellular terminal within a local region in a cell of a wide area cellular network which uses a plurality of channels within a cellular network spectrum, said authentication method comprising the step of:

relaying authentication messages between said telephone base station and said wide area cellular network via said cellular terminal within said local region, without accessing said wire telephone network via said telephone base station.

9. An authentication method according to claim 8:

wherein said relaying step is preceded by the step of detecting that said cellular terminal is within said local region; and

wherein said relaying step is followed by the step of initiating communication between said wire telephone network and said cellular terminal, via said base station in response to authentication.

10. An authentication method according to claim 9 wherein said detecting step comprises the step of detecting a telephone base station beacon at said cellular terminal, said telephone base station beacon being free of information which identifies said telephone base station.

11. An authentication method according to claim 8 wherein said wide area cellular network is a Time-Division-Multiple-Access (TDMA) cellular network operating at a predetermined rate and wherein said relaying step is performed at half said predetermined rate.

12. A handover method between a radio terminal and a local network base station, the local network base station connecting a local network to the radio terminal within a local region of the local network base station, the local region overlapping a macro network, said handover method comprising the steps of:

detecting that said radio terminal has entered said local region;

causing said macro network to authenticate said local network base station via radio communication with said radio terminal; and

allowing communications between said radio terminal and said local network via said local network base station upon authentication of said local network base station.

13. A handover method according to claim 12 wherein said causing step comprises the step of causing said macro network to authenticate said local network base station via said radio terminal, without using said local network.

14. A handover method according to claim 12 wherein said causing step comprises the step of relaying authentication messages between said local network base station and said macro network via said radio terminal within the local region, without accessing the local network via said local network base station.

15. A radio personal communications system comprising:

a wide area cellular network, including a plurality of cells, each of which uses a plurality of channels within a cellular network spectrum;

a wire telephone network;

a cellular terminal;

a telephone base station within one of said cells, said telephone base station connecting said wire telephone network to said cellular terminal when said cellular terminal is within a local region of said telephone base station;

means for detecting that said cellular terminal is within said local region;

challenge transferring means, responsive to said detecting means, for transferring an authentication challenge from said wide area cellular network to said telephone base station via radio communication with said cellular terminal;

response transferring means, responsive to said challenge transferring means, for transferring an authentication response from said base station to said wide area cellular network via radio communication with said cellular terminal; and

means for initiating communication between said wire telephone network and said cellular terminal, via said base station, in response to a valid authentication response.

16. A radio personal communications system according to claim 15 wherein said challenge transferring means comprises:

means for transferring said authentication challenge from said wide area cellular network to said cellular terminal using a first channel selected from said plurality of channels within said cellular network spectrum; and

means for transferring said authentication challenge from said cellular terminal to said base station using a second channel selected from said plurality of channels within said cellular network spectrum.

17. A radio personal communications system according to claim 16 wherein said response transferring means comprises:

means for transferring said authentication response from said base station to said cellular telephone using said second channel; and

means for transferring said authentication response from said cellular terminal to said wide area cellular network using said first channel.

18. A radio personal communications system according to claim 15 wherein said detecting means comprises means for detecting a telephone base station beacon at said cellular terminal, said telephone base station beacon being free of information which identifies said telephone base station.

19. A radio personal communications system according to claim 15 wherein said wide area cellular network is a Time-Division-Multiple-Access (TDMA) cellular network operating at a predetermined rate and wherein said challenge transferring means and said response transferring means operate at half said predetermined rate.

20. A radio personal communications system comprising:

a wide area cellular network, including a plurality of cells, each of which uses a plurality of channels within a cellular network spectrum;

a wire telephone network;

a cellular terminal;

a telephone base station within one of said cells, said telephone base station connecting said wire telephone network to said cellular terminal when said cellular terminal is within a local region of said telephone base station; and

means for relaying authentication messages between said telephone base station and said wide area cellular network via said cellular terminal within said local region, without accessing said wire telephone network via said telephone base station.

21. A radio personal communications system according to claim 20 further comprising:

communication initiating means, responsive to said relaying means;

for initiating communication between said wire telephone network and said cellular terminal, via said base station, in response to authentication.