Signaling channel firewall for communications between wireless networks

• US 6,097,948 A
• Filed: 01/29/1998
• Issued: 08/01/2000
• Est. Priority Date: 01/29/1998
• Status: Expired due to Term

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Sjodin, Staffan
• Primary Examiner(s): TROST IV, WILLIAM GEORGE
• Application Number:
  US09/015,772
• Time in Patent Office: 915 Days
• Field of Search: 455/422, 455/426, 455/432-433, 455/435, 455/552, 455/560, 370/401, 370/463, 370/465-467, 370/469, 379/229, 379/230
• US Class Current: 455/426.1
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 8/10 between location register and external networks
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

Selective isolation between a microcellular communication network and a signaling channel of a macrocellular communication network that is relatively larger than the microcellular network is achieved by receiving communication signals from the microcellular network, and using a communications protocol stack to translate the communication signals into further signals for transmission over the signaling channel. Some of the communications signals are translated into the further signals, but some of the communications signals are selectively denied translation into the further signals.

Claims

1. An isolation structure for interfacing between a microcellular network and a signaling channel of a macrocellular network that is larger than the microcellular network, comprising:

an input that receives communication signals from the microcellular network;

an output that provides signaling on the signaling channel in response to the communication signals; and

an apparatus, coupled between said input and said output, and implementing a communications protocol stack that translates some of said communication signals into said signaling on the signaling channel but selectively, and independently of conditions in the macrocellular network, denies translation of some of said communication signals into said signaling on the signaling channel, said communications protocol stack operable to translate further signaling received from the signaling channel into further communication signals for use in the microcellular network.

2. The isolation structure of claim 1, wherein said input includes a TCP/IP application.

3. The isolation structure of claim 2, wherein said input includes an Ethernet port coupled to said TCP/IP application.

4. The isolation structure of claim 1, wherein said signaling channel is an SS7 channel.

5. The isolation structure of claim 1, wherein said communications protocol stack includes a TCAP layer, an SCCP layer and an MTP layer.

6. The isolation structure of claim 1, wherein said communication signals and said signaling on the signaling channel relate to mobility management functions provided by the macrocellular network to a mobile terminal whose home registration is in the microcellular network.

7. The isolation structure of claim 1, wherein said protocol stack includes a list of IMSI numbers whose corresponding mobile terminals are registered in the microcellular network and are permitted access to mobility management services of the macrocellular network.

8. The isolation structure of claim 1, wherein said protocol stack includes a list of mobility management services that are provided by the macrocellular network and are permitted to be accessed by a mobile terminal having its home registration in the microcellular network.

9. The isolation structure of claim 8, wherein said protocol stack includes a plurality of lists of parameters that are respectively permitted in conjunction with said mobility management services.

10. The isolation structure of claim 1, wherein said protocol stack includes a list of origination addresses and destination addresses between which communication via the signaling channel is permitted.

11. The system of claim 1, wherein said communications protocol stack includes a screen module for selectively denying translation of said communication signals.

12. The system of claim 11, wherein said screen module is a dedicated layer of said communications protocol stack.

13. The system of claim 11, wherein said screen module is incorporated into a layer of said communications protocol stack which is also operable to perform a function included in said translation operation.

15. The method of claim 11, wherein said receiving step includes using a TCP/IP application to receive the communication signals.

16. The method of claim 15, wherein said receiving step includes using an Ethernet port to receive the communication signals.

14. A method of interfacing between a microcellular communication network and a signaling channel of a macrocellular communication network that is larger than the microcellular network, comprising:

receiving communication signals from the microcellular network;

using a communications protocol stack to translate the communication signals into further signals, and transmitting the further signals over the signaling channel;

said using step including translating some of the communication signals into the further signals and, independently of conditions in the macrocellular network, using the communications protocol stack to selectively deny translation of some of the communication signals into the further signals;

receiving signals from the signaling channel; and

using the communications protocol stack to translate the signals received from the signaling channel into communication signals for use in the microcellular network.

17. The method of claim 14, wherein said communication signals and said further signals relate to mobility management functions provided by the macrocellular network to a mobile terminal whose home registration is in the microcellular network.

18. The method of claim 14, wherein said using step includes accessing a list of IMSI numbers whose corresponding mobile terminals are registered in the microcellular network and are permitted access to mobility management services of the macrocellular network.

19. The method of claim 14, wherein said using step includes accessing a list of mobility management services that are provided by the macrocellular network and are permitted to be accessed by a mobile terminal having its home registration in the microcellular network.

20. The method of claim 19, wherein said using step includes accessing a list of parameters that are permitted in conjunction with one of said mobility management services.

21. The method of claim 14, wherein said using step includes accessing a list, provided in the communications protocol stack, of origination addresses and destination addresses between which communication via the signaling channel is permitted.

22. The method of claim 14, wherein said translating step includes permitting information represented by the communication signals to traverse a plurality of layers in the communications protocol stack.

23. A communication system, comprising:

a microcellular communication network;

a macrocellular communication network that is larger than said microcellular network, said macrocellular network including a signaling channel; and

an isolation interface coupled between said microcellular network and said signaling channel of said macrocellular network, said isolation interface including an input that receives communication signals from said microcellular network, an output that provides signaling on said signaling channel in response to said communications signals, and an apparatus coupled between said input and said output and implementing a communications protocol stack that translates some of said communication signals into said signaling on the signaling channel but selectively, and independently of conditions in the macrocellular network, denies translation of some of said communication signals into said signaling on the signaling channel, said communications protocol stack operable to translate further signaling received from the signaling channel into further communication signals for use in the microcellular network.

24. The system of claim 23, wherein said microcellular network includes a mobility server, and including an Ethernet link connected between an output of said mobility server and said input of said isolation interface.

25. The system of claim 24, wherein said mobility server and said isolation interface each include a TCP/IP application coupled to said Ethernet link.