System and method for reducing network signaling load in a radio telecommunications network

• US 6,397,056 B1
• Filed: 04/30/1999
• Issued: 05/28/2002
• Est. Priority Date: 04/30/1999
• Status: Expired due to Fees

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Nguyen, Binh, Bugnon, Jacques
• Primary Examiner(s): Chin, Vivian
• Assistant Examiner(s): MOORE, JAMES K
• Application Number:
  US09/303,035
• Time in Patent Office: 1,124 Days
• Field of Search: 455/411,410,432,433,510
• US Class Current: 455/411
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A system and method of reducing control message signaling load in a radio telecommunications network. When an authentication request is issued by the mobile switching center (MSC), the home network performs authentication of the visiting subscriber. When authentication fails the home network determines if a threshold value is reached. If so, a suitable authentication code portion is included in the return message so that local authentication of the visiting subscriber may be performed. The MSC is able to locally authenticate a visiting subscriber trying to access the network thereby suppressing the transmission of additional authentication requests and failure reports to the home network. For failed authentications, the VLR transmits authentication failure reports to the home network. If a threshold value is reached the MSC locally authenticates the mobile subscriber'"'"'s subsequent attempts so that the VLR is precluded from sending additional authentication failure reports to the home network.

Claims

1. A radio telecommunications network system comprising:

a home network for controlling cellular communication of a subscriber over a home service area, the home network including a Home Location Register (HLR) and an authentication center (AC);

a visited network for controlling cellular transmission over a visited service area, the visited network including a serving mobile switching center (MSC) and a Visitor Location Register (VLR) associated therewith;

means for forwarding one or more authentication requests from the visited network to the home network;

means for determining, in the home network upon detecting an authentication failure, that a threshold value associated with the network access attempts is triggered;

means for sending a return message from the home network to the serving MSC, wherein the return message includes an authentication code portion; and

means in the visited network, responsive to the return message from the home network, for locally authenticating the roaming subscriber based upon the authentication code portion received, when the roaming subscriber attempts to re-access the radio telecommunications network system.

2. The radio telecommunications network system as set forth in claim 1, wherein the HLR and the AC are functionally integrated into a single node and the authentication code portion comprises Shared Secret Data.

3. The radio telecommunications network system as set forth in claim 1, wherein the HLR and the AC are functionally integrated into a single node and the authentication code portion comprises an encrypted A-key value.

4. The radio telecommunications network system as set forth in claim 1, wherein the MSC and the VLR are functionally integrated into a single node and the authentication code portion comprises Shared Secret Data.

5. The radio telecommunications network system as set forth in claim 1, wherein the MSC and the VLR are functionally integrated into a single node and the authentication code portion comprises an encrypted A-key value.

6. A method of reducing control message traffic in a radio telecommunications network of the type which includes a home network, comprising a Home Location Register (HLR) and an associated Authentication Center (AC), and a visited network comprising a serving mobile switching center (MSC) and an associated Visitor Location Register (VLR), the method comprising the steps of:

forwarding one or more authentication requests from the visited network to the home network, when a visiting subscriber roams into a visited service area serviced by the visited network and periodically attempts to access the radio telecommunications network;

upon detecting an authentication failure, determining, in the home network, that a threshold value associated with the periodic attempts to access the network is triggered;

responsive to the determination in the home network, sending a return message from the home network to the serving MSC, the return message including an authentication code portion required for authenticating the visiting subscriber; and

upon receiving the return message, performing a local authentication step by the serving MSC if the visiting subscriber attempts to re-access the radio telecommunications network and thereby suppressing the forwarding of additional authentication requests to the home network.

7. The method as set forth in claim 6, further comprising the steps of:

transmitting a subsequent authorization request from the visited network to the home network, provided the visiting subscriber has been successfully locally authenticated by the visited network; and

responsive to the subsequent authorization request, authenticating the visiting subscriber by the home network.

8. The method as set forth in claim 6, wherein the authentication code portion comprises Shared Secret Data.

9. The method as set forth in claim 6, wherein the authentication code portion comprises an encrypted A-key.

10. The method as set forth in claim 6, further including the step of suppressing one or more authentication failure reports by the visited network, the reports being provided when the visiting subscriber continues to fail the local authentication step by the serving MSC.

11. A method of authenticating a mobile station requesting access to a radio telecommunications network having a serving mobile switching center (MSC) serving the mobile station, a visitor location register (VLR) associated with the serving MSC, a home location register (HLR) which stores subscriber information and location information relating to the mobile station, and an authentication center (AC) associated with the HLR, the AC and HLR forming a home network, said method comprising the steps of:

receiving in the serving MSC one or more attempts to access the radio telecommunications network by the mobile station;

sending one or more corresponding authentication requests from the serving MSC to the AC via the VLR and the HLR;

determining in the AC that the mobile station failed authentication;

determining in the home network that a threshold value associated with the one or more attempts to access the radio telecommunications network is triggered by the mobile station;

sending a return message from the home network to the serving MSC with an instruction to deny the mobile station access to the network, said return message including shared data for authenticating the mobile station;

determining in the serving MSC whether the mobile station passes local authentication whenever subsequent network access attempts are received from the mobile station;

suppressing instructions in the serving MSC to send authentication failure reports to the AC if the mobile station fails subsequent local authentication;

sending a subsequent authentication request from the serving MSC to the AC if the mobile station passes a subsequent local authentication; and

authenticating the mobile station in the AC.

12. A method of authenticating a mobile station requesting access to a radio telecommunications network having a serving mobile switching center (MSC) serving the mobile station, a visitor location register (VLR) associated with the serving MSC, a home location register (HLR) which stores subscriber information and location information relating to the mobile station, and an authentication center (AC) associated with the HLR, the AC and HLR forming a home network, said method comprising the steps of:

receiving in the serving MSC one or more attempts to access the radio telecommunications network by the mobile station;

verifying, by the serving MSC, the mobile station'"'"'s attempts by issuing one or more locally requested validation procedures, corresponding to the attempts by the mobile station;

determining in the VLR that the mobile station failed authentication;

sending, by the VLR, one or more authentication failure reports to the AC, each corresponding to an authentication failure by the mobile station;

determining, in the home network, that the authentication failure reports have exceeded a threshold value associated therewith;

sending a return message from the home network to the serving MSC with an instruction to locally authenticate the mobile station for subsequent accesses to the network; and

instructing the VLR to stop sending authentication failure reports to the AC if the mobile station fails local authentication for its subsequent accesses to the network.

13. The method as set forth in claim 12, wherein the requested local validation procedure comprises a unique challenge order.

14. The method as set forth in claim 12, further comprising the step of instructing the serving MSC to locally authenticate the mobile station until the mobile station passes the requested local validation procedure.