Mobile internet access

• US 6,477,644 B1
• Filed: 02/05/1999
• Issued: 11/05/2002
• Est. Priority Date: 02/09/1998
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Mobile Phones UK Limited (Nokia Corporation)
• Inventors: Turunen, Matti
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/245,770
• Time in Patent Office: 1,369 Days
• Field of Search: 380/247, 713/161, 713/168, 713/171
• US Class Current: 713/161
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 80/00 Wireless network protocols or protocol adaptations to wireless operation
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

A method of enabling roaming of a mobile internet-access host (9) from a local area network (3) to a GSM network (6), each network having a home agent (HA) for routing internet datagrams between networks. The method comprises deregistering the mobile terminal (9) from said local area network (3) and registering it with the GSM network (6) and allocating to the mobile host (9) a new internet address in the GSM network (6). An internet security key is sent via the GSM Short Message Service from the local area network'"'"'s home agent (HA) to the mobile terminal (9). The new internet address is transmitted, together with authentication data generated using the security key, via the internet (5) to the local area network'"'"'s home agent (HA) which registers that address as a care-of-address for the mobile host (9).

Claims

1. A method of communicating data between a mobile host and a remote station over the internet, where both the mobile host and the remote station are registered with the same or different cellular radio telephone networks, the method comprising the steps of:

sending a security key, from the remote station to the mobile host, over the cellular radio telephone network(s) using a point-to-point packet switched service of the network(s);

receiving said security key at the mobile host, and using the received key to secure subsequent data transmissions between the mobile host and the remote station over the internet.

2. A method according to claim 1, wherein the remote station is connected to a Local Area Network (LAN), the LAN being connected to the internet, and the mobile host is wirelessly connected to the internet via the mobile host'"'"'s cellular radio telephone network.

3. A method according to claim 2, wherein:

said LAN is assigned as the home network of the mobile host so that said remote terminal is the home agent of the mobile host;

the mobile host is registered with a cellular radio telephone network which provides access for the mobile host to the internet; and

a care-of-address is sent from the mobile host to the home agent over the internet encrypted with said security key.

4. A method according to claim 1, wherein the remote station is the home agent of a cellular telephone network.

5. A method according to claim 4, wherein the remote station is designated as the home agent of the mobile host, as defined by mobile internet protocol.

6. A method of communicating data between a mobile host and a remote station over the internet, where both the mobile host and the remote station are registered with the same or different cellular radio telephone networks, the method comprising the steps of:

sending a security key, from the remote station to the mobile host, over the cellular radio telephone network(s) using a point-to-point packet switched service of the network(s); and

receiving said security key at the mobile host, and using the received key to secure subsequent data transmissions between the mobile host and the remote station over the internet;

wherein the or each cellular radio telephone network is a GSM network and said point-to-point packet switched service is the Short Message Service (SMS).

7. Data communication apparatus comprising:

a mobile host arranged for connection to the internet and to a cellular radio telephone network and having first signal processing means for encrypting and decrypting data sent to and received from the internet;

a remote station arranged for connection to the internet and to a cellular radio telephone network, and having second signal processing means for encrypting and decrypting data sent to and received from the internet, the remote station further comprising means for providing a security key and for sending the security key to the mobile host over the cellular radio telephone network(s) using a point-to-point packet switched service of the network(s);

the mobile host further comprising means for receiving said transmitted security key, wherein said security key may be used to secure subsequent data transmissions between the mobile host and the remote station over the internet.

8. A method of communicating data between a mobile host and a remote station over the internet, where both the mobile host and the remote station are registered with the same or different cellular radio telephone networks, the method comprising the steps of:

sending a security key, from the remote station to the mobile host, over the cellular radio telephone network(s) using a point-to-point packet switched service of the network(s);

receiving said security key at the mobile host, and using the received key to generate authentication data, the authentication data being sent to the remote station to secure subsequent data transmissions between the mobile host and the remote station over the internet.

9. A method according to claim 8, wherein the remote station is connected to a Local Area Network (LAN), the LAN being connected to the internet, and the mobile host is wirelessly connected to the internet via the mobile host'"'"'s cellular radio telephone network.

10. A method according to claim 9, wherein:

said LAN is assigned as the home network of the mobile host so that said remote terminal is the home agent of the mobile host;

the mobile host is registered with a cellular radio telephone network which provides access for the mobile host to the internet; and

a care-of-address is sent from the mobile host to the home agent over the internet encrypted with said security key.

11. A method according to claim 8, wherein the remote station is the home agent of a cellular telephone network.

12. A method according to claim 11, wherein the remote station is designated as the home agent of the mobile host, as defined by mobile internet protocol.

13. A method according to claim 8, wherein the or each cellular radio telephone network is a GSM network and said point-to-point packet switched service is the Short Message Service (SMS).