Authentication of mobile devices via proxy device

• US 7,203,482 B2
• Filed: 04/30/2004
• Issued: 04/10/2007
• Est. Priority Date: 05/02/2003
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Steven Blumenthal
• Inventors: Ibe, Oliver C., Blumenthal, Steven
• Primary Examiner(s): Feild; Joseph
• Assistant Examiner(s): Nguyen; David Q.
• Application Number:
  US10/836,056
• Publication Number:
  US 20040219905A1
• Time in Patent Office: 1,075 Days
• Field of Search: 455/411, 455/435.1, 455/445, 455/426.1, 455/433, 370/463, 370/386, 370/329, 370/389, 380/270
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 80/045 involving different protocol versions, e.g. MIPv4 and MIPv6
• CPC Class Codes: H04W 84/04 Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A mechanism to permit the cryptographic authentication of a mobile device in the cellular carrier'"'"'s network when the device is present in the 802.11 network, wireless LAN, served by a Cellular Controller and not connected directly to the cellular carrier'"'"'s network via a radio link is disclosed. The Cellular Controller acts as a proxy for the mobile device when the device is in a building served by an 802.11 wireless LAN. The solutions features the separation of a mobile device'"'"'s radio function from its ANSI-41 authentication mechanism to permit the proxy function to work and to not have to duplicate the ANSI-41 authentication data and CAVE algorithm.

Claims

1. A method comprising:

emulating a mobile terminal, or a group of mobile terminals on a wide area wireless network using a fixed radio terminal;

establishing a communication path passing from the wide area wireless network through the fixed radio terminal over a local network to the mobile terminal or group of mobile terminals, wherein the communications path uses protocols for the wide area wireless network between the fixed radio terminal and the wide area wireless network and local network protocols between the fixed radio terminal and the mobile terminal or terminals that are connected to the local network;

a controller of the fixed radio terminal receiving authentication information from the wide area wireless network;

the controller encapsulating the authentication information in the protocol of the local network and passing the authentication information to the mobile terminal;

the mobile terminal generating an authentication result from the authentication information that is transmitted to the controller using the local network protocol; and

the controller transmitting the authentication result to the wide area wireless network using the wide area network protocol.

2. The method of claim 1 further comprising hosting functions of an ANSI-41 authentication mechanism at the mobile terminal.

3. The method of claim 1 further comprising hosting functions of a GSM authentication mechanism at the mobile terminal.

4. The method of claim 1 further comprising passing voice or data communication between the mobile terminal and the wide area wireless network over the established communication path.

5. The method of claim 1 further comprising hosting voice or data encryption functions at the mobile terminal for processing voice communication.

6. The method of claim 5 wherein the step of hosting the voice or data encryption functions at the mobile terminal includes hosting a CAVE algorithm.

7. The method of claim 5 wherein step of hosting the voice or data encryption functions at the mobile terminal includes hosting a GSM algorithm.

8. The method of claim 1 wherein the local network protocols include Session Initiation Protocol.

9. A system comprising:

a cellular wireless network;

a local area network;

mobile cellular terminals capable of communicating over the cellular wireless network and the local area network; and

a controller that emulates the mobile terminals on the cellular wireless network using a fixed radio terminal when the mobile terminals are connected to the local area network, the controller establishing a communication path passing from the cellular wireless network through the fixed radio terminal over a local area network to the mobile terminals, wherein the controller uses protocols for the cellular wireless network between the fixed radio terminal and the cellular wireless network and local network protocols to the mobile terminals, wherein the controller receives authentication information from the cellular wireless network and encapsulates the authentication information in the protocol of the local area network, passes the authentication information to the mobile terminals, the mobile terminals generating an authentication result from the authentication information that is transmitted to the controller using the local area network protocol, and the controller transmits the authentication result to the cellular wireless network using the cellular wireless network protocol.

10. The system of claim 9 wherein the local area network protocols include Session Initiation Protocol.