Method and apparatus for switching access between mobile networks

• US 7,460,856 B2
• Filed: 12/18/2002
• Issued: 12/02/2008
• Est. Priority Date: 12/20/2001
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Sundberg, Per-Erik
• Primary Examiner(s): Nguyen; Duc
• Assistant Examiner(s): Perez; Julio R
• Application Number:
  US10/499,697
• Publication Number:
  US 20050013264A1
• Time in Patent Office: 2,176 Days
• Field of Search: 455/411, 455/440, 455/444, 455/448, 455/456.1, 455/552.1, 455/553.1, 370/331
• US Class Current: 455/411
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 36/0038 of security context information
• CPC Class Codes: H04W 36/14 Reselecting a network or an air interface
• CPC Class Codes: H04W 36/1446 wherein at least one of the networks is unlicensed

Abstract

A method and apparatus for switching access between mobile networks for a mobile terminal comprising a first and a second radio device capable of communication with a first and a second mobile network, respectively. The second mobile network has priority over the first mobile network. A first connection is authorised and established between the firstradio device and the first mobile network. When it is detected that the mobile terminal moves into a coverage area of the second mobile network, a second connection is authorised and established between the second radio device and the second mobile network based on the authorising made for the first connection with the first mobile network. Both connections can then rely on the authorisation of the first connection.

Claims

1. A method of switching access for a mobile terminal between a first mobile network and a second different mobile network, the mobile terminal comprising a first radio device and a second radio device capable of communication with the first and second mobile networks, respectively, wherein the first and second radio devices are interconnected by a communications link and the second mobile network has priority over the first mobile network, the method comprising:

A) making an access request to the first mobile network by the mobile terminal using the first radio device,

B) authorizing and establishing a first connection between the first radio device in the mobile terminal and the first mobile network,

C) when the mobile terminal is detected as present in a coverage area of the second mobile network, the first radio device of the mobile terminal receiving authentication information from an authentication unit in the first mobile network, wherein the received authentication information includes one or more encryption keys and log-in information from the authentication unit, and

D) authorizing and establishing a second connection between the second radio device in the mobile terminal and the second mobile network based on the authorizing step B) for the first connection with the first mobile network, wherein the second radio device uses said one or more encryption keys to establish the second connection and to protect payload data communicated over the second connection, and wherein the first mobile network has a predetermined authentication agreement with the second mobile network so that the authentication information and encryption keys are already known in the second network prior to authorizing and establishing the second connection.

2. A method according to claim 1, wherein the mobile terminal presence in the coverage area of the second mobile network is detected by the second radio device detecting an identification signal transmitted by the second mobile network.

3. A method according to claim 1, wherein the mobile terminal presence in the coverage area of the second mobile network is detected by the second mobile network detecting an identification signal transmitted by the second radio device.

4. A method according to claim 1, wherein the mobile terminal presence in the coverage area of the second mobile network is detected by a locating function determining that the mobile terminal is located within the coverage area of the second mobile network.

5. A method according to claim 1, wherein the first radio device is a mobile phone, the first mobile network is a GSM/GPRS network, the second radio device is a PCCARD in a laptop computer being connected to the mobile phone, and the second mobile network is a WLAN.

6. A method according to claim 1, wherein the first mobile network covers a wide geographical area, and the second mobile network covers a limited overlapping spot area.

7. The method according to claim 1, wherein the first mobile network has an authentication agreement with the second mobile network valid for the mobile terminal.

8. Mobile terminal apparatus comprising a first radio device and a second radio device which are capable of communication with a first mobile network and a second different mobile network, respectively, wherein the first and second radio devices are interconnected by a communications link and the second mobile network has priority over the first mobile network, the first radio device in the mobile terminal comprising electronic circuitry configured to:

make an access request to the first mobile network;

authorize and establish a first connection between the first radio device in the mobile terminal and the first mobile network;

when the mobile terminal is detected as present in a coverage area of the second mobile network, receive authentication information with an authentication unit in the first mobile network, wherein the received authentication information includes one or more encryption keys and log-in information from the authentication unit,

and the second radio device in the mobile terminal comprising electronic circuitry configured to;

authorize and establish a second connection with the second mobile network by using the authentication information exchanged between the first radio device and the authentication unit in the first mobile network, and

use said one or more encryption keys to establish the second connection and to protect payload data communicated over the second connection, and wherein the first mobile network has a predetermined authentication agreement with the second mobile network so that the authentication information and encryption keys are already known in the second network prior to authorizing and establishing the second connection.

9. Mobile terminal apparatus according to claim 8, wherein the second radio device electronic circuitry is further configured to detect an identification signal transmitted by the second mobile network.

10. Mobile terminal apparatus according to claim 8, wherein the first radio device is a mobile phone capable of communication with a GSM/GPRS network, and the second radio device is a PCCARD in a laptop computer capable of communication with a WLAN.

11. The mobile terminal apparatus in claim 8, wherein the first mobile network has an authentication agreement with the second mobile network valid for the mobile terminal.

12. An authentication unit for authenticating a mobile terminal comprising a first radio device and a second radio device capable of communication with a first mobile network and a second different mobile network, respectively, wherein the first and second radio devices are interconnected by a communications link, the second mobile network has priority over the first mobile network, and wherein the first mobile network has an authentication agreement with the second mobile network valid for the mobile terminal, the authentication unit comprising electronic circuitry is configured to:

authorize and establishing a first connection between the first radio device in the mobile terminal and the first mobile network in response to an access request from the first radio device, and

to exchange authentication information with the first radio device of the mobile terminal when the mobile terminal is detected as present in a coverage area of the second mobile network,

wherein the authentication information includes one or more encryption keys and log-in information from the authentication unit,

wherein the exchanged authentication information can be used by the second radio device in the mobile terminal for authorizing and establishing a second connection between the second radio device and the second mobile network,

wherein said one or more encryption keys can be used by the second radio device to establish the second connection and to protect payload data communicated over the second connection, and

wherein the first mobile network has a predetermined authentication agreement with the second mobile network so that the authentication information and encryption keys are already known in the second network prior to authorizing and establishing the second connection.

13. An authentication unit according to claim 12, wherein the authentication unit belongs to the first mobile network.

14. An authentication unit according to claim 13, wherein the authentication unit also belongs to the second mobile network.