Method of authenticating mobile terminal

• US 7,561,692 B2
• Filed: 02/27/2006
• Issued: 07/14/2009
• Est. Priority Date: 02/27/2006
• Status: Active Grant

• Current Assignee: Sparkmotion Incorporated (Quarterhill Inc. (f/k/a Wi-LAN Inc.))
• Original Assignee: Alvarion Limited
• Inventors: Altshuller, Mark, Shousterman, Leonid, Marinchenco, Oleg
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): Gelagay; Shewaye
• Application Number:
  US11/362,372
• Publication Number:
  US 20070201697A1
• Time in Patent Office: 1,233 Days
• Field of Search: 380/247
• US Class Current: 380/247
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 36/0038 of security context information

Abstract

A method for authenticating a mobile terminal in a wireless network is disclosed. The method includes transmitting a request for authenticating the mobile terminal in that wireless network operative to provide services at a location where the mobile terminal is currently present, receiving the request at a base station associated with that wireless network, and determining an entity associated with the wireless network to be operative as a single authentication access entity for that mobile terminal, as long as the mobile terminal location remains within that wireless network and traffic is directed through any location associated with that wireless network.

Claims

1. A method for authenticating a mobile terminal in a first wireless network, the first network comprising a plurality of traffic conveying entities capable of conveying traffic to/from said mobile terminal, the method comprising the steps of:

transmitting a request for authenticating said mobile terminal in said first wireless network, wherein said first wireless network is operative to provide services at a location where said mobile terminal is currently present;

receiving said request at one base station out of a plurality of base stations associated with said first wireless network; and

selecting an authentication access entity from among a plurality of authentication access entities associated with said first wireless network to be operative as a single authentication access entity for said mobile terminal, wherein said selected authentication access entity is operative to be in communication with said plurality of traffic conveying entities;

exchanging communications between said selected authentication access entity and an authentication server in a home network of said mobile terminal to authenticate said mobile terminal;

upon completion of authentication of said mobile terminal by the authentication server, allowing transmission and reception of communications by said mobile terminal via at least one of said plurality of traffic conveying entities and via at least one of said plurality of base stations, and

using said selected single authentication access entity to authenticate said mobile terminal when traffic is conveyed to/from said mobile terminal operating within said first wireless network, via any other of said plurality of traffic conveying entities.

2. The method according to claim 1, wherein said single authentication access entity is associated with a first network access server that is operative to communicate with at least one of said plurality of first base stations.

3. The method according to claim 2, wherein said first network access server is an access service network gateway (“

ASN GW”

).

4. The method according to claim 2, further comprising a step of initiating a hand over procedure to enable said mobile terminal currently serviced by a first base station to be serviced by a second base station, and wherein first access service network gateway is different from a second access service network gateway (“

ASN GW”

) that said second base station is associated with.

5. The method according to claim 4, further comprising a step of informing said second base station that said single authentication access entity is comprised in said first ASN GW.

6. The method according to claim 4, further comprising a step of providing said second base station with indication of the location of said single authentication access entity.

7. The method according to claim 4, wherein said single authentication access entity is comprised in the first network access server, whereas traffic directed towards said mobile terminal is conveyed via a second network access server.

8. The method according to claim 4, further comprising the step that in the event of uncontrolled disconnection of the communication held with said mobile terminal occurs, said second base station initiates a transmission of a message, informing said single authentication access entity of the uncontrolled disconnection.