Arrangement for secure communication and key distribution in a telecommunication system

• US 7,672,288 B1
• Filed: 03/28/2000
• Issued: 03/02/2010
• Est. Priority Date: 03/29/1999
• Status: Expired due to Fees

• Current Assignee: III Holdings 3, LLC
• Original Assignee: Nokia Networks (Nokia Corporation)
• Inventors: Iartym, Igor
• Primary Examiner(s): Trost, IV; William
• Assistant Examiner(s): Shand; Roberta A
• Application Number:
  US09/701,287
• Time in Patent Office: 3,626 Days
• Field of Search: 370/328, 370/338, 370/352, 370/389, 370/390, 370/392, 370/349, 370/400, 370/401, 370/469, 370/474, 370/350, 370/351, 455/433
• US Class Current: 370/349
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5061 Pools of addresses
• CPC Class Codes: H04L 61/5076 Update or notification mechanisms, e.g. DynDNS
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 61/5092 by self-assignment, e.g. picking addresses at random and testing if they are already in use
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/082 for traffic bypassing of mobility servers, e.g. location registers, home PLMNs or home agents
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

The invention relates to mobility management of an Internet-type protocol traffic in a mobile communications system. At least one mobile exchange (DXT1, DXT2) in the mobile communications system is arranged to operate as a gateway which interfaces (router 1) the mobile communications system with external data networks. All the mobile exchanges (DXT1, DXT2) are arranged to use a user identity and a data equipment identity for identifying each mobile host and to use an identity of the mobile exchange currently serving the mobile host for defining the location of the mobile host. Each mobile host is dynamically or permanently allocated an IP address which is bound to the user identity, the data equipment identity and the location information of the respective mobile host. The use of the user identity and the data terminal identity provide a unique identification for the mobile host without any relation to the IP network. Also the location information is independent of the IP network. As a consequence, the mobile exchanges are able to route IP datagrams having the allocated IP address from a gateway exchange (DXT1) to the serving exchange (DXT2) according to the location information and further to the respective mobile host according to the user identity and the data equipment identity bound to the IP address by using a mobile network specific routing method instead of mobile IP tunnelling.

Claims

1. A method for providing Internet Protocol-type mobility for a mobile host in a mobile communications system comprising a plurality of mobile hosts, at least two mobile exchanges, at least two Internet Protocol address spaces defining subnetworks in the mobile communication system, a plurality of base stations connected to said mobile exchanges, at least one of the mobile exchanges being arranged to operate as a gateway which interfaces the mobile communications system with external data networks, the method comprising:

allocating an Internet Protocol address for a mobile host in a first Internet protocol address space;

using a user identity and a data equipment identity for identifying the mobile host in the mobile communications system, wherein the user identity is a mobile subscriber identity and the data equipment identity is a network service point access identifier;

defining the location of the mobile host by an identity of a mobile exchange currently serving the mobile host;

establishing address information which binds the allocated Internet Protocol address to the user identity and the data equipment identity, and which contains the location of the mobile host;

routing Internet Protocol datagrams having the allocated Internet Protocol address in the first Internet protocol address space from a gateway exchange to the serving exchange and further to the respective mobile host according to said address information;

updating the location of the mobile host in the address information in a handover from an old mobile exchange in the first Internet Protocol address space to a new mobile exchange in a second Internet Protocol address space,

sending a roaming request from the mobile host to the old mobile exchange,

sending a roaming request from the old mobile exchange to the new mobile exchange, said roaming request containing said address information,

updating the location of the mobile host in said address information at the new mobile exchange,

sending an acknowledgement from the new mobile exchange to the old mobile exchange, said acknowledgement containing the updated address information; and

routing the Internet Protocol datagrams having the allocated Internet Protocol address in the first Internet Protocol address to the new exchange in the second Internet Protocol address space according to the updated address information.

2. The method of claim 1, further comprising:

storing said updated address information at the old mobile exchange for a predetermined routing period so as to enable routing of any subsequent datagram to the new mobile exchange.

3. The method of claim 1, further comprising:

receiving, subsequent to the handover at the old mobile exchange, a datagram having the allocated Internet Protocol address;

sending, in response to said subsequent receipt of the datagram, a location update to an originating mobile exchange to indicate the new location of the Internet Protocol address; and

routing, in response to said location update, any further datagrams having the allocated Internet Protocol address to said new location.

4. A method of providing Internet Protocol-type mobility for a mobile host in a mobile communications system including a plurality of mobile hosts, at least two mobile exchanges, at least two Internet Protocol address spaces defining subnetworks in the mobile communication system, a plurality of base stations connected to said mobile exchanges, at least one of the mobile exchanges being arranged to operate as a gateway which interfaces the mobile communications system with external data networks, the method comprising:

allocating an Internet Protocol address for a mobile host in a first Internet protocol address space;

using a user identity and a data equipment identity for identifying the mobile host in the mobile communications system, wherein the user identity is a mobile subscriber identity and the data equipment identity is a network service point access identifier;

defining the location of the mobile host by an identity of a mobile exchange currently serving the mobile host;

establishing address information which binds the allocated Internet Protocol address to the user identity and the data equipment identity, and which contains the location of the mobile host, said user identity binding the allocated Internet Protocol address to a specific user or a specific mobile station in said mobile communications system, and said data equipment identity binding said allocated Internet Protocol address to a data equipment or Internet Protocol application connected to, integrated into or associated with the specific mobile station;

routing Internet Protocol datagrams having the allocated Internet Protocol address in the first Internet protocol address space from a gateway exchange to the serving exchange and further to the respective mobile host according to said address information,

receiving at the gateway exchange a location update from the mobile exchange indicated by the location information, and

routing, in response to said location update, any further datagrams having the allocated Internet Protocol address to a new location defining an exchange in a second internet protocol address space as indicated in the location update.

5. A method according to claim 4, further comprising:

receiving at the serving mobile exchange a datagram having the allocated Internet Protocol address, and

sending said received datagram from the serving mobile exchange to the mobile host indicated by the user identity and the data equipment identity in said address information.

6. A method according to claim 4, further comprising allocating the IP address to the mobile host dynamically or allocating the IP address permanently.

7. The method of claim 4, further comprising maintaining the address information not only at the currently serving mobile exchange but also at a mobile exchange which manages the allocation of the Internet Protocol address space to which the allocated Internet Protocol address belongs, if the managing mobile exchange is not the same as the serving mobile exchange.

8. The method of claim 7, further comprising:

updating the location of the mobile host in said managing mobile exchange in response to a handover, if the managing mobile exchange is not the old exchange or the new exchange.

9. The method of claim 4, further comprising:

receiving a first datagram addressed to the allocated Internet protocol address at the gateway exchange from the external network;

requesting the location information for the Internet protocol address from a mobile exchange which manages the allocation of the Internet protocol address space to which the allocated Internet protocol address belongs if the managing mobile exchange is not the same as the gateway exchange;

receiving the location information for the Internet protocol address from the managing exchange; and

routing the first datagram and any further datagrams having the allocated Internet protocol address to the serving mobile exchange indicated by said location information.

10. The method of claim 9, further comprising:

and

deleting the location information of the Internet Protocol address at the gateway exchange when a predetermined period of time has elapsed from obtaining said location information or from the last reception of a datagram having the allocated Internet Protocol address, and

re-requesting the location information of the Internet Protocol address from the managing exchange if a datagram having the allocated Internet Protocol address is received after the deletion.

11. A mobile communication system comprising:

a plurality of mobile hosts,

at least two mobile exchanges, at least one of the mobile exchanges being arranged to operate as a gateway which interfaces the mobile communications system with external data networks,

at least two Internet Protocol address spaces defining subnetworks in the mobile communication system,

a plurality of base stations connected to said mobile exchanges, and a mobility mechanism for providing Internet Protocol-type mobility for the mobile hosts, the mobility mechanism comprising

the mobile exchanges being configured to use a user identity and a data equipment identity for identifying each mobile host and to use an identity of the mobile exchange currently serving the mobile host for defining the location of the mobile host, wherein the user identity is a mobile subscriber identity and the data equipment identity is a network service point access identifier,

each mobile host having a dynamically or permanently allocated Internet Protocol address in a first Internet Protocol address space, which is bound to the user identity, the data equipment identity and the location information of the respective mobile host,

the mobile exchanges being configured to route Internet Protocol datagrams having the allocated Internet Protocol address from a gateway exchange to the serving exchange according to the location information and further to the respective mobile host according to the user identity and the data equipment identity bound to the Internet Protocol address, and

the mobile exchanges being configured to update the location information in a handover from an old exchange in the first Internet Protocol address space to a new exchange in a second Internet Protocol address space, and

wherein the old mobile exchange is configured to maintain the updated location information for the allocated Internet Protocol address for a predetermined routing period, in order to enable the routing of any further datagrams having the allocated Internet Protocol address to the new exchange, and the old mobile exchange is further arranged to, in response to the receipt of said further datagrams having the allocated Internet Protocol address, to update the location information of the Internet Protocol address in an originating mobile exchange, typically in the gateway exchange, to allow the originating exchange to reroute any further datagrams having the allocated Internet Protocol address to said new location defining the new exchange in the second Internet Protocol address space.

12. A mobile communication system comprising:

a plurality of mobile hosts;

at least two mobile exchanges, at least one of the mobile exchanges being arranged to operate as a gateway which interfaces the mobile communications system with external data networks;

at least two internet Protocol address spaces defining subnetworks in the mobile communication system,

a plurality of base stations connected to said mobile exchanges;

and a mobility mechanism for providing Internet Protocol-type mobility for the mobile hosts, the mobility mechanism being configured to use a user identity and a data equipment identity for identifying each mobile host and to use an identity of the mobile exchange currently serving the mobile host for defining the location of the mobile host, wherein the user identity is a mobile subscriber identity and the data equipment identity is a network service point access identifier,

each mobile host having a dynamically or permanently allocated Internet Protocol address in a first Internet protocol address space, which is bound to the user identity, the data equipment identity and the location information of the respective mobile host, said user identity binding the allocated Internet Protocol address to a specific user or a specific mobile station in said mobile communications system, and said data equipment identity binding said allocated Internet Protocol address to a data equipment or Internet Protocol application connected to, integrated into or associated with the specific mobile station,

the mobile exchanges being configured to route Internet Protocol datagrams having the allocated Internet Protocol address from a gateway exchange to the serving exchange according to the location information and further to the respective mobile host according to the user identity and the data equipment identity bound to the Internet Protocol address,

wherein the gateway exchange is configured to route, in response to said location update, any further datagrams having the allocated Internet Protocol address in the first Internet Protocol address space, to a new location defining a new exchange in a second Internet Protocol address space as indicated in the location update.

13. A system according to claim 12, wherein at least one of the exchanges is configured to function as an address pool server which manages the entire Internet Protocol address space in the system or part of it, and that, in addition to the currently serving mobile exchange, the address pool server managing the Internet Protocol address space to which the allocated Internet Protocol address belongs is arranged to store the location, the user identity and the data equipment identity bound to the Internet Protocol address, and that a new exchange is arranged to update the location of the mobile host in said address pool server in response to a hand-over.

14. A system according to claim 13, wherein the gateway exchange is responsive to receiving a first datagram addressed to the allocated Internet Protocol address from the external network, for requesting the location information for the Internet Protocol address from the respective address pool server and for routing the first datagram and any further datagrams having the allocated Internet Protocol address to the serving mobile exchange indicated by said location information.

15. A mobile exchange for a mobile communication system including a plurality of mobile hosts, at least two mobile exchanges, at least two Internet Protocol Address spaces defining subnetworks in the mobile communication system, a plurality of base stations connected to said mobile exchanges, said mobile exchange being arranged to operate as a gateway which interfaces the mobile communications system with external data networks and comprising, for providing Internet Protocol-type mobility for the mobile hosts:

a mechanism configured to use a user identity and a data equipment identity for identifying each mobile host and to use an identity of the mobile exchange currently serving the mobile host for defining the location of the mobile host, each mobile host having a dynamically or permanently allocated Internet Protocol address in a first Internet Protocol address space, which is bound to the user identity, the data equipment identity and the location information of the respective mobile host, said user identity binding the allocated Internet Protocol address to a specific user or a specific mobile station in said mobile communications system, and said data equipment identity binding said allocated Internet Protocol address to a data equipment or Internet Protocol application connected to, integrated into or associated with the specific mobile station; and

a mechanism configured to route Internet Protocol datagrams having the allocated Internet Protocol address from a gateway exchange to the serving exchange according to the location information and further to the respective mobile host according to the user identity and the data equipment identity bound to the Internet Protocol address, wherein the user identity is a mobile subscriber identity and the data equipment identity is a network service point access identity;

a mechanism configured to receive a location update from the mobile exchange i in the first Internet Protocol address space as indicated by the location information, and a mechanism configured to receive a location update from the mobile exchange in the first Internet Protocol address space as indicated by the location information, and

a mechanism configured to route, in response to said location update, any further datagrams having the allocated Internet Protocol address to a new location defining a new exchange in the second Internet Protocol address space as indicated in the location update.

16. A mobile exchange for a mobile communication system including a plurality of mobile hosts, at least two mobile exchanges, at least two Internet Protocol address spaces defining subnetworks in the mobile communication system, at least one of the mobile exchanges being arranged to operate as a gateway which interfaces the mobile communications system with external data networks, a plurality of base stations connected to said mobile exchanges, said mobile exchange providing Internet Protocol-type mobility for the mobile hosts, the mobile exchange comprising:

a mechanism configured to use a user identity and a data equipment identity for identifying each mobile host and to use an identity of the mobile exchange currently serving the mobile host for defining the location of the mobile host, each mobile host having a dynamically or permanently allocated Internet Protocol address in a first Internet Protocol address space, which is bound to the user identity, the data equipment identity and the location information of the respective mobile host;

a mechanism configured to route Internet Protocol datagrams having the allocated Internet Protocol address from a gateway exchange to the serving exchange according to the location information and further to the respective mobile host according to the user identity and the data equipment identity bound to the Internet Protocol address, wherein the user identity is a mobile subscriber identity and the data equipment identity is a network service point access identifier;

a mechanism configured to update the location information of the mobile host in a handover from either the exchange in a first Internet protocol address space to a new exchange in a second Internet Protocol address space or to the exchange in the first Internet protocol address space from the new exchange in a second Internet Protocol address space;

a mechanism configured to receive, subsequent to the handover to the new exchange, a datagram having the allocated Internet Protocol address in the first Internet Protocol address space; and

a mechanism configured to send, in response to said subsequent receipt of the datagram, a location update to an originating exchange to indicate a new location of the Internet Protocol address and to cause the originating exchange, in response to said location update, to route any further datagrams having the allocated Internet Protocol address in the first Internet Protocol address space to said new location defining the new exchange in the second Internet Protocol address space.