Method and device for authenticated access of a station to local data networks in particular radio data networks

• US 7,756,507 B2
• Filed: 10/24/2002
• Issued: 07/13/2010
• Est. Priority Date: 10/24/2001
• Status: Active Grant

• Current Assignee: Monarch Networking Solutions LLC (Acacia Research Corporation)
• Original Assignee: Siemens AG
• Inventors: Morper, Hans-Jochen
• Primary Examiner(s): Appiah; Charles N
• Assistant Examiner(s): Doan; Kiet
• Application Number:
  US10/493,489
• Publication Number:
  US 20050048950A1
• Time in Patent Office: 2,819 Days
• Field of Search: 455/411, 455/410, 455/405, 455/558, 455/466, 455/414.1, 370/329, 380/247, 340/5.74, 726/2, 705/40
• US Class Current: 455/410
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 Architecture for metering, charging or billing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/51 for resellers, retailers or service providers
• CPC Class Codes: H04M 15/68 Payment of value-added services
• CPC Class Codes: H04M 2215/0196 Payment of value-added services, mainly when their charges are added on the telephone bill, e.g. payment of non-telecom services, e-commerce, on-line banking
• CPC Class Codes: H04M 2215/22 Bandwidth or usage-sensitve billing
• CPC Class Codes: H04M 2215/54 Resellers-retail or service providers billing, e.g. agreements with telephone service operator, activation, charging/recharging of accounts
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

The invention relates to methods, devices and systems for the authenticated access to a data network by means of a station (WH) compatible with a data network (WLAN), which permit an authentication of the station and user. A device, for example a mobile radio device, is used for the above, which is authenticated in another system. In addition to the authentication, in particular a charging of services in a data network or another communication system (GSM) which is accessible by means of the data network is thus possible.

Claims

1. A method for authenticated access by a station compatible with a data network, where access of the station is to an access point for such a data network, comprising:

transmitting identification information to the access point;

providing and transmitting a password via an interface to an authenticated device of a system or network external to the access point, having an authenticating function, whereby the identification information is directly assigned to the device authenticated in the external system or network and access to data of the authenticated device is available at a location of the station or of the access point;

transferring the password sent to the authenticated device from the authenticated device to the station;

based on the password received at the station, the station transmitting an attempted copy of the password to the access point;

comparing the attempted copy of the password received from the station by the access point with the password sent to the authenticated device; and

if the comparison is positive, enabling access of the station to at least some services and functions at the access-point end or at the network end.

2. The method according to claim 1, wherein the password is randomly generated or is randomly selected from a list with a large number of redefined passwords or another entity at the access-point end or at the network end.

3. The method according to claim 1, wherein the transmission of the password is carried out by a short message service.

4. The method according to claim 1, wherein the transmission of the password is carried out by an indirect use of authentication functions in the system or network external to the access point or data network with the authenticated device.

5. The method according to claim 1, wherein a mobile station or a subscriber identification card of a cellular mobile radio communication system is used as the authenticated device of the system or network external to the access point or data network.

6. The method according to claim 1, wherein after authentication of the station compatible with the data network, the station accessing the access point to the data network, data relevant to charging is recorded at the access-point end or in a data network at the access-point end by the or an independent entity when the station accesses the access point, the data network and/or services.

7. The method according to claim 6, wherein in a first charging unit basic charging information is recorded and transmitted to a second charging unit which determines from the basic charging information charges to be billed.

8. The method according to claim 6, wherein the data relevant to charging is forwarded to an external charging entity of a third party or to a charging unit, interposed for authentication, of the system or network external to the access point or external to the data network, wherein either the third party and the charging unit are not involved in the authentication procedure or the authentication procedure is carried out independently of the charging method autonomously between the station and the access point or the entity at the access-point end.

9. The method according to claim 6, wherein charging information of a charging-relevant connection occurs as charging access to an IN-based payment system.

10. A data network, comprising:

at least one interface-type access point for access to the data network by stations compatible with the data network at the subscriber end;

an access control unit with an authentication memory in which authorized stations are registered; and

a first external network interface for access by the data network to an external system or network that is incompatible with the data network,

wherein the access control unit is configured to generate a password and to transmit the password via the external system or network to an authenticated device of the external network,

wherein the authenticated device is configured to provide the password to the station,

wherein, in response to receiving the password from the authenticated device, the station is configured to transmit an attempted copy of the password to the access control unit; and

wherein the access control unit is configured to compare the attempted copy of the password transmitted to the authenticated device with the password received from the station.