GW coupled SIP proxy

• US 7,764,963 B2
• Filed: 04/11/2007
• Issued: 07/27/2010
• Est. Priority Date: 04/11/2007
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Grayson, Mark, Rosenberg, Jonathan D.
• Primary Examiner(s): SANTIAGO CORDERO, MARIVELISSE
• Application Number:
  US11/786,343
• Publication Number:
  US 20080254794A1
• Time in Patent Office: 1,203 Days
• Field of Search: 455/435.1
• US Class Current: 455/435.1
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 92/10 between terminal device and access point, i.e. wireless air interface

Abstract

In one embodiment, a method can include: (i) performing an initial authentication with a mobile device in an access gateway, the access gateway being a point of attachment; (ii) forwarding a first message from the mobile device to an edge proxy; (iii) receiving a second message from the edge proxy; and (iv) returning a modified version of the second message to the edge proxy for a final authentication of the mobile device.

Claims

1. A method, comprising:

performing an initial authentication with a mobile device in an access gateway, the access gateway being a point of attachment;

forwarding a first message from the mobile device to an edge proxy via the access gateway;

receiving a second message over a secure tunnel from the edge proxy, the second message querying the access gateway to provide visited network information for a user of the mobile device; and

responding to the second message by providing the visited network information from the access gateway to the edge proxy for use in a final authentication of the mobile device.

2. The method of claim 1, wherein the performing the initial authentication comprises using at least one of general packet radio service (GPRS) tunneling protocol (GTP) and point-to-point protocol (PPP).

3. The method of claim 1, wherein each of the first and second messages comprises a session initiation protocol (SIP) message.

4. The method of claim 1, wherein the access gateway comprises at least one of a gateway GPRS support node (GGSN) and a packet data serving node (PDSN).

5. The method of claim 1, wherein the edge proxy comprises a proxy call session control function (P-CSCF).

6. The method of claim 1, further comprising returning an SIP message from the access gateway to the mobile device.

7. The method of claim 1, wherein the first message comprises at least one of an invite message and a registration message.

8. The method of claim 1, wherein the second message querying the access gateway is formed using an IP address derived from the first message.

9. The method of claim 1, further comprising denying or allowing network access.

10. The method of claim 1, further comprising analyzing an asserted identity from the access gateway.

11. The method of claim 1, further comprising deriving media quality statistics in the access gateway.

12. The method of claim 1, further comprising accessing services from a home-based network.

13. A method, comprising:

receiving in an edge proxy, a first message from a mobile device forwarded via an access gateway;

sending a second message over a secure tunnel to the access gateway, the second message querying the access gateway to provide visited network information for a user of the mobile device; and

receiving a response to the second message from the access gateway that includes the visited network information for use in a final authentication of the mobile device.

14. The method of claim 13, wherein each of the first and second messages comprises a session initiation protocol (SIP) message.

15. The method of claim 13, wherein the access gateway comprises at least one of a gateway general packet radio service (GPRS) support node (GGSN) and a packet data serving node (PDSN).

16. The method of claim 13, wherein the edge proxy comprises a proxy call session control function (P-CSCF).

17. The method of claim 13, further comprising returning an SIP message to the mobile device.

18. The method of claim 13, wherein the first message comprises at least one of an invite message and a registration message.

19. The method of claim 13, wherein the second message querying the access gateway is formed using an IP address derived from the first message.

20. The method of claim 13, further comprising denying or allowing network access.

21. The method of claim 13, further comprising analyzing an asserted identity from the access gateway.

22. The method of claim 13, further comprising deriving media quality statistics in the access gateway.

23. The method of claim 13, further comprising accessing services from a home-based network.

24. A system for protecting a session initiation protocol (SIP) infrastructure, the system comprising:

means for performing an initial authentication with a mobile device in an access gateway, the access gateway being a point of attachment;

means for forwarding a first message from the mobile device to an edge proxy via the access gateway;

means for receiving a second message over a secure tunnel from the edge proxy, the second message querying the access gateway to provide visited network information for a user of the mobile device; and

means for responding to the second message by providing the visited network information from the access gateway to the edge proxy for use in a final authentication of the mobile device.

25. A system for protecting a session initiation protocol (SIP) infrastructure, the system comprising:

means for receiving in an edge proxy, a first message from a mobile device forwarded via an access gateway;

means for sending a second message over a secure tunnel to the access gateway, the second message querying the access gateway to provide visited network information for a user of the mobile device; and

means for receiving a response to the second message from the access gateway that includes the visited network information for use in a final authentication of the mobile device.