Method and apparatus for supporting access network (AN) authentication

• US 7,796,582 B2
• Filed: 11/05/2007
• Issued: 09/14/2010
• Est. Priority Date: 04/02/2003
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Dyck, Jeffrey Alan, Lioy, Marcello, Mandayam, Jayanth
• Primary Examiner(s): Mehrpour; Melody
• Application Number:
  US11/935,372
• Publication Number:
  US 20080049680A1
• Time in Patent Office: 1,044 Days
• Field of Search: 455/435.1, 455/436, 455/422, 455/406, 455/407, 455/408, 455/410, 455/411, 455/414.1, 709228-229, 709/249, 709/227, 709/29, 370/352, 370/211, 370/235, 370/230, 370/446, 370/441, 370/338, 370/339, 370/349, 370/331
• US Class Current: 370/352
• CPC Class Codes: H04L 12/2859 Point-to-point connection between the data network and the subscribers encapsulation H04L12/4633; virtual LANs H04L12/4641; routing of packets H04L45/00
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 72/00 Local resource management
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Methods and apparatus are presented herein for allowing a keyless access terminal (AT) to access a packet serving data node (PSDN) over a service network stream without deactivating the authentication functions of the authentication network stream.

Claims

1. A system for supporting authentication of access terminals attempting to access a packet data services network communicatively coupled to an access network (AN) and a packet data serving node (PDSN), comprising:

a server communicatively coupled to the AN and the PDSN and configured to determine whether to authenticate an access terminal (AT) in communication with the AN in order to communicate with the PDSN, wherein determining whether to authenticate the AT in communication with the AN comprises;

determining whether an access request message associated with the AT indicates origination at the AN; and

determining whether the AT is Newly activated or requires a New key.

3. The system of claim 1, wherein the access request message is transmitted by the AN after the AN receives an authentication response from the AT.

4. The system of claim 1, further comprising:

if the server determines that the access request message originated at the AN and the AT is Newly activated or requires a New key, the server is further configured to transmit an access accept message to the AN.

5. The system of claim 4, wherein the AN is further configured to transmit to the AT an authentication success message if the access accept message is received by the AN.

8. The system of claim 1, wherein if the access request message does not indicate origination at an AN and the AT is not keyless, then transmitting an access reject message to the AN.

2. An apparatus for supporting authentication of access terminals attempting to access a packet data services network, comprising:

at least one memory element; and

at least one processing element configured to execute a set of instructions stored on the at least one memory element, the set of instructions for;

determining whether an access request message associated with an access terminal (AT) indicates origination at an access network (AN);

determining whether the AT is keyless; and

if the access request message indicates origination at an AN and the AT is keyless, then allowing the AN to authenticate the AT.

6. The apparatus of claim 2, wherein the access request message is transmitted by the AN after the AN receives an authentication response from the AT.

7. The apparatus of claim 2, wherein if the access request message indicates origination at an AN and the AT is keyless, then allowing the AN to authenticate the AT by transmitting an access accept message to the AN.

9. An apparatus for supporting authentication of access terminals attempting to access a packet data services network, comprising:

means for determining whether an access request message associated with an access terminal (AT) indicates origination at an access network (AN);

means for determining whether the AT is keyless;

wherein if the access request message indicates origination at an AN and the AT is keyless, then allowing the AN to authenticate the AT.

10. The apparatus of claim 9, wherein the access request message is transmitted by the AN after the AN receives an authentication response from the AT.

11. A machine-readable medium comprising instructions, the instructions when executed by the machine, cause the machine to perform operations comprising:

determining whether an access request message associated with an access terminal (AT) indicates origination at an access network (AN);

determining whether the AT is keyless; and

if the access request message indicates origination at an AN and the AT is keyless, then allowing the AN to authenticate the AT.

12. The machine-readable medium of claim 11, wherein the access request message is transmitted by the AN after the AN receives an authentication response from the AT.

13. A method for supporting authentication of access terminals attempting to access a packet data services network, comprising:

determining whether an access request message associated with an access terminal indicates origination at an access network;

determining whether the access terminal is keyless; and

if the access request message indicates origination at the access network and the access terminal is keyless, then allowing the access network to authenticate the access terminal.

14. The method of claim 13, wherein the access request message is transmitted by the access network after the access network receives an authentication response from the access terminal.

15. The method of claim 13, wherein if the access request message indicates origination at the access network and the access terminal is keyless, then allowing the access network to authenticate the access terminal by transmitting an access accept message to the access network.