Authorizing access to telecommunications networks for mobile devices, such as mobile devices accessing networks via non-traditional entry points

• US 8,189,548 B2
• Filed: 03/06/2009
• Issued: 05/29/2012
• Est. Priority Date: 03/06/2009
• Status: Active Grant

• Current Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Original Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Inventors: Caldwell, Christopher E., Linkola, Janne P.
• Primary Examiner(s): Ngo, Ricky
• Assistant Examiner(s): Masur, Paul H
• Application Number:
  US12/399,710
• Publication Number:
  US 20100226347A1
• Time in Patent Office: 1,180 Days
• Field of Search: 370/328, 370/330, 370/338, 370/340, 4554221-460, 455/524, 455/525
• US Class Current: 370/338
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 65/102 Gateways arrangements for connecting between networks having differing types of switching systems, e.g. gateways, H04L12/66
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 36/385 of the core network

Abstract

A system and method for authorizing mobile devices to carrier networks via non-traditional entry points is described. In some examples, the system reviews a registration message sent during establishment of a communication session between the mobile device and the carrier'"'"'s network to determine the type of access network used by the mobile device. In some cases, the system may identify the base station controller originating the registration message when determining whether the access request came from an IP-based network or other non-traditional entry point.

Claims

1. In a wireless telecommunications system communicating with multiple mobile devices, wherein the wireless telecommunications system includes a converged telecommunications network that employs a core telecommunications network, a cellular broadcast network and an IP-based broadcast network, and wherein subscribers can access the IP-based broadcast network via wireless connections between mobile devices and wireless access points forming IP-based wireless local area networks (WLANs), a method performed by the core telecommunications network to authorize access of a mobile device to services of the core telecommunications network, the method comprising:

receiving a registration message from the mobile device at a network controlling node that facilitates communication between the core telecommunications network and the IP-based broadcast network, wherein the registration message includes information indicating that the mobile device is communicating with the IP-based broadcast network;

determining from content included in the received registration message that the mobile device is capable of communicating with the core telecommunications network via the IP-based access network; and

upon determining that the mobile device is capable of communicating with the core telecommunications network via the IP-based broadcast network;

searching for information in a database of mobile devices authorized to communicate over the core telecommunications network, wherein searching for information includes searching for information that indicates that the mobile device is associated with a subscriber of services provided via the IP-based broadcast network but not services provided via the cellular broadcast network;

determining, based on the indication, that the mobile device is associated with a subscriber of services provided via the IP-based broadcast network, but not a subscriber to services provided via the cellular broadcast network; and

permitting the mobile device to only receive services via the IP-based broadcast network, but not to receive services via the cellular broadcast network.

2. The method of claim 1, wherein the content included in the received registration message indicates that the mobile device is only authorized to access the core telecommunications network via the IP-based access network.

3. The method of claim 1, wherein the content included in the registration messages includes signaling point code for a base station controller within the network controlling node and in communication with a home location registry within the core telecommunications network.

4. The method of claim 1, wherein the registration message is received from the network controlling node at a home location registry within the core telecommunications network.

5. The method of claim 1, wherein a component within a home location registry within the core telecommunications network receives the registration message from the network controlling node and searches the database of mobile devices authorized to communicate over the core telecommunications network for the mobile device.

6. A system of tangible components located within a home location registry of a telecommunications network that permits multiple mobile devices to access at least some services offered by or through the telecommunications network, the system comprising:

an entry point identification component in communication with an access network, wherein the access network is in communication with the telecommunications network and the mobile devices, wherein the mobile devices seek access to services of or through the telecommunications network, and wherein the entry point identification component includes;

a message reception component, wherein the message reception component is configured to receive registration messages from mobile devices seeking access to the telecommunications network;

a message monitoring component in communication with the message reception component, wherein the message monitoring component is configured to identify base station controllers within the access network transmitting the registration messages to the telecommunications network; and

a network determination component, wherein the network determination component is configured to determine types of networks used by the mobile devices to access services of or through the telecommunications network based on the identified base station controllers;

an authorization component in communication with the network determination component, wherein the authorization component is configured to check a database of authorized subscribers to the telecommunications network associated with the mobile devices when the network determination component determines the type of network used by a mobile device to access the telecommunications network is an IP-based network,

wherein the mobile device accesses the IP-based network via unlicensed spectrum; and

an access component, wherein the access component is configured to establish connections between the mobile devices associated with authorized subscribers to the telecommunications network and the telecommunications network.

7. The system of claim 6, wherein the access component is further configured to prevent connections between the mobile devices associated with unauthorized subscribers to the telecommunications network and the telecommunications network, wherein the telecommunications network is a GSM or CDMA network.

8. The system of claim 6, wherein the network determination component is configured to determine the types of networks used by the mobile devices to access the telecommunications network based on identifying signaling point codes from the base station controllers within the received registration messages.

9. The system of claim 6, wherein checking the database of authorized subscribers to the telecommunications network includes accessing a database located outside of the home location registry that includes information used to authorize mobile devices to IP-based access networks.

10. The system of claim 6, wherein checking the database of authorized subscribers to the telecommunications network includes accessing a database located within the home location registry that includes information that relates authorized mobile devices to network types associated with the authorized mobile devices.

11. The system of claim 6, wherein the message monitoring component is configured to intercept the received registration messages and transmit the identified identities of the base station controllers to the network determination component.

12. A method for authorizing access of a telecommunications network by a mobile device, the method comprising:

receiving, at a core telecommunications network, a registration message from a base station controller component in communication with an IP access network, wherein the IP access network is in communication with the mobile device, and wherein the mobile device seeks access to services of the core telecommunications network via the IP access network;

determining that the registration message includes content indicating the base station controller forms part of the IP access network;

checking a database of mobile devices authorized to receive services from the core telecommunications network for information associated with the mobile device seeking access to services of the core telecommunications network; and

permitting access to services of the core telecommunications network only via the IP access network when the database of authorized mobile devices includes information that the mobile device seeking access to services of the telecommunications network may only access services of the core telecommunications network via the IP access network.

13. The method of claim 12, wherein the content includes a point signaling code from the base station controller.

14. A method for denying a mobile device access to a core telecommunications network, the method comprising:

receiving, at a home location registry within the core telecommunications network, a registration message from a network controller or base station controller in communication with a mobile device within an IP access network,

wherein the mobile device seeks access to services of the core telecommunications network via the IP access network, and

wherein the mobile device accesses the IP-based network via unlicensed spectrum;

determining that the registration message includes content indicating the network controller or base station controller is within the IP access network;

checking a database of mobile devices authorized on the core telecommunications network for information associated with the mobile device seeking access to the core telecommunications network; and

denying access to services of the core telecommunications network when the check of the database of authorized mobile devices does not identify information associated with the mobile device seeking access to the telecommunications network.

15. The method of claim 14, wherein the content includes a point signaling code from the base station controller.

16. A tangible computer-readable medium, wherein the medium is not a signal, for use within a telecommunications network, wherein contents of the computer-readable medium, when executed, cause an authorization system to perform a method for authorizing mobile devices to access services from the network, the method comprising:

intercepting a request from a mobile device to access services from the telecommunications network;

determining a point of entry to the telecommunications network by the mobile device, wherein the telecommunications network has a set of entry points, and wherein a proper subset of entry points include at least one wireless access point; and

when the determined point of entry includes the at least one wireless access point, then authorizing the mobile device access to services of the telecommunications network via the predetermined access point, but denying access to services of the telecommunications network via other points of entry,

wherein the mobile device communicates with the access point via unlicensed spectrum.

17. The computer-readable medium of claim 16, wherein determining a point of entry to the telecommunications network includes:

identifying information associated with the mobile device that indicates the mobile device is capable of accessing the telecommunications network via a licensed wireless point of entry; and

identifying information associated with the intercepted request that indicates the request originates from a network controller in communication with an unlicensed wireless access point.

18. The computer-readable medium of claim 16, wherein the at least one wireless access point is a Wi-Fi access point.

19. The computer-readable medium of claim 16, further comprising receiving information identifying an unlicensed access point to the telecommunications network and authorizing access based at least in part on the received information.

20. In a wireless telecommunications system communicating with multiple mobile devices, wherein the wireless telecommunications system includes a converged telecommunications network that employs both a cellular network and an IP-based network, and wherein mobile device users can access the IP-based network via wireless connections between mobile devices and wireless access points that forms IP-based wireless local area networks (WLANs), a method performed by the wireless telecommunications system to provide access to the converged telecommunications network, the method comprising:

receiving within the converged telecommunications network a registration message associated with a mobile device capable of communicating over both the cellular network and the IP-based network, wherein the registration message includes identification information that identifies the mobile device to the converged telecommunications network;

denying access to services provided by the cellular network of the converged telecommunications network based on the included identification information;

but

permitting access to services provided by the IP-based network of the converged telecommunications network based on the included identification information.

21. The method of claim 20, wherein permitting access to services of the converged telecommunications network includes authorizing a wireless access point within the IP-based network to establish a connection between the mobile device and the converged telecommunications network based on information associated with the wireless access point.

22. The method of claim 20, wherein the cellular network includes a femtocell and the converged telecommunications network only permits GSM communications between the mobile device and the converged telecommunications network via the femtocell.

23. The method of claim 20, wherein the IP-based network includes a Wi-Fi router and the converged telecommunications network only permits communications between the mobile device and the converged telecommunications network via the Wi-Fi router.

24. The method of claim 20, wherein the converged telecommunications network permits access to a first service via the IP-based network and permits access to a second service via the cellular network.

25. A system for authorizing access of a telecommunications network by a mobile device, the method comprising:

means for receiving, at a core telecommunications network, a registration message from a base station controller in communication with a mobile device within an IP access network, wherein the mobile device seeks access to the core telecommunications network via the IP access network;

means for determining that the registration message includes content indicating the base station controller is within the IP access network;

means for checking a database of mobile devices authorized on the core telecommunications network for information associated with the mobile device seeking access to the core telecommunications network; and

means for permitting access to the core telecommunications network only via the IP access network when the database of authorized mobile devices includes information associated with the mobile device seeking access to the telecommunications network.