Network element and method for providing access control for a cellular communication network

• US 8,295,810 B2
• Filed: 09/28/2007
• Issued: 10/23/2012
• Est. Priority Date: 09/29/2006
• Status: Expired due to Fees

• Current Assignee: Ipaccess Limited (Mavenir Group Holdings Ltd.)
• Original Assignee: Ipaccess Limited (Mavenir Group Holdings Ltd.)
• Inventors: Neil, David, Moore, Trevor, Piercy, Neil Philip
• Primary Examiner(s): Brandt, Christopher M
• Application Number:
  US12/442,985
• Publication Number:
  US 20100144316A1
• Time in Patent Office: 1,852 Days
• Field of Search: 455/410, 455/411, 455/436, 370/328, 370/338
• US Class Current: 455/411
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 84/045 using private Base Stations, e.g. femto Base Stations, home Node B
• CPC Class Codes: H04W 92/02 Inter-networking arrangements

Abstract

A network element (130, 330), for providing access control to a core network (120) of a cellular communication network (100) for a wireless communication unit (150) operating within a communication cell supported by the network element (130, 330), comprises a receiver for receiving a message (425) from the wireless communication unit (150) comprising identity information. The network element further comprises logic (160), operably coupled to the receiver, for determining whether to permit the mobile communication unit (150) access to the core network (120), based at least in part on the received identity information.

Claims

1. A network element for providing access control to a core network of a cellular communication network for a wireless communication unit operating within a communication cell supported by the network element, wherein the network element comprises:

a receiver for receiving a message from the wireless communication unit comprising identity information;

logic, operably coupled to the receiver, for determining whether to permit the mobile communication unit access to the core network, based at least in part on the received identity information and whether to forward the message to the core network;

wherein if the logic determines not to forward the message comprising identity information to the core network, but the wireless communication unit is permitted access to the core network, the logic is arranged to construct and send a null message to the core network with a same sequence number as that of the message received from the wireless communication unit.

2. The network element of claim 1 further comprising:

a transmitter for transmitting an Identity Request message to the wireless communication unit, wherein the message received from the wireless communication unit comprises identity information received in response thereto.

3. The network element of claim 2 wherein the receiver of the network element receives a Location Update Request message from the wireless communication unit attempting to connect to the core network and the transmitter transmits the Identity Request message to the wireless communication unit in response thereto.

4. The network element of claim 3 wherein the Location Update Request message is intended for the core network, and the logic in the network element is arranged to intercept the Location Update Request message.

5. The network element of claim 4 wherein the Location Update Request message is in a form of a Mobility Management (MM) message, intended for receipt by the core network.

6. The network element of claim 3 wherein the network element further comprises:

a memory element, operably coupled to the logic, and arranged to store the Location Update Request message such that the logic retrieves the Location Update Request message from the memory element and forwards the message to the core network, if the logic determines that the wireless communication unit is permitted access to the core network.

7. The network element of claim 1 wherein the logic sends a User Authentication Request message to the wireless communication unit.

8. The network element of claim 7 wherein the logic, upon receipt of a User Authentication Reject message from the wireless communication unit, re-sends the User Authentication Request message comprising the invalid Authentication Token to the wireless communication unit.

9. The network element of claim 1 wherein the communication cell supported by the network element is allocated a locally unique location area code.

10. The network element of claim 9 wherein a Location Update Request message is received from the wireless communication unit as a consequence of the wireless communication unit identifying the locally unique location area code.

11. The network element of claim 1 wherein the message comprises an International Mobile Subscriber Identity (IMSI) number of the wireless communication unit.

12. The network element of claim 11 further comprising a memory element arranged to store a plurality of IMSIs for a plurality of wireless communication units permitted access to the core network via the communication cell.

13. The network element of claim 12 further characterised in that the logic is arranged to determine whether to permit the wireless communication unit access to the core network by comparing the IMSI for that wireless communication unit, received within the message to the plurality of IMSIs stored in the memory element.

14. The network element of claim 1 wherein the network element is at least one from a group of:

an access point base station, a radio network sub-system comprising an access point base station controller, via which the access to the core network is supported;

or a Node-B arranged to support communication over a Universal Mobile Telecommunications System (UMTS) network.

15. A method for providing access control to a core network of a cellular communication network for a wireless communication unit operating within a communication cell supported by the network element, the method comprising:

receiving a message from the wireless communication unit comprising identity information;

determining whether to permit the wireless communication unit access to the core network, based at least in part on the received identity information and whether to forward the message; and

if it is determined not to forward the message to the core network, but that the wireless communication unit is permitted access to the core network;

constructing and sending additionally a null message to the core network with a same sequence number as that of the message received from the wireless communication unit.

16. A non-transitory computer readable medium having computer readable instructions stored thereon for execution by a processor to perform a method for providing access control to a core network of a cellular communication network for a wireless communication unit operating within a communication cell supported by the network element, the method comprising the steps of:

receiving a message from the wireless communication unit comprising identity information;

determining whether to permit the wireless communication unit access to the core network, based at least in part on the received identity information and whether to forward the message; and

if the logic determines not to forward the message to the core network, but tha the wireless communication unit is permitted access to the core network constructing and sending additionally a null message to the core network with a same sequence number as that of the message received from the wireless communication unit.

17. The computer-readable storage element of claim 16, wherein the computer readable storage medium comprises at least one of a hard disk, a CD-ROM, an optical storage device, a magnetic storage device, a ROM (Read Only Memory), a PROM (Programmable Read Only Memory), a EPROM (Erasable Programmable Read Only Memory), a EEPROM (Electrically Erasable Programmable Read Only Memory) and a Flash memory.