Subscriber-specific enforcement of proxy-mobile-IP (PMIP) instead of client-mobile-IP (CMIP)

• US 8,769,261 B2
• Filed: 10/31/2006
• Issued: 07/01/2014
• Est. Priority Date: 11/04/2005
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Falk, Rainer, Gnther, Christian, Krselberg, Dirk
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US12/084,557
• Publication Number:
  US 20100011426A1
• Time in Patent Office: 2,800 Days
• Field of Search: 713/155, 713/161, 713/168, 726/4, 726/12, 726/14, 455/411, 709/224, 709/227, 709/228
• US Class Current: 713/155
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 88/182 Network node acting on behalf of an other network entity, e.g. proxy

Abstract

A method provides subscriber-specific activation of network-based mobility management using an authentication server. According to the method, network-based mobility management is enforced, even if the mobile terminal supports terminal-based mobility management. This gives a network provider complete control over mobility management in his network, preventing configuration problems during the configuration of mobile terminals. In the method, after the successful authentication of a subscriber, the authentication server transmits an authentication confirmation message to an authentication client in an access network. The received authentication confirmation message contains an activation attribute for activating network-based mobility management, if the authentication server does not provide a common mobile key for terminal-based mobility management.

Claims

1. A method of subscriber-specific activation of network-based mobility management, comprising:

preparing an authentication confirmation message, which contains an activation attribute when determining an authentication server of a subscriber does not provide a common mobility key for terminal-based mobility management, the activation attribute indicating that activation of network-based mobility management is required for a mobile terminal of the subscriber that supports terminal-based mobility management; and

sending the authentication confirmation message to an authentication client in an access network, the authentication confirmation message being sent by the authentication server after successful authentication of the subscriber of the mobile terminal, and

wherein with the terminal-based mobility management the mobile terminal supports Mobile-IP, and with the network-based mobility management the access network implements a Mobile-IP client function, and

wherein receipt of an advertisement message at the mobile terminal enables terminal-based mobility management, and

the authentication client ensures that a foreign agent in the access network does not send the advertisement message to the mobile terminal when determining the authentication confirmation message contains the activation attribute that is set in association with the mobile terminal, thereby deactivating the terminal-based mobility management for the subscriber.

2. The method as claimed in claim 1, wherein the authentication server is located in a home network of the subscriber or is formed by an authentication proxy server which is located in an intermediate network.

3. The method as claimed in claim 2, wherein the activation attribute is a flag which is set by the authentication server.

4. The method as claimed in claim 2, wherein the home network is a 3GPP network, a 3GPP2network, a WLAN network or a WiMax network.

5. The method as claimed in claim 1, wherein

the authentication server transmits the authentication confirmation message to a gateway of the access network, and

the access network contains the authentication client.

6. The method as claimed in claim 1, wherein the authentication confirmation message further comprises an MSK key, a DHCP server address, a home agent address and a billing identifier.

7. The method as claimed in claim 1, wherein

the activation attribute is buffered in a gateway of the access network after being sent,

the subscriber is a mobile terminal, and

the mobile terminal is assigned to the activation attribute.

8. The method as claimed in claim 7, wherein

the mobile terminal sends an agent solicitation message, a response to which deactivates terminal-based mobility management, and

the authentication client ensuring that a foreign agent in the access network does not reply to the agent solicitation message of the mobile terminal if the authentication confirmation message contains the activation attribute.

9. The method as claimed in claim 1, wherein

the authentication confirmation message contains the activation attribute if the activation attribute has been set by the authentication server, and

the authentication server sets the activation attribute:

if the authentication server does not provide a common mobile key for terminal-based mobility management, or

if a network access identifier of the subscriber is not clear.

10. The method as claimed in claim 1, wherein

the authentication confirmation message contains the activation attribute if the activation attribute has been set by the authentication server, and

the authentication server sets the activation attribute:

if the authentication server does not provide a common mobile key for terminal-based mobility management, or

if a network access identifier of the subscriber indicates that a WiMax-specific MIP is not supported by a mobile terminal of the subscriber or by a home network of the subscriber.

11. The method as claimed in claim 1, wherein the access network is a WiMax network.

12. An authentication server for a subscriber-specific activation of network-based mobility management, comprising:

a preparation unit to prepare an authentication confirmation message, which contains an activation attribute when determining the authentication server does not provide a common mobile key for terminal-based mobility management, the activation attribute indicating that activation of network-based mobility management is required for a mobile terminal of the subscriber that supports terminal-based mobility management; and

a transmission unit to send the authentication confirmation message to an authentication client in an access network of the subscriber, after successful authentication of the subscriber of the mobile terminal, and

wherein with the terminal-based mobility management the mobile terminal supports Mobile-IP, and with the network-based mobility management the access network implements a Mobile-IP client function, and

wherein receipt of an advertisement message at the mobile terminal enables terminal-based mobility management, and

the authentication client ensures that a foreign agent in the access network does not send the advertisement message to the mobile terminal when determining the authentication confirmation message contains the activation attribute that is set in association with the mobile terminal, thereby deactivating the terminal-based mobility management for the subscriber.

13. The authentication server as claimed in claim 12, wherein the authentication server is provided in a home network of the subscriber or is formed by an authentication proxy server which is located in an intermediate network.

14. The authentication server as claimed in claim 13, wherein the home network is a 3GPP network, a 3GPP2 network, a WLAN network or a WiMax network.

15. The authentication server as claimed in claim 12, wherein the access network is a WiMax network.

16. A method for subscriber-specific activation of network-based mobility management, comprising:

preparing an authentication confirmation message, which contains an activation attribute when determining an authentication server of a subscriber does not provide a common mobility key for terminal-based mobility management, the activation attribute indicating that activation of network-based mobility management is required for a mobile terminal of the subscriber that supports terminal-based mobility management; and

sending the authentication confirmation message to an authentication client in an access network, the authentication confirmation message being sent by the authentication server of the subscriber after successful authentication of the subscriber of the mobile terminal, and

wherein with the terminal-based mobility management the mobile terminal supports Mobile-IP, and with the network-based mobility management the access network implements a Mobile-IP client function, and

wherein receipt of an advertisement message at the mobile terminal enables terminal-based mobility management, and

the authentication client ensures that a foreign agent in the access network does not send the advertisement message to the mobile terminal when determining the authentication confirmation message contains the activation attribute that is set in association with the mobile terminal, thereby deactivating the terminal-based mobility management for the subscriber.