Authentication interworking

• US 8,887,235 B2
• Filed: 10/17/2006
• Issued: 11/11/2014
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Mavenir Systems Incorporated (Mavenir Group Holdings Ltd.)
• Original Assignee: Mavenir Systems Incorporated (Mavenir Group Holdings Ltd.)
• Inventors: Patel, Pulin R., Ali, Rashad Mohammad, Lubenski, Zeev V.
• Primary Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US11/550,343
• Publication Number:
  US 20080092212A1
• Time in Patent Office: 2,947 Days
• Field of Search: 713/168, 380/270, 707/10, 726 2- 3, 726/1, 726/4, 709/225, 709/224, 455/433, 455/435.1, 370/328, 370/338, 370/352, 370/400
• US Class Current: 726/3
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

The present disclosure includes a method and system for authentication interworking. In some embodiments, a method includes receiving, from a communication device, a request for services from a core network. The communication device is foreign to the core network. Authentication internetworking is provided to the foreign device to enable access to services provided by the core network.

Claims

1. A method, comprising:

receiving by an IP network node, from an Internet Protocol (IP) device associated with a user, a request for services provided by a cellular core network including one of GSM and UMTS network, the IP device foreign to the cellular core network, and the IP network node including a direct interface to the cellular core network;

transmitting, to a wireless mobile device by the IP network node, a request to generate authentication information using subscriber identification information stored at the wireless mobile device, the wireless mobile device native to the cellular core network, different from the IP device;

receiving by the IP network node, from the wireless mobile device, the requested authentication information assigned to the wireless mobile device; and

presenting by the IP network node, through the direct interface, the IP device foreign to the cellular core network as a mobile device native to the cellular core network using the authentication information received directly from the wireless mobile device, so that the IP device may access foreign services provided by the cellular core network.

2. The method of claim 1, the IP device comprising a Session Initiation Protocol (SIP) user device.

3. A method, comprising:

receiving by an IP network node, from an IP device associated with a user, a request for services provided by a cellular core network including one of GSM and UMTS network, the IP device foreign to the cellular core network, and the IP network node including a direct interface to the cellular core network;

identifying, by the IP network node, information for authenticating a first wireless mobile device also associated with the user with the cellular core network, the information received directly from the first wireless mobile device, the first wireless mobile device configured to access services provided by the cellular core network, and the first wireless mobile device native to the cellular core network and different from the IP device;

representing by the IP network node, through the direct interface, the IP device as a second wireless mobile device to the cellular core network; and

providing, via the IP network node, services from the cellular core network to the IP device represented as the second wireless mobile device using the authentication information received directly from the first wireless mobile device.

4. The method of claim 3, further comprising translating services to a form compatible with the IP device.

5. The method of claim 3, the IP device comprising a SIP user device.

6. An IP network node, comprising:

a direct interface to a cellular core network including one of GSM and UMTS network;

a receiver circuit configured to receive, from an IP device associated with a user, a request for foreign services provided by the cellular core network, the IP device being foreign to the cellular core network;

a transmitter circuit configured to transmit, to a wireless mobile device associated with the user, a request to generate authentication information using a subscriber identification module (SIM) residing in the wireless mobile device, the wireless mobile user device being native to the cellular core network, and different from the IP device; and

an authentication element configured to present, through the direct interface to the cellular core network, the IP device foreign to the cellular core network as a device native to the cellular core network using the authentication information received directly from the wireless mobile device, so that the IP device may access foreign services provided by the cellular core network.

7. The system of claim 6, the IP device comprising a SIP user device.

8. A system, comprising:

a receiver circuit configured to receive, from an IP device associated with a user at an IP network node, a request for services from a cellular core network including one of GSM and UMTS network, the IP device foreign to the cellular core network, and the IP network node including a direct interface to the cellular core network; and

an authentication element associated with the IP network node configured to;

identify information for authenticating a wireless mobile device also associated with the user with the cellular core network, the information received directly from the wireless mobile device, the wireless mobile device configured to access services from the cellular core network, the wireless mobile device native to the cellular core network and different from the IP device;

represent, through the direct interface, the IP device as the wireless mobile device to the cellular core network; and

provide services from the cellular core network to the IP device using the authentication information received directly from the wireless mobile device.

9. The system of claim 8, further comprising a translator configured to translate services to a form compatible with the IP device.

10. The system of claim 8, the IP device comprising a SIP device.