System and method of controlling application level access of subscriber to a network

• US 9,325,720 B2
• Filed: 03/27/2012
• Issued: 04/26/2016
• Est. Priority Date: 05/30/2000
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Faccin, Stefano, Purnadi, Rene, Hulkkonen, Tony, Rajaniemi, Jaakko, Tuohino, Markku, Sivanandan, Mohan
• Primary Examiner(s): Winder, Patrice
• Assistant Examiner(s): WIDHALM, ANGELA M
• Application Number:
  US13/430,779
• Publication Number:
  US 20120184271A1
• Time in Patent Office: 1,491 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 8/00 Network data management
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/08 Mobility data transfer
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

The invention is a system and method of controlling an access of a subscriber to a network. The method includes sending an identification of the subscriber and a level of access to be provided to the subscriber from a visited network of a plurality of networks (12, 14, 16) connected to a home network (10); in response to the identification of the subscriber and a level of access to be provided to the subscriber, storing a subscriber profile of the authorized of access to be provided to the subscriber; and controlling access of the subscriber to any network dependent upon a comparison of access to be provided to the subscriber and the stored subscriber profile.

Claims

1. A method comprising:

transmitting, to a visited network by a user equipment, a first message, where the first message comprises an identification of the user equipment and a request for an application level of service to be provided to the subscriber from the visited network which is one of a plurality of networks connected to a home network, the request being received by the home network from the visited network, wherein at the home network a predetermined subscriber profile is stored including the identification of the user equipment and an application level of access to be provided to the user equipment in any of the plurality of networks or the home network, wherein at least the location of the home network is determined by the visited network based on analysis of data transmitted to the visited network from the user equipment using packet data protocol; and

in response to transmitting the first message, receiving, at the user equipment, access of the user equipment to the visited network dependent upon a comparison of the request for an application level of service to be provided to the user equipment in the plurality of networks or the home network and the stored predetermined subscriber profile, wherein the predetermined subscriber profile is selected from of a plurality of subscriber profiles for a subscriber based at least in part on a location of the user equipment, each subscriber profile of the plurality of subscriber profiles including a different level of access defining at least one of a bandwidth degree, a security degree or supported supplementary services, and wherein the access provided to the subscriber is application level access used to provide connectivity of the subscriber in the visited network defined by the selected subscriber profile.

2. The method in accordance with claim 1 wherein the application level of access authorizes a specific degree of bandwidth in communications.

3. The method in accordance with claim 1 wherein the application level of access authorizes a specific degree of security in communications.

4. The method in accordance with claim 1 wherein the application level of access authorizes specific connection of supplementary services.

5. The method in accordance with claim 1 wherein transmitting the first message is performed in response to the user equipment being connected to the visited network.

6. An apparatus comprising at least one hardware processor;

and at least one non-transitory memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

to transmit, to a visited network, a first message, where the first message comprises an identification of the apparatus and a request for an application level of service to be provided to the apparatus from the visited network which is one of a plurality of networks connected to a home network, the request being received by the home network from the visited network, wherein at the home network a predetermined subscriber profile is stored including the identification of the apparatus and an application level of access to be provided to the apparatus in any of the plurality of networks or the home network, wherein at least the location of the home network is determined by the visited network based on analysis of data transmitted to the visited network from the user equipment using packet data protocol; and

in response to transmitting the first message, receiving at the apparatus, access of the apparatus to the visited network dependent upon a comparison of the request for an application level of service to be provided to the apparatus in the plurality of networks or the home network and the stored predetermined subscriber profile, wherein the predetermined subscriber profile is selected from of a plurality of subscriber profiles for a subscriber based at least in part on a location of the user equipment, each subscriber profile of the plurality of subscriber profiles including a different level of access defining at least one of a bandwidth degree, a security degree or supported supplementary services, and wherein the access provided to the subscriber is application level access used to provide connectivity of the subscriber in the visited network defined by the selected subscriber profile.

7. The apparatus in accordance with claim 6 wherein the application level of access authorizes a specific degree of bandwidth in communications.

8. The apparatus in accordance with claim 6 wherein the application level of access authorizes a specific degree of security in communications.

9. The apparatus in accordance with claim 6 wherein the application level of access authorizes specific connection of supplementary services.

10. The apparatus in accordance with claim 6 wherein, when transmitting, the at least one memory and the computer program code are further configured to cause the apparatus to transmit the first message in response to a user equipment being connected to the visited network.

11. A computer program product comprising a non-transitory computer-readable storage medium bearing computer program code embodied therein for use with a computer, the computer program code comprising:

code for transmitting by an apparatus, to a visited network, a first message, where the first message comprises an identification of the apparatus and a request for an application level of service to be provided to the apparatus from the visited network which is one of a plurality of networks connected to a home network, the request being received by the home network from the visited network, wherein at the home network a predetermined subscriber profile is stored including the identification of the apparatus and an application level of access to be provided to the apparatus in any of the plurality of networks or the home network, wherein at least the location of the home network is determined by the visited network based on analysis of data transmitted to the visited network from the user equipment using packet data protocol; and

code for, in response to transmitting the first message, receiving at the apparatus, access of the apparatus to the visited network dependent upon a comparison of the request for an application level of service to be provided to the apparatus in the plurality of networks or the home network and the stored predetermined subscriber profile, wherein the predetermined subscriber profile is selected from of a plurality of subscriber profiles for a subscriber based at least in part on a location of the user equipment, each subscriber profile of the plurality of subscriber profiles including a different level of access defining at least one of a bandwidth degree, a security degree or supported supplementary services, and wherein the access provided to the subscriber is application level access used to provide connectivity of the subscriber in the visited network defined by the selected subscriber profile.

12. The computer program product in accordance with claim 11, wherein the application level of access authorizes a specific degree of bandwidth in communications.

13. The computer program product in accordance with claim 11, wherein the application level of access authorizes a specific degree of security in communications.

14. The computer program product in accordance with claim 11, wherein the application level of access authorizes specific connection of supplementary services.