Methods, systems, and computer readable media for providing access network signaling protocol interworking for user authentication

• US 9,668,135 B2
• Filed: 08/14/2015
• Issued: 05/30/2017
• Est. Priority Date: 08/14/2015
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: McCann, Thomas Matthew
• Primary Examiner(s): Patel, Nimesh
• Application Number:
  US14/827,025
• Publication Number:
  US 20170048704A1
• Time in Patent Office: 655 Days
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems

Abstract

A method for access network signaling protocol interworking for user authentication includes receiving, from a node in an access network, a message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol. The method further includes, in response to receiving the message, formulating a message formatted according to a signaling protocol of a cellular network, the message including the authentication payload formatted according to the authentication protocol. The method further includes forwarding the message formatted according to the signaling protocol of the cellular network to a node in the cellular network that implements the authentication protocol, the message including the authentication payload formatted according to the authentication protocol.

Claims

1. A method for access network signaling protocol interworking for user authentication, the method comprising:

in a Diameter signaling router (DSR) including at least one message processor;

receiving, from a broadband network gateway (BNG) in an access network, a first message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol, wherein the signaling protocol of the access network comprises a remote authentication dial in user service (RADIUS) protocol and the first message comprises a RADIUS access request message carrying an extensible authentication protocol (EAP) payload;

in response to receiving the first message, formulating a second message formatted according to a signaling protocol of a cellular network, the second message including the authentication payload formatted according to the authentication protocol, wherein the signaling protocol of the cellular network comprises a Diameter protocol and the second message comprises a Diameter EAP request (DER) message carrying the EAP payload;

forwarding the second message formatted according to the signaling protocol of the cellular network to an authentication, authorization, and accounting (AAA) server in the cellular network that implements the authentication protocol, the second message including the authentication payload formatted according to the authentication protocol; and

receiving, from the AAA server and in response to the DER message, a Diameter EAP answer (DEA) message.

2. The method of claim 1 wherein the Diameter protocol comprises a Diameter SWa protocol.

3. The method of claim 1 wherein the Diameter protocol comprises a Diameter STa protocol.

4. The method of claim 1 wherein the node in the access network comprises a RADIUS client that receives an authentication request from a user device.

5. The method of claim 1 wherein the authentication protocol is implemented end to end between the node in the access network and the node in the cellular network.

6. The method of claim 5 wherein the Diameter signaling router is stateless with respect to the authentication protocol.

7. A system for access network signaling protocol interworking for user authentication, the system comprising:

a Diameter signaling router (DSR) including at least one message processor;

an interworking function in the DSR and implemented by the at least one processor for receiving, from a broadband network gateway (BNG) in an access network, a first message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol, wherein the signaling protocol of the access network comprises a remote authentication dial in user service (RADIUS) protocol and the first message comprises a RADIUS access request message carrying an extensible authentication protocol (EAP) payload, for, in response to receiving the first message, formulating a second message formatted according to a signaling protocol of a cellular network, the second message including the authentication payload formatted according to the authentication protocol, for forwarding the second message formatted according to the signaling protocol of the cellular network to an authentication, authorization, and accounting (AAA) server in the cellular network that implements the authentication protocol, the second message including the authentication payload formatted according to the authentication protocol, wherein the signaling protocol of the cellular network comprises a Diameter protocol, and the second message comprises a Diameter EAP request message carrying the EAP payload, and for receiving, from the AAA server and in response to the Diameter EAP request message, a Diameter EAP answer (DEA) message.

8. The system of claim 7 wherein the Diameter protocol comprises a Diameter SWa protocol.

9. The system of claim 7 wherein the Diameter protocol comprises a Diameter STa protocol.

10. The system of claim 7 wherein the node in the access network comprises a remote RADIUS client that receives an authentication request from a user device.

11. The system of claim 7 wherein the authentication protocol is implemented end to end between the node in the access network and the node in the cellular network.

12. The system of claim 11 wherein the Diameter signaling router is stateless with respect to the authentication protocol.

13. A non-transitory computer readable medium having stored thereon executable instructions that when executed by the processor on a computer control the computer to perform steps comprising:

in a Diameter signaling router (DSR) including at least one message processor;

receiving, from a broadband network gateway (BNG) in an access network, a first message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol, wherein the signaling protocol of the access network comprises a remote authentication dial in user service (RADIUS) protocol and the first message comprises a RADIUS access request message carrying an extensible authentication protocol (EAP) payload;

in response to receiving the first message, formulating a second message formatted according to a signaling protocol of a cellular network, the second message including the authentication payload formatted according to the authentication protocol, wherein the signaling protocol of the cellular network comprises a Diameter protocol and the second message comprises a Diameter EAP request message carrying the EAP payload;

forwarding the second message formatted according to the signaling protocol of the cellular network to an authentication, authorization, and accounting (AAA) server in the cellular network that implements the authentication protocol, the second message including the authentication payload formatted according to the authentication protocol; and

receiving, from the AAA server and in response to the DER message, a Diameter EAP answer (DEA) message.