On-demand dynamically updated user database & AAA function for high reliability networks

• US 20030223386A1
• Filed: 05/31/2002
• Published: 12/04/2003
• Est. Priority Date: 05/31/2002
• Status: Active Grant

• Current Assignee: WSOU Investments, LLC (WSOU Holdings, LLC)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Hua, Shiyan, Zaki, Ahmed N.
• Granted Patent: US 7,106,702 B2
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1021 based on client or server locations
• CPC Class Codes: H04L 67/1029 using data related to the state of servers by a load balancer
• CPC Class Codes: H04L 67/1031 Controlling of the operation of servers by a load balancer, e.g. adding or removing servers that serve requests
• CPC Class Codes: H04L 67/1036 Load balancing of requests to servers for services different from user content provisioning, e.g. load balancing across domain name servers
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A method is provided for operating a wireless communication network (10) including a plurality of nodes (12a, 12b, 12c, 12d, 12e). Each of the nodes has a user database and is equipped to conduct authentication, authorization and accounting (AAA) functions for the network (10). The method includes employing a subset (optionally, two) of the plurality of nodes (12a, 12b, 12c, 12d, 12e) as active nodes. The active nodes use their respective user databases to conduct the AAA functions for the network (10). Changes to the user databases for the active nodes are logged to thereby update the same to reflect changes in information contained therein, and the user databases of the active nodes are synchronized. The active nodes are monitored to detect if one becomes disconnected from the network, and, if one of the active nodes becomes disconnected from the network, another of the plurality of nodes (12a, 12b, 12c, 12d, 12e) is employed as an active node.

Claims

1. A method of maintaining authentication, authorization and accounting (AAA) functionality for a wireless communications network having a plurality of nodes which are AAA function capable, said method comprising:

(a) selecting two of the plurality of nodes to be active nodes;

(b) activating the AAA functions of the active nodes;

(c) monitoring the active nodes to determine if one of the active nodes gets disconnected from the network;

(d) if one of the active nodes gets disconnected from the network;

selecting another of the plurality of nodes to become an active node;

(e) activating the AAA functions of the node selected in step (d); and

,

(f) informing the plurality of nodes that the node selected in step (d) has its AAA functions activated.

2. The method of claim 1, wherein the two active nodes selected in step (a) are chosen so that a geographic distance therebetween is maximized.

3. The method of claim 1, wherein each active node carries out the monitoring of the other.

4. The method of claim 1, wherein each of the plurality of nodes has integrated therein a mobile switching center, a visitor location register, a home location register, a AAA server, and a cell site.

5. The method of claim 1, wherein the node selected in step (d) is chosen so that a geographic distance between active nodes is maximized.

6. The method of claim 1, wherein the node selected in step (d) is chosen so that a geographic distance between it and the active node which got disconnected from the network is maximized.

7. The method of claim 1, wherein the node selected in step (d) is chosen to maximize a sum of a geographic distance to between the active nodes and a geographic distance between the node selected in step (d) and the node which got disconnected from the network.

8. The method of claim 1, further comprising:

provisioning each of the plurality of nodes with a duplicate copy of a user database, each of said user databases being employed by its respective node to carry out AAA functions.

9. The method of claim 8, further comprising:

logging changes to the user databases for the active nodes thereby updating the same to reflect changes in information contained therein.

10. The method of claim 8, further comprising:

synchronizing the user databases of the active nodes.

11. A wireless communication network comprising:

a plurality of nodes, each node being initially provisioned with a user database and equipped to carry out authentication, authorization and accounting (AAA) functions for the network by employing their respective user database, said plurality of nodes including;

a subset thereof which are active nodes that in fact carry out the AAA functions for the network by employing their respective user databases, said active nodes monitoring one another to detect if an active node becomes disconnected from the network, wherein when one is determined to be disconnected from the network another of the plurality of nodes is selected to be an active node and the network informed thereof.

12. The wireless communication network of claim 11, wherein each of the plurality of nodes has integrated therein a mobile switching center, a visitor location register, a home location register, a AAA server, and a cell site.

13. The wireless communication network of claim 11, wherein each of the active nodes logs changes to its user database thereby updating the same to reflect changes in information contained therein.

14. The wireless communication network of claim 13, wherein each of the active nodes communicates its logged changes to the other active nodes so that their user databases are similarly updated.

15. The wireless communication network of claim 14, wherein when a new node is selected to be an active node all logged changes prior to its selection are communicated thereto so that its user database is brought current.

16. The wireless communication network of claim 11, wherein the subset includes no more than two of the plurality of nodes.

17. The wireless communication network of claim 16, wherein each of the plurality of nodes communicates directly with the others.

18. A method of operating a wireless communication network including a plurality of nodes, each of said nodes having a user database and being equipped to conduct authentication, authorization and accounting (AAA) functions for the network, said method comprising:

(a) employing a subset of the plurality of nodes as active nodes, said active nodes using their respective user databases to conduct the AAA functions for the network;

(b) logging changes to the user databases for the active nodes thereby updating the same to reflect changes in information contained therein;

(c) synchronizing the user databases of the active nodes;

(d) monitoring the active nodes to detect if one becomes disconnected from the network; and

,

(e) if one of the active nodes becomes disconnected from the network, employing another of the plurality of nodes as an active node.

19. The method of claim 18, further comprising:

(f) synchronizing the user database of the node employed in step (e) with the user database of a node which is already an active node.

20. The method of claim 19, further comprising:

(g) identifying to the network the node employed in step (e).