Method, network access element and mobile node for service advertising and user authorization in a telecommunication system

• US 7,171,198 B2
• Filed: 02/11/2002
• Issued: 01/30/2007
• Est. Priority Date: 02/09/2001
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Xu, Lin, Paila, Toni
• Primary Examiner(s): Kincaid; Lester G.
• Assistant Examiner(s): SANTIAGO CORDERO, MARIVELISSE
• Application Number:
  US10/467,569
• Publication Number:
  US 20040072557A1
• Time in Patent Office: 1,814 Days
• Field of Search: 455/414.1, 455/450, 455/432.1, 455/432.3, 455/435.2, 455/411, 455/452.2, 340/825.28, 340/825.29
• US Class Current: 455/432.1
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 72/20 Control channels or signalling for resource management
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

A network access sequence for a mobile node (MN) in one or more foreign domains (FD). A foreign domain sends (A1) service advertisement messages (M1), each of which comprises an identifier (41) of the message, network address information (43) and a detailed service offering (42). The mobile node stores (A2) the detailed service offerings and selects one of them. Then it sends a service request message (M2) to the foreign domain which sent the selected service offering (62). The service request indicates (55) the selected service offering (62) and the mobile node'"'"'s credentials (54). The foreign domain conveys the credentials to the mobile node'"'"'s home domain (HD) for authentication and authorization and checks (A4) if the selected service offering (62) can be supported. Next the foreign domain (FD) allocates communication resources for supporting the selected service offering and indicates (M9) to the mobile node the availability of the requested service.

Claims

1. A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of:

the one or more foreign domains sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, and a detailed service offering;

the mobile node receiving and storing the detailed service offering and forming an indication of a selected detailed service offering;

the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains;

the foreign domain conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization;

the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and

if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.

4. A method according to claim 1, comprising the steps of:

the foreign domain signing the service advertisement messages with a digital signature; and

the mobile node verifying the digital signature;

wherein a two-way trust relationship is dynamically established between the mobile node and the foreign domain.

5. A method according to claim 1, further comprising the foreign domain performing the checking step after it has performed the conveying step.

6. A method according to claim 1, further comprising the mobile node automatically forming the indication of the selected service offering on the basis of pre-stored criteria.

7. A method according to claim 1, further comprising the mobile node forming the indication of the selected service offering by presenting the detailed service offerings to a user and by receiving the user'"'"'s selection.

8. A method according to claim 1, wherein the detailed service offerings indicate quality of service information.

9. A method according to claim 1, wherein the detailed service offerings indicate a validity period.

2. A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of:

the one or more foreign domains sending service advertisement messages, each service advertisement message comprising network address/identity information relating to the foreign domain in question, and a detailed service offering;

the mobile node receiving and storing the detailed service offering and forming an indication of a selected detailed service offering, and calculating an identifier of the service advertisement message in question;

the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains;

the foreign domain conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization;

the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and

if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.

3. A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of:

the one or more foreign domains sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, and network address/identity information relating to the foreign domain in question;

the mobile node receiving and storing the identifier, extracting therefrom a detailed service offering; and

forming an indication of a selected detailed service offering;

the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains;

the foreign domain conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization;

the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and

if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.

10. A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising:

a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, a detailed service offering and

a resource allocation logic for

receiving a service request message from the mobile node, the service request message comprising the mobile node'"'"'s credentials and an indication of the service offering selected by the mobile node or its user, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains;

conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node'"'"'s home domain;

checking if the service indicated by the selected service offering can be supported on the basis of available communication resources; and

allocating communication resources if the service indicated by the selected service offering can be supported.

13. A network access element according to claim 10, wherein the resource allocation logic is adapted to perform the checking operation after conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain.

14. A network access element according to claim 13, wherein the resource allocation logic is adapted to perform the checking operation before receiving an authentication and authorization indication from the mobile node'"'"'s home domain.

11. A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising:

a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising network address/identity information relating to the foreign domain in question and a detailed service offering; and

a resource allocation logic for

receiving a service request message from the mobile node, the service request message comprising the mobile node'"'"'s credentials and an indication of the service offering selected by the mobile node or its user;

conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node'"'"'s home domain;

checking if the service indicated by the selected service offering can be supported on the basis of available communication resources, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; and

allocating communication resources if the service indicated by the selected service offering can be supported.

12. A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising:

a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising -an identifier of the service advertisement message in question, -network address/identity information relating to the foreign domain in question; and

a resource allocation logic for

receiving a service request message from the mobile node, the service request message comprising the mobile node'"'"'s credentials and an indication of a service offering selected by the mobile node or its user;

conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node'"'"'s home domain;

checking if the service indicated by the selected service offering can be supported on the basis of available communication resources, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; and

allocating communication resources if the service indicated by the selected service offering can be supported.

15. A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for:

receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising an identifier of the service advertisement message in question;

network address/identity information relating to the foreign domain in question; and

a detailed service offering;

forming an indication of a selected detailed service offering; and

sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.

18. A mobile node according to claim 15, comprising automatically forming the indication of the selected service offering on the basis of pre-stored criteria.

19. A mobile node according to claim 15, comprising forming the indication of the selected service offering by presenting the detailed service offerings to a user and by receiving the user'"'"'s selection.

16. A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for:

receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising a network address/identity information relating to the foreign domain in question and a detailed service offering;

forming an identifier of the service advertisement message in question based on the information contained in the service offering, and an indication of a selected detailed service offering; and

sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.

17. A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for:

receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising an identifier of the service advertisement message in question and network address/identity information relating to the foreign domain in question;

extracting a detailed service offering from the identifier and an indication of a selected detailed service offering; and

sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.

20. A system, comprising:

sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, and a detailed service offering;

receiving means, in a mobile node, for receiving and storing the detailed service offering and forming an indication of a selected detailed service offering;

sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials;

wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains;

conveying means, in the foreign domain, for conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization;

checking means, in the foreign domain, for checking if the selected service offering can be supported on the basis of available communication resources;

and if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.

21. A system, comprising:

sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising network address/identity information relating to the foreign domain in question and a detailed service offering;

receiving means, in a mobile node, for receiving and storing the detailed service offering and forming an indication of a selected detailed service offering, and calculating an identifier of the service advertisement message in question;

sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node'"'"'s credentials;

wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains;

conveying means, in the foreign domain, for conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization;

checking means, in the foreign domain, for checking if the selected service offering can be supported on the basis of available communication resources; and

if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.

22. A system, comprising:

sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question and network address/identity information relating to the foreign domain in question;

receiving means, in a mobile node, for receiving and storing the identifier, extracting therefrom a detailed service offering; and

forming an indication of a selected detailed service offering;

sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indicatfon of the selected service offering and the mobile node'"'"'s credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains;

conveying means, in the foreign domain, for conveying the mobile node'"'"'s credentials to the mobile node'"'"'s home domain for authentication and authorization;

checking means, in the foreign domain, for checking the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and

if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.