Method and device for authentication and authorization checking on LBS in Wimax network

• US 8,442,551 B2
• Filed: 06/12/2008
• Issued: 05/14/2013
• Est. Priority Date: 06/12/2007
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Liu, Meili
• Primary Examiner(s): Afshar, Kamran
• Assistant Examiner(s): Zewari, Sayed T
• Application Number:
  US12/664,055
• Publication Number:
  US 20100186069A1
• Time in Patent Office: 1,797 Days
• Field of Search: 4554561-457, 455/411, 455/432.1, 455/432.2, 455/435.2
• US Class Current: 455/456.1
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A device for performing authentication and authorization checking on Location-Based Service (LBS) in a WiMAX network is provided. This device strengthens security for LBS in a WiMAX network, and protects privacy right of subscribers to LBS. The device includes a Location Assessment module (LA) for performing the location assessment, a Location Coordination and control module (LC) for controlling LBS assessment and calculation of a location of a mobile terminal. The device also includes an Authentication/Authorization/Accounting module (AAA) that includes a memory storing authentication and authorization information. The AAA also includes an authentication processing module for authenticating an LBS, and an authorization checking processing module for checking whether an LBS client and a Mobile Station (MS) requesting services from the LBS are authorized to request the location of a target MS.

Claims

1. A system for performing authentication and authorization checking on Location-Based Service (LBS) in a Worldwide interoperability for Microwave Access (WiMAX) network, the system comprising

an Access Service Network (ASN) comprising:

a Location Agent (LA) adapted to perform location measurement; and

a Location Controller (LC) adapted to initiate LBS measurement, location calculation; and

a Connection Service Network (CSN) comprising;

an authentication and authorization information memory in an Authentication/Authorization/Accounting module (AAA);

an authentication processing module included in the AAA and responsible for authentication on a LBS service; and

an authorization checking processing module included in the AAA and responsible for authorization checking on a LBS client and a MS requesting for LBS.

2. The system according to claim 1, wherein the authentication and authorization information memory in the AAA is designed as an upgraded database by adding LBS subscription information to an existing database in the AAA, or as an independent memory module.

3. The system according to claim 1, wherein the AAA performs authentication on the LBS service so as to guarantee that only a subscribed LBS service can pass the authentication.

4. The system according to claim 1, wherein the authorization checking processing module guarantees only a Requesting MS (MO MS) that is permitted by the MT MS can locate the MT MS.

5. The system according to claim 3, wherein an operator can add, delete or modify the LBS subscription information in the AAA according to a user'"'"'s requirement.

6. The system according to claim 1, wherein the AAA stores LBS subscription information and LBS privacy related information that includes a list of devices permitted by a Target Mobile Station (MT MS) to locate the MT MS.

7. The system according to claim 6, wherein the LBS privacy related information includes an authorization list in the AAA saves a list of LBS clients permitted to locate an MS.

8. The system according to claim 6, wherein the LBS privacy related information includes an authorization list in the AAA saves a list of Requesting MSs (MO MSs) permitted to locate an MS.

9. The system according to claim 6, wherein the LBS privacy related information includes an authorization list in the AAA saves a list of Requesting MSs (MO MSs) prohibited from locating an MS.

10. The system according to claim 7, wherein the AAA performs authorization checking on an external LBS client and on a MS requesting for location service.

11. The system according to claim 8, wherein a user can add, delete or modify the list of MO MSs permitted to locating in a Location Server module (LS).

12. The system according to claim 9, wherein a user can add, delete or modify the list of MO MSs prohibited from locating in a Location Server module (LS).

13. A method for successful authentication and authorization checking on Location-Based Service (LBS) in a Worldwide Interoperability for Microwave Access (WiMAX) network, the method comprising:

1) sending by a Location Server module (LS) an authentication and authorization checking request message to an Authentication/Authorization/Accounting module (AAA), is included in a Connection Service Network (CSN) after the LS receives a location request;

2) performing authentication and authorization checking in the AAA;

3) finding a serving Location Coordination and Control module (LC), which is included in an Access Service Network (ASN), for a MS if the authentication and authorization checking succeeds;

4) sending by the LS a location report request to the serving LC;

5) performing an intra-Access Service Network (intra-ASN) location determination process;

6) sending by the LC a location report response to the LS, with the response containing the obtained location of the MT MS;

7) sending by the LS a location response to the location requestor; and

8) sending by the LS updated accounting data to an accounting server.

14. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, the AAA first performs authentication on a LBS service with respect to a location request initiated by a MS.

15. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, the AAA performs authentication on a LBS service after the authorization checking on an external LBS client succeeds, if a location request is initiated by the external LBS client.

16. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, the authentication on a LBS service is determined in the AAA whether the LBS service is a subscribed service and whether its Quality of Service (QoS) matches.

17. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, the AAA performs authorization checking on a Requesting MS (MO MS) after the authentication on an external LBS client and the LBS service succeeds, if a location request is initiated by the external LBS client.

18. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, the AAA performs authorization checking on a Requesting MS (MO MS) after the authentication on the LBS service succeeds, if a location request is initiated by a MS.

19. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, the authorization checking on a Requesting MS (MO MS) is determining whether the user who initiates the location request has the right to locate a target user.

20. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, for the authorization checking on a Requesting MS (MO MS), it is first determined whether the MO MS is in the access-permitted list of a MT MS, and if yes, the authorization checking on the MO MS succeeds.

21. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, for the authorization checking on a Requesting MS (MO MS), it is first determined whether the MO MS is in the access-permitted list of a MT MS, and if not, it is determined whether the MO MS is in the access-prohibited list of the MT MS;

if yes, the authorization checking on the MO MS fails, and a location response message is directly sent to the LBS initiator, with the message indicating that the location fails and carrying a reason value that the authorization checking on the MO MS fails.

22. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, for the authorization checking on a Requesting MS (MO MS), it is first determined in the LS whether the MO MS is in the access-permitted list of a MT MS, and if not, it is determined whether the MO MS is in the access-prohibited list of the MT MS;

if not, the MT MS is queried as to whether it permits the MO MS to locate it;

if the user of the MT MS can make a choice of permission or prohibition.

23. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, for the authorization checking on a Requesting MS (MO MS), it is first determined whether the MO MS is in the access-permitted list of a MT MS, and if not, it is determined whether the MO MS is in the access-prohibited list of the MT MS;

if not, the MT MS is queried as to whether it permits the MO MS to locate it;

if the user of the MT MS chooses permission, the authorization checking on the MO MS succeeds.

24. The method according to claim 13, wherein, during the process of the authentication and authorization checking by the AAA, for the authorization checking on a Requesting MS (MO MS), it is first determined whether the MO MS is in the access-permitted list of a MT MS, and if not, it is determined whether the MO MS is in the access-prohibited list of the MT MS;

if not, the MT MS is queried as to whether it permits the MO MS to locate it;

if the user of the MT MS chooses prohibition, the authorization checking on the MO MS fails;

the MT MS sends to the LS a response to the query to indicate that the location is prohibited;

then the LS sends a location response message to the LBS initiator, with the message indicating that the location fails and carrying a reason value that the authorization checking on the MO MS fails.

25. The method according to claim 13, wherein the step of performing authentication and authorization checking in the AAA comprises checking an authentication and authorization information memory in the AAA that stores LBS subscription information and LBS privacy related information that includes a list of devices permitted by a Target Mobile Station (MT MS) to locate the MT MS.

26. A method for failed authentication and authorization checking on Location-Based Service (LBS) in a Worldwide Interoperability for Microwave Access (WiMAX) network, the method comprising:

1) Sending by LBS Client a Location Request to a Location Server module (LS), which is included in a Connection Service Network (CSN), in order to locate a Mobile Station (MS);

2) sending by the LS an authentication and authorization checking request to an Authentication/Authorization/Accounting module (AAA), which is included in the CSN, after the LS receives a location request;

3) performing authentication and authorization checking in the AAA; and

4) sending by the LS a location response to a location request initiator, if the authentication and authorization checking fails.

27. The method according to claim 26, wherein the LS sends the authentication and authorization checking message to the AAA after receiving the locating request from a MS or a LBS client.

28. The method according to claim 26, wherein, in the WiMAX network, the AAA performs authentication on a LBS service to guarantee that only a subscribed LBS can obtain the LBS service.

29. The method according to claim 26, wherein, in the WiMAX network, the AAA performs authorization checking on LBS to guarantee that only a legal LBS client can obtain the LBS service.

30. The method according to claim 26, wherein, in the WiMAX network, the AAA performs authorization checking on a MS requesting for LBS to guarantee that only a legal MS requestor can obtains the LBS service.

31. The method according to claim 26, wherein the location response includes the indication of location failure and carrying a reason value for failure.

32. The method according to claim 26, wherein, in the WiMAX network, if the authorization checking on the LBS client does not succeed in the AAA, the authentication and authorization checking fails, and the LS sends a location response message to the location requestor, with the message indicating the failure of location and carrying a reason value for failure.

33. The method according to claim 26, wherein, in the WiMAX network, if the authorization checking on the requesting MS does not succeed in the AAA, the authentication and authorization checking fails, and the LS sends a location response message to the location requestor, with the message indicating the failure of location and carrying a reason value for failure.

34. The method according to claim 26, wherein, during the location processing process in the WiMAX network, if the authentication or the authorization checking does not succeed, a location response message is sent to the location requestor, with the included reason for failure being that the authentication and authorization checking fails.

35. The method according to claim 26, wherein, during the location processing process in the WiMAX network, if the authentication or the authorization checking does not succeed, a location response message is sent to the location requestor, with the included reason for failure being that the client requesting for location has no right or the requesting MS has no right.

36. The method according to claim 26, wherein the step of performing authentication and authorization checking in the AAA comprises checking an authentication and authorization information memory in the AAA that stores LBS subscription information and LBS privacy related information that includes a list of devices permitted by a Target MS (MT MS) to locate the MT MS.