Method and apparatus for facilitating access to a communication network
AssigneesNokia of America Corporation, Alcatel Lucent
InventorsJennifer Liu, Bruno Landais, Laurent Thiebaut
Life of this patent
Estimating the term…
Abstract
A method and apparatus for facilitating WLAN access, both trusted and un-trusted, to a mobile core network. A device identity attribute is created and incorporated into the authentication and response messaging to enable the device identity to be promulgated in the communication network.
Claims8
A method of facilitating non-3GPP™ (THIRD GENERATION PARTNERSHIP PROJECT) service provision for a device connecting to a 3GPP™ mobile network via an un-trusted WLAN (wireless local area network), comprising:
- initiating a communication session with the device;
- receiving at an ePDG (evolved packet data gateway) an IKE_AUTH Request according to an IKE (internet key exchange) protocol comprising an IKE DEVICE_IDENTITY attribute and a user ID (identification);
- sending an IKE_AUTH Response comprising a security challenge including an identity type but not an identity value to the device;
- receiving at the ePDG a security-challenge response comprising the IKE DEVICE_IDENTITY attribute, the IKE DEVICE_IDENTITY attribute of the security-challenge response comprising the identity type, an identity length, and an identity value;
- forwarding the IKE DEVICE identity to an authentication server;
- granting network access to the device;
- and
- forwarding the device identity.
A method of facilitating non-3GPP™ (THIRD GENERATION PARTNERSHIP PROJECT) service provision for a device connecting to a 3GPP™ mobile network via an un-trusted WLAN, comprising:
- initiating a communication session with the WLAN (wireless local area network);
- sending from the device via the WLAN an IKE_AUTH Request according to an IKE protocol, the IKE_AUTH Request comprising an IKE DEVICE_IDENTITY attribute and a user ID;
- receiving at the device an IKE_AUTH Response comprising a security challenge including an identity type but not an identity value via the WLAN;
- and
- sending toward an ePDG (evolved packet data gateway) via the WLAN a security-challenge response comprising an IKE DEVICE_IDENTITY attribute, the IKE DEVICE_IDENTITY attribute of the security-challenge response comprising the identity type, an identity length, and an identity value;
- receiving authorization to access the 3GPP™ mobile network;
- and
- communicating via the 3GPP™ mobile network using the identity value.
Dependencies are inferred from the claim text.