# US 10,320,791 B2 · Method and apparatus for facilitating access to a communication network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,320,791 B2
- Document ID: US10320791B2
- Status: Granted
- Kind: B2
- Application number: 14/983,090
- Filed: 2015-12-29
- Published: 2017-06-29
- Granted: 2019-06-11
- Earliest claimed: 2015-12-29
- Assignees: Nokia of America Corporation; Alcatel Lucent
- Applicants: Jennifer Liu; Bruno Landais; Laurent Thiebaut
- Inventors: Jennifer Liu; Bruno Landais; Laurent Thiebaut
- Web page: https://patentgrep.com/patent/US10320791B2

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols}
- H04W 12/06: Authentication
- H04W 12/08: Access security
- H04W 8/06: Registration at serving network Location Register, VLR or user mobility server
- H04W 12/71: Hardware identity
- H04W 84/042: {Public Land Mobile systems, e.g. cellular systems}
- H04W 84/12: WLAN [Wireless Local Area Networks]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method and apparatus for facilitating WLAN access, both trusted and un-trusted, to a mobile core network. A device identity attribute is created and incorporated into the authentication and response messaging to enable the device identity to be promulgated in the communication network.

## Claims

### Claim 1

A method of facilitating non-3GPP™ (THIRD GENERATION PARTNERSHIP PROJECT) service provision for a device connecting to a 3GPP™ mobile network via an un-trusted WLAN (wireless local area network), comprising:
initiating a communication session with the device;
receiving at an ePDG (evolved packet data gateway) an IKE_AUTH Request according to an IKE (internet key exchange) protocol comprising an IKE DEVICE_IDENTITY attribute and a user ID (identification);
sending an IKE_AUTH Response comprising a security challenge including an identity type but not an identity value to the device;
receiving at the ePDG a security-challenge response comprising the IKE DEVICE_IDENTITY attribute, the IKE DEVICE_IDENTITY attribute of the security-challenge response comprising the identity type, an identity length, and an identity value;
forwarding the IKE DEVICE identity to an authentication server;
granting network access to the device; and
forwarding the device identity.

### Claim 2 (depends on 1)

The method of claim 1, wherein the IKE DEVICE_IDENTITY attribute of the security-challenge response includes an identity value corresponding to at least one of an IMEI (international mobile equipment identity) or an IMEISV (IMEI and software version).

### Claim 3 (depends on 2)

The method of claim 2, further comprising forwarding a mobile equipment identity associated with the at least one of an IMEI or an IMEISV toward a PDN GW (packet data network gateway).

### Claim 4 (depends on 3)

The method of claim 3, wherein the mobile equipment identity is forwarded toward the PDN GW via a TWAN (trusted wireless local area network).

### Claim 5 (depends on 1)

The method of claim 1, wherein the IKE_AUTH Response comprising a security challenge includes an identity length of zero.

### Claim 6

A method of facilitating non-3GPP™ (THIRD GENERATION PARTNERSHIP PROJECT) service provision for a device connecting to a 3GPP™ mobile network via an un-trusted WLAN, comprising:
initiating a communication session with the WLAN (wireless local area network);
sending from the device via the WLAN an IKE_AUTH Request according to an IKE protocol, the IKE_AUTH Request comprising an IKE DEVICE_IDENTITY attribute and a user ID;
receiving at the device an IKE_AUTH Response comprising a security challenge including an identity type but not an identity value via the WLAN; and
sending toward an ePDG (evolved packet data gateway) via the WLAN a security-challenge response comprising an IKE DEVICE_IDENTITY attribute, the IKE DEVICE_IDENTITY attribute of the security-challenge response comprising the identity type, an identity length, and an identity value;
receiving authorization to access the 3GPP™ mobile network; and
communicating via the 3GPP™ mobile network using the identity value.

### Claim 7 (depends on 6)

The method of claim 6, wherein the IKE_AUTH Response comprising a security challenge includes an identity length of zero.

### Claim 8 (depends on 6)

The method of claim 6, wherein the IKE DEVICE_IDENTITY attribute of the security-challenge response includes an identity value corresponding to at least one of an IMEI (international mobile equipment identity) or an IMEISV (IMEI and software version).