Mobile traffic redirection system
AssigneeT-Mobile USA, Inc.
InventorsYousif Targali, Salvador Mendoza, Matthew Kirchberg
Life of this patent
Estimating the term…
Abstract
The systems, devices, and methods discussed herein are directed to redirecting mobile traffic of an infected mobile device, or user equipment (UE), to a security network node, which provides a security action for the UE. A mobile session management node may identify the UE as an infected device based on a database maintained at an intelligent redirection node or a security posture indicator received from the UE. The mobile management entity may then create a session with a security network node which redirects mobile traffic of the infected UE to the security network node and provides a security action for the UE.
Claims20
A method in a mobile session management node for redirecting mobile traffic, the method comprising:
- sending an identity request to a user equipment (UE) in response to receiving an attach request from the UE;
- receiving an identity response from the UE;
- identifying the UE as an infected device based on the identity response;
- creating a session with a security network node (SNN);
- redirecting mobile traffic of the UE to the SNN, and
- causing the SNN to provide a security action for the UE.
A non-transitory computer storage medium configured to store computer-readable instructions by a computer, that when executed, cause the computer to perform operations comprising:
- sending an identity request to a user equipment (UE) in response to receiving an attach request from the UE;
- receiving an identity response from the UE;
- identifying the UE as an infected device based on the identity response;
- creating a session with a security network node (SNN);
- redirecting mobile traffic of the UE to the SNN, and
- causing the SNN to provide a security action for the UE.
A mobile traffic redirection system comprising:
- a mobile session management node configured to send an identity request to a user equipment (UE) in response to receiving an attach request from the UE, the mobility session management node further configured to receive an identity response from the UE in response to sending the identity request, the identity response including a mobile identity comprising at least one of an international mobile subscriber identity (IMSI) or an international mobile equipment identity (IMEI) of the UE;
- an intelligent redirection node (IRN) communicatively coupled to the mobile session management node, the IRN configured to:
- receive, from the mobile session management node, a UE security check including the mobile identity, and
- send, to the mobile session management node, a UE security check response including a security posture indicator (SPI), the SPI including an indication of the UE being infected based upon determining that the mobile identity of the UE is included in a list of known infected UEs maintained at the RN, and
- a security network node (SNN) communicatively coupled to the mobile session management node and the UE, the SNN configured to:
- receive, from the mobile session management node, a create session request including the SPI,
- send, to the mobile session management node, a create session response,
- redirect mobile traffic of the UE to the SNN, and
- provide a security action for the mobile traffic of the UE.
Dependencies are inferred from the claim text.