Method, security system control module and policy server for providing security in a packet-switched telecommunications system

A security system control module for providing security protection for a Mobile Station (MS) in a packet switched cellular telecommunications network, the module comprising:

• a mobile security manager which responsive to an access of the network by the MS, receives an identifier of the MS;
• a security policy server comprising a mobile security database storing security profiles, the server receiving the identifier of the MS, and based on the identifier of the MS, acting to determine a security profile associated with the MS;
• wherein the policy server sends security settings of the determined security profile to the mobile security manager, which determines whether or not the security profile associated with the MS is a group security profile, and when the security profile associated with the MS is a group security profile, further acts to determine when the access of the network by the MS is the first access of the network by an MS of the same security group during a given period of time and when so, transmits the security settings to one or more network nodes of the packet switched cellular telecommunications network for enforcing security for the MS.

A security system control module for providing security protection for a Mobile Station (MS) in a packet switched cellular telecommunications network, the module comprising:

• a mobile security manager which responsive to an access of the network by the MS, receives an identifier of the MS;
• a security policy server comprising a mobile security database storing security profiles, the server receiving the identifier of the MS, and based on the identifier of the MS, acting to determine a security profile associated with the MS;
• wherein the policy server sends security settings of the determined security profile to the mobile security manager, which determines whether or not the security profile associated with the MS is a group security profile, and when the security profile associated with the MS is a group security profile, further acts to determine when the access of the network by the MS is not the first access of the network by an MS of the same security group during a given period of time and when this is the case, the mobile security manager refrains from propagating the security settings of the security profile to network nodes of the packet switched cellular telecommunications network.

A mobile security manager of a security system for providing security protection for a Mobile Station (MS) in a packet switched cellular telecommunications network, the manager being adapted to receive an identifier of the MS responsive to an access of the network by the MS and to send the MS identifier to a security policy server for receiving back a security profile associated with the MS, the mobile security manager being further adapted to determine whether or not the security profile associated with the MS is a group security profile, and when this is the case, to further act to determine when the access of the network by the MS is the first access of the network by an MS of the same security group during a given period of time and when this is the case, to transmit the security settings to one or more network nodes of the packet switched cellular telecommunications network for enforcing security for the MS.

A mobile security manager of a security system for providing security protection for a Mobile Station (MS) in a packet switched cellular telecommunications network, the manager being adapted to receive an identifier of the MS responsive to an access of the network by the MS and to send the MS identifier to a security policy server for receiving back a security profile associated with the MS, the mobile security manager being further adapted to determine whether or not the security profile associated with the MS is a group security profile, and when this is the case, to further act to determine when the access of the network by the MS is not the first access of the network by an MS of the same security group during a given period of time and when this is the case, the mobile security manager being configured to refrain from propagating the security settings of the security profile to network nodes of the packet switched cellular telecommunications network.