# US 7,610,619 B2 · Method for registering a communication terminal

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 7,610,619 B2
- Document ID: US7610619B2
- Status: Granted
- Kind: B2
- Application number: 10/442,184
- Filed: 2003-05-21
- Published: 2004-08-05
- Granted: 2009-10-27
- Earliest claimed: 2002-05-22
- Assignees: Siemens Aktiengesellschaft
- Inventors: Georg Kastelewicz; Peter Kim
- Web page: https://patentgrep.com/patent/US7610619B2

## CPC

- H04W 12/06: Authentication
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 65/1016: IP multimedia subsystem [IMS]
- H04L 2209/80: Wireless
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The invention relates to a method for registering a communication terminal with a service network which organizes a communication service. Within this context, in a preliminary step, a logon IP address which was assigned to the communication terminal when the communication terminal logged onto the access network is received by the service network and is stored therein for the respective user of the communication terminal. When a first registration message sent by the communication terminal is received a token is transmitted to the communication terminal using a transport message, the token having been produced by the service network from the logon IP address and a random number using an encryption method, and token data associated with the token having been stored in the service network. When a second registration message which is sent by the communication terminal and contains the token is received the service network compares the token received, a public identifier and/or a private identifier with stored variables.

## Claims

### Claim 1

A method for registering a communication terminal with a service network which organizes a communications service, where the service network is accessed by the communication terminal using an access network which connects the communication terminal to the service network, in which
in a preliminary step, a logon IP address which was assigned to the communication terminal when the communication terminal logged onto the access network is received by the service network and is stored therein for the respective user of the communication terminal,
when a first registration message sent by the communication terminal is received a token is transmitted to the communication terminal using a transport message sent using the logon IP address, the token having been produced by the service network from the logon IP address and a random number using an encryption method, and token data associated with the token having been stored in the service network,
when a second registration message which is sent by the communication terminal and contains the token is received the service network compares the token received with the token data,
successful registration is identified if the token matches the token data, and
unsuccessful registration is identified if the token does not match the token data.

### Claim 2 (depends on 1)

The method as claimed in claim 1, wherein
the service network stores the token as token data,
comparison of the received token with the token data stored in the service network involves the received token being compared with the stored token, and
successful registration is identified if the received token matches the stored token.

### Claim 3 (depends on 1)

The method as claimed in claim 1, wherein
the service network stores the logon IP address and the random number as token data,
reception of the second registration message by the service network is followed by decryption of the token transmitted with this second registration message,
comparison of the received token with the token data stored in the service network involves the logon IP address recovered during decryption being compared with the stored logon IP address, and
successful registration is identified if the recovered logon IP address matches the stored logon IP address.

### Claim 4 (depends on 3)

The method as claimed in claim 3, wherein
the preliminary step involves the logon IP address (IP-SRC-UE), which was assigned to the communication terminal (UE) when the communication terminal (UE) logged onto the access network (GPRS), being assigned to a public identifier (SIP-Public-ID) for the communication terminal (UE) via the service network (IMS),
the recovered logon IP address or the token is used to read the public identifier which is stored in the service network and is associated with the logon IP address,
reception of the second registration message by the service network is followed by comparison of a public identifier contained in this second registration message with the public identifier which has been read, and
successful registration is identified only if the public identifier contained in this second registration message additionally matches the public identifier which has been read.

### Claim 5 (depends on 3)

The method as claimed in claim 3, wherein
reception of the second registration message by the service network is followed by comparison of a private identifier contained in this second registration message with a private identifier stored in the service network together with the public identifier, and
successful registration is identified only if the private identifier contained in this second registration message additionally matches the private identifier stored in the service network.

### Claim 6 (depends on 1)

The method as claimed in claim 1, wherein
the service network starts a token timer associated with the token when the transport message is sent, and
the token is marked as invalid if a predetermined validity period for the token elapses.

### Claim 7 (depends on 1)

The method as claimed in claim 1, wherein
the token is produced by a switching center in the service network.

### Claim 8 (depends on 1)

The method as claimed in claim 1, wherein
the token is produced by a home location register in the service network.

### Claim 9 (depends on 3)

The method as claimed in claim 3, wherein
the token (Token) is decrypted by the switching center in the service network.

### Claim 10 (depends on 1)

The method as claimed in claim 1, characterized in that
a switching center in the service network compares the received token with the token data,
the switching center identifies successful registration if the token matches the token data, and
the switching center identifies unsuccessful registration if the token does not match the token data.
