Back to results
US 8,429,719 B2Granted
Interworking between first and second authentication domains
AssigneeAppl Inc.
InventorsYusupha Touray, Fayaz Kadri, David Anderson
Life of this patent
Estimating the term…
Abstract
To interwork between a first authentication domain and a second authentication domain, a bridge module performs a first authentication procedure in the first authentication domain for a mobile station, wherein the first authentication domain is part of a wireless access network. Based on information collected in the first authentication procedure, the bridge module performs a second authentication procedure is performed, on behalf of the mobile station, in the second authentication domain.
Claims18
A method of interworking between a first authentication domain and a second authentication domain, comprising:
- performing, by a bridge module, a first authentication procedure in the first authentication domain for a mobile station, wherein the first authentication domain is part of a wireless access network, wherein the first authentication procedure involves communicating authentication messaging between the wireless access network and an authentication node in a service provider network, wherein the mobile station is associated with a subscriber of the service provider network, wherein the first authentication procedure establishes authentication of the mobile station by the wireless access network;
- based on a credential collected in the first authentication procedure from the service provider network, performing a second authentication procedure for the mobile station, by the bridge module, in the second authentication domain, wherein said performing the second authentication procedure comprises providing the credential to the service provider network, wherein the second authentication procedure establishes authentication of the mobile station by the service provider network, wherein said performing the second authentication procedure comprises receiving an Internet Protocol (IP) address to assign the mobile station;
- and
- communicating the IP address to the mobile station to allocate the IP address to the mobile station.
1 more element
A gateway to provide interworking between first and second authentication domains, comprising:
- a processor to:
- perform a first authentication procedure in the first authentication domain for a mobile station, wherein the first authentication domain is associated with a wireless access network, wherein the first authentication procedure involves communicating authentication messaging between the wireless access network and an authentication node in a service provider system, wherein the mobile station is associated with a subscriber of the service provider system, wherein the first authentication procedure establishes authentication of the mobile station by the wireless access network;
- in response to a credential received by the gateway in the first authentication from the service provider system, perform a second, different authentication procedure for the mobile station with the service provider system in the second authentication domain, wherein the second authentication procedure establishes authentication of the mobile station by the service provider system;
- a storage to store an Internet Protocol (IP) address of the mobile station, wherein the IP address is received as part of the second authentication procedure,
- wherein the processor is configured to communicate the IP address to the mobile station as part of a configuration exchange.
2 more elements
A non-transitory, computer-readable storage medium containing program instructions that, when executed by a processor, cause a gateway to:
- perform a first authentication procedure between the gateway and an Authentication, Authorization, and Accounting (AAA) server for a mobile station that is a subscriber of a service provider system that does not include wireless access network infrastructure, wherein the gateway is associated with an entity that includes wireless access network infrastructure, wherein the AAA server is part of the service provider system, wherein the first authentication procedure establishes authentication of the mobile station by the wireless access network infrastructure;
- perform a second, different authentication procedure between the gateway and the service provider system using a credential received by the gateway in the first authentication procedure from the service provider system, wherein the second authentication procedure establishes authentication of the mobile station by the service provider system;
- receive an Internet Protocol (IP) address to assign the mobile station from the service provider system as part of the second authentication procedure;
- and
- communicate the IP address to the mobile station as part of a configuration exchange.
2 more elements
Dependencies are inferred from the claim text.