# US 9,521,549 B2 · WiFi fixed wireless personal services > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,521,549 B2 - Document ID: US9521549B2 - Status: Granted - Kind: B2 - Application number: 14/130,266 - Filed: 2012-05-25 - Published: 2014-05-29 - Granted: 2016-12-13 - Earliest claimed: 2011-06-30 - Assignees: Telefonaktiebolaget L M Ericsson (publ) - Applicants: Anders Lundstrom - Inventors: Anders Lundstrom - Web page: https://patentgrep.com/patent/US9521549B2 ## CPC - H04W 8/26: Network addressing or numbering for mobility support - H04L 61/5014: using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP] - H04W 12/069: using certificates or pre-shared keys - H04W 88/16: Gateway arrangements - H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols} - H04W 88/08: Access point devices - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method of providing access for wireless terminals to a packet core network. The method comprises attaching an access point to said packet core network via a cellular radio access network, defining a subnet associated with an Internet Protocol (IP) address space, and configuring said access point as a router of the subnet. Then, for each wireless terminal that requires access to said packet core network via said access point, the following operations are performed: a) authenticating and authorizing the wireless terminal to the packet core network via the access point, and b) exchanging signaling between the wireless terminal and the packet core network via the access point in order to allocate to the wireless terminal an IP address from said IP address space. ## Claims ### Claim 1 A method of providing access for wireless terminals to a packet core network, the method comprising: attaching an access point to said packet core network via a cellular radio access network, wherein the attaching includes establishing a Packet Data Network (PDN) connection between said access point and a packet gateway of said packet core network; defining a subnet associated with an Internet Protocol (IP) address space, and configuring said access point as a router of the subnet; and for each wireless terminal from a plurality of wireless terminals that require access to said packet core network via said access point, a) authenticating and authorizing the wireless terminal to access the packet core network via the access point, b) exchanging signaling between the wireless terminal and the packet core network via the access point in order to allocate to the wireless terminal an IP address from said IP address space, c) establishing, for the wireless terminal, a dedicated bearer associated with the PDN connection, and d) routing all packets between the wireless terminal and the packet core network, via the dedicated bearer established for the wireless terminal. ### Claim 2 (depends on 1) The method according to claim 1, wherein said access point is a WiFi access point and said wireless terminals communicate with the access point using WiFi protocols. ### Claim 3 (depends on 1) The method according to claim 1, wherein said cellular radio access network utilizes High Speed Packet Access (HSPA) over 3G, or Long Term Evolution (LTE). ### Claim 4 (depends on 1) The method according to claim 1, wherein authenticating and authorizing the wireless terminal to access the packet core network comprises utilizing an Authentication, Authorization, and Accounting (AAA) server in the packet core network. ### Claim 5 (depends on 4) The method according to claim 4, wherein authenticating and authorizing the wireless terminal to access the packet core network comprises using Extensible Authentication Protocol (EAP) Subscriber Identity Module (SIM)/Authentication and Key Agreement (AKA) or another EAP-based protocol. ### Claim 6 (depends on 5) The method according to claim 5, wherein authenticating and authorizing the wireless terminal to access the packet core network comprises an 802.1x exchange between the wireless terminal and the access point, and a radius/EAP exchange between the access point and the AAA server. ### Claim 7 (depends on 1) The method according to claim 1, wherein exchanging signaling between the wireless terminal and the packet core network via the access point comprises an exchange of Dynamic Host Control Protocol (DHCP) signaling between the wireless terminal and the access point, and between the access point and a DHCP function in the packet core network. ### Claim 8 (depends on 1) The method according to claim 1, further comprising: following authentication of a wireless terminal, establishing a dedicated PDN connection for the respective authenticated wireless terminal, between the access point and the packet core network, establishing one or more dedicated bearers associated with that dedicated PDN connection, and routing all packets between the respective authenticated wireless terminal and the packet core network, via said dedicated bearer(s). ### Claim 9 (depends on 1) The method according to claim 1, further comprising: installing, for each authorized wireless terminal, policies in a packet gateway of the packet core network, policies being applied to downlink packets based upon the allocated IP addresses. ### Claim 10 (depends on 1) The method according to claim 1, further comprising: installing, for each authorized wireless terminal, policies in said access point, policies being applied to uplink packets based upon the allocated IP addresses. ### Claim 11 (depends on 4) The method according to claim 4, further comprising: installing, for each authorized wireless terminal, policies in a packet gateway of the packet core network, policies being applied to downlink packets based upon the allocated IP addresses, wherein installing a policy is triggered by the AAA server signaling to a Policy Charging Rules Function (PCRF), which in turn installs the policy in the packet gateway and/or access point. ### Claim 12 An access point for enabling wireless terminals to access a packet core network, the access point comprising: a cellular radio controller, configured to attach to a packet core network via a cellular radio access network, wherein the attachment to the packet core network establishes a default Packet Data Network (PDN) connection between the access point and a packet gateway of the packet core network; an Internet Protocol (IP) router, configured to operate as an access router for a subnet associated with an IP address space, wherein the access router is configured to route packets between the wireless terminals and the packet core network via respective dedicated bearers established for each of the wireless terminals, wherein each of the respective dedicated bearers is associated with the default PDN connection; a local radio controller, configured to provide a wireless hotspot for wireless terminals within a local coverage area; and a signaling relay, configured to relay authentication signaling between a wireless terminal and the packet core network, and to relay further signaling between the wireless terminal and the packet core network in order to allocate to the wireless terminal an IP address from said IP address space. ### Claim 13 (depends on 12) The access point according to claim 12, wherein said local radio controller is configured to provide a WiFi hotspot. ### Claim 14 (depends on 12) The access point according to claim 12, wherein the access point is a Fixed Wireless Terminal, and wherein said cellular radio controller is configured to interoperate with said cellular radio access network using High Speed Packet Access (HSPA) over 3G, or Long Term Evolution (LTE) communication protocols. ### Claim 15 (depends on 12) The access point according to claim 12, wherein said signaling relay is configured to employ an 802.1x exchange with the wireless terminal and a radius/Extensible Authentication Protocol (EAP) exchange with an Authentication, Authorization, and Accounting (AAA) server within the packet core network. ### Claim 16 (depends on 12) The access point according to claim 12, wherein said access router is configured to route packets between the wireless terminals and the packet core network via respective dedicated bearers associated with respective Packet Data Network (PDN) connections, established over the cellular radio access network. ### Claim 17 An Authentication, Authorization, and Accounting (AAA) server for use within a packet core network, the AAA server comprising: a first controller, configured to authenticate and authorize, via a cellular radio access network, an access point that is configured to operate as a wireless hotspot for wireless terminals; a notifier, configured to notify a Dynamic Host Control Protocol (DHCP) server of the authentication and authorization of the access point, and to install in the DHCP server an IP address space of a subnet for which the access point is to act as a router; and a second controller, configured to authenticate and authorize, via the access point, individual wireless terminals. ### Claim 18 (depends on 17) The AAA server according to claim 17, wherein said second controller is configured to signal to a policy controller to initiate installation of uplink filters in the access point in respect of the authenticated and authorized wireless terminals.