Infrastructure-based D2D connection setup using OTT services

Patent metadata

Field	Value
Publication number	US-10616946-B2
Application number	US-201916274779-A
Country	US
Kind code	B2
Filing date	Feb 13, 2019
Priority date	Nov 27, 2014
Publication date	Apr 7, 2020
Grant date	Apr 7, 2020

Abstract

Methods and systems enabling the end users of cellular devices to set up infrastructure-based D2D connections with other devices from within the over-the-top (OTT) applications running on their devices are disclosed. The methods are based on dynamically reconfiguring respective network-level firewalls protecting different end user devices.

First claim

The invention claimed is:

1. A method for a first routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the first mobile network operator and a second device connected to the telecommunications network, the method comprising:
receiving from the first device a connection request comprising a first identifier for the second device;
resolving the first identifier of the second device into a second identifier of the second device identifying a second routing entity controlled by the mobile network operator;
providing to the second routing entity a connection request for the connection between the first device and the second device, the connection request comprising at least one of the first identifier or the second identifier of the second device;
providing to the second routing entity contact information of the first device;
receiving from the second routing entity contact information of the second device; and;
configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device.

2. The method according to claim 1 , further comprising:
receiving from the first device a command to terminate the connection; and
instructing the first firewall to terminate the connection.

3. The method according to claim 1 , further comprising:
receiving from the second routing entity an indication that the second device issued a command to terminate the connection; and
at least one of instructing the first firewall to terminate the connection or providing an indication to the first device that the connection is to be terminated.

4. A method for a second routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network, the method comprising:
receiving from a first routing entity controlled by the mobile network operator a connection request for the connection between the first device and the second device, the connection request comprising at least one of a first identifier or a second identifier of the second device;
resolving the at least one of the first identifier or the second identifier of the second device to determine a third identifier of the second device;
providing the connection request, or a derivative thereof, to the second device identified by the third identifier;
receiving, from the first routing entity, contact information of the first device;
providing contact information of the second device to the first routing entity; and
configuring a second firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the second firewall is a firewall of the telecommunications network to which the second device is connected that is configured to protect the second device.

5. The method of claim 4 , further comprising receiving from the second device an indication that the second device accepts the connection request.

6. The method according to claim 4 , further comprising:
receiving from the first routing entity an indication that the first device issued a command to terminate the connection between the first device and the second device; and
at least one of instructing the second firewall to terminate the connection or providing an indication to the second device that the connection is to be terminated.

7. The method according to claim 4 , further comprising:
receiving from the second device a command to terminate the connection; and
instructing the second firewall to terminate the connection.

8. The method according to claim 7 , further comprising providing an indication to the first routing entity that the connection will be terminated.

9. The method according to claim 1 , wherein the contact information of the first device comprises a first IP address and the contact information of the second device comprises a second IP address.

10. The method of claim 9 , wherein the contact information of the first device further comprises one or more ports of the first device to be used for communicating data over the connection and the contact information of the second device further comprises one or more ports of the second device to be used for communicating data over the connection.

11. A non-transitory computer-readable storage medium having instructions stored thereon for a first routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network, wherein the instructions, when executed by a processor of a node, cause the node to carry out operations including:
receiving from the first device a connection request comprising a first identifier for the second device;
resolving the first identifier of the second device into a second identifier of the second device identifying a second routing entity controlled by the mobile network operator;
providing to the second routing entity a connection request for the connection between the first device and the second device, the connection request comprising at least one of the first identifier or the second identifier of the second device;
providing to the second routing entity contact information of the first device;
receiving from the second routing entity contact information of the second device; and
configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device.

12. A node comprising:
a non-transitory computer readable storage medium having computer readable instructions stored thereon for a first routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network; and
a processor coupled to the non-transitory computer readable storage medium, wherein responsive to executing the computer readable instructions, the processor is configured to cause the node to carry out operations including:
receiving from the first device a connection request comprising a first identifier for the second device;
resolving the first identifier of the second device into a second identifier of the second device identifying a second routing entity controlled by the mobile network operator;
providing to the second routing entity a connection request for the connection between the first device and the second device, the connection request comprising at least one of the first identifier or the second identifier of the second device;
providing to the second routing entity contact information of the first device;
receiving from the second routing entity contact information of the second device; and

Assignees

• Koninklijke Kpn Nv
• TNO
• Nederlandse Oranisatie Voor Toegepast Natuurwetenschappelijk Onderzoek Tno

Inventors

• De Kievit Sander
• Almodovar Chico Jose
• Norp Antonius
• Hillen Bernardus

Classifications

• H04L63/0209

  Architectural arrangements, e.g. perimeter networks or demilitarized zones · CPC title

• H04W84/042

  Public Land Mobile systems, e.g. cellular systems · CPC title

• H04W76/23 Primary

  Manipulation of direct-mode connections · CPC title

• H04W76/14 Primary

  Direct-mode setup · CPC title

• H04W4/60

  Subscription-based services using application servers or record carriers, e.g. SIM application toolkits · CPC title