Access mode selection based on user equipment selected access network identity

Patent metadata

Field	Value
Publication number	US-10880740-B2
Application number	US-201314383302-A
Country	US
Kind code	B2
Filing date	Feb 19, 2013
Priority date	Mar 7, 2012
Publication date	Dec 29, 2020
Grant date	Dec 29, 2020

Abstract

Access mode selection based on user equipment selected access network identity may be useful, for example, with respect to the authentication in third generation partnership project (3GPP) networks of subscribers attaching to a trusted wireless local area network (WLAN) access network (TWAN). A method of access mode selection can include informing, in a request, an authentication server regarding at least one access mode for a user equipment. The method can also include selecting a mode of the at least one access mode to use with respect to the user equipment based on a response received from the authentication server in response to the request.

First claim

We claim:

1. A method, comprising:
informing, in a request, an authentication server regarding at least one type of network service requested by the user equipment;
receiving a response from the authentication server in response to the request, the response including an indication of which one of the at least one type of network service is allowed for the user equipment;
selecting, by a network device, a type of network service of the at least one type of network service to use with respect to the user equipment based on the response;
attaching the user equipment to the network device based on the selected type of network service; and
granting the mode to the user equipment when the authentication server indicates that the mode is permitted for the user equipment.

2. The method of claim 1 , further comprising:
receiving from a user equipment an access network identity indication, which implicitly or directly indicates the type of network service or service set requested by the user equipment,
based on the prerequisite that the access network identity, in which said access network identity may directly or implicitly indicate to the user or the user equipment the type of network services available and offered by the network, is broadcasted to the user equipment, and
based on the prerequisite that the user or user equipment selects access point based on the access network identity broadcasted by the access network to the user equipment.

3. The method of claim 2 , wherein the receiving the access network identity includes receiving a service set identifier.

4. The method of claim 1 , further comprising:
advertising, to the user equipment, modes supported by a trusted wireless local area network, prior to informing the authentication server.

5. A method, comprising:
receiving, at an authentication server, a request regarding at least one type of network service requsted by a user equipment;
determining, by the authentication server based on subscriber information or configuration of the authentication server, whether the at least one type of network service requested by the user equipment, received in the request, is permitted for the user equipment;
responding to the request with a successful authentication only when one or more mode of the at least one type of network service is permitted for the user equipment, wherein the response with the successful authentication includes an indication of which one of the at least one type of network service is permitted for the user equipment; and
responding to the request with an unsuccessful authentication when no network service of the at least one type of network service is permitted for the user equipment.

6. The method of claim 5 , further comprising:
receiving the request, wherein receiving the request comprises receiving an authentication request.

7. An apparatus, comprising:
at least one processor; and
at least one memory including computer program code,
wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to
inform, in a request, an authentication server regarding at least one type of network service requested by the user equipment,
receive a response from the authentication server in response to the request, the response including an indication of which one of the at least one type of network service is allowed for the user equipment,
select a type of network service of the at least one type of network service to use with respect to the user equipment based on the response,
attach the user equipment to the network device based on the selected type of network service, and
grant the mode to the user equipment when the authentication server indicates that the mode is permitted for the user equipment.

8. The apparatus of claim 7 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to receive from a user equipment an access network identity, and to inform the authentication server based on the access network identity.

9. The apparatus of claim 8 , wherein the access network identity comprises a service set identifier.

10. The apparatus of claim 7 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to advertise, to the user equipment, modes supported by a trusted wireless local area network, prior to informing the authentication server.

11. An apparatus, comprising:
at least one processor; and
at least one memory including computer program code,
wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to
receive a request regarding at least one type of network service requested by a user equipment;
determine, based on subscriber information or configuration of the apparatus, whether the at least one type of network service requested by the user equipment, received in the request, is permitted for the user equipment;
respond to the request with a successful authentication only when one or more mode of the at least one type of network service is permitted for the user equipment, wherein the response with the successful authentication includes an indication of which one of the at least one type of network service is permitted for the user equipment; and
respond to the request with an unsuccessful authentication when no mode of the at least one type of network service is permitted for the user equipment.

12. The apparatus of claim 11 , wherein the request comprises an authentication request.

13. A computer program product, embodied on a non-transitory computer-readable medium, the computer program product configured to control a processor to
inform, in a request, an authentication server regarding at least one type of network service requested by the user equipment;
receive a response from the authentication server in response to the request, the response including an indication of which one of the at least one type of network service is allowed for the user equipment;
select a type of network service of the at least one type of network service to use with respect to the user equipment based on the response;
attach the user equipment to a network device based on the selected type of network service; and
grant the mode to the user equipment when the authentication server indicates that the mode is permitted for the user equipment.

Assignees

• Nokia Solutions & Networks Oy

Inventors

• Kall Anders Jan Olof
• Wolfner Gyorgy Tamas

Classifications

• H04W12/06 Primary

  Authentication · CPC title

• H04L63/205

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title

• H04W12/73

  Access point logical identity · CPC title

• H04L63/0892

  by using authentication-authorization-accounting [AAA] servers or protocols · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title