Communication system and method for performing third-party authentication between home service end and foreign service end

Patent metadata

Field	Value
Publication number	US-11502987-B2
Application number	US-202117356588-A
Country	US
Kind code	B2
Filing date	Jun 24, 2021
Priority date	Feb 1, 2021
Publication date	Nov 15, 2022
Grant date	Nov 15, 2022

Abstract

A communication system performs a third-party authentication between a home service end and a foreign service end, wherein the home service end and the foreign service end each have a type of a cloud, an edge or a fog. The communication system includes a control module and a plurality of operation modules that are configured in a universal proxy, wherein the universal proxy performs communication with a cloud through a cloud relay, performs communication with an edge through an edge relay, and performs communication with a fog through a fog relay. The control module selects two of the operation modules to perform the third-party authentication according to the types of the home service end and the foreign service end.

First claim

What is claimed is:

1. A communication system for performing a third-party authentication between a home service end and a foreign service end, wherein type of the home service end or the foreign service end is cloud, edge, or fog, the communication system comprising:
a universal proxy including a microprocessor, wherein the universal proxy communicates with a cloud through a cloud relay, the universal proxy communicates with an edge through an edge relay, and the universal proxy communicates with a fog through a fog relay;
a control module disposed in the universal proxy; and
a plurality of operation modules disposed in the universal proxy,
wherein, the control module and the operation modules are implemented by the microprocessor executing one or more computer program products stored in a non-transitory computer readable medium, and the control module selects at least two of the operation modules to perform the third-party authentication according to the types of the home service end and the foreign service end.

2. The communication system of claim 1 , wherein the operation modules include a virtual home subscriber server and, when the foreign service end is a foreign edge, the control module activates the virtual home subscriber server to communicate with the foreign service end.

3. The communication system of claim 2 , wherein the operation modules further include a virtual mobility management entity and, when the home service end is a home edge, the control module activates the virtual mobility management entity to communicate with the home service end through the virtual mobility management entity.

4. The communication system of claim 1 , wherein the operation modules include a virtual open ID provider and, when the foreign service end is a foreign cloud or a foreign fog, and communication protocol used by the foreign service end is an open identity connect, the control module activates the virtual open ID provider, and communicates with the foreign service end through the virtual open ID provider.

5. The communication system of claim 4 , wherein the operation modules further include a virtual relying party and, when the home service end is a home cloud or a home fog, and communication protocol used by the home service end is an open ID connect, the control module activates the virtual relying party and communicates with the home service end through the virtual relying party.

6. The communication system of claim 1 , wherein the operation modules include a virtual user and, when the home service end is a home fog or a home cloud, the control module activates the virtual user, and communicates with the home service end through the virtual user.

7. The communication system of claim 1 , wherein the operation modules include a virtual user equipment and, when the home service end is an edge and the foreign service end is a foreign cloud or a foreign fog, the control module activates the virtual user equipment and communicates with the home service end through the virtual user equipment.

8. The communication system of claim 1 , wherein the operation modules include a virtual authentication server and, when the foreign service end is a foreign fog and communication protocol used by the foreign service end is 802.1x, the control module activates the virtual authentication server (vAS) to communicate with the foreign service end.

9. The communication system of claim 1 , wherein the control module performs an initialization phase procedure and an operational phase procedure, in which, in the initialization phase procedure, the control module establishes a communication link between the cloud relay, the edge relay or the fog relay corresponding to the foreign service end and one of the operation modules and, in the operational phase procedure, the control module determines the type of the foreign service end according to type of a request message sent by the cloud relay, the edge relay or the fog relay, so as to determine the type of the home service end according to a selection message sent by a user equipment, thereby selecting thee operation modules.

10. The communication system of claim 9 , wherein the control module further performs a lookup data establishment procedure to record information of the home service end and the foreign service end in a lookup data form.

11. A communication method executed by a communication system to perform a third-party authentication between a home service end and a foreign service end, wherein type of the home service end or the foreign service end is cloud, edge or fog, and the communication system includes a control module and a plurality of operation modules, the communication method comprising the steps of:
using the control module to select at least two of the operation modules to perform the third-party authentication according to the types of the home service end and the foreign service end,
wherein the control module and the operation modules are disposed in a universal proxy, the universal proxy communicates with a cloud through a cloud relay, the universal proxy communicates with an edge through an edge relay, and the universal proxy communicates with a fog through a fog relay.

12. The communication method of claim 11 , further comprising the step of: when the foreign service end is a foreign edge, using the control module to activate a virtual home subscriber server in the operation modules and communicate with the foreign service end through the virtual home subscriber server.

13. The communication method according to claim 12 , further comprising the step of: when the home service end is a home edge, using the control module to activate a virtual mobility management entity in the operation modules and communicate with the home service end through the virtual mobility management entity.

14. The communication method of claim 11 , further comprising the step of: when the foreign service end is a foreign cloud or a foreign fog and communication protocol used by the foreign service end is open ID connect, using the control module to activate a virtual identity provider in the operation modules and communicate with the foreign service end through the virtual identity provider.

15. The communication method of claim 14 , further comprising the step of: when the home service end is a home cloud or a home fog and communication protocol used by the home service end is open ID connect, using the control module to activate a virtual relying party in the operation modules and communicate with the home service end through the virtual relying party.

16. The communication method of claim 11 , further comprising the step of: when the home service end is a home fog or a home cloud, using the control module to activate a virtual user in the operation modules and communicate with the home service end through the virtual user.

17. The communication method of claim 11 , wherein, when the home service end is a home edge and the foreign service end is a foreign cloud or a foreign fog, the control module activates a virtual user equipment among the operation modules, and communicates with the home service end through the virtual user equipment.

18. The communication method of claim 11 , wherein, when the foreign service end is a foreign fog and uses communication protocol of 802.1x, the control module activates a virtual authentication server in the operation modules, and communicates with the foreign service end through the virtual authentication server.

19. The communication method of claim item 11 , further comprising the step o

Assignees

• National Yang Ming Chiao Tung Univ

Inventors

• Lin Ying-Dar
• Ali Asad

Classifications

• H04L63/0281

  Proxies · CPC title

• H04L63/0892

  by using authentication-authorization-accounting [AAA] servers or protocols · CPC title

• H04L65/1045

  Proxies, e.g. for session initiation protocol [SIP] · CPC title

• H04L65/1063

  Application servers providing network services (systems providing special services to telephonic subscribers H04M3/42) · CPC title

• H04W12/06

  Authentication · CPC title