System and method of controlling application level access of subscriber to a network

Patent metadata

Field	Value
Publication number	US-9325720-B2
Application number	US-201213430779-A
Country	US
Kind code	B2
Filing date	Mar 27, 2012
Priority date	May 30, 2000
Publication date	Apr 26, 2016
Grant date	Apr 26, 2016

Abstract

The invention is a system and method of controlling an access of a subscriber to a network. The method includes sending an identification of the subscriber and a level of access to be provided to the subscriber from a visited network of a plurality of networks ( 12, 14, 16 ) connected to a home network ( 10 ); in response to the identification of the subscriber and a level of access to be provided to the subscriber, storing a subscriber profile of the authorized of access to be provided to the subscriber; and controlling access of the subscriber to any network dependent upon a comparison of access to be provided to the subscriber and the stored subscriber profile.

First claim

The invention claimed is:

1. A method comprising:
transmitting, to a visited network by a user equipment, a first message, where the first message comprises an identification of the user equipment and a request for an application level of service to be provided to the subscriber from the visited network which is one of a plurality of networks connected to a home network, the request being received by the home network from the visited network, wherein at the home network a predetermined subscriber profile is stored including the identification of the user equipment and an application level of access to be provided to the user equipment in any of the plurality of networks or the home network, wherein at least the location of the home network is determined by the visited network based on analysis of data transmitted to the visited network from the user equipment using packet data protocol; and
in response to transmitting the first message, receiving, at the user equipment, access of the user equipment to the visited network dependent upon a comparison of the request for an application level of service to be provided to the user equipment in the plurality of networks or the home network and the stored predetermined subscriber profile, wherein the predetermined subscriber profile is selected from of a plurality of subscriber profiles for a subscriber based at least in part on a location of the user equipment, each subscriber profile of the plurality of subscriber profiles including a different level of access defining at least one of a bandwidth degree, a security degree or supported supplementary services, and wherein the access provided to the subscriber is application level access used to provide connectivity of the subscriber in the visited network defined by the selected subscriber profile.

2. The method in accordance with claim 1 wherein the application level of access authorizes a specific degree of bandwidth in communications.

3. The method in accordance with claim 1 wherein the application level of access authorizes a specific degree of security in communications.

4. The method in accordance with claim 1 wherein the application level of access authorizes specific connection of supplementary services.

5. The method in accordance with claim 1 wherein transmitting the first message is performed in response to the user equipment being connected to the visited network.

6. An apparatus comprising at least one hardware processor; and at least one non-transitory memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:
to transmit, to a visited network, a first message, where the first message comprises an identification of the apparatus and a request for an application level of service to be provided to the apparatus from the visited network which is one of a plurality of networks connected to a home network, the request being received by the home network from the visited network, wherein at the home network a predetermined subscriber profile is stored including the identification of the apparatus and an application level of access to be provided to the apparatus in any of the plurality of networks or the home network, wherein at least the location of the home network is determined by the visited network based on analysis of data transmitted to the visited network from the user equipment using packet data protocol; and
in response to transmitting the first message, receiving at the apparatus, access of the apparatus to the visited network dependent upon a comparison of the request for an application level of service to be provided to the apparatus in the plurality of networks or the home network and the stored predetermined subscriber profile, wherein the predetermined subscriber profile is selected from of a plurality of subscriber profiles for a subscriber based at least in part on a location of the user equipment, each subscriber profile of the plurality of subscriber profiles including a different level of access defining at least one of a bandwidth degree, a security degree or supported supplementary services, and wherein the access provided to the subscriber is application level access used to provide connectivity of the subscriber in the visited network defined by the selected subscriber profile.

7. The apparatus in accordance with claim 6 wherein the application level of access authorizes a specific degree of bandwidth in communications.

8. The apparatus in accordance with claim 6 wherein the application level of access authorizes a specific degree of security in communications.

9. The apparatus in accordance with claim 6 wherein the application level of access authorizes specific connection of supplementary services.

10. The apparatus in accordance with claim 6 wherein, when transmitting, the at least one memory and the computer program code are further configured to cause the apparatus to transmit the first message in response to a user equipment being connected to the visited network.

11. A computer program product comprising a non-transitory computer-readable storage medium bearing computer program code embodied therein for use with a computer, the computer program code comprising:
code for transmitting by an apparatus, to a visited network, a first message, where the first message comprises an identification of the apparatus and a request for an application level of service to be provided to the apparatus from the visited network which is one of a plurality of networks connected to a home network, the request being received by the home network from the visited network, wherein at the home network a predetermined subscriber profile is stored including the identification of the apparatus and an application level of access to be provided to the apparatus in any of the plurality of networks or the home network, wherein at least the location of the home network is determined by the visited network based on analysis of data transmitted to the visited network from the user equipment using packet data protocol; and
code for, in response to transmitting the first message, receiving at the apparatus, access of the apparatus to the visited network dependent upon a comparison of the request for an application level of service to be provided to the apparatus in the plurality of networks or the home network and the stored predetermined subscriber profile, wherein the predetermined subscriber profile is selected from of a plurality of subscriber profiles for a subscriber based at least in part on a location of the user equipment, each subscriber profile of the plurality of subscriber profiles including a different level of access defining at least one of a bandwidth degree, a security degree or supported supplementary services, and wherein the access provided to the subscriber is application level access used to provide connectivity of the subscriber in the visited network defined by the selected subscriber profile.

12. The computer program product in accordance with claim 11 , wherein the application level of access authorizes a specific degree of bandwidth in communications.

13. The computer program product in accordance with claim 11 , wherein the application level of access authorizes a specific degree of security in communications.

14. The computer program product in accordance with claim 11 , wherein the application level of access authorizes specific connection of supplementary services.

Assignees

• Faccin Stefano
• Purnadi Rene
• Hulkkonen Tony
• Rajaniemi Jaakko
• Tuohino Markku
• Sivanandan Mohan
• Nokia Technologies Oy

Inventors

• Faccin Stefano
• Purnadi Rene
• Hulkkonen Tony
• Rajaniemi Jaakko
• Tuohino Markku
• Sivanandan Mohan

Classifications

• H04W8/18

  Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data · CPC title

• H04W8/08

  Mobility data transfer · CPC title

• H04W8/02

  Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks · CPC title

• H04W8/00

  Network data management · CPC title

• H04L69/329

  in the application layer [OSI layer 7] · CPC title