Method for configuring internet protocal address of small cell

Patent metadata

Field	Value
Publication number	US-9832167-B2
Application number	US-201514886662-A
Country	US
Kind code	B2
Filing date	Oct 19, 2015
Priority date	Aug 28, 2015
Publication date	Nov 28, 2017
Grant date	Nov 28, 2017

Abstract

A method for configuring an Internet protocol (IP) address of a small cell includes determining whether the small cell has received authorization from a core network of a mobile operator, determining whether the core network has priority over a local network to connect to the small cell, obtaining a local IP address from a dynamic host configuration protocol (DHCP) function implemented in the small cell or in an access point of the local network of the small cell, and using a core network IP address assigned to the small cell by the core network when the core network has priority over the local network. The small cell determines whether the core network IP address is the same as the local IP address. When the core network IP address is the same as the local IP address, the local IP address of the small cell is changed.

First claim

What is claimed is:

1. A method for configuring an Internet protocol (IP) address of a small cell, the method comprising:
determining, by the small cell, whether the small cell has received authorization from a core network of a mobile operator, wherein the small cell determines whether authorization has been received from the core network according to a length of an attribute type contained in an authorization load response transmitted to the small cell from a secure gateway;
determining, by the small cell, whether the core network has priority over a local network to connect to the small cell;
obtaining, by the small cell, a local IP address from a dynamic host configuration protocol (DHCP) function implemented in the small cell or in an access point of the local network of the small cell;
using, by the small cell when the core network has priority over the local network, a core network IP address assigned to the small cell by the core network;
using, by the small cell when local network has priority over the core network, the local IP address;
determining, by the small cell, whether the core network IP address is the same as the local IP address; and
requesting, by the small cell when the core network IP address is the same as the local IP address, another IP address to be assigned to the small cell.

2. The method as in claim 1 , wherein whether the core network or the local network has priority is predetermined.

3. The method as in claim 1 , wherein the secure gateway receives the core network IP address from the core network and packages the core network IP address together with the attribute type in the authorization load response transmitted to the small cell.

4. The method as in claim 3 , wherein the small cell is authorized by:
initiating and executing, by the small cell, an equipment integrity inspection of the small cell;
transmitting, by the small cell after completing the equipment integrity inspection, an Internet key exchange security association initiation (IKE_SA_INIT) request to the secure gateway, the IKE_SA_INIT request comprising a session key (SK) and encryption key exchange materials;
receiving, by the small cell from the secure gateway, an IKE_SA_INIT response and a request for a certificate of the small cell;
transmitting, by the small cell to the secure gateway, a first Internet key exchange initiation (IKE_INIT) request comprising the certificate of the small cell, a certificate comprising identification information of the small cell, an authentication (AUTH), and the SK of the small cell;
checking, by the secure gateway, a validity of the AUTH received from the small cell;
transmitting, by the secure gateway to the small cell, a first IKE_INIT response comprising identity information, AUTH, and a certificate of the secure gateway;
authenticating, by the small cell according to a root certificate prestored in the small cell, the certificate of the secure gateway;
transmitting, by the small cell to the secure gateway, a second IKE_AUTH request comprising the identification information of the small cell;
transmitting, by the secure gateway to an authentication, authorization, and accounting (AAA) server, an empty extensible authentication protocol (EAP) request comprising the identification information of the small cell;
obtaining, by the AAA server from a home subscriber server (HSS), user information and an authentication vector, the authentication vector comprising a challenge random number (RAND), an authentication token (AUTN), an authentication challenge, a cipher key (CK), and an integrity key (IK);
transmitting, by the AAA server to the secure gateway, an extensible authentication protocol and authentication and key agreement (EAP/AKA) request comprising the authentication challenge, the authentication challenge being in the form of an extensible authentication protocol request and authentication and key agreement challenge (EAP-Request/AKA-Challenge) message;
transmitting, by the secure gateway to the small cell, a second IKE_AUTH response comprising the EAP-Request/AKA-Challenge message received from the AAA server;
authenticating, by the small cell, an authentication challenge certificate of the AAA server;
transmitting, by the small cell to the secure gateway, an EAP/AKA response comprising the authentication challenge, the authentication challenge being in the form of an extensible authentication protocol response and authentication and key agreement challenge (EAP-Response/AKA-Challenge) message;
transmitting, by the secure gateway to the AAA server, the EAP-Response/AKA-Challenge message received from the small cell;
transmitting, by the AAA server to the secure gateway, an authentication response comprising an EAP success message and encryption key materials, the encryption key materials comprising a first main session key (MSK);
calculating, by the secure gateway, an AUTH for authenticating the IKE_SA_INIT according to the first MSK;
transmitting, by the secure gateway to the small cell, the EAP success message;
generating, by the small cell according to a second MSK of the small cell prestored in the small cell, an authentication AKA message by setting the second MSK as an input parameter;
transmitting, by the small cell to the secure gateway, a third IKE_AUTH request;
authenticating, by the secure gateway, a validity of the AUTH received from the small cell, and transmitting, by the secure gateway to the small cell, a third IKE_AUTH response; and
deleting, by the secure gateway, an old IKE SA of the small cell when the secure gateway detects that the small cell has an old IKE SA, and transmitting, by the secure gateway to the small cell, a delete message.

5. A small cell implementing an Internet protocol (IP) configuration system, the small cell comprising:
a storage configured to store a plurality of scripts of an IP configuration system; and
a processor configured to implement the plurality of scripts of the IP configuration system;
wherein the plurality of scripts of the IP configuration system is configured to:
request and receive a local IP address from an access point of a local network of the small cell;
determine, when the small cell has received authorization from a core network of a mobile operator, whether the local IP address is the same as a core network IP address assigned to the small cell by the core network, wherein the small cell determines whether authorization has been received from the core network according to a length of an attribute type contained in an authorization load response transmitted to the small cell from a secure gateway;
determine whether the core network has priority over the local network; and
use the core network IP address when the core network has priority over the local network;
wherein the small cell is in wireless communication with at least one user terminal.

6. The small cell as in claim 5 , wherein whether the core network or the local network has priority is predetermined.

7. The small cell as in claim 6 , wherein the local IP address is assigned to the small cell by a dynamic host configuration protocol (DHCP) function implemented in the small cell or in a DHCP server of an access point of the local network.

8. The small cell as in claim 7 , wherein when the local IP address is the same as the core network IP address, the small cell requests the access point of the local network to assign another local IP address to the small cell.

9. The small cell as in claim 5 , wherein the small cell receives the core network IP address together with the attribute type from the authorization load response.

10. The small cell as in claim 9 , wherein the plurality of scripts of the IP configuration

Assignees

• Ambit Microsystems (Shanghai) Ltd
• Hon Hai Prec Ind Co Ltd

Inventors

• Su Jen-Chen

Classifications

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/0844

  with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys · CPC title

• H04W88/16

  Gateway arrangements · CPC title

• H04W12/08 Primary

  Access security · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title