IP Library › Granted Patent US 6,938,090

Granted Patent B2

US 6,938,090 · App. 10/132,226 · Granted Aug 30, 2005

Authentication and protection for IP application protocols based on 3GPP IMS procedures

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 6,938,090
App. No.: 10/132,226
Granted: Aug 30, 2005
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

The present invention is a system and method which provides authentication for data services for at least one UE ( 12 ) using common authentication information based upon information stored in a HSS ( 16 ) of a home network ( 20 ) of the at least one UE for multiple protocols. At least one proxy server ( 18 ) stores authentication information for each of the protocols which may be used to provide data services to the at least one UE. Authentication of the protocols available to the at least one UE uses the authentication information stored at the at least one proxy server obtained from the protocol used in the home network of the at least one UE.

Claims (124)

1. A system comprising:

a home network including a subscriber data server which stores at least one user profile regarding providing of data services to at least one user with the profile including authentication information used to authenticate the at least one user of the data services when a request for data services is made using a first protocol;

at least one user equipment which requests data services using the first network protocol and data services using at least one additional protocol, the at least one user equipment storing authentication information which is used when a request for data services is made to authenticate the at least one user;

at least one proxy server, including resident therein a first proxy for the first protocol and at least one additional proxy for the at least one additional protocol; and wherein

the first proxy and the at least one additional proxy of the at least one proxy server authenticates requests for data services received from the at least one user equipment for the protocols by using the authentication information of the at least one profile which is transmitted from the subscriber data server to the at least one proxy server and the authentication information of the at least one user transmitted from the at least one user equipment to the at least one proxy server; and

the authentication information transmitted from the subscriber data server comprises a pair of keys and the authentication information transmitted from the at least one user equipment comprises a pair of keys.

2. A system in accordance with claim 1 wherein;

the subscriber data server is a home subscriber server (HSS); and

3. A system in accordance with claim 2 wherein:

the authentication information transmitted from the subscriber data server to the at least one proxy server comprises an integrity key IK and a cipher key CK and the authentication information transmitted from the at least one user equipment to the at least one proxy sever comprises an integrity key IK and a cipher key CK which keys are processed by the at least one proxy server to determine if the at least one user is authentic.

4. A system in accordance with claim 3 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

5. A system in accordance with claim 1 wherein:

the subscriber data server is a home subscriber server (HSS);

the first protocol is the Session Initiation Protocol (SIP) and a request for data data services using SIP is transmitted from a Proxy Call State Control Function (P-CSCF) of the at least one proxy server to a Serving Call State Control Function (S-CSCF) server of the home network; and

the at least one additional network protocol is the Hyper Text Transport Protocol (HTTP) and a request for data services using HTTP is transmitted from a Hyper Text Transport Protocol (HTTP) proxy of the at least one proxy server to a HTTP server.

6. A system in accordance with claim 5 wherein:

7. A system in accordance with claim 6 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

8. A system in accordance with claim 1 wherein:

the subscriber data server is a home subscriber server (HSS);

the at least one additional protocol is the Real-Time Streaming Protocol (RTSP) and a request for data services is transmitted from a Hyper Text Transport Protocol (HTTP) proxy of the at least one proxy server to a RTSP server.

9. A system in accordance with claim 8 wherein:

10. A system in accordance with claim 9 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

11. A system in accordance with claim 1 wherein:

the subscriber data server is a home subscriber server (HSS);

the at least one additional protocol is the Hyper Text Transport Protocol (HTTP) and the Real-Time Streaming Protocol (RTSP) and a request for data services using HTTP is transmitted from a Hyper Text Transport Protocol (HTTP) proxy of the at least one proxy server to a HTTP server and a request for data services using RTSP is transmitted from a Real-Time Streaming Protocol (RTSP) proxy of the at least one proxy server to a RTSP server.

12. A system in accordance with claim 11 wherein:

13. A system in accordance with claim 12 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

14. A system in accordance with claim 1 wherein:

15. A system in accordance with claim 14 wherein:

the authentication information transmitted from the subscriber data server and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

16. In a system comprising a home network including a subscriber data server which stores at least one user profile regarding providing of data services to at least one user with the profile including authentication information used to authenticate the at least one user of the data services when a request for data services is made using a first protocol and at least one user equipment which requests data services using the first network protocol and data services using at least one additional protocol, the at least one user equipment storing authentication information which is used when a request for data services is made to authenticate the at least one user, at least one proxy server including resident therein a first proxy for the first network protocol and at least one additional proxy for the at least one additional protocol, a method of authentication of the at lease one user equipment comprising:

17. A method in accordance with claim 16 wherein:

the subscriber data server is a home subscriber server (HSS); and

the first protocol is the Session Initiation Protocol (SIP) and any request for data services using SIP is transmitted from a Proxy Call State Control Function (P-CSCF) of the at least one proxy server to a Serving Call State Control Function (S-CSCF) server of the home network.

18. A method in accordance with claim 17 wherein:

the authentication information transmitted from the HSS to the at least one proxy server comprises an integrity key IK and a cipher key CK and the authentication information transmitted from the at least one user equipment to the at least one proxy sever comprises an integrity key IK and a cipher key CK which keys are processed by the at least one proxy server to determine if the at least one user is authentic.

19. A system in accordance with claim 18 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

20. A method in accordance with claim 16 wherein:

the subscriber data server is a home subscriber server (HSS);

21. A method in accordance with claim 20 wherein:

the authentication information used transmitted from the HSS to the at least one proxy server comprises an integrity key IK and a cipher key CK and the authentication information transmitted from the at least one user equipment to the at least one proxy sever comprises an integrity key IK and a cipher key CK which keys are processed by the at least one proxy server to determine if the at least one user is authentic.

22. A system in accordance with claim 21 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

23. A method in accordance with claim 16 wherein:

the subscriber data server is a home subscriber server (HSS);

24. A method in accordance with claim 23 wherein:

25. A system in accordance with claim 24 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

26. A method in accordance with claim 16 wherein:

the subscriber data server is a home subscriber server (HSS);

27. A method in accordance with claim 26 wherein:

28. A system in accordance with claim 27 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

29. A method in accordance with claim 16 wherein:

30. A method in accordance with claim 29 wherein:

the authentication information transmitted from the subscriber data server and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

31. In a system comprising a home network including

a subscriber data server which stores at least one user profile regarding providing of data services to at least one user with the profile including authentication information used to authenticate the at least one user of the data services when a request for data services is made using a first protocol and at least one user equipment which requests data services using the first network protocol and data services using at least one additional protocol, the at least one user equipment storing authentication information which is used when a request for data services is made to authenticate the at least one user, at least one proxy server comprising:

a first proxy for the first protocol and at least one additional proxy for the at least one additional protocol which are resident therein; and wherein

the at least one proxy server authenticates requests for data services received from the at least one user equipment for the protocols by using the authentication information of the at least one profile which is transmitted from the subscriber data server to the at least one proxy server and the authentication information of the at least one user transmitted from the at least one user equipment to the at least one proxy server; and

32. A proxy server in accordance with claim 31 wherein;

the subscriber data server is a home subscriber server (HSS); and the first protocol is the Session Initiation Protocol (SIP) and any request for data services using SIP is transmitted from a Proxy Call State Control Function (P-CSCF) of the at least one proxy server to a Serving Call State Control Function (S-CSCF) server of the home network.

33. A proxy server in accordance with claim 32 wherein:

34. A proxy server in accordance with claim 33 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

35. A proxy server in accordance with claim 31 wherein:

the subscriber data server is a home subscriber server (HSS); and the first protocol is the Session Initiation Protocol (SIP) and a request for data data services using SIP is transmitted from a Proxy Call State Control Function (P-CSCF) of the at least one proxy server to a Serving Call State Control Function (S-CSCF) server of the home network; and the at least one additional network protocol is the Hyper Text Transport Protocol (HTTP) and a request for data services using HTTP is transmitted from a Hyper Text Transport Protocol (HTTP) proxy of the at least one proxy server to a HTTP server.

36. A proxy server in accordance with claim 35 wherein:

37. A proxy server in accordance with claim 36 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

38. A proxy server in accordance with claim 31 wherein:

the subscriber data server is a home subscriber server (HSS); and

the first protocol is the Session Initiation Protocol (SIP) and a request for data services using SIP is transmitted from the at least one proxy server to a Serving Call State Control Function (S-CSCF) server, and the at least one additional protocol is the Real-Time Streaming Protocol (RTSP) and a request for data services is transmitted from a Real-Time Streaming Protocol (RTSP) proxy of the at least one proxy server to a RTSP server.

39. A proxy server in accordance with claim 38 wherein:

40. A proxy server in accordance with claim 39 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

41. A proxy server in accordance with claim 31 wherein:

the subscriber data server is a home subscriber server (HSS); and

the first protocol is the Session Initiation Protocol (SIP) and a request for data services using SIP is transmitted from a Proxy Call State Control Function (P-CSCF) of the at least one proxy server to a Serving Call State Control Function (S-CSCF) server of the home network, and the at least one additional protocol is the Hyper Text Transport Protocol (HTTP) and the Real-Time Streaming Protocol (RTSP) and a request for data services using HTTP is transmitted from a Hyper Text Transport Protocol (HTTP) proxy of the at least one proxy server to a HTTP server and a request for data services using RTSP is transmitted from a Real-Time Streaming Protocol (RTSP proxy of the at least one proxy server to a RTSP server.

42. A proxy server in accordance with claim 41 wherein:

43. A proxy server in accordance with claim 42 wherein:

the authentication information transmitted from the HSS and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

44. A proxy server in accordance with claim 31 wherein:

45. A proxy server in accordance with claim 44 wherein:

the authentication information transmitted from the subscriber data server and the at least one user equipment is generated using the Authentication and Key Agreement (AKA) protocol.

46. A system comprising:

at least one proxy server, including resident therein a first proxy for the first protocol and at least one additional proxy for the at least one additional protocol; and wherein

the first proxy and the at least one additional proxy of the at least one proxy server authenticates requests for data services received from the at least one user equipment for the protocols by processing the authentication information of the at least one profile which is transmitted from the subscriber data server to the at least one proxy server and the authentication information of the at least one user transmitted from the at least one user equipment to the at least one proxy server to determine if the at least one user is authentic.

47. In a system comprising a home network including a subscriber data server which stores at least one user profile regarding providing of data services to at least one user with the profile including authentication information used to authenticate the at least one user of the data services when a request for data services is made using a first protocol and at least one user equipment which requests data services using the first network protocol and data services using at least one additional protocol, the at least one user equipment storing authentication information which is used when a request for data services is made to authenticate the at least one user, at least one proxy server including resident therein a first proxy for the first network protocol and at least one additional proxy for the at least one additional protocol, a method of authentication of the at lease one user equipment comprising:

the first proxy and the at least one additional proxy of the at least one proxy server authenticates requests for data services received from the at least one user equipment for the protocols by processing the authentication information of the at least one profile which is transmitted from the subscriber data server to the at least one proxy server and the authentication information of the at least one user transmitted from the at least one user equipment to the at least one proxy server to determine if the at least one user is authentic.

48. In a system comprising a home network including a subscriber data server which stores at least one user profile regarding providing of data services to at least one user with the profile including authentication information used to authenticate the at least one user of the data services when a request for data services is made using a first protocol and at least one user equipment which requests data services using the first network protocol and data services using at least one additional protocol, the at least one user equipment storing authentication information which is used when a request for data services is made to authenticate the at least one user, at least one proxy server comprising:

a first proxy for the first protocol and at least one additional proxy for the at least one additional protocol which are resident therein; and wherein

the at least one proxy server authenticates requests for data services received from the at least one user equipment for the protocols by processing the authentication information of the at least one profile which is transmitted from the subscriber data server to the at least one proxy server and the authentication information of the at least one user transmitted from the at least one user equipment to the at least one proxy server to determine if the at least one user is authentic.

Assignments (2)

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 10, 2015

From: NOKIA CORPORATION

To: NOKIA TECHNOLOGIES OY

Reel/Frame 035602/0280 →

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 23, 2002

From: ISOMAKI, MARKUS

To: NOKIA CORPORATION

Reel/Frame 013118/0935 →