Method for registering a communication terminal
View Patent ↗The invention relates to a method for registering a communication terminal with a service network which organizes a communication service. Within this context, in a preliminary step, a logon IP address which was assigned to the communication terminal when the communication terminal logged onto the access network is received by the service network and is stored therein for the respective user of the communication terminal. When a first registration message sent by the communication terminal is received a token is transmitted to the communication terminal using a transport message, the token having been produced by the service network from the logon IP address and a random number using an encryption method, and token data associated with the token having been stored in the service network. When a second registration message which is sent by the communication terminal and contains the token is received the service network compares the token received, a public identifier and/or a private identifier with stored variables.
1. A method for registering a communication terminal with a service network which organizes a communications service, where the service network is accessed by the communication terminal using an access network which connects the communication terminal to the service network, in which
in a preliminary step, a logon IP address which was assigned to the communication terminal when the communication terminal logged onto the access network is received by the service network and is stored therein for the respective user of the communication terminal,
when a first registration message sent by the communication terminal is received a token is transmitted to the communication terminal using a transport message sent using the logon IP address, the token having been produced by the service network from the logon IP address and a random number using an encryption method, and token data associated with the token having been stored in the service network,
when a second registration message which is sent by the communication terminal and contains the token is received the service network compares the token received with the token data,
successful registration is identified if the token matches the token data, and
unsuccessful registration is identified if the token does not match the token data.
2. The method as claimed in claim 1 , wherein
the service network stores the token as token data,
comparison of the received token with the token data stored in the service network involves the received token being compared with the stored token, and
successful registration is identified if the received token matches the stored token.
3. The method as claimed in claim 1 , wherein
the service network stores the logon IP address and the random number as token data,
reception of the second registration message by the service network is followed by decryption of the token transmitted with this second registration message,
comparison of the received token with the token data stored in the service network involves the logon IP address recovered during decryption being compared with the stored logon IP address, and
successful registration is identified if the recovered logon IP address matches the stored logon IP address.
4. The method as claimed in claim 3 , wherein
the preliminary step involves the logon IP address (IP-SRC-UE), which was assigned to the communication terminal (UE) when the communication terminal (UE) logged onto the access network (GPRS), being assigned to a public identifier (SIP-Public-ID) for the communication terminal (UE) via the service network (IMS),
the recovered logon IP address or the token is used to read the public identifier which is stored in the service network and is associated with the logon IP address,
reception of the second registration message by the service network is followed by comparison of a public identifier contained in this second registration message with the public identifier which has been read, and
successful registration is identified only if the public identifier contained in this second registration message additionally matches the public identifier which has been read.
5. The method as claimed in claim 3 , wherein
reception of the second registration message by the service network is followed by comparison of a private identifier contained in this second registration message with a private identifier stored in the service network together with the public identifier, and
successful registration is identified only if the private identifier contained in this second registration message additionally matches the private identifier stored in the service network.
6. The method as claimed in claim 1 , wherein
the service network starts a token timer associated with the token when the transport message is sent, and
the token is marked as invalid if a predetermined validity period for the token elapses.
7. The method as claimed in claim 1 , wherein
the token is produced by a switching center in the service network.
8. The method as claimed in claim 1 , wherein
the token is produced by a home location register in the service network.
9. The method as claimed in claim 3 , wherein
the token (Token) is decrypted by the switching center in the service network.
10. The method as claimed in claim 1 , characterized in that
a switching center in the service network compares the received token with the token data,
the switching center identifies successful registration if the token matches the token data, and
the switching center identifies unsuccessful registration if the token does not match the token data.