IP Library Granted Patent US 8,826,376
Granted Patent B2
US 8,826,376 · App. 12/401,287 · Granted Sep 2, 2014

Communication of session-specific information to user equipment from an access network

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,826,376
App. No.
12/401,287
Granted
Sep 2, 2014
Kind
B2
Abstract

In conjunction with establishment of a session between an access network and user equipment of a communication system, session-specific information is transmitted from the access network to the user equipment. The session-specific information transmitted from the access network to the user equipment comprises information to be utilized in an authentication protocol carried out between the user equipment and an authentication server of the system. For example, the session-specific information transmitted from the access network to the user equipment may comprise an identifier of a gateway coupled between the access network and the authentication server.

Claims (54)

1. A method comprising:

establishing, by an access network, a session with user equipment of a communication system; and

transmitting, in conjunction with establishment of said session, session-specific information from the access network to the user equipment;

wherein the session-specific information comprises information to be utilized in an authentication protocol carried out between the user equipment and an authentication server of the communication system; and

wherein the access network is associated with a communication network of a first type and the authentication server is associated with a communication network of a second type different than the first type; and

wherein the access network uses a StorageBLOB Assignment message to convey the session-specific information to the user equipment, the session-specific information comprising an identifier of a gateway coupled between the access network and the authentication server.

2. The method of claim 1 wherein the access network comprises an HRPD access network, the communication network of the first type comprises an HRPD network, the communication network of the second type comprises an LTE network, and the gateway comprises an HRPD serving gateway configured to provide an interface between the HRPD access network and an evolved packet core of the LTE network.

3. The method of claim 2 wherein the session-specific information transmitted from the access network to the user equipment comprises an identifier of the HRPD serving gateway.

4. The method of claim 3 wherein the identifier of the HRPD serving gateway comprises an Internet protocol address of the HRPD serving gateway.

5. The method of claim 1 wherein the authentication protocol comprises an EAP authentication protocol in which the user equipment operates as an EAP peer, the gateway is operable as an EAP authenticator and the authentication server is operable as an EAP authentication server.

6. The method of claim 1 wherein the StorageBLOB Assignment message has a StorageBLOB type that includes the session-specific information.

7. The method of claim 1 further comprising the access network receiving a StorageBLOBComplete message from the user equipment responsive to the StorageBLOBAssignment message.

8. The method of claim 1 wherein the session-specific information transmitted from the access network to the user equipment comprises an authenticator identifier.

9. The method of claim 8 wherein the user equipment utilizes the authenticator identifier in deriving at least one key.

10. A non-transitory computer-readable storage medium having embodied therein executable program code that when executed by a processor of the access network causes the access network to perform the steps of the method of claim 1 .

11. An apparatus comprising:

an access network configured for communication with user equipment of a communication system;

the access network being operable to establish a session with the user equipment and to transmit, in conjunction with establishment of said session, session-specific information to the user equipment;

wherein the session-specific information comprises information to be utilized in an authentication protocol carried out between the user equipment and an authentication server of the communication system;

wherein the access network is associated with a communication network of a first type and the authentication server is associated with a communication network of a second type different than the first type; and

wherein the access network uses a StorageBLOB Assignment message to convey the session-specific information to the user equipment, the session-specific information comprising an identifier of a gateway coupled between the access network and the authentication server.

12. The apparatus of claim 11 wherein the access network further comprises:

a base station adapted for communication with the user equipment; and

a radio network controller coupled to said base station.

13. The apparatus of claim 11 wherein the access network comprises an HRPD access network, the communication network of the first type comprises an HRPD network, the communication network of the second type comprises an LTE network, and the session-specific information comprises an identifier of an HRPD serving gateway configured to provide an interface between the HRPD access network and an evolved packet core of the LTE network.

14. A method comprising:

establishing, by user equipment, a session with an access network of a communication system; and

receiving, in conjunction with establishment of said session, session-specific information in the user equipment from the access network;

wherein the session-specific information comprises information to be utilized in an authentication protocol carried out between the user equipment and an authentication server of the communication system;

wherein the access network is associated with a communication network of a first type and the authentication server is associated with a communication network of a second type different than the first type;

wherein the user equipment receives the session-specific information from the access network in a StorageBLOB Assignment message, the session-specific information comprising an identifier of a gateway coupled between the access network and the authentication server.

15. The method of claim 14 wherein the session-specific information received in the user equipment from the access network comprises an authenticator identifier and the method further includes the step of utilizing the authenticator identifier in deriving at least one key.

16. An apparatus comprising:

user equipment configured for communication with an access network of a communication system;

the user equipment being operable to establish a session with the access network and to receive, in conjunction with establishment of said session, session-specific information from the access network;

wherein the session-specific information comprises information associated with an authentication protocol carried out between the user equipment and an authentication server of the communication system;

wherein the access network is associated with a communication network of a first type and the authentication server is associated with a communication network of a second type different than the first type; and

wherein the user equipment receives the session-specific information from the access network in a StorageBLOB Assignment message, the session-specific information comprising an identifier of a gateway coupled between the access network and the authentication server.

17. The apparatus of claim 16 wherein the user equipment comprises a mobile telephone, the mobile telephone comprising:

a processor;

a memory coupled to said processor; and

a network interface adapted for communication with the access network.

18. The apparatus of claim 11 , wherein the session-specific information comprises an authenticator identifier to be utilized by the user equipment in deriving at least one key.

19. The apparatus of claim 16 , wherein the session-specific information comprises an authenticator identifier to be utilized by the user equipment in deriving at least one key.

20. A method comprising:

establishing, by an access network, a session with user equipment of a communication system; and

transmitting, via a StorageBLOB Assignment message, session-specific information from the access network to the user equipment in conjunction with establishment of said session, said session-specific information comprising information to be utilized in an authentication protocol carried out between the user equipment and an authentication server of the communication system;

wherein the session-specific information comprises an identifier of a gateway coupled between the access network and the authentication server.

21. An apparatus comprising:

an access network configured for communication with user equipment of a communication system;

the access network being operable:

to establish a session with the user equipment; and

to transmit, via a StorageBLOB Assignment message, session-specific information to the user equipment in conjunction with establishment of said session, said session-specific information comprising information to be utilized in an authentication protocol carried out between the user equipment and an authentication server of the communication system;

wherein the session-specific information comprises an identifier of a gateway coupled between the access network and the authentication server.

Assignments (4)
RELEASE OF SECURITY INTEREST Recorded Sep 30, 2014
From: CREDIT SUISSE AG
To: ALCATEL LUCENT
Reel/Frame 033868/0555 →
SECURITY AGREEMENT Recorded Jan 30, 2013
From: ALCATEL LUCENT
To: CREDIT SUISSE AG
Reel/Frame 029821/0001 →
CHANGE OF NAME Recorded Jun 1, 2011
From: ALCATEL-LUCENT USA INC.
To: ALCATEL LUCENT
Reel/Frame 026368/0192 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 7, 2009
From: CAKULEV, VIOLETA; MIZIKOVSKY, SEMYON B.; MOONEY, CHRISTOPHER FRANCIS
To: ALCATEL-LUCENT USA INC.
Reel/Frame 022512/0926 →