Method and apparatus for facilitating access to a communication network
A method and apparatus for facilitating WLAN access, both trusted and un-trusted, to a mobile core network. A device identity attribute is created and incorporated into the authentication and response messaging to enable the device identity to be promulgated in the communication network.
1. A method of facilitating non-3GPP™ (THIRD GENERATION PARTNERSHIP PROJECT) service provision for a device connecting to a 3GPP™ mobile network via an un-trusted WLAN (wireless local area network), comprising:
initiating a communication session with the device;
receiving at an ePDG (evolved packet data gateway) an IKE_AUTH Request according to an IKE (internet key exchange) protocol comprising an IKE DEVICE_IDENTITY attribute and a user ID (identification);
sending an IKE_AUTH Response comprising a security challenge including an identity type but not an identity value to the device;
receiving at the ePDG a security-challenge response comprising the IKE DEVICE_IDENTITY attribute, the IKE DEVICE_IDENTITY attribute of the security-challenge response comprising the identity type, an identity length, and an identity value;
forwarding the IKE DEVICE identity to an authentication server;
granting network access to the device; and
forwarding the device identity.
2. The method of claim 1 , wherein the IKE DEVICE_IDENTITY attribute of the security-challenge response includes an identity value corresponding to at least one of an IMEI (international mobile equipment identity) or an IMEISV (IMEI and software version).
3. The method of claim 2 , further comprising forwarding a mobile equipment identity associated with the at least one of an IMEI or an IMEISV toward a PDN GW (packet data network gateway).
4. The method of claim 3 , wherein the mobile equipment identity is forwarded toward the PDN GW via a TWAN (trusted wireless local area network).
5. The method of claim 1 , wherein the IKE_AUTH Response comprising a security challenge includes an identity length of zero.
6. A method of facilitating non-3GPP™ (THIRD GENERATION PARTNERSHIP PROJECT) service provision for a device connecting to a 3GPP™ mobile network via an un-trusted WLAN, comprising:
initiating a communication session with the WLAN (wireless local area network);
sending from the device via the WLAN an IKE_AUTH Request according to an IKE protocol, the IKE_AUTH Request comprising an IKE DEVICE_IDENTITY attribute and a user ID;
receiving at the device an IKE_AUTH Response comprising a security challenge including an identity type but not an identity value via the WLAN; and
sending toward an ePDG (evolved packet data gateway) via the WLAN a security-challenge response comprising an IKE DEVICE_IDENTITY attribute, the IKE DEVICE_IDENTITY attribute of the security-challenge response comprising the identity type, an identity length, and an identity value;
receiving authorization to access the 3GPP™ mobile network; and
communicating via the 3GPP™ mobile network using the identity value.
7. The method of claim 6 , wherein the IKE_AUTH Response comprising a security challenge includes an identity length of zero.
8. The method of claim 6 , wherein the IKE DEVICE_IDENTITY attribute of the security-challenge response includes an identity value corresponding to at least one of an IMEI (international mobile equipment identity) or an IMEISV (IMEI and software version).