IP Library Granted Patent US 10,959,097
Granted Patent B1
US 10,959,097 · App. 16/731,197 · Granted Mar 23, 2021

Method and system for accessing private network services

Inventors: Jian-Cheng Chen (Hsinchu, TW); Kuo-Wei Wen (Hsinchu, TW)
Assignee: INDUSTRIAL TECHNOLOGY RESEARCH INSTITUTE
H04W12/06H04W12/08H04W36/0011H04W36/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,959,097
App. No.
16/731,197
Granted
Mar 23, 2021
Kind
B1
Abstract

A method and a system for accessing private network services are disclosed. A second MEC platform receives a user service authentication process triggered by a first MEC platform based on a service access request issued by user equipment for accessing a second core network. In response to the user service authentication process, the second MEC platform preforms a user transition process to trigger the user equipment to perform an access authentication process of the second core network to verify identity information and radio network information of the user equipment. When the second MEC platform successfully verifies the identity information and the radio network information of the user equipment, the user equipment is allowed to be transited from the first MEC platform to the second MEC platform to access services of the second core network.

Claims (24)

1. A method for accessing private network services, the method being applicable to mobile edge computing (MEC) and comprising:

a second MEC platform receiving a user service authentication process triggered by a first MEC platform based on a service access request issued by user equipment for accessing a second core network, wherein a first core network includes the first MEC platform and the second core network includes the second MEC platform;

in response to the user service authentication process, the second MEC platform preforming a user transition process to trigger the user equipment to perform an access authentication process of the second core network to verify identity information and radio network information of the user equipment;

when the second MEC platform successfully verifies the identity information and the radio network information of the user equipment, allowing the user equipment to be transited from the first MEC platform to the second MEC platform to access services of the second core network;

wherein the first MEC platform obtains a user right, the identity information and the radio network information from the first core network, and the first MEC platform provides the radio network information to the second MEC platform for determining triggering the user transition process and allowing a second radio network information controller of the second MEC platform to compare radio signals.

2. The method of claim 1 , further comprising the second MEC platform transmitting an image file of an application to the first MEC platform, an address stored the application, and an authentication protocol for executing the user service authentication process, to launch the application in a first MEC system, wherein the authentication protocol includes identity of the second MEC platform, and the first MEC system includes the first MEC platform.

3. The method of claim 1 , wherein the user transition process comprises the second MEC platform receiving the identity information and the radio network information of the user equipment obtained by the first MEC platform, and when the second MEC platform successfully verifies the identity information and the radio network information of the user equipment, establishing an access right of the identity information of the user equipment in the second core network to allow the user equipment to access services of the second core network.

4. The method of claim 3 , wherein the first MEC platform transmits the identity information and the radio network information of the user equipment obtained from the first core network to the second MEC platform, and the second MEC platform updates the access right of the user equipment to the second core network based on the identity information and the radio network information of the user equipment, and establishes an authentication rule to the second core network based on the identity information.

5. The method of claim 4 , further comprising the second MEC platform notifying the first MEC platform to perform the user transition process to trigger the user equipment to perform a network selection.

6. The method of claim 5 , further comprising the second core network receiving the service access request of the user equipment, identifying the access right, and establishing a session process of the user equipment based on the authentication rule.

7. A system for accessing private network services, the system being applicable to mobile edge computing (MEC) and comprising:

a first MEC platform including a first authentication server, wherein a first core network includes the first MEC platform; and

a second MEC platform including a second authentication server, wherein a second core network includes the second MEC platform,

wherein the second authentication server receives a user service authentication process triggered by the first authentication server based on a service access request issued by user equipment for accessing the second core network,

wherein in response to the user service authentication process, the second MEC platform preforms a user transition process to trigger the user equipment to perform an access authentication process of the second core network through the first authentication server to verify identity information and radio network information of the user equipment,

wherein when the second MEC platform successfully verifies the identity information and the radio network information of the user equipment, the user equipment is allowed to be transited from the first MEC platform to the second MEC platform to access services of the second core network, and

wherein the first MEC platform includes a first identity identification controller and a first radio network information controller, the first identity identification controller obtains the identity information and a user right from the first core network and provides to the first authentication server, the first radio network information controller obtains the radio network information from the first core network and provides to the first authentication server, the first MEC platform provides the radio network information to the second MEC platform for determining triggering the user transition process and allowing a second radio network information controller to compare radio signals.

8. The system of claim 7 , wherein the first MEC platform includes a first registration controller, the second MEC platform includes a second registration controller, the second registration controller transmits an image file of an application to the first registration controller, an address stored the application, and an authentication protocol for executing the user service authentication process to launch the application in a first MEC system, the authentication protocol includes an identity of the second MEC platform, and the first MEC system comprises the first MEC platform.

9. The system of claim 8 , wherein the user equipment issues the service access request through the application, and the application triggers the access authentication process through the first authentication server.

10. The system of claim 7 , wherein the first MEC platform includes a first neighbor management controller, the second MEC platform includes a second neighbor management controller, and the first authentication server and the second authentication server perform the access authentication process through help of the first neighbor management controller and the second neighbor management controller.

11. The system of claim 7 , wherein the second MEC platform includes a second identity identification controller and the second radio network information controller, the user transition process includes the second MEC platform receiving the identity information, the user right and the radio network information of the user equipment obtained by the first MEC platform, when the second MEC platform successfully verifies the identity information and the user right of the user equipment, the identity information of the user equipment is established in an access right of the second core network and stored in the second identity identification controller, and the user equipment is allowed to access services of the second core network by user radio access states obtained by the first radio network information controller and the second radio network information controller.

12. The system of claim 7 , wherein the second MEC platform includes a second access right management controller, updates the access right of the user equipment to the second core network based on the identity information and the radio network information of the user equipment, and establishes an authentication rule in the second core network based on the identity information.

13. The system of claim 8 , wherein the second MEC platform notifies the first MEC platform to perform the user transition process, and the first authentication server notifies the application to trigger the user equipment to perform a network selection.

14. The system of claim 12 , wherein the second core network receives the service access request of the user equipment, identifies the access right, and establishes a session process of the user equipment based on the authentication rule.

Assignments (3)
CORRECTIVE ASSIGNMENT TO CORRECT THE OMISSION FIRST RECEIVING PARTY DATA PREVIOUSLY RECORDED AT REEL: 061294 FRAME: 0387. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT . Recorded Jan 6, 2023
From: INDUSTRIAL TECHNOLOGY RESEARCH INSTITUTE
To: INDUSTRIAL TECHNOLOGY RESEARCH INSTITUTE; TAIWAN SEMICONDUCTOR MANUFACTURING COMPANY, LTD.
Reel/Frame 062305/0436 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 3, 2022
From: INDUSTRIAL TECHNOLOGY RESEARCH INSTITUTE
To: TAIWAN SEMICONDUCTOR MANUFACTURING COMPANY, LTD.
Reel/Frame 061294/0387 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 24, 2020
From: CHEN, JIAN-CHENG; WEN, KUO-WEI
To: INDUSTRIAL TECHNOLOGY RESEARCH INSTITUTE
Reel/Frame 051609/0010 →
Priority Claims (1)
TW 108142736 · Nov 25, 2019 · national
Cited By (1)
US 12,520,137