AU7571101A

AU7571101A - Use of radius in UMTS to perform HLR function and for roaming

Info

Publication number: AU7571101A
Application number: AU75711/01A
Authority: AU
Inventors: Michael Bowring; William John Jones; Andrew Gordon Williams
Original assignee: IPWireless Inc
Current assignee: Nvidia Corp
Priority date: 2000-07-27
Filing date: 2001-07-27
Publication date: 2002-02-13
Anticipated expiration: 2021-07-27
Also published as: AU784411B2; GB2369271A; CA2384890A1; WO2002011467A2; MXPA02003159A; GB0118391D0; JP5083718B2; WO2002011467A3; JP2004505568A; GB2369271B; EP1410569A2

Description

WO 02/11467 PCT/GBO1/03385 USE OF RADIUS IN UMTS TO PERFORM HLR FUNCTION AND FOR ROAMING 5 RELATED APPLICATIONS U.S. patent application Serial No. 09/626,582, filed July 27, 2000, entitled "USE OF INTERNET WEB TECHNOLOGY TO PERFORM ACCOUNTING FUNCTIONS", which is a continuation 10 in-part of U.S. patent application Serial No. 09/626,699, filed July 27, 2000, entitled "USE OF INTERNET WEB TECHNOLOGY TO REGISTER WIRELESS ACCESS CUSTOMERS," which is a continuation-in-part of U.S. patent application Serial No. 09/432,824, filed November 2, 1999, entitled 15 "CELLULAR WIRELESS INTERNET ACCESS SYSTEM USING SPREAD SPECTRUM AND INTERNET PROTOCOL (IP)", and published in equivalent form as European patent publication EP1098539. 20 INTRODUCTION The present invention is directed to the use of the Internet web technology to perform a home location register function in a wireless access network. 25 BACKGROUND OF THE INVENTION As disclosed in application Serial No. 09/432,824 of 30 November 2, 1999 entitled CELLULAR WIRE INTERNET ACCESS WO 02/11467 PCT/GBO1/03385 -2 SYSTEM USING SPREAD SPECTRUM AND INTERNET PROTOCOL (IP), this describes a cellular wireless Internet access system which operates in the 2 gigahertz or other frequency bands to provide high data rates to fixed and portable 5 wireless Internet devices. Such users connect to near-by base stations which in turn communicate to Integrated Network Controllers which are then connected to the Internet. Such wireless implementation relates to an access network of the UMTS (Universal Mobile Telephone 10 Service) and its subset UTRAN (Universal Terrestrial Radio Access Network) standards. UMTS/UTRAN standards are published by the 3G Project Partnership (3GPP), www.3gpp.org. 15 In any telecommunications access system, be it wired or wireless, there must be accommodation for end users who roam. In traditional cellular wireless systems, roaming is typically controlled by a Home Location Register (HLR) which communicates with the cellular network using 20 traditional telecommunications protocols such as Signaling System #7 (SS7). Where the access to the Internet is via the Public Switched Telephone Network (PSTN), a RADIUS server provides such function. A description of RADIUS is provided by an Internet article, 25 RFC2138 Remote Authentication Dial-In User Service (RADIUS) by C. Rigney, et al., April 1997 which is available at WWW.IETF.ORG (Internet Engineering Task Force). Thus far, this system, however, has only been used for Public Switched Telephone Network access. 30 WO 02/11467 PCT/GBO1/03385 -3 Traditional mobile communications roaming methods protocols may not satisfactorily support the roaming function of the Internet Protocol (IP) based wireless access system describe in the above co-pending 5 application 09/432,824. There is therefore a need for provision of HLR functions and roaming in an IP based wireless access system whereby the above disadvantages may be alleviated. 10 SU4MARY OF INVENTION In accordance with a first aspect of the invention there is provided a method of operation in a wireless access 15 network system, as claimed in claim 1. In accordance with a second aspect of the invention there is provided a wireless access network system, as claimed in claim 13. 20 In accordance with a third aspect of the invention there is provided a RADIUS arrangement for use in a wireless access network system, as claimed in claim 25. In accordance with a fourth aspect of the invention there 25 is provided a network controller for use in a wireless access network system, the network controller having a RADIUS client for use with a RADIUS server in authorising user access to the network, as claimed in claim 26.

WO 02/11467 PCT/GBO1/03385 -4 In accordance with a fifth aspect of the invention there is provided a computer program element comprising computer program means for performing the method of operation in a wireless access network system, as claimed 5 in claim in claim 27. In a preferred form of the invention, there is provided a method of operating a cellular wireless Internet access system using RADIUS (Remote Authentication Dial-In User 10 Service) which is normally used for dial-up Internet access over the PSTN (Public Switched Telephone Network) where the user utilizes a portable subscriber terminal with a directly attached antenna for communicating in a wireless manner via 'a cellular network to an integrated 15 network controller and then to a target Internet Service Provider (ISP), comprising the steps of providing the subscriber terminal with an access network operator identifier and user identifier and password, both related to said access network operator. The subscriber terminal 20 requests Internet access from the integrated network controller. The integrated network controller requests verification of the user from the RADIUS server of the operator. The RADIUS server verifies the user identifier and password. The integrated network controller receives 25 an acceptance message. The integrated network controller connects to a layer two tunneling protocol network server and a targeted Internet service provider and the subscriber terminal begins an Internet session. 30 WO 02/11467 PCT/GBO1/03385 -5 BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram of an Internet system illustrating the present invention. 5 FIG. 2 is a flow chart illustrating the method of FIG. 1 of the present invention. FIG. 3 is a diagram illustrating the method of FIG. 1 of 10 the present invention. FIG. 4 is a block diagram similar to FIG. 1. FIG 5. is a flow chart for FIG. 4. 15 FIG. 6 is a data format diagram. DETAILED DESCRIPTION OF PREFERRED EMBODIMENT 20 Referring now to FIG. 1, two typical users of the Internet access system are illustrated at 21 and 22. Each wireless access user has a personal computer PC and a UMTS user equipment (UE) 21' and 22' with a directly 25 attached antenna 20 and is connected by typical data connections such as an RS232, USB or Ethernet to the PC. The user equipment is termed a portable subscriber terminal, operating in conjunction with its associated PC. 30 WO 02/11467 PCT/GBO1/03385 -6 The wireless access user is described in the above co pending application and is a part of a UMTS/UTRAN system 23 as described in the above co-pending application, which communicates in a wireless manner via a UTRAN 5 network to an integrated network controller (INC) 24, via a link 1. Such controller may be connected by wire or otherwise to an Internet system or web 31. As discussed in the above co-pending application, the controller 24 includes an RNC or Radio Network Controller 26, which 10 controls and allocates the radio network resources and provides reliable delivery of user traffic between a base station (NODE B) and subscriber terminal. An SGSN (Serving General Packet Radio Service Node) 27 provides session control. Lastly, a RADIUS element designated 15 RADIUS client 28 is incorporated to provide authentication and other functions. The Internet protocol network 31 is connected to INC 24 by an Internet Protocol connection 32 and then to a UMTS 20 access network operator 35, through its Layer 2 Tunneling Protocol Network Server 35', having a RADIUS server 34. RADIUS server unit 34 may, for example, be in the user's home area of San Francisco (S.F.) and is the home Radius server. Thus, this is the server for both authentication 25 and accounting functions as described in the above co pending application. Thus, after authentication normally the user would communicate via the network 31 with target Internet service provider 36 through its Layer 2 Tunneling Protocol Network Server LNS 36'. 30 WO 02/11467 PCT/GBO1/03385 -7 However, in the case where the user's subscriber terminal may be in New York (N.Y.), for example, he is a roaming user, who must use a partner access network operator. Specifically, RADIUS server 37 (N.Y.) along with a UMTS 5 access network operator 38, which has a roaming agreement. Of course, that operator 38 would have an LNS unit 38'. FIG. 2 illustrates the typical home operation of the 10 system using RADIUS servers where after start as shown in step 1, the integrated network controller (INC) receives a session request from the mobile wireless user (UE) for Internet access. The numbered steps of FIG. 2 correspond to the communication paths illustrated in FIG. 1. 15 Next in step 2, INC 24 requests access verification for the mobile wireless user from the RADIUS server 34. Referring to FIG 1, for step 2 the link 2 is illustrated in network 31. In step 3, the decision is made by RADIUS 20 server 34 whether to accept or reject the user as shown by the accept and reject paths and verifies the user ID and password. Each user, of course, has both a user identifier, a user password, and also includes an identification for its access network operator 35. 25 Thus, to summarize so far, when a user requests wireless Internet acces-s, three pieces of authentication information are sent up into the network: 1) operator identifier - the name of the UMTS access licensed 30 operator, 2) user identifier relating to the UMTS access WO 02/11467 PCT/GBO1/03385 -8 licensed operator, and 3) user password relating to the UMTS access licensed operator. As thus far illustrated, the user authentication is taking place within the home network. As will be discussed below, it can also take 5 place where the user is roaming onto another network, as will be described in conjunction with FIGS. 4 and 5. Completing the flow chart of FIG. 2, if the authentication is rejected as shown at 8, then in step 9, 10 the INC 24 tears down the session and it comes to an end. However, if an acceptance takes place as shown in step 4, the integrated network controller receives the accept message (see the link 4 in the network 31 in FIG. 1) with the subscribed-to-tier of service, roaming indicator (in 15 this case it would be negative) and target ISP. Then in step 5 (see the link 5 in FIG. 1) the INC 24 connects to the LNS 36' of the target ISP 36 and the user does an end-to-end negotiation for ISP access with LNS 36'. Then the Internet session, between the user's PC and the 20 target ISP begins. FIG. 3 illustrates the normal authentication, connection and session tear down between the INC radius client 28 and the home server 34. In step 41, access is requested 25 and then accepted in 42. Then the connection is made as shown in 43 via a layer 2 tunneling protocol tunnel to the target ISP. Again, there is a disconnect access request at 44 and an access accept at 46. Finally, for accounting purposes a user disconnect notification is WO 02/11467 PCT/GBO1/03385 -9 provided to the radius server 34 as discussed in the above co-pending application. FIG. 4 is very similar to FIG. 1 and simplified with the 5 links 1, 2, 4, 5 being the same as illustrated in FIG. 1. Here, the user is attempting to gain access via UMTS roaming where access is desired with the partner or operator 38 with a roaming agreement. 10 Referring now to the flow chart of FIG. 5, as well as FIG. 4, after Start, in step 1 the INC 24 receives a session request from the wireless user as before. Then, in step 2 the INC 24 requests access verification for the mobile wireless user from the radius server 34. In this 15 case, the access network operator identifier which has been supplied to the UE 21' and 22' is sent up via the radius client 28 and the SGSN 27 but identifies a different UMTS access network operator, with whom this operator has a roaming agreement. In other words, the 20 users 21 and 22, as illustrated in FIG. 4, are now out of their home territory as shown by the access network operator ID. In step 3', the radius server 34 determines that this is a request from a roaming user (based on operator ID sent up in the request) and it forwards (link 25 3', FIG. 4) the request to the partner operator radius server 37. In decision step 3, the partner radius server 37 verifies user ID and password. If no verification occurs, then a rejection and tear down occurs as shown in steps 8 and 9 similar to FIG. 2. 30 WO 02/11467 PCT/GBO1/03385 - 10 However, if acceptance occurs then in step 10 via the link 10 as shown in FIG. 4 between partner operator 38 and home operator 35, the home radius server 34 receives the accept and passes it on to the INC 24. In step 4 and 5 the link 4 shown in FIG. 4 (similar to that of FIG. 1) the INC 24 receives the accept message with the subscribed-to-tier of service, the roaming indicator (which in this case is positive), and the subscribed-to ISP. In step 5, as above, the INC 24 connects to the LNS 10 of the target ISP 36. Again, the user begins a session. To implement the above messages of FIG. 3 in RADIUS, the message types, structure and encoding are standard as outlined in the RFC 2138 above. As shown in those 15 standards, the data packets all have pre-assigned attributes which are given a standard attribute number. To facilitate the additional functionality required for a RADIUS server to perform the HLR function, the standard attributes are required and also additional attributes. 20 These are all contained in the code format of FIG. 6 where octets relate to the data octets and the box labeled TYPE relates to the attribute number. In the RADIUS system, attribute number 26 is a vendor-specific attribute. Morever, this is believed to be the most 25 convenient way in order to interface with the standard RADIUS system. However, it is possible to create new attribute types. But it is believed that interfacing with the standard RADIUS system is the most efficient way to accomplish the method of the present invention. Thus, 30 the following discussion relates to the message WO 02/11467 PCT/GBO1/03385 - 11 definitions of FIG. 3 with the data format of FIG. 6 where when standard attributes must be used in a particular way they will be specifically described below. 5 FIG. 6 is a basic code format which would be modified for each particular function and, thus, it illustrates in general the basic code format. Now also referring to FIG. 3, with relation to step 41, the access request, a user name attribute is included (that is, type number 1) 10 and the data of the octet string takes the form of a network access identifier (NAI) defined by an attribute number 32. For example, this might be user @ realm. Then, the vendor specific attribute (attribute number 26 as discussed above) which differentiates this system from 15 the standard PSTN system would in the box of FIG. 6 labeled IPW-Type and have the number 10 to show a NODE B ID (that is, the base station ID). The identification of that ID would actually be in the VALUE box as shown in FIG. 6. Another vendor-specific attribute is the ISP 20 name indicated in the IPW-Type box by the number 9, and the actual name would be expressed as a string octet as indicated in FIG. 6. Next, with regard the step 42, the access-accept message, 25 the present system provides a tier of service value which is related to the data capacity which the ultimate subscriber terminal is to have and also the latency. And latency, of course, is defined as a time lag between the beginning of a request for data and the moment it begins 30 to be received. Thus, referring to FIG. 6 such tier of WO 02/11467 PCT/GBO1/03385 - 12 service is indicated by IPW-Type attribute number 1 and in the value field the following enumerated values are provided starting from a low level to a high level. 5 0 Bronze 1 Silver 2 Gold 3 Business 10 In addition in the access accept message, there is another vendor-specific roaming indication indicating whether roaming is being done where in the value field of FIG. 6 after an IPW-Type number 2 is placed a value of 0 indicating a home network subscriber and a value of 1 15 indicating a roaming subscriber. Of course, the ISP name is also provided in a string data octet as discussed above. Lastly, there are no significant changes for either the access request or the access accept steps 44 and 46. 20 It is believed in the context of the wireless system as above that the assigning of tiers of services is unique especially when this is related to the standard data format of existing RADIUS standards. 25 It will, of course, be appreciated that the HLR and roaming functions discussed above will typically be carried out in computer programs or routines in software (like other system functions) running on processors (not 30 shown).

WO 02/11467 PCT/GBO1/03385 - 13 Thus, an improved roaming function in a wireless network has been provided in which Radius Server and associated protocols replace the traditional UMTS or cellular 5 network HLR function and its associated protocols.

Claims

1. A method of operation in a wireless access network system, comprising the steps of: 5 providing a RADIUS arrangement; providing a network controller; a user accessing the network via wireless user equipment and requesting access to a desired service provider; 10 the network controller receiving the user access request, requesting verification of the user from the RADIUS arrangement of the desired service provider and receiving user acceptance therefrom; and 15 the network controller connecting to the desired service provider and the user thereby establishing a communication link therewith to begin a communication session. 20

2. The method of claim 1, wherein a predetermined service provider identification is associated with the wireless user equipment and the step of requesting verification of the user comprises: requesting verification of the user from a 25 first RADIUS arrangement associated with a first service provider; in the event that the predetermined service provider identification does not match that of the first service provider, the first RADIUS arrangement 30 communicating the verification request to a further RADIUS arrangement of a service provider whose WO 02/11467 PCT/GBO1/03385 - 15 identification matches the predetermined service provider identification; and the further RADIUS arrangement communicating user acceptance to the network controller. 5

3. The method of claim 1 or 2, including assigning the user a tier of service value related to data capacity.

4. The method of claim 1, 2 or 3, including assigning 10 the user a tier of service value related to latency.

5. The method of claim 3 wherein the assigned tier of service value is contained in a standard RADIUS format message. 15

6. The method of any preceding claim wherein the system is a cellular wireless Internet access system.

7. The method of any preceding claim wherein the system 20 is a UMTS system.

8. The method of any preceding claim wherein a user identifier and password related to a predetermined service provider are associated with the wireless user 25 equipment, and the step of requesting verification of the user comprises communicating the user identifier and password to the RADIUS arrangement of the desired service provider. 30

9. The method of any preceding claim wherein the step of the network controller connecting to the desired WO 02/11467 PCT/GBO1/03385 - 16 service provider comprises the network controller connecting via a Layer 2 Tunneling Protocol link.

10. The method of any preceding claim wherein the 5 service provider is an Internet service provider.

11. The method of any preceding claim wherein the step of requesting verification of the user comprises sending to the RADIUS arrangement a standard format RADIUS 10 message containing: a user name attribute, a network access identifier equal to 32, a vendor specific attribute equal to 26, a base station ID value equal to 6, 15 a service provider value equal to 9, and a text string indicating the name of the desired service provider.

12. The method of any preceding claim wherein the step 20 of receiving user acceptance from the RADIUS arrangement of the desired service provider comprises receiving a standard format RADIUS message containing: a user name attribute, a network access identifier equal to 32, 25 a vendor specific attribute equal to 26, a base station ID value equal to 6, a service provider value equal to 9, a text string indicating the name of the desired service provider, and 30 an indication of whether the user is a home network user or a roaming user. WO 02/11467 PCT/GBO1/03385 - 17

13. A wireless access network system, comprising: a RADIUS arrangement; a network controller; 5 wireless user equipment for a user to access the network and to make a user access request to a desired service provider; the network controller being arranged to receive the user access request, and to request 10 verification of the user from the RADIUS arrangement of the desired service provider and to receive user acceptance therefrom; and the network controller being arranged to connect to the desired service provider and the user 15 thereby establishing a communication link therewith to begin a communication session.

14. The system of claim 13, wherein a predetermined service provider identification is associated with the 20 wireless user equipment and the network controller is arranged to request verification of the user by requesting verification of the user from a first RADIUS arrangement associated with a first service provider; 25 in the event that the predetermined service provider identification does not match that of the first service provider, the first RADIUS arrangement is arranged to communicate the verification request to a further RADIUS arrangement of a service 30 provider whose identification matches the predetermined service provider identification; and WO 02/11467 PCT/GBO1/03385 - 18 the further RADIUS arrangement is arranged to communicate user acceptance to the network controller. 5

15. The system of claim 13 or 14, wherein the system is arranged to assign the user a tier of service related to data capacity.

16. The system of claim 13, 14 or 15, wherein the system 10 is arranged to assign the user a tier of service related to latency.

17. The system of claim 15 or 16 wherein a value indicative of the assigned tier of service is contained 15 in a standard RADIUS format message.

18. The system of any one of claims 13-17 wherein the system is a cellular wireless Internet access system. 20

19. The system of any one of claims 13-18 wherein the system is a UMTS system.

20. The system of any one of claims 13-19 wherein a user identifier and password related to a predetermined 25 service provider are associated with the wireless user equipment, and the network controller is arranged to request verification of the user by communicating the user identifier and password to the RADIUS arrangement of the desired service provider. 30 WO 02/11467 PCT/GBO1/03385 - 19

21. The system of any one of claims 13-20 wherein the network controller is arranged to connect to the desired service provider via a Layer 2 Tunnelling Protocol link. 5

22. The system of any one of claims 13-21 wherein the service provider is an Internet service provider.

23. The system of any one of claims 13-22 wherein the network controller is arranged to request verification of 10 the user by sending to the RADIUS arrangement a standard format RADIUS message containing: a user name attribute, a network access identifier equal to 32, a vendor specific attribute equal to 26, 15 a base station ID value equal to 6, a service provider value equal to 9, and a text string indicating the name of the desired service provider. 20

24. The system of any one of claims 13-23 wherein the RADIUS arrangement is arranged to indicate user acceptance to the network controller by sending a standard format RADIUS message containing: a user name attribute, 25 a network access identifier equal to 32, a vendor specific attribute equal to 26, a base station ID value equal to 6, a service provider value equal to 9, a text string indicating the name of the 30 desired service provider, and WO 02/11467 PCT/GBO1/03385 - 20 an indication of whether the user is a home network user or a roaming user.

25. A RADIUS arrangement for use in a wireless access 5 network system, the RADIUS arrangement being arranged to receive from a network controller of the system a request for verification of a wireless equipment user, and to provide to the network controller user acceptance. 10

26. A network controller for use in a wireless access network system, the network controller having a RADIUS client for use with a RADIUS server in authorising user access to the network. 15

27. A computer program element comprising computer program means for performing the method of operation in a wireless access network system as claimed in any one of claims 1 to 12. 20

28. A method of operating a cellular wireless Internet access system using RADIUS (Remote Authentication Dial-In User Service) which is normally used with a PSTN (Public Switched Telephone Network) where the user utilizes a portable subscriber terminal with a directly attached 25 antenna for communicating in a wireless manner via a cellular network to an integrated network controller to a target Internet Service Provider (ISP), comprising the following steps: providing said subscriber terminal with an access 30 network operator identifier and user identifier and password, both related to said access network operator; WO 02/11467 PCT/GBO1/03385 - 21 the subscriber terminal requesting access from the integrated network controller; the integrated network controller requesting verification of the user from the RADIUS server of said 5 operator; the RADIUS server verifying the user identifier and password; the integrated network controller receiving an acceptance message; 10 the integrated network controller connecting to a layer two tunneling protocol network server and a targeted Internet service provider and the subscriber terminal beginning an Internet session. 15

29. A method as in claim 28 including the step of said RADIUS server determining based on operator ID, that this is a roaming user, and the step of said RADIUS server of said home access network operator forwarding to a partner licensed operator and its said RADIUS server, the 20 subscriber request for access, and the step of said partner RADIUS server verifying user ID and password and passing it on to the integrated network controller.

30. A method as in claim 28 including the step of 25 assigning a subscriber terminal a tier of service value related to the data capacity and latency of said access system.

31. A method as in claim 28 where said RADIUS has a 30 standard data format and including the step of storing said tier of service value in said format.