Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
  • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/06—Authentication
  • H04W12/069—Authentication using certificates or pre-shared keys
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W8/00—Network data management
  • H04W8/02—Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
  • H04W8/08—Mobility data transfer
  • H04W8/12—Mobility data transfer between location registers or mobility servers

Definitions

• This invention relates to a mobile communications network, and in particular to an architecture for such a mobile communications network that provides efficient location management, location updating and paging, in particular when a user of such a network moves between different domains.
• a further difficulty is that with conventional networks, the visited network must bill the home network for the subscriber's use of the visited network's services in real time as the subscriber makes a call otherwise it is very difficult for the home network to confirm the veracity of the charges of the visited network. This imposes a realtime demand on the billing information which is undesirable.
• the presence of the subscriber in another network inevitably also introduces paging difficulties when that user wishes to place a call to a third party in the home network (or indeed in any other network).
• US 5519706 describes a dynamic user registration method within a mobile communications network in which as mobile stations move from one cell to another within a network they are dynamically registered (and deregistered) by the use of a local identifier unique to each mobile station. This method, however, only deals with location management within multiple cells of a single network and does not provide any mechanism for location management when roaming between networks.
• a mobile communications network architecture comprising:
• a second network (b) a second network, and (c) a mobile communications device, wherein said mobile communications device is provided with memory means for storing certified subscriber profile information and a certification key of said first network, and wherein said second network includes data storage means that stores copies of the certification keys of all networks with which said second network has a roaming agreement and said second network further comprises means for comparing the certification key stored in said memory means with the keys stored in said second network data storage means.
• certified subscriber information is stored in the memory of the mobile communication device and may be transmitted directly to the second network and the authenticity of this information may be verified by the second network because also included is a certification key issued by the first network.
• the second network will store details of all certification keys of other networks with which it has entered into a roaming agreement and thus all the second network need do is to verify the certification held in the mobile device by using the public key held by the second network to confirm that the profile is authentic and unchanged since it was signed by the private key of the first network. Thus connection set-up time is reduced. Means are also preferable provided for updating the public keys stored in the data storage means in the event of any changes to the keys being made.
• the second network will be constantly aware of all subscribers to the first network who are currently in its domain.
• the cost of the services provided by the second network to these subscribers of the first network can be easily logged and then supplied to the first network at a later time on a daily or weekly basis.
• the second network includes means for logging billing information concerning the use of the services of the second network by a subscriber of the first network, and means for supplying said billing information to said first network on a batch processing basis.
• the second network may comprise endorsing means whereby when a mobile device of a subscriber of the first network is authenticated by the second network, said endorsing means may send an endorsement certificate to said mobile device and said endorsement certificate may be stored in said memory means, and wherein said mobile device comprises means for transmitting any said endorsement certificates to any network with which said mobile device wishes to register.
• a device logs on to a network to which it is not a subscriber and that network confirms that it is authentic and has a degree of "trustworthiness" this may be recorded in the mobile device as an endorsement by the network.
• this endorsement by the second network can be read by those further networks and the more endorsements the mobile device has can be used as a measure of confidence in the authenticity of that mobile device.
• the memory means may also include information concerning the most recent called and/or calling devices and means for supplying this information to the second network, and wherein said second network includes means for pre-locating mobile devices corresponding to said called and/or calling numbers.
• the memory means may also include information concerning the most frequently called and/or calling devices and means for supplying this information to the second network, and wherein said second network includes means for pre-locating mobile devices corresponding to said called and/or calling numbers.
• the mobile communications device can provide the second network with information concerning the most frequently or most recently called or calling numbers and the network can pre-locate and pre-fetch these numbers by constantly locating them. This further reduces the connection time, especially where the number being pre-fetched corresponds to a subscriber located in another network.
• the number of the most recently or most frequently called and/or calling numbers that is stored in the memory means may be decided either by the network (for example based upon the service subscription level of the user) or by the user of the mobile device. In effect the number of most recently or most frequently called and/or calling numbers is negotiated between the user and the network.
• pre- fetching of previously called numbers or previously calling numbers may also be advantageous within a single network not only when roaming between networks.
• the present invention also extends to a mobile communications network architecture comprising at least one base station and a plurality of mobile communication devices, each said base station having at any given time a number of said mobile devices in wireless communication therewith and defining a cell, wherein each said wireless communication device comprises memory means for storing information concerning recently called and/or calling devices and means for transmitting said information to said base station, and wherein said base station comprises means for pre-locating said recently called and/or calling devices.
• the present invention extends to a mobile communications network architecture comprising at least one base station and a plurality of mobile communication devices, each said base station having at any given time a number of said mobile devices in wireless communication therewith and defining a cell, wherein each said wireless communication device comprises memory means for storing information concerning frequently called and/or calling devices and means for transmitting said information to said base station, and wherein said base station comprises means for pre-locating said recently called and/or calling devices.
• the number of most recently and/or most frequently called and/or calling numbers that is stored in the memory means may be selected either by the network or by the user or may be negotiated between the user and the network.
• Fig.l is a schematic representation of three communications network that have roaming agreements with each other,
• Fig.2 illustrates schematically the structure of a mobile communications device for use in an embodiment of this invention
• Fig.3 illustrates the structure of the memory of the mobile device of Fig.2,
• Fig.4 illustrates the structure of the memory storage of a network.
• Fig.l there is shown schematically a mobile communications network architecture according to an embodiment of the invention.
• a mobile communication device 2 is a device able to communicate through these networks 1 and which has a greater processing power and memory than a conventional voice cellular telephone.
• a mobile device 2 may be a voice only telephone, or it may be a computer for data transmission, or it may be a hybrid device capable of voice and/or data transmission.
• the mobile device 2 is owned or leased by a subscriber to a first one of the networks 1.
• the first network may offer the subscriber a range of services in accordance with the subscription plan paid for by the subscriber. These services may include basic voice and/or data transmission, and additional services such as call forwarding, call waiting, conferencing and others as may be conventional.
• Fig.2 shows schematically the structure of a mobile communications device 2 in accordance with an embodiment of this invention at least in so far as the structure of the mobile device 2 differs from the prior art conventional devices.
• the mobile device 2 comprises a central processing unit 20, signal transmitting/receiving means 21 and memory means 22.
• Memory means 22 may comprise a random access memory (RAM) chip or a combination of RAM memory and read-only memory (ROM) as will be described below.
• Fig.3 shows schematically how this memory means 22 may be structured.
• Memory means 22 is divided into four sections as follows: subscriber profile information 70 which is signed by a home network certification key; network endorsement signatures 80 from other operators; details of the last n calls made by the subscriber 90; and details of the subscribers n most frequent called numbers 100. Call information 90,100 and network endorsement information 80 will normally require regular updating and possible changes should be made in RAM.
• Subscriber profile information 70 and home network certification key may be provided in RAM or may be provided in tamper-proof ROM to prevent unauthorised tampering with the data. If provided in RAM the subscriber profile information 70 and the certification key may be encrypted or otherwise protected from unauthorised tampering by any conventional means.
• Subscriber profile information 70 includes data identifying the subscriber and the level of services to which the subscriber is entitled. This data is stored in the memory means by the home network when the subscriber first joins the home network. The home network also at the same time as it writes the subscriber profile information 70 into the memory means also writes in a unique certification key or signature belonging to the home network and which confirms the authenticity of the subscriber profile information 70.
• Call information 90,100 stores data concerning the identity of the most recently called numbers and of the most recent calling numbers. Up to ten called and ten calling numbers, for example, may be stored and in practice this is likely to be sufficient to cover a subscriber's most frequently called numbers since research shows that only a small number of other devices are ever called on a regular frequent basis. This information can be used to "pre-fetch" frequently dialed numbers as will be described further below. Endorsement information 80 is used to store endorsements received from networks other than the home network confirming the authenticity of the subscriber as will also be described in greater detail below.
• each network 1 may include an operator certificate server (OCS), a user profile server (UPS), a transient profile server (TPS), and a communication switch.
• OCS operator certificate server
• UPS user profile server
• TPS transient profile server
• CA certificate authority
• a subscriber to one mobile communications network for example a network in Singapore, will be entitled to a level of service from that network which will depend on the subscription plan chosen and paid for by the subscriber.
• the Singapore network will normally have entered into roaming agreements with other networks, for example a network in Hong Kong, whereby a subscriber to the Singapore network can use his mobile device when outside of Singapore and within the domain of another network such as one in Hong Kong.
• the Singapore network is the "home” network while the Hong Kong network may be thought of as a "visited” network.
• the Hong Kong network includes a database bearing all the public signature keys preferably of all mobile network operators in the world, but at least the keys of those networks with which the Hong Kong network has entered into a roaming agreement. Means may be provided for updating this database as and when certification keys are changed by the networks and/or when new roaming agreements are entered into.
• the Hong Kong network also includes means for comparing the certification key transmitted by the mobile device with those stored in the network's database.
• Each network 1 will also include a memory storage area and Fig.4 schematically illustrates how the memory storage of the network 1 is structured.
• a first part 100 of the memory stores copies of the public keys of all mobile network operators.
• Two areas of the memory store respectively data on the last n calls for each user 110, and the n most frequent calls for each user 120, and a final part of the memory storage includes a billing store 130 for each user.
• the subscribers call information 110,120 is constantly updated from individual subscribers.
• the Hong Kong network verifies that the certification key transmitted by the mobile device 2 is the same as a certification key in the database for a network with which the Hong Kong network has entered into a roaming agreement, then the Hong Kong network will immediately offer services to the mobile device 2 in accordance with the level of service indicated in the subscriber profile information transmitted to the Hong Kong network by the mobile device 2. There is no need for the Hong Kong network to check the identity and authenticity of the mobile device in realtime with the Singapore network. Thus a user of the mobile device 2 will experience reduced connection time.
• CA central certification authority
• One role of the CA is to receive information from home networks advising that certain subscribers are no longer entitled to receive services - for example as a consequence of non-payment - and then to supply this information to all networks 1.
• a further role for the C A is to update the public keys stored by all mobile operators .
• the Hong Kong network When a subscriber uses the services of a visited network, in this example the Hong Kong network, the Hong Kong network will log the services used by the subscriber. This is then used to generate billing information for transmission to the home network, in this case the Singapore network. There is no need, however, for this billing information to be sent immediately in realtime. Instead the information can be accumulated in the billing store 130 and then sent as batch processing at any convenient time, eg one a day. This is as a consequence of the trustworthiness established by the certified profile. It will be appreciated that in this way the Hong Kong network can collect billing information relating to all Singapore subscribers who are currently within and using the Hong Kong network and send this billing information as a single batch.
• the second network may send to the mobile device 2 an endorsement signal which is recorded in the endorsement area 80 of the memory means.
• the endorsement signal will include the unique certification key of the endorsing network.
• the mobile device 2 may transmit to the new network the contents of the endorsement information area 80. In this way as a subscriber moves from network to network he will acquire a number of endorsements and these may be used by further networks as a measure of the authenticity of the subscriber.
• the recent called/calling number memory area 90/100 stores information of the last ten called numbers, and the last ten received numbers. It will be understood here that ten is only an exemplary number and fewer or more numbers may be stored. However, research indicates that most users of mobile communication devices in fact only frequently call a small number of numbers: family members and office numbers for example. Thus storing the ten last called numbers or the ten last calling numbers will normally capture all the numbers that a subscriber is most like to want to call. This information may then be transmitted to the network 1 that the subscriber is within and the network 1 may then pre-locate these numbers in advance of any call being made by the subscriber.
• the number of "pre-fetched" numbers may be negotiated, preferably in a non-intrusive manner, between the subscriber and the network.
• a user interface may be provided that shows to a user the number of numbers currently "pre-fetched” and which may allow a subscriber to set the number of pre-fetched numbers between zero and a predetermined maximum.
• the number pre-fetched may be set automatically depending on the level of the particular subscription plan that a user has.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Mobile Radio Communication Systems (AREA)

Applications Claiming Priority (1)

Publications (1)

Family

ID=20429899

Family Applications (1)

Country Status (2)

Families Citing this family (7)

Family Cites Families (3)

• 1998
  • 1998-12-21 WO PCT/SG1998/000106 patent/WO2000038440A1/en not_active Application Discontinuation
  • 1998-12-21 EP EP98961714A patent/EP1131962A1/de not_active Withdrawn

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events