Authentication failure trigger method and apparatus

Claim 3

The method of claim 1 , wherein the network access element of the serving system initiates an authentication request operation (AUTHREQ) upon a system access of mobile station; the network information element processes the authentication request by verifying a correctness of the authentication information, including a numeric authentication response from the mobile station, and if the verification results in an authentication failure, then the network information element directs the network access element to complete the authentication operation according to the mobile station's authentication failure triggers without contacting the home system's authentication center.

Claim 4

The method of claim 2 , wherein the network access element includes a mobile switching center (MSC).

Claim 5

The method of claim 2 , wherein the network information element includes a visitor location register (VLR).

Claim 6

The method of claim 2 , wherein the first authentication request operation includes an evaluation of the mobile station's authentication response locally in the serving system network information element.

Claim 7

The method of claim 2 , wherein the network access element includes a mobile switching center (MSC), wherein the network information element includes a visitor location register (VLR), and wherein the processing of the authentication request operation includes an evaluation of the mobile station's authentication response locally in the serving system network information element.

Claim 8

The method of claim 2 , wherein the mobile station's authentication failure triggers are referenced by the network information element of the serving system when an authentication failure occurs in order to direct the network access element of the serving system on how to complete the authentication operation, according to a prescribed policy of the authentication center of the home system.

Claim 9

The method of claim 7 , wherein the mobile station's authentication failure triggers contain at least a subset of the following triggers selected from the group consisting of: authentication result (AUTHR) mismatch, unique challenge (U.C.) failure/no response, RANDC mismatch, and missing authentication parameters.

Claim 10

The method of claim 7 , wherein a prescribed action is associated with each trigger within the authentication failure triggers according to the home system authentication center's authentication policy.

Claim 11

The method of claim 9 , wherein the prescribed action includes one of the following selected from the group consisting of: deny access, deny access and convey an authentication request to the network authentication center, perform a unique challenge, allow access to the communications network, allow access to the communications network and convey an authentication request to the network authentication center, and report the authentication failure to the network authentication center of the home system and await a response.

Claim 12

A wireless communications network comprising: a home system having an authentication center, a network information element, a prescribed authentication capable mobile station of said home system, and shared secret data associated with the prescribed mobile station, the authentication center for performing an authentication of the prescribed mobile station upon a network access by the prescribed mobile station when the mobile station is within a service region of said home system; a serving system having a network access element and a network information element associated with the network access element, said serving system capable for performing authentication upon authentication capable mobile station of said serving system; and authentication failure triggers shared by the authentication center of said home system with said serving system, wherein upon the mobile station's initial system access within a service region of said serving system, an authentication request operation is conducted between said serving system and said home system, wherein said home system's authentication center authenticates the mobile station and if authentic, then shares the mobile station's shared secret data and authentication failure triggers with said serving system, the authentication failure triggers including instructions for use by said serving system to resolve authentication failures which may occur on subsequent system accesses within the serving system's service region, to handle authentication failures of the prescribed mobile station without requiring said serving system to send any subsequent authentication failure report messages to said home system.

Claim 13

A wireless communications network comprising: a home system having an authentication center, a network information element, a prescribed authentication capable mobile station of said home system, and shared secret data associated with the prescribed mobile station, the authentication center for performing an authentication of the prescribed mobile station upon a network access by the prescribed mobile station when the mobile station is within a service region of said home system; a serving system having a network access element and a network information element associated with the network access element, said serving system capable for performing authentication upon authentication capable mobile station of said serving system; and authentication failure triggers shared by the authentication center of said home system with said serving system, wherein upon the mobile station's initial system access within a service region of said serving system, an authentication request operation is conducted between said serving system and said home system, wherein said home system's authentication center authenticates the mobile station and if authentic, then shares the mobile station's shared secret data and authentication failure triggers with said serving system, the authentication failure triggers including instructions for use by said serving system to resolve authentication failures which may occur on subsequent system accesses within the serving system's service region, to handle authentication failures of the prescribed mobile station without requiring said serving system to send any subsequent authentication failure report messages to said home system.

Claim 14

The wireless communications network of claim 11 , wherein the network access element of said serving system initiates an authentication request operation (AUTHREQ) upon a system access of the mobile station; the network information element processes the authentication request by verifying a correctness of the authentication information, including s numeric authentication response from the mobile station, and if the verification results in an authentication failure, then the network information element directs the network access element to complete the authentication operation according the mobile station's authentication failure triggers without contacting said home system's authentication center.

Claim 15

The wireless communications network of claim 12 , wherein the network access element includes a mobile switching center (MSC).

Claim 16

The wireless communications network of claim 12 , wherein the network information element includes a visitor location register (VLR).

Claim 17

The wireless communications network of claim 12 , wherein the processing of the authentication request operation includes an evaluation of the mobile station's authentication response locally in the serving system network information element.

Claim 18

The wireless communications network of claim 12 , wherein the network access element includes a mobile switching center (MSC), wherein the network information element includes a visitor location register (VLR), and wherein the processing of the authentication request operation includes an evaluation of the mobile station's authentication response locally in the serving system network information element.

Claim 19

The wireless communications network of claim 12 , wherein the mobile station's authentication failure triggers are referenced by the network information element of said serving system when an authentication failure occurs in order to direct the network access element of said serving system on how to complete the authentication operation, according to a prescribed policy of the authentication center of said home system.

Claim 20

The wireless communications network of claim 17 , wherein the mobile station's authentication failure triggers include at least a subset of the following triggers selected from the group consisting of: authentication result (AUTHR) mismatch, unique challenge (U.C.) failure/no response, RANDC mismatch, and missing authentication parameters.

Claim 21

The wireless communications network of claim 17 , wherein a prescribed action is associated with each trigger of the authentication failure triggers according to an authentication policy of said home system's authentication center.

Claim 22

The wireless communications network of claim 19 , wherein the prescribed action includes one of the following selected from the group consisting of: deny access, deny access and convey an authentication request to the network authentication center, perform a unique challenge, allow access to the communications network, allow access to the communications network and convey an authentication request to the network authentication center, and report the authentication failure to the network authentication center of said home system and await a response.