US6915345B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
AAA broker specification and protocol
Assignee: Apple Inc
•
Filing: 2000-10-02
•
Granted: 2005-07-05
•
Expires: 2020-10-02
Abstract
Abstract In an IP-based mobile communications system, the Mobile Node changes its point of attachment to the network while maintaining network connectivity. The present invention improves the attachment of the Mobile Node to the IP mobile communications system by allowing a AAA Broker Server to maintain client information necessary to establish the a secure Mobile Node connection to the home network.
Inventors
- 👤 Rambabu Tummala
- 👤 David J. Mitton
- 👤 Haseeb Akhtar
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 08:21
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/08; H04L63/0892; H04W; H04W12/00; H04W12/03; H04W12/033; H04W12/06
Claims Analysis
Total Claims: 43
Claim 1
Independent Claim
153 words
The method of establishing a connection for a mobile node on a communication system having a home network for the mobile node and at least one foreign network comprising the steps of: receiving a registration request message at a foreign network Authentication, Authorization, Accounting server; transmitting a request to an Authentication, Authorization, Accounting broker server to obtain service level agreement information to establish a secure connection between the foreign and home networks; receiving at the foreign network Authentication, Authorization, Accounting server a response transmitted from the Authentication, Authorization, Accounting broker server containing service level agreement information stored on the Authentication, Authorization, Accounting broker server, wherein the response transmitted from the Authentication, Authorization, Accounting broker server contains the Internet Protocol address of the home network to which the request should be directly forwarded and one or more instances of a first value to indicate that one or more different host networks can be contacted.
Claim 2
Independent Claim
153 words
The method of establishing a connection for a mobile node on a communication system having a home network for the mobile node and at least one foreign network comprising the steps of: receiving a registration request message at a foreign network Authentication, Authorization, Accounting server; transmitting a request to an Authentication, Authorization, Accounting broker server to obtain service level agreement information to establish a secure connection between the foreign and home networks; receiving at the foreign network Authentication, Authorization, Accounting server a response transmitted from the Authentication, Authorization, Accounting broker server containing service level agreement information stored on the Authentication, Authorization, Accounting broker server, wherein the response transmitted from the Authentication, Authorization, Accounting broker server contains the Internet Protocol address of the home network to which the request should be directly forwarded and one or more instances of a first value to indicate that one or more different host networks can be contacted.
Claim 3
Dependent Claim
41 words
The method of establishing a home network connection in claim 1 further comprising the step of: establishing a connection with an Authentication, Authorization, Accounting server on the home network based upon the information received from the Authentication, Authorization, Accounting broker server.
Claim 4
Dependent Claim
52 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving a response from the Authentication, Authorization, Accounting broker server with a rejection response after the Authentication, Authorization, Accounting broker server determines that the home network is not found by the Authentication, Authorization, Accounting broker server.
Claim 5
Dependent Claim
42 words
The method of establishing a home network connection in claim 1 further comprising the step of: transmitting the request to the Authentication, Authorization, Accounting broker server for all messages to be addressed to unknown networks in order to identify the home network.
Claim 6
Dependent Claim
39 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server with a tag value that indicates the timeout value for a particular host.
Claim 7
Dependent Claim
56 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server with a session time-out value as a discretionary indication to the home network server on how long the home network entry should be maintained as valid on the foreign network.
Claim 8
Dependent Claim
37 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server with a tag value that indicates a host sever selection value.
Claim 9
Dependent Claim
39 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server with a certificate of the foreign network server and the host network server.
Claim 10
Dependent Claim
45 words
The method of establishing a home network connection in claim 8 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server with a certificate encapsulated in an Attribute Value Pair of the foreign network server and the host network server.
Claim 11
Dependent Claim
58 words
The method of establishing a home network connection in claim 8 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server with a certificate of the foreign network server and the host network server where the foreign network server forwards the certificate in a communication to the home AAA Authentication, Authorization, Accounting server.
Claim 12
Dependent Claim
45 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server with a certificate encapsulated in an Attribute Value Pair of the foreign network server and the host network server.
Claim 13
Dependent Claim
38 words
The method of establishing a home network connection in claim 1 further comprising the step of: transmitting a request to a second Authentication, Authorization, Accounting broker server in response to the response received by the foreign network server.
Claim 14
Dependent Claim
54 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker server validates the request from the foreign network against information retained in the Authentication, Authorization, Accounting broker server on allowed request clients.
Claim 15
Dependent Claim
56 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker server validates the request from the foreign network by processing a destination attribute in an attempt to find a match on the home network.
Claim 16
Dependent Claim
57 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker server validates the request from the foreign network by processing a user name attribute in an attempt to find a match on the home network.
Claim 17
Dependent Claim
56 words
The method of establishing a home network connection in claim 15 further comprising the step of: receiving the response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker server validates the request from the foreign network by processing a destination attribute in an attempt to find a match on the home network.
Claim 18
Independent Claim
175 words
The method of establishing a connection for a mobile node on a communication system having a home network for the mobile node and at least one foreign network comprising the steps of: receiving a registration request message at a foreign network Authentication, Authorization, Accounting server; transmitting a request to an Authentication, Authorization, Accounting broker server to obtain service level agreement information to establish a secure connection between the foreign and home networks; receiving at the foreign network Authentication, Authorization, Accounting server a response transmitted from the Authentication, Authorization, Accounting broker server containing service level agreement information stored on the Authentication, Authorization, Accounting broker server, wherein the response transmitted from the Authentication, Authorization, Accounting broker server contains the Internet Protocol address of the home network to which the request should be directly forwarded, and one or more instances of a first value to indicate that one or more different host networks can be contacted; and contacting a second Authentication, Authorization, Accounting broker server after a rejection response is received from the Authentication, Authorization, Accounting broker server.
Claim 19
Independent Claim
175 words
The method of establishing a connection for a mobile node on a communication system having a home network for the mobile node and at least one foreign network comprising the steps of: receiving a registration request message at a foreign network Authentication, Authorization, Accounting server; transmitting a request to an Authentication, Authorization, Accounting broker server to obtain service level agreement information to establish a secure connection between the foreign and home networks; receiving at the foreign network Authentication, Authorization, Accounting server a response transmitted from the Authentication, Authorization, Accounting broker server containing service level agreement information stored on the Authentication, Authorization, Accounting broker server, wherein the response transmitted from the Authentication, Authorization, Accounting broker server contains the Internet Protocol address of the home network to which the request should be directly forwarded, and one or more instances of a first value to indicate that one or more different host networks can be contacted; and contacting a second Authentication, Authorization, Accounting broker server after a rejection response is received from the Authentication, Authorization, Accounting broker server.
Claim 20
Dependent Claim
62 words
The method of establishing a home network connection in claim 1 further comprising the step of: after receiving the response from Authentication, Authorization, Accounting broker server that services the home network, the foreign network initiates a security association pursuant to the returned service level agreement information in the response message by transmitting a message to the home network from the foreign network.
Claim 21
Dependent Claim
56 words
The method of establishing a home network connection in claim 1 further comprising the step of: receiving message from the home network server at the foreign network Authentication, Authorization, Accounting server after the home network that services the home network Authentication, Authorization, Accounting server processes a request from the foreign network server for a secure connection.
Claim 22
Independent Claim
198 words
A system for establishing a home network connection of a mobile node on a foreign network in a wireless communications network comprising: a home network having a home agent coupled to a home Authentication, Authorization, Accounting server; a foreign network having a foreign agent coupled to a foreign Authentication, Authorization, Accounting server; a mobile node transmitting a request to the foreign Authentication, Authorization, Accounting server in a request to establish a secure connection between the mobile node and the home network; an Authentication, Authorization, Accounting broker server coupled to the foreign Authentication, Authorization, Accounting server transmitting a request to the Authentication, Authorization, Accounting broker server to determine the location of the home network and security association information for establishing the secure connection between the mobile node and the home network according to a security protocol specified in the Authentication, Authorization, Accounting broker server; and the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server with the Internet Protocol address of the home network to which the request should be directly forwarded and one or more instances of a first value to indicate that one or more different host networks can be contacted.
Claim 23
Independent Claim
198 words
A system for establishing a home network connection of a mobile node on a foreign network in a wireless communications network comprising: a home network having a home agent coupled to a home Authentication, Authorization, Accounting server; a foreign network having a foreign agent coupled to a foreign Authentication, Authorization, Accounting server; a mobile node transmitting a request to the foreign Authentication, Authorization, Accounting server in a request to establish a secure connection between the mobile node and the home network; an Authentication, Authorization, Accounting broker server coupled to the foreign Authentication, Authorization, Accounting server transmitting a request to the Authentication, Authorization, Accounting broker server to determine the location of the home network and security association information for establishing the secure connection between the mobile node and the home network according to a security protocol specified in the Authentication, Authorization, Accounting broker server; and the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server with the Internet Protocol address of the home network to which the request should be directly forwarded and one or more instances of a first value to indicate that one or more different host networks can be contacted.
Claim 24
Dependent Claim
43 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting server broker server that contain the Internet Protocol address of the home network to which the request should be directly forwarded.
Claim 25
Dependent Claim
40 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server transmits the request to the Authentication, Authorization, Accounting broker server for all messages to be addressed to unknown networks in order to identify the home network.
Claim 26
Dependent Claim
35 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server with a tag value that indicates a host server selection value.
Claim 27
Dependent Claim
55 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server that includes a session time-out value as a discretionary indication to the foreign network server on how long the home network entry should be maintained as valid on the foreign network.
Claim 28
Dependent Claim
35 words
The system set forth in claim 24 wherein: the foreign Authentication, Authorization, Accounting server receives the response from the Authentication, Authorization, Accounting broker server with a tag value that indicates a host server selection value.
Claim 29
Dependent Claim
37 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives the response from the Authentication, Authorization, Accounting broker server with a certificate of the foreign network server and the host network server.
Claim 30
Dependent Claim
43 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives the response from the Authentication, Authorization, Accounting broker server with a certificate encapsulated in an Attribute Value Pair of the foreign network server and the host network server.
Claim 31
Dependent Claim
37 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives the response from the Authentication, Authorization, Accounting broker server with a certificate that is forwarded to the home Authentication, Authorization, Accounting server.
Claim 32
Dependent Claim
43 words
The system set forth in claim 28 wherein: the foreign Authentication, Authorization, Accounting server receives the response from the Authentication, Authorization, Accounting broker server with a certificate encapsulated in an Attribute Value Pair of the foreign network server and the host network server.
Claim 33
Dependent Claim
44 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server transmits a second request to a second Authentication, Authorization, Accounting broker server in response to a rejection response received from the Authentication, Authorization, Accounting broker by the foreign network server.
Claim 34
Dependent Claim
53 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker validates the request from the foreign network against the information retained in the Authentication, Authorization, Accounting broker server on the allowed request clients.
Claim 35
Dependent Claim
53 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker validates the request from the foreign network by processing a destination attribute in an attempt to find a match on the home network.
Claim 36
Dependent Claim
54 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker validates the request from the foreign network by processing a user name attribute in an attempt to find a match on the home network.
Claim 37
Dependent Claim
53 words
The system set forth in claim 33 wherein: the foreign Authentication, Authorization, Accounting server receives a response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker validates the request from the foreign network by processing a destination attribute in an attempt to find a match on the home network.
Claim 38
Dependent Claim
48 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a rejection response from the Authentication, Authorization, Accounting broker server after the Authentication, Authorization, Accounting broker server determines that the home network is not found serviced by the Authentication, Authorization, Accounting broker server.
Claim 39
Dependent Claim
35 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server contacts a second Authentication, Authorization, Accounting broker server after a rejection response is received from the Authentication, Authorization, Accounting broker server.
Claim 40
Dependent Claim
39 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server initiates a security association pursuant to the returned information in the response message by transmitting a message to the home network from the foreign network.
Claim 41
Dependent Claim
43 words
The system set forth in claim 20 wherein: the foreign Authentication, Authorization, Accounting server receives a message from the home network server to the foreign network server after home network server processes the request from the foreign network server for a secure connection.
Claim 42
Independent Claim
185 words
A method for establishing a connection for a mobile node on a communication system having a home network for the mobile node and at least one foreign network comparing the steps of: receiving a registration request message at a foreign Authentication, Authorization, Accounting server; transmitting a request to an Authentication, Authorization, Accounting broker server to obtain service level agreement information to establish a secure connection between the foreign and home network; receiving at the foreign network Authentication, Authorization, Accounting server a response from the Authentication, Authorization, Accounting broker server containing service level agreement information wherein the response transmitted from Authentication, Authorization, Accounting broker server contains the Internet Protocol address of the home network to which the request should be directly forwarded and one or more instances of a first value to indicate that one or more different host networks can be contacted; and establishing a secure connection with an Authentication, Authorization, Accounting server on the home network based upon the service level agreement information received from the Authentication, Authorization, Accounting broker server to encrypt information packets transmitted between the home network and the mobile node.
Claim 43
Independent Claim
185 words
A method for establishing a connection for a mobile node on a communication system having a home network for the mobile node and at least one foreign network comparing the steps of: receiving a registration request message at a foreign Authentication, Authorization, Accounting server; transmitting a request to an Authentication, Authorization, Accounting broker server to obtain service level agreement information to establish a secure connection between the foreign and home network; receiving at the foreign network Authentication, Authorization, Accounting server a response from the Authentication, Authorization, Accounting broker server containing service level agreement information wherein the response transmitted from Authentication, Authorization, Accounting broker server contains the Internet Protocol address of the home network to which the request should be directly forwarded and one or more instances of a first value to indicate that one or more different host networks can be contacted; and establishing a secure connection with an Authentication, Authorization, Accounting server on the home network based upon the service level agreement information received from the Authentication, Authorization, Accounting broker server to encrypt information packets transmitted between the home network and the mobile node.
References Cited (Backward Citations)
US6421714B1
Cited
US6738362B1
Cited
US6466977B1
Cited
US6668283B1
Cited
US6466964B1
Cited
US6366561B1
Cited
US6714987B1
Cited
US6445922B1
Cited
US6728536B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-07-04 | 2009-01-03 | 2009-07-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-07-04 | 2013-01-03 | 2013-07-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-07-04 | 2017-01-03 | 2017-07-05 | $7700.00 | Window Closed / Lapsed |