Patent US7072657B2 successfully refreshed from Google Patents.
← Back to Patent Explorer
US7072657B2 Expired / Lapsed US ⏱️ 0.0 years remaining

Method and associated apparatus for pre-authentication, preestablished virtual private network in heterogeneous access networks

Assignee: NTT Docomo Inc
•
Filing: 2002-04-11
•
Granted: 2006-07-04
•
Expires: 2022-04-11
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method of coordinating the handoff of a mobile carrier between a first access network and a second access network. The method including establishing a contract between a user of a mobile carrier and a hyper operator and attempting a hand off from a first access network that the mobile carrier is currently operating within to a second access network, wherein the attempting includes authenticating at the hyper operator only that the user may have access to the second access network via the contract. Handing off to the second access network if the authenticating is successful.

Inventors

  • 👤 Fujio Watanabe
  • 👤 Shahid Shoaib
  • 👤 Jingjun Cao
  • 👤 Shoji Kurakake

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-07 16:32
CPC Classifications
H; H04; H04W; H04W36/00; H04W36/0005; H04W36/0011; H04W36/0033; H04W36/0038; H04L; H04L63/00; H04L63/02; H04L63/0272; H04L63/08; H04W36/14; H04W36/144; H04W36/1443

Claims Analysis

Total Claims: 18
Claim 1
Independent Claim 200 words
A network access system serving a mobile device accessing a wide area network from a plurality of access networks, the network access system comprising a network service proxy server which ( 1 ) when requested by the mobile device attached to a first one of the access networks, provisioning a first VPN tunnel between a gateway of a private network and a gateway of that first one of the access networks, the first VPN tunnel comprising a first segment between the network service proxy server and the gateway of that first one of the access networks, and a second segment between the network service proxy server and the gateway of the private network, and ( 2 ) when the mobile device moves from that first one of the access networks to a second one of the access networks, provisioning a second VPN tunnel between the gateway of the private network and a gateway of that second one of the access networks, the second VPN tunnel comprising a first segment between the network service proxy server and the gateway of that second one of the access networks and a second segment which is the second segment of the first VPN tunnel.
Claim 2
Dependent Claim 200 words
A network access system serving a mobile device accessing a wide area network from a plurality of access networks, the network access system comprising a network service proxy server which ( 1 ) when requested by the mobile device attached to a first one of the access networks, provisioning a first VPN tunnel between a gateway of a private network and a gateway of that first one of the access networks, the first VPN tunnel comprising a first segment between the network service proxy server and the gateway of that first one of the access networks, and a second segment between the network service proxy server and the gateway of the private network, and ( 2 ) when the mobile device moves from that first one of the access networks to a second one of the access networks, provisioning a second VPN tunnel between the gateway of the private network and a gateway of that second one of the access networks, the second VPN tunnel comprising a first segment between the network service proxy server and the gateway of that second one of the access networks and a second segment which is the second segment of the first VPN tunnel.
Claim 3
Dependent Claim 17 words
A network access system as in claim 1 , wherein the access networks form heterogeneous access networks.
Claim 4
Dependent Claim 43 words
A network access system as in claim 1 , wherein the network service proxy server provisions the first VPN tunnel by providing VPN security information to the gateway of the private network and the gateway of the first one of the access networks.
Claim 5
Dependent Claim 27 words
A network access system as in claim 1 , wherein the network service proxy server pre-authenticates the mobile device with that second one of the access networks.
Claim 6
Dependent Claim 28 words
A network access system as in claim 1 , wherein the network service proxy server pre-establishes the second VPN tunnel with that second one of the access networks.
Claim 7
Dependent Claim 36 words
A network access system as in claim 1 , wherein the first segment of the first VPN tunnel and the first segment of the second VPN tunnel use different VPN tunneling protocols at the link layer.
Claim 8
Dependent Claim 53 words
A network access system as in claim 1 wherein the second VPN tunnel comprises a first segment between a second network service proxy server and the gateway of that first one of the access networks, and a second segment between the second network service proxy server and the gateway of the private network.
Claim 9
Dependent Claim 64 words
A network access system as in claim 1 wherein the second VPN tunnel comprises a first segment between a second network service proxy server and the gateway of that first one of the access networks, a second segment between the second network service proxy server and the first proxy server, and a third segment which is the second segment of the first VPN tunnel.
Claim 10
Dependent Claim 203 words
In a network access system serving a mobile device accessing a wide area network from a plurality of access networks, a method comprising: providing a network service proxy server; when requested by the mobile device attached to a first one of the access networks, the network service proxy server provisioning a first VPN tunnel between a gateway of a private network and a gateway of that first one of the access networks, the first VPN tunnel comprising a first seament between the network service proxy server and the gateway of that first one of the access networks, and a second segment between the network service proxy server and the gateway of the private network; and when the mobile device moves from that first one of the access networks to a second one of the access networks, the network service proxy server provisioning a second VPN tunnel between the gateway of the private network and a gateway of that second one of the access networks, the second VPN tunnel comprising a first segment between the network service proxy server and the gateway of that second one of the access networks and a second segment which is the second segment of the first VPN tunnel.
Claim 11
Dependent Claim 203 words
In a network access system serving a mobile device accessing a wide area network from a plurality of access networks, a method comprising: providing a network service proxy server; when requested by the mobile device attached to a first one of the access networks, the network service proxy server provisioning a first VPN tunnel between a gateway of a private network and a gateway of that first one of the access networks, the first VPN tunnel comprising a first seament between the network service proxy server and the gateway of that first one of the access networks, and a second segment between the network service proxy server and the gateway of the private network; and when the mobile device moves from that first one of the access networks to a second one of the access networks, the network service proxy server provisioning a second VPN tunnel between the gateway of the private network and a gateway of that second one of the access networks, the second VPN tunnel comprising a first segment between the network service proxy server and the gateway of that second one of the access networks and a second segment which is the second segment of the first VPN tunnel.
Claim 12
Dependent Claim 15 words
A method as in claim 9 , wherein the access networks form heterogeneous access networks.
Claim 13
Dependent Claim 41 words
A method as in claim 9 , wherein the network service proxy server provisions the first VPN tunnel by providing VPN security information to the gateway of the private network and the gateway of the first one of the access networks.
Claim 14
Dependent Claim 39 words
A method as in claim 9 , wherein the network service proxy server pre-authenticating the mobile device with that second one of the access networks prior to the mobile device attaching to that second one of the access networks.
Claim 15
Dependent Claim 40 words
A method as in claim 9 , wherein the network service proxy server pre-establishes the second VPN tunnel with that second one of the access networks prior to the mobile device attaching to that second one of the access networks.
Claim 16
Dependent Claim 34 words
A method as in claim 9 , wherein the first segment of the first VPN tunnel and the first segment of the second VPN tunnel use different VPN tunneling protocols at the link layer.
Claim 17
Dependent Claim 52 words
A method as in claim 9 , wherein the second VPN tunnel comprises a first segment between a second network service proxy server and the gateway of that first one of the access networks, and a second segment between the second network service proxy server and the gateway of the private network.
Claim 18
Dependent Claim 61 words
A method as in claim 9 , wherein the second VPN tunnel comprises a first segment between a second proxy server and the gateway of that first one of the access networks, a second segment between the second network service proxy server and the first proxy server, and a third segment which is the second segment of the first VPN tunnel.

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2009-07-03 2010-01-02 2010-07-04 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2013-07-03 2014-01-02 2014-07-04 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2017-07-03 2018-01-02 2018-07-04 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag