← Back to Patent Explorer
US7171198B2 Expired / Lapsed US ⏱️ 0.0 years remaining

Method, network access element and mobile node for service advertising and user authorization in a telecommunication system

Assignee: Nokia Technologies Oy
•
Filing: 2002-02-11
•
Granted: 2007-01-30
•
Expires: 2022-02-11
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A network access sequence for a mobile node (MN) in one or more foreign domains (FD). A foreign domain sends (A 1 ) service advertisement messages (M 1 ), each of which comprises an identifier ( 41 ) of the message, network address information ( 43 ) and a detailed service offering ( 42 ). The mobile node stores (A 2 ) the detailed service offerings and selects one of them. Then it sends a service request message (M 2 ) to the foreign domain which sent the selected service offering ( 62 ). The service request indicates ( 55 ) the selected service offering ( 62 ) and the mobile node's credentials ( 54 ). The foreign domain conveys the credentials to the mobile node's home domain (HD) for authentication and authorization and checks (A 4 ) if the selected service offering ( 62 ) can be supported. Next the foreign domain (FD) allocates communication resources for supporting the selected service offering and indicates (M 9 ) to the mobile node the availability of the requested service.

Inventors

  • 👤 Toni Paila
  • 👤 Lin Xu

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-29 11:42
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/08; H04W; H04W12/00; H04W12/06; H04W12/069; H04L63/0892; H04W4/00; H04W72/00; H04W72/20; H04W8/00; H04W8/18; H04W8/183; H04W8/26

Claims Analysis

Total Claims: 34
Claim 1
Independent Claim 211 words
A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of: the one or more foreign domains sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, and a detailed service offering; the mobile node receiving and storing the detailed service offering and forming an indication of a selected detailed service offering; the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; the foreign domain conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 2
Independent Claim 211 words
A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of: the one or more foreign domains sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, and a detailed service offering; the mobile node receiving and storing the detailed service offering and forming an indication of a selected detailed service offering; the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; the foreign domain conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 3
Independent Claim 213 words
A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of: the one or more foreign domains sending service advertisement messages, each service advertisement message comprising network address/identity information relating to the foreign domain in question, and a detailed service offering; the mobile node receiving and storing the detailed service offering and forming an indication of a selected detailed service offering, and calculating an identifier of the service advertisement message in question; the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; the foreign domain conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 4
Independent Claim 213 words
A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of: the one or more foreign domains sending service advertisement messages, each service advertisement message comprising network address/identity information relating to the foreign domain in question, and a detailed service offering; the mobile node receiving and storing the detailed service offering and forming an indication of a selected detailed service offering, and calculating an identifier of the service advertisement message in question; the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; the foreign domain conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 5
Independent Claim 211 words
A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of: the one or more foreign domains sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, and network address/identity information relating to the foreign domain in question; the mobile node receiving and storing the identifier, extracting therefrom a detailed service offering; and forming an indication of a selected detailed service offering; the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; the foreign domain conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 6
Independent Claim 211 words
A method for performing a network access sequence for a mobile node in one or more foreign domains, comprising the steps of: the one or more foreign domains sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, and network address/identity information relating to the foreign domain in question; the mobile node receiving and storing the identifier, extracting therefrom a detailed service offering; and forming an indication of a selected detailed service offering; the mobile node sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; the foreign domain conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, the foreign domain allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 7
Dependent Claim 47 words
A method according to claim 1 , comprising the steps of: the foreign domain signing the service advertisement messages with a digital signature; and the mobile node verifying the digital signature; wherein a two-way trust relationship is dynamically established between the mobile node and the foreign domain.
Claim 8
Dependent Claim 23 words
A method according to claim 1 , further comprising the foreign domain performing the checking step after it has performed the conveying step.
Claim 9
Dependent Claim 27 words
A method according to claim 1 , further comprising the mobile node automatically forming the indication of the selected service offering on the basis of pre-stored criteria.
Claim 10
Dependent Claim 35 words
A method according to claim 1 , further comprising the mobile node forming the indication of the selected service offering by presenting the detailed service offerings to a user and by receiving the user's selection.
Claim 11
Dependent Claim 17 words
A method according to claim 1 , wherein the detailed service offerings indicate quality of service information.
Claim 12
Dependent Claim 16 words
A method according to claim 1 , wherein the detailed service offerings indicate a validity period.
Claim 13
Dependent Claim 189 words
A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising: a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, a detailed service offering and a resource allocation logic for receiving a service request message from the mobile node, the service request message comprising the mobile node's credentials and an indication of the service offering selected by the mobile node or its user, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node's home domain; checking if the service indicated by the selected service offering can be supported on the basis of available communication resources; and allocating communication resources if the service indicated by the selected service offering can be supported.
Claim 14
Dependent Claim 189 words
A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising: a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, a detailed service offering and a resource allocation logic for receiving a service request message from the mobile node, the service request message comprising the mobile node's credentials and an indication of the service offering selected by the mobile node or its user, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node's home domain; checking if the service indicated by the selected service offering can be supported on the basis of available communication resources; and allocating communication resources if the service indicated by the selected service offering can be supported.
Claim 15
Dependent Claim 181 words
A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising: a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising network address/identity information relating to the foreign domain in question and a detailed service offering; and a resource allocation logic for receiving a service request message from the mobile node, the service request message comprising the mobile node's credentials and an indication of the service offering selected by the mobile node or its user; conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node's home domain; checking if the service indicated by the selected service offering can be supported on the basis of available communication resources, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; and allocating communication resources if the service indicated by the selected service offering can be supported.
Claim 16
Dependent Claim 181 words
A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising: a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising network address/identity information relating to the foreign domain in question and a detailed service offering; and a resource allocation logic for receiving a service request message from the mobile node, the service request message comprising the mobile node's credentials and an indication of the service offering selected by the mobile node or its user; conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node's home domain; checking if the service indicated by the selected service offering can be supported on the basis of available communication resources, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; and allocating communication resources if the service indicated by the selected service offering can be supported.
Claim 17
Dependent Claim 185 words
A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising: a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising -an identifier of the service advertisement message in question, -network address/identity information relating to the foreign domain in question; and a resource allocation logic for receiving a service request message from the mobile node, the service request message comprising the mobile node's credentials and an indication of a service offering selected by the mobile node or its user; conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node's home domain; checking if the service indicated by the selected service offering can be supported on the basis of available communication resources, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; and allocating communication resources if the service indicated by the selected service offering can be supported.
Claim 18
Dependent Claim 185 words
A network access element for supporting an access sequence of a mobile node in one or more foreign domains, the network access element comprising: a service advertisement logic for sending service advertisement messages to the mobile node, each service advertisement message comprising -an identifier of the service advertisement message in question, -network address/identity information relating to the foreign domain in question; and a resource allocation logic for receiving a service request message from the mobile node, the service request message comprising the mobile node's credentials and an indication of a service offering selected by the mobile node or its user; conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization and for receiving an authentication and authorization indication from the mobile node's home domain; checking if the service indicated by the selected service offering can be supported on the basis of available communication resources, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; and allocating communication resources if the service indicated by the selected service offering can be supported.
Claim 19
Dependent Claim 33 words
A network access element according to claim 10 , wherein the resource allocation logic is adapted to perform the checking operation after conveying the mobile node's credentials to the mobile node's home domain.
Claim 20
Dependent Claim 34 words
A network access element according to claim 13 , wherein the resource allocation logic is adapted to perform the checking operation before receiving an authentication and authorization indication from the mobile node's home domain.
Claim 21
Dependent Claim 127 words
A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for: receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising an identifier of the service advertisement message in question; network address/identity information relating to the foreign domain in question; and a detailed service offering; forming an indication of a selected detailed service offering; and sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.
Claim 22
Dependent Claim 127 words
A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for: receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising an identifier of the service advertisement message in question; network address/identity information relating to the foreign domain in question; and a detailed service offering; forming an indication of a selected detailed service offering; and sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.
Claim 23
Dependent Claim 138 words
A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for: receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising a network address/identity information relating to the foreign domain in question and a detailed service offering; forming an identifier of the service advertisement message in question based on the information contained in the service offering, and an indication of a selected detailed service offering; and sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.
Claim 24
Dependent Claim 138 words
A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for: receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising a network address/identity information relating to the foreign domain in question and a detailed service offering; forming an identifier of the service advertisement message in question based on the information contained in the service offering, and an indication of a selected detailed service offering; and sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.
Claim 25
Dependent Claim 131 words
A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for: receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising an identifier of the service advertisement message in question and network address/identity information relating to the foreign domain in question; extracting a detailed service offering from the identifier and an indication of a selected detailed service offering; and sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.
Claim 26
Dependent Claim 131 words
A mobile node capable of performing a network access sequence in one or more foreign domains, comprising a service advertisement processing logic for: receiving and storing service advertisement messages from said one or more foreign domains, each service advertisement message comprising an identifier of the service advertisement message in question and network address/identity information relating to the foreign domain in question; extracting a detailed service offering from the identifier and an indication of a selected detailed service offering; and sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains.
Claim 27
Dependent Claim 24 words
A mobile node according to claim 15 , comprising automatically forming the indication of the selected service offering on the basis of pre-stored criteria.
Claim 28
Dependent Claim 32 words
A mobile node according to claim 15 , comprising forming the indication of the selected service offering by presenting the detailed service offerings to a user and by receiving the user's selection.
Claim 29
Independent Claim 215 words
A system, comprising: sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, and a detailed service offering; receiving means, in a mobile node, for receiving and storing the detailed service offering and forming an indication of a selected detailed service offering; sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials; wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying means, in the foreign domain, for conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; checking means, in the foreign domain, for checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 30
Independent Claim 215 words
A system, comprising: sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question, network address/identity information relating to the foreign domain in question, and a detailed service offering; receiving means, in a mobile node, for receiving and storing the detailed service offering and forming an indication of a selected detailed service offering; sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials; wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying means, in the foreign domain, for conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; checking means, in the foreign domain, for checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 31
Independent Claim 217 words
A system, comprising: sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising network address/identity information relating to the foreign domain in question and a detailed service offering; receiving means, in a mobile node, for receiving and storing the detailed service offering and forming an indication of a selected detailed service offering, and calculating an identifier of the service advertisement message in question; sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials; wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying means, in the foreign domain, for conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; checking means, in the foreign domain, for checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 32
Independent Claim 217 words
A system, comprising: sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising network address/identity information relating to the foreign domain in question and a detailed service offering; receiving means, in a mobile node, for receiving and storing the detailed service offering and forming an indication of a selected detailed service offering, and calculating an identifier of the service advertisement message in question; sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indication of the selected service offering and the mobile node's credentials; wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying means, in the foreign domain, for conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; checking means, in the foreign domain, for checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 33
Independent Claim 219 words
A system, comprising: sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question and network address/identity information relating to the foreign domain in question; receiving means, in a mobile node, for receiving and storing the identifier, extracting therefrom a detailed service offering; and forming an indication of a selected detailed service offering; sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indicatfon of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying means, in the foreign domain, for conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; checking means, in the foreign domain, for checking the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.
Claim 34
Independent Claim 219 words
A system, comprising: sending means, in one or more foreign domains, for sending service advertisement messages, each service advertisement message comprising an identifier of the service advertisement message in question and network address/identity information relating to the foreign domain in question; receiving means, in a mobile node, for receiving and storing the identifier, extracting therefrom a detailed service offering; and forming an indication of a selected detailed service offering; sending means, in the mobile node, for sending a service request message to the foreign domain which sent the selected service offering, the service request message comprising the indicatfon of the selected service offering and the mobile node's credentials, wherein the selected service offering is selected from the service advertisement messages sent by the one or more foreign domains; conveying means, in the foreign domain, for conveying the mobile node's credentials to the mobile node's home domain for authentication and authorization; checking means, in the foreign domain, for checking the foreign domain checking if the selected service offering can be supported on the basis of available communication resources; and if the selected service offering can be supported, allocating means, in the foreign domain, for allocating communication resources for supporting the selected service offering and indicating to the mobile node the availability of a service according to the selected service offering.

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2010-01-29 2010-07-31 2011-01-30 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2014-01-29 2014-07-31 2015-01-30 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2018-01-29 2018-07-31 2019-01-30 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag