Nokia Corporation

Intellectual Ventures I LLC

Jyri Rinnemaa

Juha Ala-Laurila

Jukka-Pekka Honkanen

Jan-Erik Gustav Ekberg

Henry Haverinen

Timo Takamäki

Raimo Vuonnala

Nadarajah Asokan

Patrik Flykt

Petri Aalto

Hannu Tuominen

Jukka Tuomi

Seppo Kalevi Honkanen

Tommi Mikkonen

Timo Takamaki

Mike P Smith

Antti Kuikka

Anton Bush

Arranging data ciphering in a telecommunication system comprising at least one wireless terminal, a wireless local area network and a public land mobile network. At least one first ciphering key according to the mobile network is calculated in the mobile network and in the terminal for a terminal identifier using a specific secret key for the identifier. Data transmission between the mobile network and the terminal is carried out through the wireless local area network. A second ciphering key is calculated in the terminal and in the mobile network using said at least one first ciphering key. The second ciphering key is sent from the mobile network to the wireless local area network. The data between the terminal and the network is ciphered using said second ciphering key.

Arranging data ciphering in a wireless telecommunication system

A method and device for routing data packets of a wireless terminal device in a communication network. When Open system Authentication is used, the system operates similarly as the current Nokia Operator Wireless LAN system, in which the terminal device and the access controller are the parties involved in the authentication. The access controller relays information relating to the authentication between the terminal device and an authenticating server, and it is capable of updating independently the list of users it maintains. When authentication according IEEE 802.1X authentication, the access point operates according to the IEEE 802.1X standard, serving as the authenticating party and relaying information relating to the authentication between the terminal device and the authentication server. In addition, the list maintained by the access controller is updated after a successful authentication, for example by the access point or the authenticating server.

Method and apparatus for authentication in a wireless telecommunications system

A method for billing in a packet data network (WISP1) comprising at least one user's terminal (MN), comprising the steps of:

Billing in a packet data network

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

Authentication in a packet data network

A method and device for ensuring address information of a wireless terminal device in a wireless local area network, the network comprising; an access point for setting up a communication connection to the terminal device, the method comprising establishing a communication connection between the terminal device and the access point (), and relaying data packets from the terminal device to the network and from the network to the terminal device (). The method further comprising the steps at the access point: detecting an IP address of the terminal device in response to the established communication connection (), associating the detected IP address of the terminal device to the MAC address of the terminal device (), and comparing that the address information of the terminal device on the relayed data packets are corresponding to the associated address information ().

Method and apparatus for ensuring address information of a wireless terminal device in communications network

A method for billing in a packet data network (WISP) comprising at least one user's terminal (MN), comprising the steps of:

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication center. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

Growing community of inventors

Tampere, Finland

Jyri Rinnemaa