Telefonaktiebolaget Lm Ericsson (publ)

Luis Ramos Robles

Susana Fernandez Alonso

Lila Madour

Victor Manuel Avila Gonzalez

Alfredo Gonzalez Plaza

Fernando Cecilia Torralba

Avelina Pardo Blazquez

Jesus de-Gregorio-Rodriguez

Luis Barriga Caceres

Jesús De Gregorio Rodriguez

In the method of the invention, requests received by a request distributor are distributed to server computers. The request distributor uses distribution information for selecting, as a destination for the requests, a server computer. A first request relating to a delivery of a service is received by the request distributor and sent to one server computer. The server computer then receives the first request. Finally, it is determined whether a further request relating to the delivery of the service is expected to be received by the request distributor, and, if so, distribution information is made available to the request distributor.

Method for distributing requests to server computers

The present invention provides means and method for Single Sign-On authentication of a user accessing a service network through an access network when the user has been already authenticated by a core network where the user holds a subscription. Therefore, a number of means are provided in different entities distributed between the core network and the service network, as well as in the user's equipment, for carrying out the proposed method. The Single Sign-On authentication takes place upon matching in the service network a shared key for the user submitted from the core network with another shared key for the user derived at the user's equipment.

Means and method for single sign-on access to a service network through an access network

The present invention addresses the problem of detecting possible fraud situations where there may be a plurality of access sessions simultaneously active in a user session for a user, the access sessions established through a number of access points of one or more wireless local area networks (WLAN). Therefore, the present invention provides for a mechanism, which includes means and method, whereby user sessions suspicious of fraud are reported to the operator network holding a subscription for the user. Moreover, the present invention also facilitates support for Single Sign-On services for a user.

Apparatus and method for fraud prevention when accessing through wireless local area networks

An authentication server (e.g., AAA server) is described herein which is located in a CDMA2000 network and used to authenticate a user terminal that is connected to a non-CDMA2000 network. The authentication server receives an access request for authenticating the user terminal connected to the non-CDMA2000 network. Then, it obtains a root secret key shared between the user terminal and the CDMA2000 network and generates a GSM or UMTS-like authentication vector which is used to authenticate the user terminal according to a GSM or UMTS-like authentication method. The access of the terminal to the non-CDMA2000 network is granted upon successful authentication. According to embodiments of the invention, the non-CDMA2000 network can be a WLAN network, and the authentication methods used can be EAP SIP or EAP AKA. The present invention allows one to use authentication servers that were originally intended for WLAN-3GPP interworking scenarios also in WLAN-CDMA2000 network interworking.

Growing community of inventors

Coslada, Spain

Luis Ramos Robles