Alcatel N.v.

Standard Elektrik Lorenz Ag

Alcatel Sel Aktiengesellschaft

Matthias Pfundstein

To install a virtual private network (VN) within a given mobile-radio network (MRN), a facility is proposed which is connected to the base stations (BS) and controls the establishment and release of calls between mobile subscribers (MS . . . MSX) assigned to the coverage area of the base stations, and a data base (HLR) connected to the facility, which contains a subscriber data set (DS) for each of said mobile subscribers with a first logic data set (LDS) for registering them as subscribers of the mobile-radio network. Each of some of these mobile subscribers (MS , MS , MS ) has a second logic data set (LDS-VN) for registering them as subscribers of a virtual private network. In this way, in addition to the data set (LDS) allowing access to the mobile-radio network (MRN) as such, the invention adds to the subscriber data set in the existing data base (HLR) a further data set (LDS-VN), which enables a mobile subscriber to access a virtual private network (VPN). Essentially this only requires taking steps in the mobile-radio software area, whereby the installation of one or several virtual private networks can be very easily accomplished. The implementation of an intelligent network which is superimposed on the mobile-radio network can be omitted.

Virtual private network for mobile subscribers

To install a virtual private network (VN) within a given mobile-radio network (MRN), a facility is proposed which is connected to the base stations (BS) and controls the establishment and release of calls between mobile subscribers (MS1. . . MSX) assigned to the coverage area of the base stations, and a data base (HLR) connected to the facility, which contains a subscriber data set (DS) for each of said mobile subscribers with a first logic data set (LDS) for registering them as subscribers of the mobile-radio network. Each of some of these mobile subscribers (MS1, MS2, MS3) has a second logic data set (LDS-VN) for registering them as subscribers of a virtual private network. In this way, in addition to the data set (LDS) allowing access to the mobile-radio network (MRN) as such, the invention adds to the subscriber data set in the existing data base (HLR) a further data set (LDS-VN), which enables a mobile subscriber to access a virtual private network (VPN). Essentially this only requires taking steps in the mobile-radio software area, whereby the installation of one or several virtual private networks can be very easily accomplished. The implementation of an intelligent network which is superimposed on the mobile-radio network can be omitted.

In the prior art, equipment lists (B, G, W) are searched successively, or a list is searched which contains all equipment numbers (MEI.sub.1 to MEI.sub.n) along with the respective equipment lists to which they are assigned. Thus mobile stations (MEI.sub.1 to ME.sub.n) are assigned to one of several equipment lists (B, G, W; black, grey, white list). This assignment must be checked by the mobile switching center (MSC) prior to the establishment of a connection. The present method uses an algorithm where each equipment number (MEI.sub.1 to MEI.sub.n) is assigned a search key (KEY.sub.1 to KEY.sub.p ; KEY) such that groups of equipment numbers (MEI.sub.1 to MEI.sub.n) correspond with a respective one of the search keys (KEY.sub.1 to KEY.sub.p ; KEY), and that the search key (KEY.sub.1 to KEY.sub.p ; KEY) covers a number of different structural elements (S.sub.1 to S.sub.q ; DAT). In a corresponding apparatus for determining the assignment of a mobile station (ME.sub.1 to ME.sub.n) to equipment lists (B, G, W) containing a number of equipment numbers (MEI.sub.1 to MEI.sub.n), a memory device (MEM) has as a memory device for different structural elements (S.sub.1 to S.sub.q ; DAT), and the controller is provided with a converting device (GEN) for generating a search key (KEY.sub.1 to KEY.sub.p ; KEY) from an equipment number (MEI.sub.1 to MEI.sub.n), with a comparator (COMP) for determining the association of an equipment number (MEI.sub.1 to MEI.sub.n) with a structural element (S.sub.1 to S.sub.q ; DAT), and has an access device (ACC) for reading different structural elements (S.sub.1 to S.sub.q ; DAT) from the memory device (MEM), the access device (ACC) being designed to access the structural elements (S.sub.1 to S.sub.q ; DAT) by means of a search key (KEY.sub.1 to KEY.sub.p ; KEY).

Method and apparatus for determining the assignment of a mobile station

A method of determining a temporary subscriber number (TMSI) in a subscriber data base is disclosed. Subscriber data bases with large subscriber-data fluctuations require special strategies to ensure optimum utilization of the available storage space while keeping access times as short as possible. In addition, subscriber anonymity is to be ensured. A method is provided for assigning a memory location to each subscriber via a temporary subscriber number (4-byte TMSI). The invention uses an internal structure for the TMSI which consists of several logically independent elements which, on the one hand, permit as large an addressing range as possible and, on the other hand, preclude any confusion of data records or any identification of the subscriber. In addition, the TMSI is constantly changed. With a 32-bit TMSI, up to 10.sup.6 subscribers can be unambiguously addressed.

Growing community of inventors

Stuttgart, Germany

Matthias Pfundstein