Validating user identity by cooperation between core network and access controller

摘要

An identifier, required by a radio access network controller in order to support resource allocation associated with a predetermined condition, is sent from a core network to the radio access network controller independently of the predetermined condition. The identifier is thus available to the radio access network controller for verification of mobile user identity, regardless of whether it is needed to support resource allocation. A radio access network controller can receive an identifier in a communication sent by a core network according to a communication protocol. The radio access network controller terminates the communication protocol to access the communication, and uses the identifier for verification of mobile user identity.

主权项

1. A radio access network controller interoperable with a wireless access point providing a mobile station with wireless access to a core network, said controller comprising:
at least one microprocessor; a non-transitory computer-readable storage medium, coupled to the at least one microprocessor, including computer-readable instructions, when executed by the at least one microprocessor, are further configured for: creating, when the mobile station registers with the radio access network, a mobile station context which includes a first identifier, and storing the mobile station context in a mobile station context storage; receiving a handover request message transmitted by the core network, said handover request message providing, for use by said radio access network controller, the first identifier used by the core network to identify the mobile station; identifying the mobile station context associated with the first identifier; creating a handover command message that contains the first identifier; associating the handover command message with the mobile station context and sending the handover command message to the core network for forwarding to the mobile station; receiving a handover access message from a mobile station containing the handover command message; searching the mobile station context storage to identify a mobile station context associated with the received handover command message; extracting the first identifier from the received handover command message; extracting a second identifier from the identified mobile station context; comparing the first identifier extracted from the received handover command message to the second identifier; and determining whether the first identifier extracted from the handover request message matches the second identifier to verify the identity of the mobile station for handover.