Authentication in heterogeneous IP networks

摘要

The invention proposes a system for authenticating and authorizing network services comprising: a mobile device being adapted to, upon receipt of an information message indicating at least one network access type, determine the network access type, to create a start message containing at least a user identity, and to encapsulate the start message in an authentication message compatible with the access network identified in the information message, and an access controller for reading the encapsulated message from the mobile and forwarding the encapsulated message to an authentication server identified in the encapsulated message. The invention also proposes a corresponding method for authenticating and authorizing network services, and an access control device, a subscriber device and a router device.

主权项

1. An apparatus comprising:
at least one processor; and at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least: receive a message in which a start message containing at least a user identity and authentication data is encapsulated, the message being compatible with an access network corresponding to a network access type determined from an information message previously transmitted by the apparatus, wherein the start message initiates authentication regardless of which of a plurality of network access types is determined; read the encapsulated message; and transmit the encapsulated message to an authentication server identified in the encapsulated message.