1. A client for connecting a mobile host to a remote network through an access network with a single user password, where the access network may be independent of the remote network in terms of no protocol conversation between authentication servers in the access network and the remote network, respectively, and a virtual single account (VSA) has been set up for a user to connect to the access network and then to the remote network, the client comprising machine readable instructions stored in a memory medium, which when executed by a processor:
generate a VSA password and decryption key from the single password received from the user;
decrypt at least one of a local access network authentication credential and a remote access authentication credential stored in encrypted form in the memory medium;
initiate a local access network connection; and
initiate a remote network access connection.
2. The client recited in claim 1, wherein the machine-readable instructions, which when executed by the processor, initiate a VSA configuration update process with a VSA server.
3. The client recited in claim 2, wherein the machine-readable instructions, which when executed by the processor, initiate the VSA configuration update process by:
constructing a VSA information update request message;
sending the VSA information update request message to the VSA server; and
receiving a VSA information update response message from the VSA server.
4. The client recited in claim 3, wherein the step of decrypting the remote network authentication credential prior to initiating the remote network access connection is authorized by an instruction for the mobile host in the VSA information update request message.
5. The client recited in claim 1, wherein the machine-readable instructions, which when executed by the processor, select a local access network from a current VSA access record stored in the memory medium.
6. The client recited in claim 1, wherein the machine-readable instructions, which when executed by the processor, generate the decryption key in response to a random sequence received from the user.
7. The client recited in claim 1, wherein the machine-readable instructions, which when executed by the processor, generate the VSA password using the expression: VSA password=hash(VSA username\u2225common password\u2225VSA server\u2225remote network ID), wherein the VSA username identifies the user to a VSA server, the common password is the single password from the user, and the remote network ID identifies the remote network serving as a home network for the mobile host.
8. The client recited in claim 3, wherein the machine-readable instructions, which when executed by the processor, generate the VSA update request message \u201cQ\u201d from the expression: Q=VSA username\u2225X\u2225EK1 (Synchronization time\u2225Request content), where X is a random sequence; and K1 is an encryption key calculated from hash (hash (VSA password)\u2225X).
9. The client recited in claim 8, wherein the machine-readable instructions, which when executed by the processor, are responsive to the VSA information update response message \u201cA\u201d derived from the expression: A=Response Code\u2225Y\u2225EK2 (Synchronization time\u2225Response content), wherein Y is a random sequence, and K2 is an encryption key calculated from hash (hash (VSA password)\u2225Y).
10. The client recited in claim 1, wherein the machine-readable instructions, which when executed by the processor, select local access parameters and remote access parameters from a VSA access record stored in the memory medium.
11. A system for connecting a mobile host to a remote network through an access network with a single password, where the access network may be independent of the remote network in terms of no protocol conversation between authentication servers in the access network and the remote network, respectively, and a virtual single account (VSA) has been set up for a user to connect to the access network and then to the remote network, comprising:
a VSA server deployed in the remote network, the VSA server including machine readable instructions stored in a memory medium, which when executed by a processor:
send a VSA information update response message to the mobile host in response to receiving a VSA information update request message from the mobile host, the VSA update response message including current remote access parameters for the remote network;
verify an authentication credential for the remote network received from the mobile host; and
authorize a remote gateway in the remote network to connect the mobile host to the remote network.
12. The system recited in claim 11, wherein the VSA server includes machine readable instructions stored in the memory medium, which when executed by the processor generate the VSA information update response message \u201cA\u201d from the expression: A=Response Code\u2225Y\u2225EK2 (Synchronization time\u2225Response content), wherein Y is a random sequence, and K2 is an encryption key calculated from hash (hash (VSA password)\u2225Y), in response to the VSA information update request message \u201cQ\u201d from the expression: Q=VSA username\u2225X\u2225EK1 (Synchronization time\u2225Request content), where X is a random sequence; and K1 is an encryption key calculated from hash (hash (VSA password)\u2225X).
13. The system recited in claim 11, wherein the VSA server contains a plurality of VSA management records, each management record including a user’s VSA authentication credential.
14. The system recited in claim 11, wherein the VSA server maintains access information for at least one local access network and at least one remote network.
15. The system recited in claim 14, wherein the access information includes client information for mobile hosts, and management information for at least one additional VSA server.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A network management server of a wireless network system, the server comprising:
a neighborhood (NH) database configured to maintain capabilityconfiguration information with respect to at least one neighbor network;
a communication interface configured to receive a request message for the capabilityconfiguration information of a neighbor network or all of neighbor networks from a mobile station, which is connected via a predetermined access point or a predetermined base station; and
a database management unit configured to
extract the capabilityconfiguration information of the neighbor network, which is included in the request message, or of all of the neighbor networks, from the NH database, and
control a reply message comprising the capabilityconfiguration information to be transmitted to the mobile station via the communication interface, the capabilityconfiguration information comprising a network access server (NAS) identification (ID) of an access point or a base station of the neighbor network,
wherein the mobile station receives beacon information comprising a media access control (MAC) address of the access point or the base station of the neighbor network, and the request message
includes the MAC address when the reply message is to comprise the capabilityconfiguration information of the neighbor network, and
does not include the MAC address when the reply message is to comprise the capabilityconfiguration information of all of the neighbor networks.
2. The server of claim 1, wherein the network management server comprises a dynamic host configuration protocol (DHCP) server.
3. The server of claim 1, wherein the request message comprises a service identifier and an option length.
4. The server of claim 1, wherein:
the reply message comprises a service identifier and an option length; and
the reply message further comprises
the capabilityconfiguration information of the neighbor network, when the MAC address of the neighbor network is included in the request message, and
the capabilityconfiguration information of all of the at least one neighbor network, which are recorded in the NH database, when the MAC address information of the neighbor network is not included in the request message.
5. The server of claim 1, wherein:
the request message is in a format of a media independent handover function (MIHF) frame; and
the request message comprises
a media independent handover (MIH) identifier field comprising a service identifier and an option length, and
a MIHF payload field selectively comprising the MAC address of the neighbor network.
6. The server of claim 1, wherein:
the reply message is in a format of a media independent handover function (MIHF) frame; and
the reply message comprises
a media independent handover (MIH) identifier field comprising a service identifier and an option length, and
a MIHF payload field comprising the capabilityconfiguration information of the neighbor network.
7. The server of claim 6, wherein the capabilityconfiguration information of the neighbor network that is included in the MIHF payload field comprises the capabilityconfiguration information with respect to all of the at least one neighbor network, which are recorded in the NH database, or the neighbor network included in the request message.
8. The server of claim 1, wherein the network management server is located in each wireless network of the wireless network system.
9. The server of claim 1, wherein the capabilityconfiguration information is associated with the access point or the base station of the neighbor network, and further comprises the MAC address, or an operator identifier, or an internet protocol (IP) identifier information, or a network type, or a radio type, or a roaming partner list, or security, or quality of service (QoS) level information of each network, or current load information for each neighbor network, or a geographical location, or a pre-authentication function, or a pricing plan, or a location based service (LBS) list, or information of supporting a virtual private network (VPN), or a physical layer type, or a channel parameter, or any combination thereof.
10. The server of claim 1, wherein the wireless network system comprises an all internet protocol (ALL-IP).
11. A method of discovering and connecting to a neighbor network for a mobile station, the method comprising:
receiving beacon information from the neighbor network;
identifying the neighbor network by using the beacon information;
transmitting a request message for capabilityconfiguration information of the neighbor network or all of neighbor networks to a network management server via a predetermined access point or a predetermined base station;
receiving a reply message comprising the capabilityconfiguration information with respect to the neighbor network or all of the neighbor networks from the network management server, the capabilityconfiguration information comprising a network access server (NAS) identification (ID) of an access point or a base station of the neighbor network; and
establishing a three-way handshake with the neighbor network based on the received capabilityconfiguration information to provide a substantially seamless transition in service for the mobile station,
wherein the beacon information comprises a media access control (MAC) address of the access point or the base station of the neighbor network, and the request message
includes the MAC address when the reply message is to comprise the capabilityconfiguration information of the neighbor network, and
does not include the MAC address when the reply message is to comprise the capabilityconfiguration information of all of the neighbor networks.
12. The method of claim 11, wherein the network management server comprises a dynamic host configuration protocol (DHCP) server.
13. The method of claim 11, wherein the request message comprises a service identifier and an option length.
14. The method of claim 11, wherein:
the reply message comprises a service identifier and an option length; and
the reply message further comprises
the capabilityconfiguration information of the neighbor network, when the MAC address of the neighbor network is included in the request message, and
the capabilityconfiguration information of all of the neighbor networks, which are recorded in a neighborhood (NH) database, when the MAC address of the neighbor network is not included in the request message.
15. The method of claim 11, wherein:
the request message is in a format of a media independent handover function (MIHF) frame; and
the request message comprises
a media independent handover (MIH) identifier field comprising a service identifier and an option length, and
a MIHF payload field selectively comprising the MAC address of the neighbor network.
16. The method of claim 11, wherein:
the reply message has a media independent handover function (MIHF) frame format; and
the reply message comprises
a media independent handover (MIH) identifier field comprising a service identifier and an option length, and
a MIHF payload field comprising the capabilityconfiguration information of the neighbor network.
17. The method of claim 16, wherein the capabilityconfiguration information of the neighbor network that is included in the MIHF payload field comprises the capabilityconfiguration information with respect to all of the neighbor networks, which are recorded in a neighborhood (NH) database, or the neighbor network, which is included in the request message.
18. The method of claim 11, wherein the network management server is installed for each wireless network of a wireless network system.
19. The method of claim 11, wherein the capabilityconfiguration information is associated with the access point or the base station of the neighbor network, and further comprises the MAC address, or an operator identifier, or an internet protocol (IP) identifier information, or a network type, or a radio type, or a roaming partner list, or security, or quality of service (QoS) level information of each network, or current load information for each neighbor network, or a geographical location, or a pre-authentication function, or a pricing plan, or a location based service (LBS) list, or information of supporting a virtual private network (VPN), or a physical layer type, or a channel parameter, or any combination thereof.
20. The method of claim 11, further comprising:
analyzing the capabilityconfiguration information of the neighbor network, which is included in the reply message;
selecting the neighbor network to be connected to based on a result of the analysis; and
connecting to the selected neighbor network.
21. A non-transitory computer-readable recording medium storing a program for implementing a neighbor network discovery and connection method for a mobile station comprising:
receiving beacon information from the neighbor network;
identifying the neighbor network by using the beacon information;
transmitting a request message for capabilityconfiguration information of the neighbor network or all of neighbor networks to a network management server via a predetermined access point or a predetermined base station;
receiving a reply message comprising the capabilityconfiguration information with respect to the neighbor network or all of the neighbor networks from the network management server, the capabilityconfiguration information comprising a network access server (NAS) identification (ID) of an access point or a base station of the neighbor network; and
establishing a three-way handshake with the neighbor network based on the received capabilityconfiguration information to provide a substantially seamless transition in service for the mobile station,
wherein the beacon information comprises a media access control (MAC) address of the access point or the base station of the neighbor network, and the request message
includes the MAC address when the reply message is to comprise the capabilityconfiguration information of the neighbor network, and
does not include the MAC address when the reply message is to comprise the capabilityconfiguration information of all of the neighbor networks.
22. A method of providing neighbor network information, the method comprising:
maintaining a neighborhood (NH) database recording capabilityconfiguration information with respect to at least one neighbor network, which is located around a network management server;
receiving a request message for the capabilityconfiguration information of a neighbor network or all of neighbor networks from a mobile station, which is connected via a predetermined access point or a predetermined base station;
extracting the capabilityconfiguration information of the neighbor network, which is included in the request message, or of all of the neighbor networks, from the NH database; and
transmitting a reply message comprising the capabilityconfiguration information to the mobile station, the capabilityconfiguration information comprising a network access server (NAS) identification (ID) of an access point or a base station of the neighbor network,
wherein the mobile station receives beacon information comprising a media access control (MAC) address of the access point or the base station of the neighbor network, and the request message
includes the MAC address when the reply message is to comprise the capabilityconfiguration information of the neighbor network, and,
does not include the MAC address when the reply message is to comprise the capabilityconfiguration information of all of the neighbor networks.
23. The method of claim 22, wherein the network management server is a dynamic host configuration protocol (DHCP) server.
24. A non-transitory computer-readable recording medium storing a program for implementing a method of providing neighbor network information, the method comprising:
maintaining a neighborhood (NH) database recording capabilityconfiguration information with respect to at least one neighbor network, which is located around a network management server;
receiving a request message for the capabilityconfiguration information of a neighbor network or all of neighbor networks from a mobile station, which is connected via a predetermined access point or a predetermined base station;
extracting the capabilityconfiguration information of the neighbor network, which is included in the request message, or of all of the neighbor networks, from the NH database; and
transmitting a reply message comprising the capabilityconfiguration information to the mobile station, the capabilityconfiguration information comprising a network access server (NAS) identification (ID) of an access point or a base station of the neighbor network,
wherein the mobile station receives beacon information comprising a media access control (MAC) address of the access point or the base station of the neighbor network, and request message
includes the MAC address when the reply message is to comprise the capabilityconfiguration information of the neighbor network, and
does not include the MAC address when the reply message is to comprise the capabilityconfiguration information of all of the neighbor networks.
25. The server of claim 1, wherein the capabilityconfiguration information is associated with the access point or the base station of the neighbor network.
26. The server of claim 1, wherein the capabilityconfiguration information is associated with the access point or the base station of the neighbor network, and further comprises a roaming partner list, current load information for each neighbor network, a pre-authentication function, a pricing plan, a location based service (LBS) list, and information of supporting a virtual private network (VPN).
27. The server of claim 1, wherein the capabilityconfiguration information is associated with the access point or the base station of the neighbor network, and further comprises the MAC address, an operator identifier, an internet protocol (IP) identifier information, a network type, a radio type, a roaming partner list, quality of service (QoS) level information of each network, current load information for each neighbor network, a geographical location, a pre-authentication function, a pricing plan, a location based service (LBS) list, information of supporting a virtual private network (VPN), a physical layer type, and a channel parameter.
28. The server of claim 1, wherein the request message further selectively comprises MAC type information of the neighbor network, the MAC type information comprising a size and a format of the MAC address of the neighbor network.