US2014013383A1PendingUtilityA1

Network node and method to control routing or bypassing of deployed traffic detection function nodes

45
Assignee: PANCORBO-MARCOS MARIA BELENPriority: Mar 22, 2011Filed: Oct 26, 2011Published: Jan 9, 2014
Est. expiryMar 22, 2031(~4.7 yrs left)· nominal 20-yr term from priority
Inventors:Maria Belén Pancorbo-MarcosLouis Segura
H04L 63/20H04L 43/00H04L 12/1407H04L 63/102
45
PatentIndex Score
0
Cited by
0
References
0
Claims

Abstract

A network is described herein which can control, through subscriber profile data and/or policy preconfigured control data, whether deep packet inspection for data flow/s for an Internet Protocol-Connectivity Access Network (IP-CAN) session established by an end user should take place, or not, according to a defined “User Privacy Policy”, and, in the former case, to which traffic detection function (TDF) node the data flow(s) should be directed.

Claims

exact text as granted — not AI-modified
1 . A network node that participates in an Internet Protocol-Connectivity Access Network (IP-CAN) session establishment within a telecommunications network, the network node configured to:
 receive a user privacy policy of an end user, wherein the user privacy policy indicates whether data flows to and from a user equipment used by the end user are to be routed through a traffic detection function (TDF) node; and   utilize the user privacy policy during the IP-CAN session establishment to assign an IP address to the end user, wherein the assigned IP address ensures that the data flows to and from the user equipment are one of routed and not routed through a TDF node depending on the user privacy policy.   
     
     
         2 . The network node of  claim 1 , further configured to:
 ensure the data flows to and from the user equipment are routed through the same TDF node when the user privacy policy indicates that the data flows to and from the user equipment are to be routed through a TDF node.   
     
     
         3 . The network node of  claim 1 , wherein the user privacy policy is received from a Home Subscriber Server (HSS) and an Authentication Authorization Accounting Server (AAA), and wherein the user privacy policy indicates whether the end user is to be assigned an IP address which is associated with one of an Access Point Name (APN) and a separate IP address pool in which no TDF node is one of deployed and associated with another APN or a separate IP address pool in which a TDF node is deployed. 
     
     
         4 . The network node of  claim 1 , further configured to:
 partition an Access Point Name (APN) into separate IP address pools where one IP address pool has IP addresses that bypass a TDF node and another IP address pool has IP addresses that do not bypass a TDF node; and   assign an IP address to the end user from one of the separate IP address pools to enforce the user privacy policy, wherein the assigned IP address is a source IP address which ensures that the data flows are one of routed and not routed through a TDF node depending on the user privacy policy.   
     
     
         5 . The network node of  claim 1 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy points to a particular service Access Point Name (APN) which one of has a TDF node deployed in a path and does not have a TDF node deployed in the path depending on the user privacy policy. 
     
     
         6 . The network node of  claim 1 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy defines and points to a set of local predefined Policy and Charging Enforcement Function (PCEF) configuration data to be used for at least one of IP address allocation/IP configuration and subsequent routing with respect to at least one TDF. 
     
     
         7 . The network node of  claim 1 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy provides a TDF bypass indication. 
     
     
         8 . The network node of  claim 1 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy has a permit unrestricted indicator which is used when a TDF node cannot be bypassed, and wherein the permit unrestricted indicator indicates that a TDF node is to bypass enforcement actions on the data flows to and from the user equipment. 
     
     
         9 . The network node of  claim 1 , wherein the user privacy policy is conveyed by an access-accept message which is received from a Policy and Charging Rules Function (PCRF) which acted as a one of Radius and Diameter proxy and interfaced with an Authentication Authorization Accounting Server (AAA), and wherein the access-accept message indicates an Access Point Name (APN) which is to be used when assigning the IP address to ensure that the data flows to and from the user equipment are one of routed and not routed through a TDF node depending on the user privacy policy. 
     
     
         10 . The network node of  claim 1 , wherein the user privacy policy is conveyed by an access-accept message which is received from a Policy and Charging Rules Function (PCRF) which acted as a one of Radius and Diameter proxy and interfaced with an Authentication Authorization Accounting Server (AAA), and wherein the access-accept message indicates a local IP pool which is to be used when assigning the IP address to ensure that the data flows to and from the user equipment are one of routed and not routed through a TDF node depending on the user privacy policy. 
     
     
         11 . A method implemented by a network node that participates in an Internet Protocol-Connectivity Access Network (IP-CAN) session establishment within a telecommunications network, the method comprising:
 receiving a user privacy policy of an end user, wherein the user privacy policy indicates whether data flows to and from a user equipment used by the end user are to be routed through a traffic detection function (TDF) node; and   utilizing the user privacy policy during the IP-CAN session establishment to assign an IP address to the end user, wherein the assigned IP address ensures that the data flows to and from the user equipment are one of routed and not routed through a TDF node depending on the user privacy policy.   
     
     
         12 . The method of  claim 11 , further comprising ensuring the data flows to and from the user equipment are routed through the same TDF node when the user privacy policy indicates that the data flows to and from the user equipment are to be routed through a TDF node. 
     
     
         13 . The method of  claim 11 , wherein the user privacy policy is received from one of a Home Subscriber Server (HSS) and an Authentication Authorization Accounting Server (AAA), and wherein the user privacy policy indicates whether the end user is to be assigned an IP address which is associated with one of an Access Point Name (APN) and a separate IP address pool in which no TDF node is one of deployed and associated with another APN or a separate IP address pool in which a TDF node is deployed. 
     
     
         14 . The method of  claim 11 , further comprising:
 partitioning an Access Point Name (APN) into separate IP address pools where one IP address pool has IP addresses that bypass a TDF node and another IP address pool has IP addresses that do not bypass a TDF node; and   assigning an IP address to the end user from one of the separate IP address pools to enforce the user privacy policy, wherein the assigned IP address is a source IP address which ensures that the data flows are one of routed and not routed through a TDF node depending on the user privacy policy.   
     
     
         15 . The method of  claim 11 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy points to a particular service Access Point Name (APN) which one of has a TDF node deployed in a path and does not have a TDF node deployed in the path depending on the user privacy policy. 
     
     
         16 . The method of  claim 11 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy defines and points to a set of local predefined Policy and Charging Enforcement Function (PCEF) configuration data to be used for at least one of IP address allocation and IP configuration and subsequent routing with respect to a TDFs. 
     
     
         17 . The method of  claim 11 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy provides a TDF bypass indication. 
     
     
         18 . The method of  claim 11 , wherein the user privacy policy is received from a Policy and Charging Rules Function (PCRF), and wherein the user privacy policy has a permit unrestricted indicator which is used when a TDF node cannot be bypassed, and wherein the permit unrestricted indicator indicates that a TDF node is to bypass enforcement actions on the data flows to and from the user equipment. 
     
     
         19 . The method of  claim 11 , wherein the user privacy policy is conveyed by an access-accept message which is received from a Policy and Charging Rules Function (PCRF) which acted as a one of Radius and Diameter proxy and interfaced with an Authentication Authorization Accounting Server (AAA), and wherein the access-accept message indicates an Access Point Name (APN) which is to be used when assigning the IP address to ensure that the data flows to and from the user equipment are one of routed and not routed through a TDF node depending on the user privacy policy. 
     
     
         20 . The method of  claim 11 , wherein the user privacy policy is conveyed by an access-accept message which is received from a Policy and Charging Rules Function (PCRF) which acted as a one of Radius and Diameter proxy and interfaced with an Authentication Authorization Accounting Server (AAA), and wherein the access-accept message indicates a local IP pool which is to be used when assigning the IP address to ensure that the data flows to and from the user equipment are one of routed and not routed through a TDF node depending on the user privacy policy. 
     
     
         21 . A network node that participates in an Internet Protocol-Connectivity Access Network (IP-CAN) session establishment within a telecommunications network, the network node configured to:
 receive a request for IP-CAN bearer establishment of an user equipment;   send an indication of IP-CAN session establishment to a Policy and Charging Rules Function (PCRF), wherein the PCRF interfaces with a Subscription Profile Repository (SPR) to obtain subscriber related information including a user privacy policy which indicates whether or data flows to and from the user equipment are to be routed through a traffic detection function (TDF) node; and   receive an acknowledgment message from the PCRF, wherein the acknowledgment message includes a configuration option profile which is dependent upon the user privacy policy and defines and points to a set of local predefined PCEF configuration to be used for at least one of IP address allocation and IP configuration and subsequent routing of the data flows to and from the user equipment.   
     
     
         22 . The network node of  claim 21 , wherein the network node is a gateway-Policy and Charging Enforcement Function (PCEF). 
     
     
         23 . A method implemented by a network node that participates in an Internet Protocol-Connectivity Access Network (IP-CAN) session establishment within a telecommunications network, the method comprising:
 receiving a request for IP-CAN bearer establishment of an user equipment;   sending an indication of IP-CAN session establishment to a Policy and Charging Rules Function (PCRF), wherein the PCRF interfaces with a Subscription Profile Repository (SPR) to obtain subscriber related information including a user privacy policy which indicates whether or data flows to and from the user equipment are to be routed through a traffic detection function (TDF) node; and   receiving an acknowledgment message from the PCRF, wherein the acknowledgment message includes a configuration option profile which is dependent upon the user privacy policy and defines and points to a set of local predefined PCEF configuration to be used for at least one of IP address allocation and IP configuration and subsequent routing of the data flows to and from the user equipment.   
     
     
         24 . The method of  claim 23 , wherein the network node is a gateway-Policy and Charging Enforcement Function (PCEF).

Join the waitlist — get patent alerts

Track US2014013383A1 — get alerts on status changes and closely related new filings.

We store only your email — no account needed. See our privacy policy.