MVNO Mobility Access via Proxy Authentication Across Partner Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for supporting device mobility in virtual mobile network operators (MVNOs) face challenges such as limited coverage areas, the need for dual SIM capability in devices, and security concerns over credential sharing, which hinder seamless access to partner Mobile Network Operators (MNOs) and application servers.
Innovation Solution
A method where a customer device, subscribed to a Home-Mobile Virtual Network Operator (H-MVNO), can automatically connect to a partner MNO network using a proxy authentication mechanism, with the visiting network's HSS or AUSF acting as a proxy, allowing access to the H-MVNO application server without manual user intervention, and maintaining user profiles and QoS settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Area of stationary object
If MVNO subscribers are equipped with dual SIM capability to access partner MNO networks, then network coverage area is improved, but device complexity increases and compatibility with legacy devices deteriorates
Solution Approach 1:
The patent introduces a roaming partner network as an intermediary between the MVNO subscriber and the application server. The subscriber connects to the partner MNO network, which then provides access to the MVNO's application server, eliminating the need for dual SIM capability while extending coverage area.
Solution Approach 2:
The patent separates the authentication and service access functions into distinct components. The subscriber's credentials are segmented into home network credentials and partner network credentials, allowing the device to use a single SIM while the network infrastructure handles the segmentation and routing to appropriate servers.
2Adaptability or versatility
If MVNO shares subscriber credentials and authentication information with partner MNO, then service access is improved, but security control deteriorates
Solution Approach 1:
The patent introduces an authentication server in the MVNO network as an intermediary that handles credential verification. The partner MNO network forwards authentication requests to the MVNO's authentication server, which then validates credentials and returns authorization decisions, allowing service access without direct credential sharing and maintaining security control.
3Measurement precision
If MVNO maintains continuous updates of subscriber credentials and profiles, then service accuracy is improved, but information management complexity increases
Solution Approach 1:
The patent implements preliminary action by having the MVNO network pre-authenticate subscribers and establish service permissions before the subscriber accesses partner networks. The authentication server pre-processes credential validation and service authorization, so that when subscribers roam to partner networks, the information is already current and accurate without requiring continuous real-time updates during roaming.
4Area of stationary object
If MVNO subscribers connect to partner MNO networks, then network coverage is improved, but access to home application server deteriorates
Solution Approach 1:
The patent introduces the partner MNO network as an intermediary that facilitates access to the MVNO's application server. When subscribers connect to partner networks, the partner network infrastructure mediates the connection, routing traffic through appropriate gateways to reach the home application server, thereby maintaining coverage extension while preserving server access.
Data Source
AI summary
A customer communications device of a first network operator (H-MVNO) detects a network identifier from an access point of a second network (MNO) indicating that the second network provides access for first network devices in accordance with a sharing agreement. The device registers via the access point of the second network. Authentication and authorization for the device is performed by a first network security entity on behalf second network, with the device using a restricted use first IP address acquired from a DHCP in the second network. The home network (H-MVNO) sets up the session QoS from the home PCF and home SMF toward the visiting network SMF. The visiting network SMF executes the traffic QoS class via the visiting UPF with the device using a second IP address acquired from a DHCP in the second network for user plane data traffic through the second network.