Small Cell Local Network Traffic Routing via Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for Local Internet Protocol Access (LIPA) in wireless communication systems do not adequately address how small cells access local networks or protect data transmission paths for local services, leading to inefficiencies and increased core network loading.
Innovation Solution
A method for network traffic routing that involves user equipment connecting to small cells, transmitting identity information for authentication, and routing traffic directly to local networks without going through the core network if authenticated, using an authentication server to determine authorized communication targets and manage traffic routes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If user equipment connects to core network for local service access, then service availability is ensured, but network loading and data transmission delay increase
Solution Approach 1:
The network path is segmented into two options: traditional core network path and direct local network path. The patent enables user equipment to be segmented into authenticated users (who can use LIPA) and unauthenticated users (who must use core network), allowing traffic segmentation based on authentication status to optimize network efficiency and reduce delay for qualified users
2Productivity
If direct local network routing is implemented, then core network load is reduced, but network security and access control become compromised
Solution Approach 1:
Authentication is performed as a preliminary action before enabling direct local network routing. The authentication server verifies user identity and credentials before the user equipment is allowed to establish LIPA connections. This preliminary authentication ensures that only authorized users can bypass the core network and access local services directly, maintaining security while enabling load reduction
Solution Approach 2:
An authentication server is introduced as an intermediary between user equipment and the local network routing decision. This intermediary verifies user credentials and provides authentication results that determine whether direct routing is permitted. The authentication server acts as a security gatekeeper that enables direct routing for authenticated users while maintaining core network security for unauthenticated users
3Ease of operation
If LIPA functionality is enabled without authentication procedure, then service access is simplified, but unauthorized access to local network is permitted
Solution Approach 1:
The authentication system operates autonomously through automated authentication procedures between the authentication server and user equipment. The system self-manages the authentication process, credential verification, and routing decision enforcement without requiring manual intervention. This automated self-service approach maintains operational simplicity while implementing security controls to prevent unauthorized access
Data Source
AI summary
The present invention discloses how a small cell accesses a local network via the LIPA technique and discloses a data transmission path and data transmission protection of a local service. A method for network traffic routing for a user equipment of a wireless communication system is disclosed. The method comprises connecting to a small cell of the wireless communication system, transmitting an user identity information to the small cell, receiving an authentication result of an authentication procedure from the small cell, and obtaining a local service via the small cell and a local network connecting to the small cell without going through a core network connecting to the small cell when the authentication result indicates that the user equipment passes the authentication procedure.