Transfer of packet data in system comprising mobile terminal, wireless local network and mobile network

Abstract

A method of arranging the transmission of packet data in a system comprising a mobile terminal, a wireless local network and a mobile network that includes end-to-end service related parameters that are signalled via a separate signalling element. A resource authorization identifier is transmitted to the mobile network via the local network. Authorization is requested from the signalling element on the basis of the resource authorization identifier. A tunnel between the mobile terminal and the mobile network is bound to the end-to-end data flow of the mobile terminal on the basis of an authorization from the signalling element and tunnel identification information identifying the tunnel.

The invention claimed is: 
     
       1. A method of arranging transmission of packet data in a system comprising a mobile terminal, a wireless local network and a mobile network, the method comprising:
 signaling end-to-end service related parameters for communication between the mobile terminal and the wireless local network, 
 communicating a resource authorization identifier from a policy decision function to the mobile terminal via the wireless local network, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem, 
 receiving a request for authorization from the mobile network on the basis of the resource authorization identifier, 
 receiving an authorization response to bind a tunnel between the mobile terminal and the mobile network to an end-to-end data flow of the mobile terminal, wherein the authorization response comprises identification information on the end-to-end data flow and tunnel identification information identifying the tunnel, 
 transmitting at least one filter or gate parameter to the mobile network, wherein the at least one filter or gate parameter is associated with the tunnel, and filtering or gating is arranged in the mobile network to or from the tunnel based on the association, 
 wherein a first tunnel between the mobile terminal and a first network element of the mobile network is established for end-to-end service parameter signaling, and a second tunnel between the mobile terminal and a second network element of the mobile network is established for user data transmission after the reception of resource authorization identifier, and 
 wherein the receiving the request for authorization from the mobile network on the basis of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the policy decision function. 
 
     
     
       2. A method as claimed in  claim 1 , wherein the same tunnel between the mobile network and a network element of the mobile network and utilizing the data transmission resources of the local network is used for signalling purposes and for user data transmission. 
     
     
       3. A method as claimed in  claim 1 , wherein the tunnel between the mobile terminal and the mobile network is an IPSec tunnel, whereby the tunnel is established by utilizing an IKE (Internet Key Exchange) protocol. 
     
     
       4. A method as claimed in  claim 3 , wherein an association is arranged between the tunnel and a 3GPP-WLAN interworking system bearer. 
     
     
       5. A method as claimed in  claim 1 , wherein the mobile network is a 3GPP network offering a packet-switched service comprising at least one network element supporting access via a WLAN (Wireless Local Area Network). 
     
     
       6. The method of  claim 1 , wherein the policy decision function is a component of a proxy call session control function. 
     
     
       7. The method of  claim 1 , wherein the policy decision function is separate from an Authentication, Authorization, and Accounting (AAA) server. 
     
     
       8. A wireless system comprising a mobile terminal, a wireless local network, a network element, a signaling element and a mobile network, wherein the wireless local network is configured to provide data transmission for the mobile terminal, the mobile terminal is configured to receive a resource authorization identifier from a policy decision function during a negotiation of end-to-end service related parameters,
 the mobile terminal is configured to transmit the resource authorization identifier to the mobile network via the wireless local network, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem, 
 the mobile network is configured to request authorization from the policy decision function on the basis of the resource authorization identifier, 
 the mobile network is configured to bind a tunnel between the mobile terminal and the mobile network to an end-to-end data flow of the mobile terminal on the basis of an authorization response received from the policy decision function and comprising identification information on the end-to-end data flow and tunnel identification information identifying the tunnel, 
 wherein the network element is configured to transmit at least one filter or gate parameter from the signaling element to the mobile network, 
 the network element is configured to associate the at least one filter or gate parameter with the tunnel utilizing local network resources, and the network element is configured to arrange filtering or gating in the mobile network to or from the tunnel based on the association, 
 wherein the network element is configured to establish a first tunnel between the mobile terminal and a first network element of the mobile network for the mobile terminal signaling, and a second tunnel between the mobile terminal and a second network element of the mobile network for user data transmission after the reception of a resource authorization identifier, and 
 wherein the request for authorization from the mobile network on the basis of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the policy decision function. 
 
     
     
       9. A network element for a mobile network connectable to a wireless local network providing data transmission for a mobile terminal, wherein the network element is configured to establish a tunnel with a mobile terminal for transferring information with the mobile terminal accessing the mobile network via the wireless local network, the network element is configured to receive a resource authorization identifier from the mobile terminal, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem, the network element is configured to request authorization from a policy decision function on the basis of the resource authorization identifier, the network element is configured to bind a tunnel between the mobile terminal and the mobile network to an end-to-end data flow of the mobile terminal on the basis of an authorization response received from the policy decision function and comprising identification information on the end-to-end data flow and tunnel identification information identifying the tunnel,
 wherein the network element is configured to transmit at least one filter or gate parameter from a signaling element to the mobile network, 
 the network element is configured to associate the at least one filter or gate parameter with the tunnel utilizing local network resources, 
 the network element is configured to arrange filtering or gating in the mobile network to or from the tunnel based on the association, 
 wherein the network element is configured to establish a first tunnel between the mobile terminal and a first network element of the mobile network for the mobile terminal signaling, and a second tunnel between the mobile terminal and a second network element of the mobile network for user data transmission after the reception of the resource authorization identifier, and 
 wherein the request for authorization on the basis of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the policy decision function. 
 
     
     
       10. A network element according to  claim 9 , wherein the network element is configured to use the same tunnel between the mobile network and a network element of the mobile network and utilizing the data transmission resources of the local network for signalling purposes and for user data transmission. 
     
     
       11. A network element according to  claim 9 , wherein the tunnel between the mobile terminal and the mobile network is an IPSec tunnel, whereby the tunnel is established by utilizing an IKE (Internet Key Exchange) protocol. 
     
     
       12. A network element according to  claim 9 , wherein the network element is a 3GPP network element offering as pocket-switched service for a mobile terminal accessing a WLAN (Wireless Local Area Network). 
     
     
       13. A system comprising:
 a wireless terminal, wherein the wireless terminal is configured to connect to a wireless local network, 
 the wireless terminal is configured to establish a tunnel with a network element of a mobile network via the wireless local network, 
 the wireless terminal is configured to receive a resource authorization identifier from a separate policy decision function during a the negotiation of end-to-end service related parameters, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem, 
 the wireless terminal is configured to transmit the resource authorization identifier to the mobile network by using the tunnel, wherein the tunnel between the mobile wireless terminal and the mobile network is an IPSec tunnel, whereby the tunnel is established by utilizing an IKE (Internet Key Exchange) protocol, 
 wherein the network element is configured to transmit at least one filter or gate parameter from a signaling element to the mobile network, 
 the network element is configured to associate the at least one filter or gate parameter with the tunnel utilizing local network resources, and the network element is configured to arrange filtering or gating in the mobile network to or from the tunnel based on the association, 
 wherein the network element is configured to establish a first tunnel between the mobile wireless terminal and a first network element of the mobile network for the mobile wireless terminal signaling, and a second tunnel between the mobile wireless terminal and a second network element of the mobile network for user data transmission after the reception of a resource authorization identifier, and 
 wherein a request for authorization from the mobile network on the basis of the resource resources authorization identifier comprises receiving the request at the separate policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the separate policy decision function. 
 
     
     
       14. A wireless terminal as claimed in  claim 13 , wherein the tunnel is used for signaling purposes and for user data transmission. 
     
     
       15. A wireless terminal as claimed in  claim 13 , wherein a first tunnel is established for end-to-end service parameter signalling, and a second tunnel is established for user data transmission after the reception of the resource authorization identifier. 
     
     
       16. A non-transitory computer readable medium encoded with computer executable instructions configured to:
 receive a resource authorization identifier from a mobile terminal of a mobile network, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem, 
 request authorization from a policy decision function on the basis of the resource authorization identifier, and 
 bind a tunnel between the mobile terminal and the mobile network to an end-to-end data flow of the mobile terminal on the basis of an authorization response received from the policy decision function and comprising identification information on the end-to-end data flow and tunnel identification information identifying the tunnel, wherein the tunnel between the mobile terminal and the mobile network is an IPSec tunnel, whereby the tunnel is established by utilizing an IKE (Internet Key Exchange) protocol, 
 wherein a network element is configured to transmit at least one filter or gate parameter from a signaling element to the mobile network, the network element is configured to associate the at least one filter or gate parameter with the tunnel utilizing local network resources, and the network element is configured to arrange filtering or gating in the mobile network to or from the tunnel based on the association, 
 wherein the network element is configured to establish a first tunnel between the mobile terminal and a first network element of the mobile network for the mobile terminal signaling, and a second tunnel between the mobile terminal and a second network element of the mobile network fur user data transmission after the reception of a resource authorization identifier, and wherein the request for authorization from the policy decision function on the basis of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the policy decision function. 
 
     
     
       17. A wireless system comprising:
 a wireless network, a policy decision function, a network element and a signaling element; 
 thea wireless network configured to provide data transmission in a network; 
 thea policy decision function coupled to the wireless network and configured to provide a resource authorization identifier during athe negotiation of end-to-end service related parameters, 
 wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem; 
 wherein the wireless network is configured to request authorization from the policy decision function on the basis of the resource authorization identifier, and to bind a tunnel for an end-to-end data flow on the basis of an authorization response received from the policy decision function and comprising identification information on the end-to-end data flow and tunnel identification information identifying the tunnel, 
 wherein the network element is configured to transmit at least one filter or gate parameter from the signaling element to the mobile wireless network, 
 the network element is configured to associate the at least one filter or gate parameter with the tunnel utilizing local network resources, and 
 the network element is configured to arrange filtering or gating in the mobile wireless network to or from the tunnel based on the association, 
 wherein the network element is configured to establish a first tunnel between a the mobile terminal and a first network element of the mobile wireless network for the mobile terminal signaling, and a second tunnel between the mobile terminal and a second network element of the mobile wireless network for user data transmission after the reception of a resource authorization identifier, and 
 wherein the request for authorization from the policy decision function on the basis of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the policy decision function. 
 
     
     
       18. A method of arranging transmission of packet data in a system comprising a mobile terminal, a wireless local network and a mobile network, the method comprising:
 signaling end-to-end service related parameters for communication between the mobile terminal and the wireless local network, 
 receiving a resource authorization identifier from a policy decision function at the mobile terminal, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem, 
 sending a request for authorization on the basis of the resource authorization identifier, and sending an authorization response to bind a tunnel between the mobile terminal and the mobile network to an end-to-end data flow of the mobile terminal wherein the authorization response comprises identification information on the end-to-end data flow and tunnel identification information identifying the tunnel, 
 transmitting at least one filter or gate parameter to the mobile network, wherein the at least one filter or gate parameter is associated with the tunnel, and filtering or gating is arranged in the mobile network to or from the tunnel based on the association, 
 wherein a first tunnel between the mobile terminal and a first network element of the mobile network is established for end-to-end service parameter signaling, and a second tunnel between the mobile terminal and a second network element of the mobile network is established for user data transmission after the reception of resource authorization identifier, and 
 wherein the request for authorization on the basis of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the policy decision function. 
 
     
     
       19. A network element configured to receive a resource authorization identifier from a mobile terminal, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem, wherein the network element is further configured to:
 request authorization from a policy decision function on the basis of the resource authorization identifier, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia system   bind a tunnel between the mobile terminal and a mobile network to an end-to-end data flow of the mobile terminal on the basis of an authorization response received from the policy decision function and comprising identification information on the end-to-end data flow and tunnel identification information identifying the tunnel,   transmit at least one filter or gate parameter from a signaling element to the mobile network,   associate the at least one filter or gate parameter with the tunnel utilizing local network resources,   arrange filtering or gating in the mobile network to or from the tunnel based on the association, and   establish a first tunnel between the mobile terminal and a first network element of the mobile network for the mobile terminal signaling, and a second tunnel between the mobile terminal and a second network element of the mobile network for user data transmission after the reception of the resource authorization identifier,   wherein the request for authorization on the basis of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), and wherein the PDG is configured to arrange a binding of the tunnel on the basis of the authorization from the policy decision function.    
     
     
       20. The network element according to claim 19, wherein any terminal between the mobile terminal and the mobile network is configured to use the same tunnel between the mobile terminal and the mobile network for signaling purposes and for user data transmission.  
     
     
       21. The network element according to claim 19, wherein the tunnel between the mobile terminal and the mobile network is an IPSec tunnel, and wherein the tunnel is established by utilizing an internet key exchange protocol.  
     
     
       22. The network element according to claim 19, wherein the network element comprises a network element offering a packet-switched service for a mobile terminal accessing an ad hoc wireless local area network.  
     
     
       23. The network element according to claim 19, wherein the authorization token is configured to be received by the mobile terminal via a payload packet during a security negotiation with the network element.  
     
     
       24. The network element according to claim 19, wherein the mobile terminal is configured to transfer the authorization token to the network in a field of a negotiation message.  
     
     
       25. A method of arranging transmission of packet data in a system comprising a mobile terminal and a mobile network, the method comprising:
 communicating a resource authorization identifier from a policy decision function to the mobile terminal, wherein the resource authorization identifier is an authorization token in an internet protocol multimedia subsystem,   receiving a request for authorization from the policy decision function on the basis of the resource authorization identifier,   binding a tunnel between the mobile terminal and the mobile network to an end-to-end data flow of the mobile terminal on the basis of an authorization response received from the policy decision function and comprising identification information on the end-to-end data flow and tunnel identification information identifying the tunnel,   transmitting at least one filter or gate parameter from a signaling element to the mobile network, wherein the at least one filter or gate parameter is associated with the tunnel, and filtering or gating is arranged in the mobile network to or from the tunnel based on the association;   establishing a first tunnel between the mobile terminal and a first network element of the mobile network for the mobile terminal signaling, and a second tunnel between the mobile terminal and a second network element of the mobile network for user data transmission after the reception of the resource authorization identifier, and   wherein the receiving the request for authorization from the mobile network on the bases of the resource authorization identifier comprises receiving the request at the policy decision function from a packet data gateway (PDG), wherein the PDG is configured to arrange the binding of the tunnel on the basis of the authorization from the policy decision function.    
     
     
       26. The method according to claim 25, wherein the same tunnel between the mobile terminal and mobile network is utilized by another mobile terminal therebetween for signaling purposes and for user data transmission.  
     
     
       27. The method according to claim 25, wherein the authorization token is communicated to the mobile terminal via a payload packet during a security negotiation with the mobile network.  
     
     
       28. The method according to claim 25, further comprising transferring the authorization token from the mobile terminal to the packet data gateway in a field of a negotiation message.  
     
     
       29. A wireless system comprising:
 a mobile terminal and a mobile network, wherein the mobile terminal and mobile network are connected via a binding tunnel,   a network element configured to establish and modify of the binding tunnel on the basis of an authorization command from a second network element, wherein the second network element is connected to the mobile terminal via a second tunnel; and   wherein the mobile terminal is configured to request an authorization token of an internet protocol multimedia system from the mobile network, the request for the authorization token comprising a plurality of flow identifiers, wherein each of the plurality of flow identifiers relate to a different media type.    
     
     
       30. The wireless system according to claim 29, wherein the network element is a packet data gateway.  
     
     
       31. The wireless system according to claim 29, wherein the network element is configured to modify the binding tunnel based on receiving a new set of plurality of flow identifiers from the mobile terminal.  
     
     
       32. A method comprising:
 generating, by a mobile terminal, a plurality of flow identifiers, each of the plurality of flow identifiers relating to a different media type,   requesting, by the mobile terminal, an authorization token from a network element of a mobile network, wherein the authorization token is based on the plurality of flow identifiers, wherein the authorization token is a token in an internet protocol multimedia system;   receiving, by the mobile terminal, tunnel identification information identifying the binding tunnel, wherein the binding tunnel creates an end-to-end user data flow between the mobile terminal and the mobile network on the basis of an authorization token received from the network element, and   requesting, by the mobile terminal, to modify the binding tunnel through a second binding tunnel to a second network element of a mobile network.    
     
     
       33. The method according to claim 32, wherein the network element is in communication with a policy decision function.  
     
     
       34. The method according to claim 32, further comprising using each of the plurality of flow identifiers to utilize a unique quality of service with the binding tunnel for each communication.  
     
     
       35. The method according to claim 32, wherein a second network element performs the modifying of the binding tunnel.  
     
     
       36. The method according to claim 35, wherein the second network element comprises a packet data gateway.  
     
     
       37. The method according to claim 32, further comprising sending, by the mobile terminal, the new set of flow identifiers through the binding tunnel.  
     
     
       38. The method according to claim 32, wherein the subsequent request comprises receiving the request at a policy decision function from the second network element.