Access terminal configuration and access control

(19) and A (11) 97019 (13) C2

(51) IPC (2011.01)

H04M 48/00

UKRAINE

DESCRIPTION

TO THE INVENTORY PATENT

(54) CONFIGURATION OF ACCESS AND ACCESS CONTROL TERMINAL

(21) a201005536

(22) 07.10.2008

(24) Dec 26, 2011

(86) PCT / 32008/079114, 07.10.2008

(31) 60 / 978,363

(32) 08.10.2007

(33) from

(31) 61 / 025,686

(32) Feb 01, 2008

(33) from

(31) 61 / 061,537

(32) June 13, 2008

(33) from

(31) 12 / 246,394

(32) 10.6.2008

(33) from

(46) Dec 26, 2011, No. 24, 2011

(72) GUPTA RADJARSHI, FROM, PALANIGOUNDERANAND, FROM, ULUPINAR FATHI, from, KHORN HEYVINB., FROM, AGASHE PARAG A., FROM, CHEN JEN MEY, FROM, DESHPANDE MANODZH M., FROM, BALASUBRA-manian srinivasan, from, Nanda Sanjiv, from, Sang Sticks, from

(73) kveklkom inkorporeit, from (56) SHO 2005011134 A; Feb 03, 2005 SHO 2006076404 A; July 20, 2006

HR 010878752; September 25, 2005

SHO 2004077753 A; SHO 2005060562 A; SHO 2007079329 A;

10.09.200407.07.200512.07.2007KR 019397619; 02.06.2006

(57) 1. A communication method comprising the steps of: receiving, from the first access point, identifying at least one other access point to which the access terminal has the right to access, and the identifier is received in the lighthouse radio signal by default, transferred to the first level of power;

are determined on the basis of the identifier, allowing no access to at least one other access point, with the plural of beacon radio signals taken at the second level of power, which is the highest level of power when access is allowed.

2. The method of claim 1, wherein the definition comprises a step, in which the user specifies whether to allow access or not.

3. The method of claim 1, further comprising a step on which, based on the configuration information, is determined, it is necessary to allow access automatically or to allow access in response to a request.

4. The method of claim 1, further comprising a step on which the list of access points is stored, to which access is permitted through the access terminal, and the definition is additionally based on the list.

5. The method of claim 1, further comprising a step on which the list of access points to which the user has chosen not to access is stored, in addition to the definition based on the list.

6. The method of claim 1, wherein the identifier comprises an identifier of a closed subscriber group.

7. The method of claim 1, wherein each access point of at least one access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: transmitting service signals, access to data, registration, and service .

8. Communication device comprising:

means for receiving from the first access point, identifier of at least one other access point to which the access terminal has the right to access; at the same time, the identifier is received in the default radio signal transmitted at the first level of power; and

a means for identifying on the basis of the identifier, whether or not to allow access to at least one of the other access point, while the plurality of beacon radio signals is taken at the second level of power that is higher than the first level of power when access is allowed.

9. The apparatus of claim 8, wherein the definition comprises an offer to the user to determine whether to allow access or not.

10. The device of claim 8, further comprising a means for determining, based on the configuration information, to allow access automatically or to allow access in response to a request.

11. The device of claim 8, further comprising a means for storing a list of access points that can be accessed using the access terminal, and the definition is additionally based on the list.

12. The device of claim 8, further comprising a means for storing a list of access points to which the cores

iA (11) 97019 (13) C2

σ>

3

97019

4

Suvuz chose not to make access, anddefinition is additionally based on the list.

13. The device of claim 8, wherein the identifier comprises an identifier of a closed subscriber group.

14. The apparatus of claim 8, wherein each access point is at least one access point restricted so as not to provide at least one other access terminal at least one of the group consisting of: transmitting service signals, accessing data, registering, and service.

15. Communication device comprising:

communications controller configured to receive from the first access point, identifying at least one other access point, to which the access terminal has the right to access, with the identifier accepted in the lighthouse radio-by default, transmitted to the first level of power; and

access controller configured to determine the identity based on the fact that no access to at least one other access point is allowed, with the plurality of beacon radio signals being received at the second power level, which is the highest level of power when the access is allowed.

16. The apparatus of claim 15, wherein the definition comprises an offer to the user to determine whether to allow access or not.

17. The apparatus of claim 15, wherein the access controller is additionally executed with the ability to determine on the basis of the configuration information, it is necessary to allow access automatically or to allow access in response to a request.

18. The apparatus of claim 15, wherein the access controller is additionally configured to store the access points of the spit-hook, which are allowed to access through the access terminal, and the determination is additionally based on the list.

19. A machine readable medium that contains codes for stimulating the computer:

accept from the first access point, identifying at least one other access point, to which the access terminal has the right to access, with the identifier accepted in the lighthouse radio signal by default, transferred to the first level of power; and

determine on the basis of the identifier, allow no access to at least one other access point, while the plurality of beacon radio signals is taken at the second level of power, which is higher than the first level of power when access is allowed.

20. The computer-readable medium of claim 19, wherein the definition includes an offer to the user to determine whether to allow access or not.

21. A communication method comprising the steps of: configure an access point in the initialization mode; transmitting at the first level of power a laggard default signal that contains the default configuration during the initialization mode; receiving messages from the access terminal in the answer to beacon radio signal by default; and

send a list of preferred roaming to the access terminal in response to a message; and

configuring the access point in another operating mode, by which the set of beacon rays is transmitted at the second power level, which is higher than the first power level.

22. The method of claim 21, wherein the radio waveform configuration contains a default network identifier that is different from the network identifier used for non-initializing the operating mode.

23. The method of claim 21, wherein the configuration by convention specifies the system and network identifiers as the default of at least one access point with the highest priority, and the preferred roaming list indicates the other system identifiers and the network with at least one access point with the highestpriority.

24. The method of claim 21, further comprising a step on which a preferred roaming list is provided on the basis of another roaming list associated with the access terminal.

25. The method of claim 21, wherein the access point is limited-so as not to provide at least one other access terminal at least one group, consisting of the following: transmission of service signals, access to data, registration, and service.

26. Communication device comprising:

a means for configuring an access point in the initialization mode;

a means for transmitting a beacon to the default setting, which contains the configuration for the default, during the initialization mode;

a means for receiving messages from the terminal dos-dupe in response to a beacon radio signal under conditions; and

a means for sending a list of preferred roaming in the term of access in response to a message; andwith this

the configuration tool is configured to configure the access point in a different robotic mode by which a plurality of beacon radio signals is transmitted at a second level of power that is higher than the first level of power.

27. The apparatus of claim 26, wherein the configuration by default contains a network identifier under conditions other than the device identifier used for non-initializing the operating mode.

28. The apparatus of claim. 26, which indicates the default configuration ID system and at least one merezhiza default access point znayvyschym priority list and Ming-emptive Row points system and other identifiers merezhischonaymenshe single point of access nayvyschympriorytetom.

29. The device of claim 26, further comprising a means for defining a preferred roaming list on the basis of another roaming list associated with the access terminal.

30. The apparatus of claim 26, wherein the access point is restricted so as not to provide at least one access terminal of at least one of the group consisting of the following: transmission

5

97019

6

service signals, data access, registration and service.

31. Communication device comprising:

Initialization controller configured to configure the access point to the initialization mode; and

communications controller configured with the ability to transfer at the first level the power of the luminous default audio signal that contains the default configuration during the initialization mode, and accept messages from the access terminal in the message to the lighthouse radio signal by default, with the initialization controller additionally skon -figured with the ability to send a list of prestigious roaming to the access terminal in the corresponding message; and at that

the initialization controller is additionally configured with the ability to configure the access point in another operating mode, by which the set of peak radio signals is transmitted to the second level of power that is higher than the first level of power.

32. The apparatus of claim 31, wherein the configuration by default includes a network identifier under conditions other than the device identifier used for non-initializing the operating mode.

33. A computer-readable medium that contains codes for a computer:

configuring the access point to the initialization mode; transmitting at the first level the power of the lame default radio signal containing the default configuration during the initialization mode; receiving messages from the access terminal in the message to the lighthouse radio signal by default; sending the list of preferred roaming in the term No-one access in response to a message; and configure the access point in another operating mode by which a plurality of beacon rays are transmitted at a second power level that is higher than the first power level.

34. A communication method comprising the steps of: tracking, in the access terminal, the radio beacon based on the first list of preferred roaming, indicating the default configuration; receiving a beacon radio signal by default at the first level of power containing configurations by default, from the access point as a result ofmonitoring;

send a message to the access point in response to the received beacon radio signal by default; and

take the second roaming list from the access point to the response to the message, while the second roaming list indicates a configuration other than the default configuration, while multi-beacon radio signals are received at a second level of power that is higher than the first power level when using a configuration other than the default configuration.

35. The method of claim 34, wherein:

The first roaming roaming list contains default roaming spin for initialization operations; and

The second list of preferred roaming contains roaming spin-sauce for non-initializing operations.

36. The method of claim 34, wherein the configuration by default contains a network ID by default.

37. The method of claim 36, wherein the second preferred roaming list comprises a different network identifier associated with an access point that is different from the default network identifier.

38. The method of claim 34, wherein:

Beacon radio signal by default is accepted at the default frequency specified by the first list of preferred roaming; For another list of preferred roaming indicates the carrier frequency for the access point, which differs from the default frequency.

39. The method of claim 34, wherein the access point is limited-so that at least one other access terminal is not provided with at least one group, consisting of the following: transmission of service signals, access to data, registration and service.

40. Communication device comprising:

means for monitoring, in the access terminal, beacon radio signals based on the first list of overriding roaming, indicating the configuration of the default;

means for receiving at the first level the power of the beacon signal by default, which will place the default configuration, from the access point as a result of the monitoring;

a means for sending a message to the access point in response to the received beacon radio signal by default; and

means for receiving the second roaming list from the access point in response to the message, while the second roaming list specifies the configuration, the minus from the default configuration, and with the number of lighthouse radio signals taken at the second level of power, which is higher than the first level of power when using the configuration, different from the default configuration.

41. The apparatus of claim 40, wherein:

The first roaming roaming list contains default roaming spin for initialization operations; and

The second list of preferred roaming contains roaming spin-sauce for non-initializing operations.

42. The apparatus of claim 40, wherein the configuration by default includes a network ID by default.

43. The apparatus of claim 42, wherein the second roaming list contains a different media identifier associated with an access point that is distinguished from the default network identifier.

44. The apparatus of claim 40, wherein:

Beacon radio signal by default is accepted at the default frequency specified by the first list of preferred roaming; For another list of preferred roaming indicates the carrier frequency for the access point, which differs from the default frequency.

7

97019

8

45. The apparatus of claim. 40, which restricted access point-wife so as not to provide for at least tion from another access terminal at least oneof the group consisting of the following: peredachasluzhbovyh signals, data access, registration andservices.

46. ​​Communication device comprising:

a receiver configured to track, in the access terminal, a beacon radio signals based on the first roaming priority list, which specifies the configuration by default, and is further configured with the ability to receive at the first level the power of the luminous wireless signal by default, which contains the configuration for the the default, from the access point as a result of monitoring;

communication controller, configured to send messages to the access point in response to the received beacon radio signal under conditions; and

initialization controller, configured to take the second roaming list from the access point in response to the message, while the second roaming list specifies the configuration, on-the-minus from the default configuration, and with that the number of beacon radio signals is taken at the second level of power, which is higher than the first level of power, when using a configuration other than the default configuration.

47. The apparatus of claim 46, wherein:

The first roaming roaming list contains default roaming spin for initialization operations; and

The second list of preferred roaming contains roaming spin-sauce for non-initializing operations.

48. The apparatus of claim 46, wherein the configuration by default includes a network ID by default.

49. Computer-readable medium containing codes for stimulating the computer:

to track, in the access terminal, the beacon radio signals based on the first list of preferred roaming, which indicates the default configuration; to accept at the first level the power of the luminous default radio signal containing the default configuration from the access point as a result of monitoring;

send the message to the access point in response to the received beacon radio signal by default; and

take a second roaming list from an access point in a response to a message, while the second roaming spin-button specifies a configuration other than the default configuration, while multi-beacon radio signals are received at a second level of power that is higher than the first level of power when using a configuration other than the default configuration .

50. The computer readable medium of claim 49, wherein: the first roaming priority roaming list includes default roaming for initialization operations; and

The second roaming list contains a list of

Roaming juice for non-initializing

operations

51. A method of communication comprising the steps of: configure a access terminal using a preferred roaming packet that includes an access point set identifier that is limited to provide services to a restricted access terminal set;

take at the first level the power of the beaconal signal by default from one of the access points, with the beacon radio signal by default, contains an identifier;

send a message to one access point in the response to the lighthouse radio signal by default; and

take an authorization to make access to one access point in response to a notification, while a plurality of beacon radio signals is taken at the second level of power that is higher than the first power level, after receiving an authorization.

52. The method of claim 51, wherein the set of access points includes all access points in the domain of the cellular communication operator, which are limited in order to provide services to a limited set of access terminals.

53. The method of claim 52, wherein the identifier comprises a network identifier.

54. The method of claim 52, further comprising a step in which a user is assigned to determine those, the investigators do not have access to one access point.

55. The method of claim 52, further comprising a step in which an indicator of one access point is displayed and accepting a custom input, indicating whether or not to access one access point.

56. The method of claim 52, wherein the access terminal determines automatically whether or not to access one access point.

57. The method of claim 52, wherein each access point access point access point is limited in such a way that at least one access terminal does not provide at least one of the group consisting of: sending of service signals, access to data, registration and service.

58. Communication device, comprising:

a means for configuring an access terminal using a preferred roaming list that includes an access point set identifier that is restricted to provide services to restricted access terminals;

means for receiving at the first level of power beacon signal by default from one access point, with the beacon radio signal by default contains an identifier;

a means for sending a message in one point of access in response to a beacon radio signal; means for receiving authorization to access access to one access point, in response to an announcement, while a plurality of beacon radios are taken at a second level of power that is higher than the first power level after the authorization is received.

59. The apparatus of claim 58, wherein the set of access points includes all access points in the domain of the operator of the station,

9

97019

10

bulk communication, which are limited in order to provide services for limited access kits.

60. The apparatus of claim 59, wherein the identifier is assigned a network identifier.

61. The apparatus of claim 59, further comprising a means for indicating the user to determine whether or not to access one access point.

62. The apparatus of claim 59, further comprising a means for displaying an indicator of one access point and receiving a user input, indicating whether or not to access one access point.

63. The apparatus of claim 59, wherein the access terminal automatically determines whether or not access access to one access point is to be made.

64. The apparatus of claim 59, wherein each access point in the set of access points is limited in such a way that at least one access terminal does not provide at least one of the group consisting of the following: transmission of service signals, access to data, registration and service.

65. Communication device comprising:

An initialization controller configured to configure the access terminal using a preemptive roaming list that contains an access point set identifier that is limited to provide services to a limited set of access terminals;

a receiver configured to take at the first level the power of the Mayan radio signal by default from one of the access points, with the beacon radio signal, by default, contains an identifier;

communications controller, configured to send messages to one access point in response to the beacon radio signal; and

an access controller configured to take authorization for access to one access point, in response to an outline, with a plurality of beacon radios-

Guards are accepted at the second level of power, which is higher than the first level of power, after the authorization.

66. The apparatus of claim 65, wherein the set of access points includes all access points in the domain of the communication operator, which are limited in order to provide services to a limited set of access terminals.

67. The device of claim 66, wherein the access controller is additionally executed with the ability to offer the user the ability to determine whether or not to access access to one access point.

68. The apparatus of claim 66, wherein the access terminal automatically determines whether or not access to one access point is to be made.

69. A computer-readable medium that contains codes for stimulating the computer:

configure an access terminal using a preemptive roaming list that contains an access point set identifier that is limited to provide services to restricted access points access terminals;

to accept at the first level the power of the lame alarm by default from one of the access points, with the beacon radio signal by default, contains an identifier;

send messages to one access point in response to the beacon radio signal by default; and

to accept authorization for access to one access point, in response to an announcement, while a plurality of beacon radios are taken at the second level of power, which is higher than the first level of power, after the acceptance of authorization.

70. The computer-readable medium of claim 69, wherein the access set contains all access points in the domain of the cellular operator, which are limited in such a way as to provide services to the limited set of access terminals.

This application requires prioritization in the forward application, which is in common ownership for the patent (US) number 60/978363, filed October 8, 2007 with the designated lawyer's note number 080042R1; Preliminary Patent Application (US) No. 61/025686, filed February 1, 2008, with a designated law enforcement bureau 080745R1; and the previous patent application (SSA) number 61/061537, filed June 13, 2008 with a lawyer's prescription number 081811P1, disclosure of the essence of each of which is contained in the reference in this document.

The equipment of the invention to which the invention belongs

This application, in general, refers to the wireless communication, but more specifically, but not only, to increasing the productivity of the connection.

Wireless systems are widely known to provide various types of communication (such as voice, data, multimedia services, etc.) to several users. As demand for high-speed services

The transmission and transmission of multimedia data is rapidly increasing, there is a complex task to realize effective and fault-tolerant communication systems with increased productivity.

In order to complement the base stations of the traditional mobile telephone network, small base stations can be deployed (for example, installed at the user's home). In some aspects, these base stations can provide a more faulty internal coverage of wireless communications for mobile modules. Such base stations with a small coverage are commonly known as base station access points, homegroups B or fiber cluster. Typically, such base stations with low coverage are connected to the Internet and the network of mobile operators through the SUZ__-router or cable modem.

In some cases, base stations with a small coating can unfold arbitrarily in an organic way. Therefore, there may be problems

11

97019

12

Associated with the implementation of access to these base stations. For example, access terminals may need to be executed with the ability to access their associated base stations. In addition, it may be desirable to prevent access to certain base stations with non-secondary access terminals. Therefore, there is a need to improve access control for wireless networks.

The essence of the invention

The essence of the exemplary aspects of the invention is given below. It is to be understood that any reference term "aspects" in this document may refer to one or more aspects of disclosure.

The present invention relates to a certain aspect of the prioritization of the communication nodes and to the provision of wireless access control. For example, IDs can be assigned to node kits, and IDs can be used to control access to restricted access points that provide certain services only to specified set of access terminals. Here, a restricted access point can, for example, provide certain services (for example, different billing and payment of subscription services, additional services, different service quality) for access terminals of one or more preferred users, but not for other users.

In some other aspects, site initialization may include the provision of a unique identifier for a set of one or more nodes. For example, a unique identifier may be a prize-start with one or more restricted dot-dupes. Similarly, a unique identifier may be assigned to a set of access terminals that are automated to accept the service from one or more restricted access points. In some aspects, a temporary identifier may recognize an access terminal, whereby access to the node may include the transformation of the temporal identifier into a permanent identifier for the access terminal.

Such identifiers can achieve the required level of access control even when the nodes can be initialized in a well-organized way. In some aspects, access control may be provided with the help of a restricted access point. In some aspects, access control can be provided through a network node's help. In some aspects, access control can be provided through the interaction of a restricted access point and a network node.

The present invention relates to some aspects of the pre-initialization of a node with the use of a list of preferred roaming. In some aspects, the node may be initiated by default with the default roaming list, which node can be used to receive other lines of prevailing roaming to allow access to the restricted access points. In some aspects, a node can be initialized with a predominant roaming list using a self-initializing massive radio signal.

Brief description of the drawings

These and other exemplary aspects of the invention are described

in the detailed description and the appended formula of the invention

dow, which is given below, and on applied

on which:

FIG. 1 is a simplified block diagram of several exemplary aspects of the access node;

FIG. 2 is a flow chart of a sequence of operations for a number of exemplary aspects of operations that can be used to initialize network nodes and provide access control;

FIG. 3 is a simplified schema of several sample components of the network node;

FIG. 4 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to initialize an access point;

FIG. 5 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to initialize an access terminal;

FIG. 6 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to initialize an access terminal;

FIG. 7 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 8 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 9 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 10 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 11 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 12 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to initialize an access terminal;

FIG. 13 is a flowchart of a method for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 14 is a simplified scheme of the wireless communication system;

FIG. 15 is a simplified scheme of a wireless communication system comprising femto nodes;

FIG. 16 is a simplified diagram illustrating coverage areas for wireless communication;

FIG. 17 is a simplified block diagram of several exemplary aspects of communication components; and

FIG. 18-28 are simplified block diagrams of several exemplary aspects of devices executed from

13

97019

14

the fidelity to provide initialization and / or management access, as discussed in this document.

In accordance with the constant practice, various signs, illustrated in the drawings, may not be presented on a scale. Accordingly, the sizes of different characteristics can be arbitrarily increased or reduced for clarity. In addition, some of the drawings can be simplified for clarity. Thus, the drawings may not illustrate all the components of this device (such as a device) or device. Finally, similar reference numbers can be used to mean analogy signs throughout the detailed description and drawing.

Detailed description of the invention

The various aspects of the invention are described below. It should be obvious that the ideas in this document can be made in a plurality of forms, and that the particular structures, functions, or both, are disclosed in this document, are simply character-them. Based on the ideas in this document, those skilled in the art will have to take into account that the aspects disclosed in this document may be implemented regardless of any other aspects and that two or more of these aspects may be combined in various ways. For example, a device can be implemented or a method can be used in practice with any number of aspects outlined in this document. In addition, such a device can be implemented or the method can be used in practice by means of another structure, functionality or structures and functionality, crimbe different from one or more aspects embodied in this document. In addition, the aspect may contain at least one element of the invention.

FIG. 1 illustrates several nodes in the exemplary communication system 100 (e.g., a portion of the communications network). For illustration purposes, various aspects of disclosure are described in the context of one or more media nodes, access points, and access terminals that exchange data with each other. It should be borne in mind, however, that the ideas in this document may be applicable to other types of devices or similar devices that are referred to using other terms.

The access points 102 and 104 in the system 100 provide one or more services (e.g., network connectivity) for one or more non-stop terminals (e.g., access terminal 106i / 108) that can be installed in the gateway or that can move across the associate geographic the area. In addition, access points 102 and 104 can communicate with one or more network nodes 110 to simplify the ability to connect to the global computer network. The network node can take different forms. For example, a network node can contain a mobility manager or some other appropriate network object (for example, a basic network object).

Access points 102 and 104 may be limited in some aspects by which each access point provides certain services to certain terminals.

access (e.g., access terminals 106 and 108), but not other access terminals (e.g., macro access gateway, not shown). For example, access points 102 and 104 may be limited in such a way that other subscriber terminals do not provide at least one of the following: registration, transfer of service signals, voice call, data access, or any other cellular service. communication. Restricted access points can be rolled-in arbitrarily organized manner. For example, this homeowner can install and configure his own limited point dos-dupe.

FIG. 2 provides a brief overview of several operations that can be performed in order to simplify the deployment of restricted access points and access terminals that are authorized to use these access points. In some aspects, these operations can be used to enable a limited access node to define its own identification data, identify the identity of the access terminals that are allowed to access (for example, connect) to a restricted access point, and verify the identification data an access terminal (for example, an access terminal that tries to access a restricted access point). In some aspects, these operations may be used to enable the access terminal to determine its identification data,

For convenience, the operations of FIG. 2 (or any other operations explained or considered in the given document) can be described as being accomplished by specific components (for example, components of the system 100 and / or system components 300 as shown in Figure 3). It is necessary to take before attention, however, that these operations can be performed by other types of components and can be performed with another number of components. It is also necessary to take into account that one or more of the operations described in this document may not be used in this implementation.

FIG. 3 illustrates several exemplary components that may be included in the network node 110 (e.g., a mobility controller, a mobile co-mutation center, or an HTTP serving service), an access point 102, and an access terminal 106. According to the ideas in this document, -those. It should be borne in mind that components that are engineered for one of these nodes can also be included in other nodes in the communication system. For example, access terminal 108 may have components similar to those described for access terminal 106, and access point 104 may include components similar to those described for access point 102.

15

97019

16

The network node 110, the access point 102, and the access t-terminal 106 include receivers and transmitters 302, 304 and 306, respectively, for data exchange with each other and with other nodes. The receiving and transmitting device 302 includes a transmitter 308 for receiving signals (e.g., messages) and receiving device 310 for receiving signals. The predetermined transmitter 304 comprises a transmission transmitter 312 for transmitting signals and a receiver 314 for receiving signals. The receiving transmitter 306 includes a transmitter 316 for transmitting signals and a receiver 318 for receiving signals.

The network node 110, the access point 102, and the access t-terminal 106 also include various other components that can be used in connection with node initialization and access control, as discussed in this document. For example, a network node 110, access point 102, and access terminal 106 may include controllers 320, 322 and 324, respectively, for controlling communication with other nodes (e.g. sending and receiving messages / indicator), and for providing another The functionality that is considered in this document. The network node 110, the access point 102, and the access terminal 106 may include the 326, 328, and 330 initialization controllers respectively for initializing the node and for providing another related functionality that is contemplated herein. Network node 110 the access point 102 and the access terminal 106 may include an access controller 332, 334 and 336, respectively, for providing access control and for providing other related functionality, which is contemplated in this document. For the purpose of illustration, all nodes are illustrated in FIG. 3 as having a functionality that relates to initialization and access control. In some implementations, however, one or more of these components may not be used in this node. The following explanation describes several different schemes (for example, in connection with different drawings) for initializing network nodes and providing access control. For convenience, in these various schemes, the network node 110, access point 102, and access terminal 106 may be referred to as having different functionality and may be referred to as such, representing different types of nodes (for example, in different implementations, the network node 110 can represent 3PN0 or MME, or AAA, etc.). It is necessary to take into account, however, that in this implementation, the network node 110, access point 102, and access terminal 106 can be executed concurrently.

Referring again to FIG. 2, as represented by step 202, each access terminal (e.g., access terminal 106) in the system can be initialized to communicate with one or more access points (e.g., access point 102). In the example of FIG. 3, these operations may be performed, for example, with the robotics of the initialization controllers 326 and 330.

In some aspects, the operator may assign a unique identifier for the access terminal 106. In some implementations, this identifier contains an Internet access denominator (NIA) or an international digital network number with integrated services for the mobile station (M3 Ι3ν). Alternatively, the subscriber identity, such as the international mobile subscriber ID, (ІМ3І) can also be extracted from the subscriber identification module, such as 3ММ, ИЗИМ or ν3ΙΜ, present in the access terminal. In some cases, this ID is guaranteed to be uniquely within the domain of the operator (for example, the entire network provided by the cell operator). In some implementations, such an identifier may be part of the session information for the access terminal 106. Example, the identifier may be sent to the gateway node 110 (for example, a session backbone controller, 3PN0) using the access terminal terminal 106 when the access terminal 106 creates the session, or the id can be pulled into the network node 110 from the authentication object, Authorization and Accounting (AAA), as soon as the SANS is created. In some implementations, the identifier is available to the user in such a way that the user can, for example, configure his unrestricted access point (s) to provide connectivity to one or more access terminals. In some implementations, the access terminal may prize-start a temporary identifier. For example, the network may assign permanent and temporary identifiers for the access terminal 106 and store the identifiers on the network. In addition, the network may send a temporary identifier in the access terminal 106 so that,

The access terminal 106 may also be initialized with the identification data of each access point (e.g., access point 102), to which access terminal 106 access is allowed. As described in more detail below, this may include, for example, sending access point IDs to the access terminal 106 (for example, a passive reception and active transfer model) and / or to enable the access terminal 10 to select the access points to be implemented an access terminal 106 access (for example, an active reception and passive transfer model). The access terminal 106 can thus collapse a list of authorized access points (for example, a white list or a list of preferred user zones) to which access terminal 106 can access as it moves through different wireless coverage areas.

In some implementations, the user of the access terminal 106 may specify whether to allow the access terminal 106 to access the access point. In some embodiments, access terminal 106 can automatically allow access to an access point. In some implementations, access terminal 106 may determine, based on the configuration information in access terminal 105, that it is necessary to allow automatic access

17

97019

18

but either require that the user specify to allow access. In some implementations, the user can choose to access or choose to not access one or more access terminals. In this case, the permitted and / or rejected access terminal (s) can be stored in the access terminal 106. Thus, the access terminal 106 may not validate (for example, automatically prevent) attempts to access the access point in the list.

As represented by step 204, a limited access point (e.g., access point 102) in the system may be initialized to provide a connection to one or more access terminals (e.g., access terminal 106). In the example of FIG. 3, these operations can be performed, for example, with the operation of the controllers 326 and 328 initialization.

For example, a unique identifier may be assigned to an access point or an access point set (e.g., access points 102 and 104). This unique identifier is different from the unique device identifier that can be assigned to identify individual access terminals in the system. As described in more detail below, such an identifier may include, for example, a special type of network identifier (N10) or a subnet ID, or an identifier assigned to an access terminal group that has identical properties of a limited association (e.g., an SMS) . In some cases, the network can autonomously assign a unique identifier. In some cases, one or more access points may request an identifier (for example, by identifying the proposed identifier and sending it to the server). In these cases, the network can determine whether or not the requested identifier is being used by one or more other access points. If the requested identifier is already in use, the network may choose another identifier (for example, a similar identifier) ​​that is not used by other access points and send this identifier to the requesting access point (s).

Access point 102 may also be initialized with one or more identifiers associated with each access terminal (e.g., access terminal 106), which is allowed to access access point 102. As detailed, as described below, this may include, for example, storing access terminal IDs in a controlled database using a directory and / or storing access terminal identifiers in the local access list at access point 102.

In some implementations, the access control list for this restricted access point can be accessed at this restricted access point. For example, as explained below in connection with FIG. 13, the user can configure his access point using an access terminal (for example, a cell phone) or using a password-protected web page hosting a limited access point.

Alternatively, in some implementations, the access control list for each access point on the network is controlled on the network (for example, the base network). For example, as explained below in connection with FIG. 4, the access control list may be directed to a web page hosted by the network operator. Managing a network access control list can provide one or more benefits in some contexts. In some respects, this approach can provide a lot of policy flexibility. For example, an operator can limit access to restricted dots if necessary, and the operator can check the records (for example, for access terminals) in one scheme of charging and payment of subscriber services. In addition, the network may be more reliable than separate access points. Therefore, the reliability of the access control list may increase. In addition, Since the access control list can not be replicated to a restricted access point, you may not need to provide a direct interface with intermediate access points (for example, application software, ISV ports, etc.). In addition, with the help of centralized access control lists, it may be easier to manage several of the limited access points that apply to the general organization.

As soon as the restricted access point is initialized, it can alert about its assigned identifier via the radio interface. For example, an access point 102 may broadcast its identifier as part of the sector parameters or some other suitable means in broadcasts.

As represented by step 206, as long as the access terminal is initialized, the access terminal can track signals (such as pilot / beacon radio signals) that are broadcast in the broadcast mode by adjacent access points. As explained in detail below, if the access terminal 106 identifies the signals from the access point 102 (for example, in the scenario, the access determiner 106 is allowed to access the access point 102), the access terminal 106 may request access to this point 102, stupid Identifying an accessible access point using the access terminal 106 may include, for example, comparing an identifier associated with access point 102 with a trusted list of 338 authorized access points (for example, a white list) stored by the access terminal 106. In the example of FIG. 3, these and other

As represented by step 208, the access point 102 and / or one or more network nodes (e.g., network node 110) may determine whether or not to allow the access terminal 106 to access the access point 102. This access control operation may include, for example, confirming the identification data of the access terminal 106 and comparing the identity of the access terminal 106 with the list of authorized access terminals stored by means of

19th

97019

20

an access point 102 (e.g., a one-block access list 340) and / or stored with the help of a network node 110 (e.g., a list 342 for access to a network database). In the example of FIG. 3, these and other access related operations can be performed, for example, with the help of the operation of the access controller 334 and / or the access control console 332.

In the light of the foregoing brief review, additional details relating to initialization and access control are described with reference to FIG. 4-13. It is necessary to take into account, based on the ideas in this document, that one or more operations described in connection with the data of one of these drawings can be used in conjunction with the operations described in another of these drawings. For convenience, these operations are described with respect to the components of FIG. 1. It is necessary to take into account that these operations may also be applicable to other sites in the network.

Referring first to FIG. 4, it is considered a few operations relating to the initialization of a limited access point.

As represented by step 402, the mesh node 110 assigns an identifier (for example, a unique identifier) ​​for a restricted access point. In some cases, this identifier is guaranteed to be unique within the domain operator (for example, the entire network provided with the help of the cellular operator). For example, a network entity can store the database identifiers used for, to ensure the uniqueness of any assigned identifier.

The ID can take different forms. In some implementations, this identifier contains the id-identifier of the network (for example, the identifier of the network, PNII). In some implementations, the identifier may contain the identifier of the closed subscriber group (SPS). As mentioned above, a set of restricted access points (for example, associated with one administrative domain) may freely use a generic identifier (e.g., PPS). In some implementations, the set of PNII may be associated with a general SPS. For example, SPS may be assigned to organizations, and different PNII may be assigned to different points of access in the organization (for example, in different buildings). In some implementations, additional identifiers that can be understood by users (for example, text) can also be used.

A unique identifier can be initialized in a variety of ways. For example, in some cases, the identifier is selected and configured when the user activates a restricted access point. Here, the identifier can be configured by the operator, at the point of sale, or by some other means.

As represented by step 404, a list of access terminals is allowed, which allows access to access point 102 (and, if applicable, to all other access points in the other set of access points). This to-do list may contain, for example, identification

Tori access terminals, as explained in thisdocument. Thus, such an identifier may identify a separate access terminal (for example, ΝΑΙ or ΙΜ3Ι, or m3 Ι3νΝ), or a set of one or more access terminals (for example, one or more access terminals associated with this SSN). In addition, the access list may specify permissions (e.g., access conditions) associated with this access terminal.

In some implementations, the access list can be accessed using Web site 344 (for example, accessible through a computer, phone, or some other proper device). In a way, the owner or user of the access point 102 may access the Web site to add, delete or edit access terminal records in the access list. For example, to allow the home or guest access to the access terminal (e.g., access terminal 108) to access the access point 102, the user can add a permanent access terminal to the access list via a web page. Different naming conventions (for example, identifying user identifiers such as "PhoneJohn," etc.) can be associated with a unique access terminal identifier (eg, ΝΑΙ or MZ ^ ΟΝ),

As presented using step 406, in some implementations the access list is managed with the help of the network operator. For example, the operator can store the server for the access list Web site. Thus, the operator can authorize all modifications to the access list (for example, to prohibit access for access terminals from other operators).

As presented in step 408, the access list information can then be sent to each access point or other network nodes that perform access control associated with that access list. For example, the server can "push" information about the access list to access point 102, or the access point 102 can "pull" information about the access list from the server. As an example of a passive reception model and an active transmission, the access list may be sent from the operator's website to the configuration server, which then sends the access list to access point 102. In addition, As another example, the access list may be sent from the operator's Web site via the Internet to the application software at the access point 102. As an example of a model of active acceptance and passive transmission, access point 102 may ask the configuration server to accept the latest version of the access list. Such a request maybe implemented, for example, every time the access point 102 connects to the network operator (for example, it establishes a new connection ^ Zes). Thus, in the event that the access point 102 goes offline for a certain period of time, the access point 102 can be confident in receiving the latest version of the access list every time, the bobbin re-connects to the network.

21

97019

22

By storing the access list in a non-access point 102, an access point 102 is exempted from the load by storing the access list. This approach allows for improved access control, since the access list can be updated, especially when the access point 102 is offline. In addition, this approach can simplify access control, which is associated with several access points. For example, a separate access spin can be assigned to access point access points (for example, associated with this SSN). In this case, access points can detect access lists from one source instead of being required to coordinate with one another to manage (for example, update) Access list for all access points.

Using a centralized access list also can simplify the use of temporary identifiers. For example, an access point 102 may use this identifier over the duration of the given IP-tunnel setup. When a new IRES tunnel is installed, the access list can be configured with a different set of identifiers. Here, a new set of identifiers can identify or not identify these access terminals as a prior access list access.

As represented by step 410, the access point 102 transmits in the broadcast mode its id (for example, the LCDIU or the UPS UI) on the radio interface. Thus, all access terminals that are part of the coverage area of ​​the access point 102 can identify the access point 102 and determine whether they are allowed or not to access access point 102.

Referring now to FIG. 5 and 6 describes a plurality of operations that can be used to initialize the access terminal. In particular, these drawings describe the technologies for initializing the access terminal using the identification data of one or more restricted access points to which the access terminal is allowed to access.

FIG. 5 illustrates several operations that can be completed in order to "push" information about the access list to the access terminal (that is, the model of passive reception and active transfer). In this example, it is assumed that a unique identifier is assigned to the access terminal (for example, as explained above).

As represented by step 502, at some point in time the access terminal can be recognized as being allowed to access one or more access points. For example, the owner of one or more access points may add the requested access terminal to the access list associated with the access point (s), as explained in the links above with FIG. 4

As represented by step 504, the operator sends a message to the access term, indicating that the access terminal is now allowed to access the access point or the set of access points. This message may contain an identifier associated with the

access control (s) (e.g., PNYO or UPS UI), as well as any restrictions that may be applicable (for example, the terms for the requested access). This message may be sent, for example, when the access terminal 108 is added to the access list associated with access point. This message may also be sent in a variety of ways. For example, the network may send a WMD message, an application-level protocol message (e.g., an open-source mobile device management device), a radio link control level, a search call, and some other type of message in the access terminal to transmit information about the access point (e.g., the request requesting the access terminal 108 about whether it wants to or not to access the access point 102).

As represented by step 506, the access terminal 108 may then inform the user of the access terminal 108 that it has the right to access the access point (s). For example, the access terminal 108 may display an indicator relative to the identification data of the point ( ok) access or provide some other form indicator. Such an indicator may include, for example, an identifier assigned to an access point (s) or an alternate name (e.g. user IDs such as Sue House, etc.) that is associated with identifier

As represented by step 508, the user can then determine whether to allow or not (for example, using the input device in the access terminal 108) the requested access to the access point (s). Based on the user's decision, the access terminal 108 may update the list (for example, the white list) that it stores, the access point to which it is allowed (for example, this opportunity) to access. As explained later, the access terminal 108 may use this list in order to determine which access access node it can access, as the access terminal 108 moves over the network. Here, the user may not at all be required to provide any additional access automation in the event that the access terminal enters the coverage area of ​​the access point in the list, since the access terminal can automatically "mate"

In some implementations, the access terminal 108 can send messages to the operator, which specifies the user's decision. Thus, the operator can choose to modify the access list for the access point (s), if necessary.

By allowing the user of the access terminal to accept or reject access to the access point, one-way access of the access point to the access point terminal (for example, the neighbor's access terminal) may not be allowed to access the access point by the user of the access point. Thus, the user of the terminal

23

97019

24

Access can be sure that its information is sent to an unauthorized access point.

In addition, this passive reception and active transmission model does not require the access terminal to be located next to the access point in order to give access point to its white list. In addition to this, since the access terminal can receive "push" messages only when it is added to the access list, the probability of choosing the user of the wrong access point (for example, to which access terminal is not allowed access) may decrease.

FIG. 6 illustrates several operations that can be completed in order to "extract" information about the list of access to the access terminal (that is, the active mode of reception and passive transmission). On the other hand, it is assumed that a unique identifier is assigned to the access terminal.

As represented by step 602, at some point in time, the access terminal user (e.g., access terminal 108) initiates the scanning of adjacent access points. To this end, the access terminal 108 may include an input device that can be controlled by a user (for example, a menu option) to instruct the receiving device 318 to track more or less channels for pilot signals or other signals from the access point.

As represented by step 604, the access terminal 108 informs the user about all access points detected as a result of the scan. For example, an access terminal 108 may display an indicator relative to the identification of the detected access point (s), or provide another form of indicator. Similarly, such an insert may contain an identifier attributed to the access point (s), alternate name, or some other relevant information.

As represented by step 606, the user may choose to allow access to one or more identified access points. For example, the user can control the input of the device in the access terminal 108 so as to select one or more access points that are displayed with the access terminal 108.

The access terminal then tries to access the selected access point, if necessary. As explained below, if the user chooses the wrong access point (for example, the access point to which the access terminal is not allowed to access), the access point may prevent access. The access point can then re-broadcast this information to the access terminal (for example, to prevent this in the future again).

As represented by step 608, in some implementations, the access terminal 108 may update the list of access points it stores, which it is allowed to access (for example, a white list), based on the client's decision. Thus, the access terminal 108 can "remember" the selected access point so that the use of the input is not required for future outlets of this access point (e.g., the terminal

108 access can be connected to the access point without the need for the user to initiate a one-way scan).

As represented by step 610, in some implementations, the active reception and passive transmission model can be used to allow the terminal 108 to-do-it-yourself to access the access point on a specific basis (for example, a usage fee). For example, multiple access points ( for example, belonging to the general owner, such as the hotel or other organization) may announce one unique identifier (for example, PNII or UFSI). When the access terminal is adjacent to one of these access points, and the user of the access terminal 108 initiates the scan, the user may choose to connect to one of these dots (e.g., access points 102). When the access terminal 108 attempts to connect to the access point 102, the access point 102 may not check its local control list for the purpose of whether or not the access terminal 108 is available for access, but instead, the access terminal 108 can perform an initial connection. This initial connection may include, but, redirecting the user to a web page, whereby the access terminal 108 may receive the access service access point 102 only if the non-prerequisite conditions are met (for example, payment is completed) . With this model, any access terminal (as opposed to certain designated access terminals) may receive access to an associated set of access points. with the help of which the access terminal 108 can accept the service of the access point 102 only if the conditions are met (for example, payment is performed). With this model, any access terminal (as opposed to certain designated access terminals) may receive access to an associated set of access points. with the help of which the access terminal 108 can accept the service of the access point 102 only if the conditions are met (for example, payment is performed). With this model, any access terminal (as opposed to certain designated access terminals) may receive access to an associated set of access points.

As mentioned above, the access point and / or the network node can control whether or not the access terminal is allowed to access the access point. In some implementations, access control for this restricted access point may be directed at this restricted access point. In some implementations, access control for a given restricted access point can be guided by this limited access point with the help of a centralized access control controller (for example, implemented in a network node). FIG. 7-11 illustrates several technologies that can be used to manage such access.

Referring first to FIG. 7, describes a number of operations pertaining to the script, the access node manages access to itself. In some aspects, access provided through the access point may be arbitrary. For example, if the access point determines that access to a certain service should not be provided, the requested DOS can be unilaterally prohibited. If, if the access point determines that the access to the added service is to be provided, the access point may send the request to the network to verify whether access is required or not allowed.

In some implementations, the access point can manage (for example, one-sidedly control) access to the local service. For example, a term access may try to get access to services provided on a local area network, associated with the access point. Such services may include

25

97019

26

for example, access to a local server (for example, to access audio, video, or other content), printer access, etc.

As represented by step 702, see FIG. 7, at some point in time, the access terminal (for example, the access terminal 108) begins to establish a connection with a restricted access point (for example, access point 102). In connection with this operation, the access terminal 108 may attempt to open a session (or route) to a dot-to-point point 102. In addition, the associated session information can be stored on the network (for example, in the network node 110). To simplify the verification by using the access point 102 of the access data of the access terminal 108, in some cases, the access terminal terminal 108 may be part of the session information (for example, included in the context information for the access point). This ID may include, for example, a position identifier (e.g., ΝΑΙ), as explained in the present document.

As represented by step 704, accessor 102 may receive information to confirm the identity of the access terminal 108. For example, in some cases, the access point 102 may receive an identifier (e.g., a temporary identifier) ​​or other relevant information directly from the access terminal 108. (e.g., the radio interface). In some cases, the access point 102 may extract the above information of the session, which contains an identifier of the access terminal (for example, a temporary or permanent identifier), from the network (for example, from 3PN0). Preferably, in this latter scenario, the transmission of an identifier (for example, a constant ΝΑΙ) through the radio interface may be prohibited.

In cases where the temporary identifier is used (for example, the temporary NAN), the access point 102 can interact with the network in order to ensure the authenticity of the identifier. For example, in some implementations, access point 102 sends a temporary identifier to an AAA object that authenticates an identifier. In some implementations, the access point 102 sends a temporary identifier to the network and accepts an associative constant identifier in response. In this case, the access point 102 may use a permanent identifier in order to authenticate the access terminal 108.

As represented by step 706, access 102 then compares information about the access terminal (e.g., a temporary or permanent identifier) ​​with the information in its list for on-access access (for example, provided with the help of the 340 local access list in Fig. 3). As explained above, the list for a local access can be made with the ability to contain a unique identifier associated with the access terminal 108 (eg, NIA, C5C, UT, etc.).

As represented by step 708, then access 102 can then allow or disable requested access based on comparison to

step 706. Here, the access point 102 may send a deviation message to the access terminal 108, and / or an access point 102 may redirect the access terminal terminal 108 to another access point (for example, by sending a forwarding message that identifies a local pop- access point)

As described below, in some implementations, the access terminal 102 may interact with the network to authenticate the access terminal 108. For example, if the access terminal ID is not in the local access list, the access point 102 may send the request to the network node, such as an AAA object that provides authentication, etc., for the purpose of restrictive points Access (for example, femto AAA, for example, as an autonomous object or by enabling the corresponding functionality in the traditional network AAA object). Here, the mesh node can store the access control list for the access point 102 that the network node uses to authenticate the access terminal 108 (for example, the same way as explained above). In addition, if applied, the network node may interact with another network node (e.g., an AAA object for access terminal 108) in order to extract the constant identifier associated with the access terminal 108 from the identifier that is sent to the access input 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the access terminal 108 is authorized to access access point 102. In accordance with the ideas in this document, access control functions may be performed at an access point or another network entity such as a gateway, a mobile communication switching center (M5C), a service node for CPD5 (5θ5N), a packet data service node ( P5N) or MME in different implementations. AAA object for the access terminal 108) to extract the constant identifier associated with the access terminal 108 from the identifier sent to the access input 102 using the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the access terminal 108 is authorized to access access point 102. In accordance with the ideas in this document, access control functions may be performed at an access point or another network entity such as a gateway, a mobile communication switching center (M5C), a service node for CPD5 (5θ5N), a packet data service node ( P5N) or MME in different implementations. AAA object for the access terminal 108) to extract the constant identifier associated with the access terminal 108 from the identifier sent to the access input 102 using the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the access terminal 108 is authorized to access access point 102. In accordance with the ideas in this document, access control functions may be performed at an access point or another network entity such as a gateway, a mobile communication switching center (M5C), a service node for CPD5 (5θ5N), a packet data service node ( P5N) or MME in different implementations. associated with the access terminal 108, with an identifier sent to the access input 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the access terminal 108 is authorized to access access point 102. In accordance with the ideas in this document, access control functions may be performed at an access point or another network entity such as a gateway, a mobile communication switching center (M5C), a service node for CPD5 (5θ5N), a packet data service node ( P5N) or MME in different implementations. associated with the access terminal 108, with an identifier sent to the access input 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the access terminal 108 is authorized to access access point 102. In accordance with the ideas in this document, access control functions may be performed at an access point or another network entity such as a gateway, a mobile communication switching center (M5C), a service node for CPD5 (5θ5N), a packet data service node ( P5N) or MME in different implementations. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the access terminal 108 is authorized to access access point 102. In accordance with the ideas in this document, access control functions may be performed at an access point or another network entity such as a gateway, a mobile communication switching center (M5C), a service node for CPD5 (5θ5N), a packet data service node ( P5N) or MME in different implementations. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the access terminal 108 is authorized to access access point 102. In accordance with the ideas in this document, access control functions may be performed at an access point or another network entity such as a gateway, a mobile communication switching center (M5C), a service node for CPD5 (5θ5N), a packet data service node ( P5N) or MME in different implementations.

Referring now to FIG. 8, describes the deck of operations related to the scenario in which the network sends a list of terminal access identifiers (e.g., access point access point) to the access point so that the access point can determine if there is any request to access the access terminal. In this example, operations steps 802 and 804 may be similar to operations of steps 702 and 704 described above. In this scenario, however, access point 102 may not extract session information in some cases.

As represented by step 806, the access point 102 then sends a request to the network (for example, a network node 110) to authenticate the access terminal 108. In the event that the access point 102 receives session information (for example, which includes access terminal identifier information such as M5 I5YN, C5C YuABO ΝΑΙ), access point 102 may send this information to the network node 110 together with the write ( for example, included in the message with the message). In some implementations, this operation can contain a request for a list identifier and then-

27

97019

28

access denominations. In practice, access point 102 may request this list more than once (for example, each time an access point is activated or connected to the network, every time the access terminal attempts to access the access point, periodically, etc.).

As represented by step 808, the mesh node 110 receives an identifier associated with the access terminal 108. This identifier may contain, for example, list identifiers that indicate one or more access groups associated with the access terminal. By way of example, an identifier may include a list of covered subscriber groups whose member has an access terminal 108, a list of access terminals that are allowed to access an access point 102 (e.g., access point access point 102), or an access point identifier list, to which the access terminal 108 can access. The identifier of an identifier using a network gateway 110 may include, for example, a token of an identifier from another network node (e.g., NLC) or obtaining an identifier for a malicious database. In some implementations, The id-value of the identifier may include the identity of the permanent identifier, as explained in the given document (for example, based on the temporary identifier being accepted). The network node 110 sends the identifier or identifiers obtained in step 808 to the dot-dupe point 102 at step 810.

As represented by step 812, access then 102 can then determine what to allow or deny requested access based on the identifier (s) being received. For example, an access point can compare an accepting identifier (e.g., an SNS of a PO) indicating the sets that the terminal 108 has with information (e.g., the SNS of the PO) in the list of one-way access to access point 102 that serves as a sign kits that hold access point. Access point 102 may then allow or reject requested access based on this equation.

Referring now to FIG. 9, describes a number of operations related to the scenario in which the network controls access to the access point. In this example, the operations of the stages 902, 904 and 90b can be similar operations of stages 802, 804 and 806, described above. Similarly, the access point 102 may be able to extract session information in some cases. In addition, in some cases, the dot-to-point point 102 may send its list for local access to the network for use in the authentication operation.

As represented by step 908, interruptions using temporary identifiers in order to identify one or more nodes (e.g., access terminals), the network node 110 (e.g., femto-AAA) may determine a permanent identifier associated with the terminal 108 access, based on the temporary connection identifier associated with the access terminal 108. For example, access point 102 may receive a temporary identifier from

the access terminal (for example, at block 902) or the session information (e.g., at block 904). In this case, the access point 102 may send a temporary identifier (e.g., temporal NAT) for the access terminal 108 along with the identifier (e.g., PIN) of the access terminal 102 to the network node 110, together with the request portion 906. As explained above in connection from FIG. 7, the network node 110 can then interact with another network node in order to extract the permanent identifier of the access terminal terminal 108 from the temporary identifier.

As represented by step 910, the mesh node 110 determines whether to permit access to access point 102 to the access terminal 108. For example, the network node 110 may compare the access terminal terminal ID 108 (e.g., NIA, SNS, etc.) from the access list access point 102. Here, the access list may be a local list received from the access point 102, or may be a access list stored by the network (for example, based on the information received from the web server as explained above). The network node 110 can then determine whether to allow or reject the requested access based on this comparison.

As represented by step 912, the mesh node 110 sends an indicator relative to that definition in the access point 102. Access point 102 may then allow or reject the requested access based on the acceptance indicator (step 914). Preferably, in such implementation implementations, the access point 102 should not be aware of the actual access terminal identities that access the access point 102. In addition, the access control list for the dot-dupe point 102 does not necessarily have to be sent to the access point 102. In this implementation, access control is fully executed in the network node transparency of the access point.

Different technologies can be used for the purpose of managing terminal access identifiers in the network. As mentioned above, the access point can store the valid identifier (for example, ΝΑΙ), which is used by the access server. In some implementations, this identifier may remain valid for a given time period. Here, if the access terminal repeatedly visits the access point within the period of time (ie, the access terminal has the same identifier at that time), the access point can accept the access terminal without obtaining authorization from the network (for example, femto-AAA). In some embodiments, the operator may choose to use a temporary identifier or a permanent access identifier for the access terminals. If a permanent identifier is used, constant identifiers may be stored at dots (for example, in the list 340 for local access) so that the access point can independentlyauthenticate the access terminals. If a temporary identifier is used, the operator can control the frequency at which the access point is communicated with the network (for example, femto-AAA) in order to

29

97019

30

Verify IDs stored in List340 for local access.

FIG. 10 illustrates an example of access control operations that can be implemented in a long-term development (BTE) implementation or other similar technology. In this example, a network (for example, a base network opposite to a radio access network) controls whether or not an access terminal is allowed access to an access point. In addition, it describes the technology for initializing the access terminals by accessing information via the subscriber's subscriber information (e.g., mapping information), by activating the access control (for example, for idle or active mode), access point initialization modifications, or access terminal and compulsory activation of the SNS list when the access terminal performs such operations as turning on the power, updating the tracking area and transferring the service.

A network (for example, a dedicated subscriber's server, an NZS, or a subscriber's subscriber server) can store SPS subscriber information for access terminals and restricted access points on the network. By way of analogy, as described above, the operator can provide a web server that allows the user to manage the information by the SSS subscription for his limited access point (s). For example, the user can modify his information by subscription (for example, MZ 1ZYU) with the help of the website. The network can then sanction the modifications (for example, access terminal records) executed by the user, and the web server can send subscriber information to the network (for example, NLC). Here, MZ IZOKI can be re-engineered in IMI. The network may then send SZS information (for example, a unique SPS identifier) ​​to the appropriate restricted access point (s). Exept this,

In the same way as described above, the initialization of the access terminal (for example, using the list of unicast SZS GO) may be authorized by the owner of the access terminal. In addition, the operator can also authorize the initialization of the access terminal. Here, this GNSO GIS may be associated with a user from one or more access terminals that are authorized to receive at least one service from a dial from at least one restricted access point. In other words, access terminal collections and set of access points are associated with the general SPS of the GO. You also need to take into consideration that the given access terminal or dot-dupe point can also be associated with severalCIDs. In some aspects, the network (e.g., the NFL) may store information indicating the transformation between the access terminal identifier and the GNSS OSP subscription. Exept this,

On the other hand, the initialization of the access terminal may contain a "model of passive reception andactive transmission" or "active adoption model

and passive transmission. "For example, in the first instance, a network (e.g., a network node) may send a WMD message to the access terminal to inform the access terminal of the new subscription (for example, the identification of one or more SNS GOs), and the user accepts or dismisses In the second case, the user can initiate the manual scan, and the access terminal reflects the list of neighboring access points (for example, understandable for users of SNS GOs or other types of access point identifiers) so that the user can choose one or zispysku more records if necessary.

As represented by step 1002, see FIG. 10, at some point in time, the access terminal is enforcing access to a limited dot-dupe point. For example, when the access terminal 108 determines that it is located near the access point 102 (for example, if the access point 102 responds to the GNSS GNSS that is also associated with the access terminal TERMAL 108), the access terminal 108 may send a registration request, or the other does not have a message at access point 102.

As represented by step 1004, the access point 102 sends a request to the network (for example, one or more network nodes 110) to authenticate an access terminal 108. Here, the network node (s) 110 may include a mobility management object (MME) or some other on-site network object or objects. Access point 102 may also send an identifier (e.g., GNSS associated with access point 102) to the network node 110 along with the request (for example, included in the message from the record). In addition, the request may include information received from the access terminal 108 (for example, at block 1002).

As represented by step 1006, the network node 110 receives the context information associated with the access terminal 108 (for example, from the previous MME for the access terminal 108 or the NZ). This context information may include, for example, a set of identifiers associated with access terminal 108. For example, context information may include a list of all GNSs associated with the access terminal 108. In some implementations, the network node 110 can store its own list of SMDs for each of its limited access points. In this case, the network node 110 may update its list each time the entry changes on the web server.

As represented by step 1008, the network node 110 determines whether or not the access terminal 108 is allowed to access the access point 102. For example, the network node 110 determines whether an ID of the access point 102 (e.g., which specifies an SSN that owns access point 102) is located in the list of identifiers associated with the access terminal 108 (for example, which indicates all the ATMs to which access terminal 108 belongs) .

The definition of stage 1008 can be performed in different network nodes. For example, in some implementations this definition can be performed in

31

97019

32

MME, which receives and / or stores the identifiers associated with the access point 102 and the access terminal 10.8.

In some implementations, this definition may be based on another network node, such as the NSC. For example, MME may send a NZP request to determine whether the access terminal 108 is authorized to access the access point 102. Together with this request, MM may be able to send information (for example, identifiers, such as IMZI and SZS IU) in the NZ in some cases. In addition, in some cases, the NSA may receive and store such information independently. After determining whether or not the dos-dup is available, the NOS sends the corresponding response back to the IMF.

As represented by step 1010, the MME sends an answer to the access point 102 on the basis of the MME definition or on the basis of determining another network node (e.g., NLC). Based on this answer, access point 102 may then allow or deny access through the access point 108.

FIG. 11 illustrates operations that can be used in connection with the transfer operation. For example, the access terminal 108 may initially be served by access point 104, and, later, access to the access terminal 108 is transmitted to the access point 102, and then the service is served through this node.

As represented by step 1102, the network (e.g., NLC) can store the container-tone information for each access terminal in the system. As mentioned above, this context information may include a list (e.g., whitelist), which indicates all access kits (e.g., SNS) that owns the access terminal 108.

As represented by step 1104, the network (e.g., MME) selects the context for the access terminal and provides the context to the intermediate access point when that access terminal is active at a restricted access point. Referring to the example of FIG. 3, when the access terminal 108 becomes active (for example, switched on) in the access gate 104, the network node 110 may dispense the context information for the access terminal 108 to the access point 104. Thus, access terminal 108 may first be served by access point 104.

As represented by step 1106, some access point access time in access terminal 1048 may be transmitted to the access point 102. For example, if an access terminal 108 is removed from the access point 104, measurement reports from the access terminal 108 may indicate that the integrity of the signals received from the access point 102 now exceeds the intensity of the signals received from the access point 104. In this case, the network may initiate a service delivery from the access point 104 of the access point 102.

As presented in steps 1106 and 1108, with this service transfer, the access point 104 (i.e., the outgoing access point) may receive an identifier associated with the target access point (i.e., access point 102)

PU), such as, for example, PZS UI. For example, this information may be received from the access terminal 108. The access point 104 can then determine whether the access terminal 108 is authorized to access the access point 102 based on that identifier. For example, an access point 104 can compare an identifier with a message indicating access points to which the access terminal 108 can be allowed to access (for example, a white list, such as a list of SPIEGs for contextual information for the access terminal 108).

As represented by step 1110, if the access terminal 108 is not authorized to access the access point 102 (for example, the UPS OA of access point 102 is not in the U.S.S. U.S. of access terminal 108), the transfer operation can not be used get rid of For example, an access point 102 may dispatch a message to the network node 110 to complete the service transfer operation. Alternatively, the access point 102 may send a deviation message and / or redirect to access point 108 (e.g. as explained above).

As represented by step 1112, the service transfer operation may continue if the access terminal 108 is authorized to access the access point 102 (for example, the UPS OUT access point 102 is in the UPS UI list 108 of the DS-terminal). Accordingly, the network (e.g., MME) may send contextual information for the access terminal 108 to the access point 102, or the access point 102 may receive this information from the access point 104.

As represented by step 1114, the access point 102 can determine whether the access terminal 108 is authorized to access the access point 102. For example, in the same way as explained above, the access point 102 can compare its identifier (for example, the UPS UI) with a list that indicates the access points to which the access terminal 108 is allowed to access (for example, the U.S. OUT list of context information for the access terminal 108 po)

As represented by step 1116, in some implementations, the access point 102 may reject a request to the network (e.g., MME) to confirm whether the service is to be executed (for example, along with a request for switching the path). For example, as not limiting the above, the access point 102 may send the request (for example, it does not necessarily include an identifier associated with the access terminal 108, and an UPS UI for the access point, if necessary) to the network node 110 to determine what should whether or not to access the access terminal 108 to the access point 102.

In cases where an access terminal has to access access to the destination access point without prior training to the service (for example, in the event of a crash in the radio link), the access point can choose the context of the termi-

33

97019

34

access point from the outgoing access point. As a reminder, this context includes the SZS-list of the the-denomination of access. Thus, the target dots can determine if the access terminal is allowed to access the dot-dupe point of destination.

As represented by step 1118, on the basis of the definition in step 1114 (and optionally, in step 1116), the service is either either pre-rendered or rejected. If the service transfer is allowed, access point 102 then becomes a serving access point for the access terminal 108. On the contrary, if transmission service is not allowed, service delivery may be completed (for example, as explained in connection with step 1110).

Referring now to FIG. 12, in some embodiments, a restricted access point may be used in order to initiate a terminal access. As an illustration, the examples below depict examples where the access terminal is initiated (for example, configurable) with the prefetch roaming list (PPI). You need to consider, however, that the access terminal can be initialized using other types of information in accordance with the ideas in this document.

As represented by step 1202, access terminals on the network (for example, all access terminals that can access a restricted access point) can first be configured with the default PPI_ (for example, the list contains or specifies the default configuration). For example, the 106-DOS terminal 106 may be configured by the operator when the access terminal 106 is acquired by the user. Such PPI_ may specify, for example, the default system ID (SID), the default network id (N10), and the default frequency for the initial detection of all restricted access points that can be deployed on the network. Here, all of the aforementioned ds-dupe terminals can be configured using the default PPI. So, each access terminal can find and access access to a restricted access point for initialization operations. In some aspects, information about PPI_ under conditions (eg, ZIU and / or Nθ) may answer one or more access points associated with the highest priority. For example, an access term may be executed with the ability to perform a search (for example, first perform a search) of a given preferred access point and specified preferred access points (for example, home access points).

In some respects, PPI parameters may by default be reserved for associated access restricted operations. For example, the default ZIU can be reserved for limited access points by the network operator. With such a SLA, access to restricted access points that are not configured to access restricted access points (for example, access terminals made possible with Mac-only use) may not be allowed to register at a limited point. Except

this, NIO by default can be reserved for restricted access points associated with initialization procedures. In addition, the conditional frequency can be set as the total frequency that should be used with the use of restricted access points in the network for transmitting beacon radio signals for initialization procedures. In some cases, the default frequency may be the same as the operating frequency of the access point or the working frequency of the restricted access point.

PPI_ by default can also contain information for selecting a macrosystem. For example, PPI_ by default can contain identifiers and frequencies that can be used to access access macros in the network.

As represented by step 1204, restricted access points in the system (e.g., access point 102) are made to transmit a beacon-based self-initialization radio signal. In some aspects, this beacon radio self-initiating signal may contain a temporary beacon radio signal, which is used in connection with the initialization provided by the access point 102. Here, the beacon radio-signal of self-initialization may be transmitted in broadcast mode in accordance with general parameters RRI_, explained above (for example, beacon radio signal may contain or indicate the default configuration). For example, the beacon radio self-initialization signal (for example, the beacon radio signal by default) can be transmitted at the default frequency and may contain a default ZIU and a NO default (for example,

The beacon radio self-initialization signal can be transmitted at a very low level of power, which is much lower than the transmit power of the beacon radio signal during normal operations at the access point (for example, when the access point is configured in a non-operational mode initialization such as a normal operating mode). For example , the power transmission of beacon radioisodes of self-initialization can lead to a range of coverage (for example, a radius) for a beacon radio signal self-initialization of about one meter or less.

In some implementations, the access point 102 may transmit the self-initialization radio beacon when the access point is in the initialization mode (for example, configuration or initialization). In some implementations, the user can use the input device in order to transfer the access point 102 into the configuration mode, which the user wants to initially initialize or re-initialize the access terminal 10b. For example, an access terminal can be initialized when the access point is first established when the access terminal was originally purchased or when the access terminal RPI was updated using the network (for example, due to changes in roaming spam, travel abroad, etc.). to lead to a rewrite of the PPI_, which is initialized using the access point (as explained below).

35

97019

36

As represented by step 1206, when the access terminal 106, initialized with the help of the default PPI_, is located near the interleaved access point 102 that operates in the initialization mode, the access terminal 106 may receive a high-frequency self-initiating radio signal transmitted using a point Access 102. In contrast, the access terminal 106 may send the message to the access point 102 to initiate the initialization operations. In some implementations, this statement may include an RRC that is currently being used with the access terminal term 106. In some implementations, the user of the access terminal 106 may initiate an initialization by selecting the corresponding attribute in the access token (e.g., a set of specified no-measures).

As represented by step 1208, an access point 102 (for example, an initialisation controller 328) may specify a new PPI_ for the access terminal 106. For example, for conventional operations of mobile stations. The new PPI_ may include information about the macrosystem, as in PPI_ under conditions, but the initialization information of PPI_ by default can be deleted. Instead, it can be added to the information of the new PPI_ (for example, the list contains or specifies a new configuration). In some aspects, the information of the new PPI_ may be conclusive for the access point 102 (for example, the new RPI_ may differ from the PPI initialized with the help of other access points). For example, a new PPI_ may specify a GUI that reserved for all restricted access points, as an explana- tion, NI, which is unique to the access point 102 (eg, femto-NII, PNII), and the frequency parameter, which specifies the operating frequency of the access point 102. This frequency parameter may coincide or differ from the default frequency. In some aspects, the information of the new PPI_ (for example, ZYu / or NII) may correspond to one or more access points associated with the highest priority. For example, access terminal 106 may be executed with the ability to search (for example, first perform a search) of the specified access point or the specified preferred access points (e.g., home access points).

The access point 102 can receive the information of the PPI_ macrosystem in various ways. In some implementations, the access point 102 may request this RRI_ information from the access point (e.g. via the network node 110 or the board interface). In some implementations, access point 102 may receive this PPI information from the access domain (e.g., access terminal 108). For example, an access point 102 may contain a radio interface function. Here, the dot-to-point 102 can send a message (e.g., a ZPP configuration request) to request a current access terminal's PPI_ (which may include information from the current macro-IRC as explained above), and the access terminal can respond by sending of its current PPI_ on the radio interface to the access point 102.

As soon as the access point 102 defines a new access point PPC access point 102 sends (for example, a snapshot) PPI_ into the access terminal 106. For example, access point 102 may send PPI_ to the terminals access via the radio interface (for example, via OTAZR or OTARA).

Preferably, by initializing the access terminal 106 through the access point 102, as explained above, the network operator should not store specific information for the access terminal (e.g., PPI information). However, it may be desirable to configure the access point 102 so that it performs regular updates of the PPI_ access terminal. For example, PPI_ can be updated every night and sent to the access terminal 106 via the radio interface. In addition, in order to avoid overwriting with one access point from a set of associated access points of the RRC information initialized by another access point from the set, each access point maybe performed simply by updating the information of the current access terminal PPI_. For example,

As represented by step 1210, since the access terminal 106 is initialized with the help of information from a new RRC, access terminal 106 should use this information in order to identify the access points to which it can access. For example, if the access terminal 106 determines that the access point 102 is located (for example, after an access point is configured in normal operation), the access terminal 106 may prefer the service by access point 102, and not any other access points (e.g., access macros) that are detected by the access terminal 106.

Referring now to FIG. 13, describes techniques for managing restricted access (for example, associating) at an access point. In this example, the access point can be configured with a local list of access terminals that are allowed to access one or more services provided through the dot-dupe point. The access point can then provide or block the access based on the local list. It is prudent, in some respects, this scheme may allow the access point owner to provide a time-stamp service to guest access terminals (for example, by adding / removing these access / list terminals) without the network operator's participation.

As represented by step 1302, a restricted access point (e.g., an access point 102) is configured with a list of access points (for example, provided with the local access list 340 in FIG. 3). For example, the access point 102 owner can configuring a list of identifiers (e.g., tele-

37

97019

38

telephone numbers) of the access terminals, which are allowed to use one or more of the services provided by the access point 102. In some implementations, managing which access terminals can access the access point 102 may thus be the owner of the access point 102, and not on the network operator.

Access point 102 may be initialized in different ways. For example, the owner may use a web interface 102 that hosts an access point in order to configure an access point 102.

In addition, different access terminals can be assumed different levels of access. For example, accessed access terminals may be provided temporarily with different criteria. In addition, in some implementations the home access terminal may be assigned a better service than the guest access terminal. In addition, some access terminals (for example, invited access terminals) may currently have access to certain services (such as local services, such as a multimedia server or some other type of information server) without authentication by the network operator. In addition, in some cases, the locally access list 340 can be used as a start-up temporary replacement at access point 102, in which the actual authentication (for example, for a telephone call) can be executed via a network,

As represented by step 1304, the access point 102 may send the access terminal information identifier configured at block 1302 (e.g., the list 340 of the local access access) into a network database (for example, an authentication center for the user's own registry, LAN / NI_V), and request another identifying information associated with the corresponding access denotes. For example, the access point 102 may send the telephone number of the access terminal 106 to the network node 110 (for example, containing the database NI_V) and accept an electronic serial number (Ε3Ν) or an international identifier of the mobile communication subscriber (IMZI) that is assigned to terminal 106 access from the network node 110.

As represented by step 1306, the access point 102 may alert about its identification information (for example, as explained in the given document). For example, the access point 102 may alert information about SLA and EO, as explained above.

As represented by step 1308, the access terminal, which is initialized to access the access point 102, may recognize that it is located near the access point 102 after receiving the notified identification information. For example, the access terminal 106 may be initialized with the help of the RVI_ with the access point 102 as explained above, or the access terminal 106 may be initialized by the help of a RVC which includes a restricted access point SUI, NI with substitution symbols, and one

or more operating frequencies that are used with access point 102, or an access terminal 106 may be initialized by some other means, which enables it to identify the access point 102 (for example, initialize with the help of a list of preferred user zones). Access terminal 106 may then attempt to register at access point 102 as a result of receiving a different UID (for example, which may represent a zone other than the macrozone for the base in the registration areas). Thus, in some cases, the access terminal can automatically access the access point 102. In other cases, however, the user can control whether the access terminal 106 accesses access points 102 (e.g., the user provides an input through the input device in response to the indicator relative to the detected access points, outputted using the access terminal106). In connection with this registration, the access terminal 106 may send its identifier (e.g., its Ε3Ν, IMZ, etc.) to access point 102 (for example, through the access channel).

As presented in steps 1310 and 1312, the access point 102 determines what is allowed by the access terminal terminal 106 to access access access point 102. For example, the access point 102 may determine whether the identifier transmitted or not received from the access terminal 106 is available for local access to a 340. You need to take into account that the authentication information, alternate from Ε3N and IMZI, can be used in different implementations. For example, the access point 102 may receive caller numbering information through a message in idle mode and use this information for authentication (e.g., for comparison with the number of a you-calling party that is received from the access terminal 106 via a registration message or some other way) .

As represented by step 1314, if the access terminal 106 is not allowed access (for example, the access terminal identifier that is received is not in the list 340 for one-way access), access point 102 may over-defend access. For example, an access point 102 may send a rejection message to the access terminal 106. Alternatively, the access point 102 may send the redirection message in the access terminal 106. This message may include, for example, information (e.g., ZIU, NW, operating frequency) that identifies an alternative access point (for example, a local macrometer) to which the access terminal can access.

As represented by step 1316, if the access terminal 106 is allowed to access (e.g., the access terminal identifier that is received is in the locale access list 340), access point 102 may provide access to certain services. For example, as an explanatory point, an access point 102 can provide access to the local services provided through a local network.

39

97019

40

Additionally, alternatively, the dot-to-point point 102 may transmit the login information to the network node 110 (for example, HPI-macromore) to authenticate and register the access terminal 106. The network node 110 may then respond to the receipt or rejection of registration. In response, the access point 102 may send the corresponding message to the access terminal 10.6. If authorized, the dot-dupe point 106 then receives the requested service from access point (e.g., access to the network).

It is necessary to take into account that the aforementioned technologies can be realized in different ways in accordance with the ideas in this document. For example, authentication information that differs from the information specifically mentioned above (for example, BZIM, IMZI, GCS GC), can be used in device or method, practiced on the basis of ideas in this document.

In some aspects, the ideas in this document may be used on a network that contains macroscopic coverage (for example, in a cellular network of a large area, such as a 3C network, typically called a macro cellular network or SLIM) and a small scale coverage (for example, a network environment in an apartment or at home, which is typically called EAN). As the terminal access is moved on this network, the terminal can be served at specific locations using access points that provide the macro coverage, while the access terminal can be used in other locations through the access points that provide coverage of a small scale. In some aspects, nodes on a small scale can be used to provide incremental capacity enhancement, indoor coverage and various services (for example, for more efficient work of users). In the explanation in thisdocument, a node that provides coverage in a relative area, can be referred to as macrowuzel. A node that provides coverage in a relatively smallareas (for example, in an apartment), can be mentionedas a femto node. The node providing coverage for the area, which is smaller in the macro region and larger in the femto region, can be referred to as pikovazol (for example, when providing coverage inside the office boulevola).

A cell associated with a macro node, a fem node or a picosecond, can be referred to as a macroscope, a femtocell, or a picosilicon, respectively. In some implementations, each node can be associated with (for example, split one) with one or more cells or sectors.

In various applications, other terms can be used to refer to a macro node, a femto node or piikovozol. For example, the macro node can be configured or recalled as an access node, a base station, an access point, an e-node B, a macro cell, and so on. .In addition, the femto node can be configured or referred to as home network B, home e-node B, access point base station, femtocell, etc.

FIG. 14 illustrates a system 1400 wirelesscommunication, made with the ability to maintain a certain number of users, which can implement the ideas in this document. The system 1400 provides a connection for several 1402 cells, such as, for example, a power cell 1402A-1402C, wherein each cell is operated by the appropriate access point 1404 (e.g., access points 1404A-1404C). As shown in FIG. 14, access terminals 1406 (e.g., access terminal terminals 1406A-1406) may be dispersed at different locations throughout the system in time. Each access terminal 1406 can exchange data with one or more access points 1404 in a direct link (EB) and / or reverse link (PE) at the present time, depending, for example, on whether or not the access terminal 1406 is active, and whether it is located or not in a soft transfer service. The wireless communication system 1400 may provide services for a large geographic area. For example, a macro cell 1402A-1402C can cover several quarters in a county or several miles in a rural environment.

FIG. 15 illustrates exemplary communication system 1500 where one or more femto nodes are deployed within the framework of the network environment. In particular, system 1500 contains several femto nodes 1510 (for example, femto nodes 1510A and 1510B) installed in the network environment for a relatively small scale tab (for example, in one or more apartments 1530 users). Each femto node 1510 can be connected to the global computing network 1540 (for example, the Internet) and the base network 1550 of the mobile operator through the UE-router, cable modem, wireless communication line or other means of communication (not shown). As explained below, each femto node 1510 may be configured to handle associate access terminals 1520 (for example, an access terminal 1520a) and, optionally, third-party access terminals 1520 (e.g. ter-min 1520V access). In other words, access to the ffmode 1510 may be limited, whereby the given access terminal 1520 can be served using a set of specified femto nodes 1510 (for example, by means of home), but can not be served through the specified femto node 1510 (for example, with the help of a femto node 1510 neighbor).

FIG. 16 illustrates an example of a coverage map 1600, wherein several areas of 1602 tracking (or routing areas or location areas) are specified, each of which includes a multiple 1604 macro coverage. Here, the coverage areas, associated with the areas 1602A, 1602B and 1602C, reflecting, are outlined with the help of widelines, and zones of 1604 macroscopes are represented by hexagons. Areas of 1602 tracking also include areas of 1606 femtocouple digging. In this example, each of the 1606 femtocell zones 1606 (for example, the 1606C femtocouple area) is illustrated within the coverage area 1604 (for example, the coverage zone 1604B). It should be taken into account, however, that the femtocouple zone 1606 may not be fully within the limits

41

97019

42

zone 1604 macro coverage. In practice, a large number of zones 1606 femto coating can be set with the help of this area 1602 tracking areas 1604 macro coverage. In addition, one or more areas of the pico coating (not shown) may be provided within the framework of this area of ​​tracking 1602 or zone 1604 macro coverage.

Referring again to FIG. 15, the owner of the femto node 1510 may subscribe to a mobile service, such as, for example, a mobile 3C service provided through the mobile carrier's base network1550. In addition, the access terminal 1520 can allow work in both macro-windows and small-scale network environments (for example, apartments). Depending on the current location of the access terminal 1520, the access terminal 1520 can be served by the access point 1560 of the macro cell associated with the base mobile operator network 1550 or by the help of any of the set of femto nodes 1510 (for example, femto nodes 1510A and 1510B, which are located in the framework of the respective apartment of 1530 users). For example, when a subscriber knows-outside the house it is served with the help of a standard access point (for example, access points 1560), and when a subscriber is at home, he is served by a femto node (for example, a node 1510A). Here, it is necessary to take into account that the femto node 1510 may be backward compatible with existing access terminals 1520.

The femto node 1510 can be deployed on one frequency or, alternatively, at multiple frequencies. Depending on the specific configuration, one time or one or more of several frequencies may overlap with one or more frequencies that are used with the access macros ( for example, access points 1560).

In some aspects, the access terminal 1520 may be configured to connect to a preferred femto node (e.g., a home femt node of the access terminal 1520) whenever such an option is possible. For example, each time the access terminal 1520 is in the user's apartment 1530, it may be desirable that the access terminal 1520 be exchanged for data only with the home femto node 1510.

In some aspects, if the access terminal 1520 operates on a 1550 cellular network, yet it is permanently placed on its most important network (for example, specified in the overriding roaming list), the access terminal 1520 may continue to search for the most important network ( for example, preferred femto-evil 1510) by re-selecting a better system (VZR), which may include periodic scanning of available systems to determine whether or not optimal systems are available at the moment and further actions to associate Assuming such prevailing systems. When recording a display, the access terminal 1520 may limit the search for a specific frequency band and channel. On-

example, the search for the most

but periodically repeated. When detecting ne-

cautious femto node 1510, terminal 1520 da-

stupid selects femto node 1510 to wait

call within your coverage area.

Femto node may be limited in some aspects. For example, this femto node can provide only certain services to certain access terminals. In deployments with so-called limited-to-nothing (or closed) association, the given terminal access can only be serviced by the help of the mobile network of a macro cell and a given set of femto nodes (for example, femto nodes 1510 that are permanently placed in the respective apartment of 1530 user ) In some implementations, the node may be limited so as not to give at least one node for at least one of the following: transferring service signals, access to data, registration, search calls or service.

In some respects, a limited femto node (which may also be referred to as the homegroup of a Client Subscriber Group) is a femto node that provides services to a limited initialized set of access terminals. This set may be temporarily or permanently expanded as necessary. In some aspects, a closed subscriber group (SPS) can be set as a set of access points (for example, femto nodes) that share the general access control list of access terminals. A restricted access point can be contained in a SPS, which allows multiple terminals to connect to it. One access terminal may have the ability to connect to severallimited access points. A channel on which all femto nodes (or all limited femto-evil) in the area work can be mentioned as a femto channel.

Different interconnections thus can existbetween the given femto node and the given access terminal-terminal. For example, in terms of an access terminal, an open femto node can be referred to as a femto-towzool without a limited association (for example, a femto node provides access to all terminals of dos-dupe). Limited femto node can be referred to as femto node, which is limited in some way (for example, limited to associate and / or registration). The home femto node may be referred to as a femto node for which the access terminal is authorized for access and work (for example, permanent access is provided for a given set of one or more access terminals). The femto node can be referred to as a femto node for which the access terminal is temporarily authorized on access and work. The current femto node may be referred to as fem-tovuzol,

In terms of a limited femto node, the home access terminal can be referred to as an access terminal that is authorized to access a limited femto node (for example, the access terminal has a permanent access point to the femto node). Invited Access Terminal

43

97019

44

A po can be referred to as a access terminal with temporary access to a restricted femto node (for example, based on the term of completion, usage time, bytes, connection meter or some other criterion or criteria). A third-party access terminal may be referred to as an access terminal that does not have permission to access a restricted femto node, except possibly emergency situations such as emergency calls (for example, an access terminal that does not have credentials or permission to register in a restricted femto node).

For convenience, disclosure of the subject in this document describes different functionality in the context of the femto node. It is necessary to take into account, however, that piikovozol can provide identical or analogical functionality for a larger coverage area. For example, piikovozol may be limited, for example, piquazol can be prescribed for a given access terminal, and so on.

A multiple-access wireless system can simultaneously maintain communications for multiple wireless access terminals. As noted above, each terminal can exchange data with one or more base stations by transmitting in a forward and reverse link. Direct line of communication (or downlink communication line) belongs to the communication link from the base station to the terminals, and the back link (or the uplink) belongs to the communication link terminals to the base stations. This communication line can be installed through a system with one input and one output, a system with many input-ladies and many outputs (MIMO) or some other type of system.

The MIMO system uses several (N7) broadcasting antennas and several (N3) receiving antennas for data transmission. The MIMO channel generated by N7 transmitting and N13 reception antennas can be arranged on N3 non-dependent channels, which are also referred to as spatial channels, where ^ s <tip {^, N3}. Each of the N3 independent channels is dimensional. MIMO-system can provide increased performance (for example, higher bandwidth and / or greater reliability), if the additional dimension is used, which is created using a few transmitting and receiving antennas.

The MIMO system can support Dual Channel Duplex Systems (TUL) with Dual Channel Frequency Division (DNR). In TYU-system, the transmission in the forward and backward communication lines are carried out in one frequency area, so that the principle of turnover provides the ability to estimate the channel of the direct link from the channel reverse link. This allows the access point to benefit from the formation of a forward link transmission pattern when multiplicative antennas are available at the access point.

Ideas in this document can be included in a node (for example, a device), which uses different components to exchange data at least one other node. FIG. 17 illustrates several-component components that can be used to simplify the link between node-

we. In particular, FIG. 17 illustrates a wireless accessory 1710 (for example, an access point) and a wireless device 1750 (for example, an access terminal) of MIMO-system 1700. In apparatus 1710, data streams for a certain number of data streams are provided from the data source 1712 to the processor 1714 transfer (TX) data.

In some aspects, each data stream is transmitted through a corresponding transmit antenna. The TX data processor 1714 format, encode, and rotate the datatraffice for each data stream based on the concatenated encryption scheme selected for this data flow to provide encoded data.

Coded data for each data stream may be multiplexed with pilot data using ARUM technologies. Pilot data is a well-known data template that is processed in a known manner and can be used in the receiving device system in order to appreciate the channel feedback. Multiplexed pilot and coded data for each data stream are thenmodulated (ie, are symbolically converted) based on a specific modulation scheme (eg, BP3K, O3RK, M-RPC or M-OLM) selected for this data stream to provide modulation symbols. Data rates, coding, and modulation for each data stream can be determined by instructions executed by the processor 1730. The memory device 1732 can store the program code, data, and other information,

The modulation symbols for all data streams are provided in the TM MIMO processor 1720, which can additionally handle the modulation symbols (for example, for ARMS). The TX MIMO processor 1720 then provides N flows of modulation symbols in the Accept-transmitting devices (CCD) 1722A-1722T. In various embodiments, the TCHIMO-processor 1720 applies weighting-ty shaping of the diagram to the symbol streams of the data and to the antenna from which the symbol is transmitted.

Each receiving and transmitting device 1722 receives and processes an appropriate symbol stream to provide one or more analog signals, and additionally results in the necessary parameters (for example, amplifies, filters, and converts with increasing frequency) analog signals to provide a modulated signal corresponding to transmission on the MIMO channel. N modulated signals from receiving and transmitting devices 1722A-1722T are then transmitted from antennas 1724A-1724T, respectively.

In apparatus 1750, modulated transmitted signals are received by N3 antenna 1752A-1752P, and the received signal from each antenna 1752 is provided to the respective transmitter (CCD) 1754A-1754R. Each transmitter and receiver 1754 brings to the necessary parameters (for example, filters, amplifies and reduces the frequencyfrequency), the corresponding signal is digitized to the necessary parameters

45

97019

46

a signal to sample, and further processes the sample to provide an appropriate "receive" sim-stream.

The receive (RX) data processor 1760 then receives and processes the NK received receive streams from the NK receiving and transmitting devices 1754 based on the specific processing technique of the receiving device to provide the Nt "detected" symbol streams. The processor 1760 of the RH data then demodulates, alternatively alternates each character stream detected to update the traffic data for the data stream. Work with the processor 1760 RH-datacomplementary processing, performed by the help of TX MIMO-processor 1720 and processor1714 TX-data in device 1710.

Processor 1770 periodically determines what kind of matrix of pre-coding to use (described below). The processor 1770 formulates a feedback link comprising a portion of the matrix index and a portion of the rank value. The memory 1772 can store the program code, data, and other information that is used by the processor 1770 or other components of the device 1750.

The feedback message may contain different types of information that belongs to the communication line and / or the data stream being received. The feedback feedback message is then processed using the TX data processor 1738, which also receives the traffic data for a certain number of data streams from the data source 1736, modulated by the modulator 1780, and then driven to the required parameters using receiver-transmitting devices 1754А-1754Р and is transmitted back to device 1710.

In apparatus 1710, modulated signals from the device 1750 are received using antennas 1724, are brought to the required parameters with the help of receiving and transmitting devices 1722, are demodulated with the help of demodulator (SMART) 1740 and processed using the RX data processor 1742 to extract the message the return link transmitted by means of the device 1750. The processor 1730 determines what kind of matrix of the previous code-to use to determine the weighting coefficients of the formation of the directional diagram, and furtherproduces the wick bent message

FIG. 17 also illustrates that communication components may include one or more components that perform access control operations as discussed herein. For example, the access control component 1790 may interact with the processor 1730 and / or other components of the device 1710 to send / receive signals to / from another device (e.g., device 1750) as discussed herein. As a matter of fact, the component 1792, the access control may interact with the processor 1770 and / or other components of the device 1750 to send / receive signals to / from another device (for example, devices 1710). It is necessary to take into account that for each device 1710 and 1750 the functionality of two or more of the described components of mo-

For example, one processing component can provide the functionality of the access control 1790 and the processor 1730, and one component of the workflow can provide the functionality of the access control component 1792 and the processor 1770.

Ideas in this document may include various types of communication systems and / or system components. In some aspects, the ideas in this document can be used in a multiple access system that allows communication with multiple users by sharing the available system resources (for example, by specifying one or more bandwidths, transmission power, encoding -day, duty cycle, etc.). For example, the ideas in thisdocument can be applied to anyboth combinations of the following technologies: a multi-access with code division of channels (ΟΜΜΑ), multi-carrier multi-carrier systems (MOLTOMA), wideband OLYMPIA systems (W-ΟΜΜΑ), systems of high-speed packet pre- stupa (NZRA, H3PAR +), multi-access systems with time division of channels (TIMA), systems of multiple access with frequency division of the mnals (RmM), systems of RMI with one carrier (AP-PII), systems of multiple access with orthogonal frequency division of channels (ΘΡΜΜ) or other technologies of multiple access. The system of wireless communication using the ideas in this document, may be implemented with the ability to implement one or more standard-states, such as 13-95, Ebt2000, IZ-856, S-COMA, TY30MMBA and other standards. The ÏÌΜÀ network can implement such radiocommunication technology as the universal radio terrestrial radio access technology (υΤΑΑ), ebt2000, or some other technology. I ^ A contains the Sh-ΟΜΜα and the low-speed standard for transmitting symbols of the noise-like sequences (bPr). Additionally, techbaet 2000 covers the standards 13-2000, IZ-95 and 13-856. The ITM-network can implement such telecommunication technology, as a global mobile communications system (O3M). The ΡΡΜΜ-network can realistically use such a radiocommunication technology as the improved Ι ^ Α (Ε-υΤΚΑ), IEEE 802.11, IEEE802.16, IEEE 802.20, EIAzP-ΡΡΜΜ, etc., ΤΑΑ, ΕΙΙΑΑ and O3M is part of the universal system of mobile telecommunications (υΜΤ3). The ideas in thisdocument can be implemented in the system of standard long-term development of 3SSR (BTE), the system of the standard ultra-wideband for mobile devices (υΜΒ) and other types of systems. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. (O3M). The ΡΡΜΜ-network can realistically use such a radiocommunication technology as the improved Ι ^ Α (Ε-υΤΚΑ), IEEE 802.11, IEEE802.16, IEEE 802.20, EIAzP-ΡΡΜΜ, etc., ΤΑΑ, ΕΙΙΑΑ and O3M is part of the universal system of mobile telecommunications (υΜΤ3). The ideas in thisdocument can be implemented in the system of standard long-term development of 3SSR (BTE), the system of the standard ultra-wideband for mobile devices (υΜΒ) and other types of systems. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. (O3M). The ΡΡΜΜ-network can realistically use such a radiocommunication technology as the improved Ι ^ Α (Ε-υΤΚΑ), IEEE 802.11, IEEE802.16, IEEE 802.20, EIAzP-ΡΡΜΜ, etc., ΤΑΑ, ΕΙΙΑΑ and O3M is part of the universal system of mobile telecommunications (υΜΤ3). The ideas in thisdocument can be implemented in the system of standard long-term development of 3SSR (BTE), the system of the standard ultra-wideband for mobile devices (υΜΒ) and other types of systems. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. As the advanced I / A (E-utCA), IEEE 802.11, IEEE802.16, IEEE 802.20, EIAzP-ΡΡΜΜ, etc., υΤΑΑ, ΕΙΙΑΑ and ΟΜΜ are part of the universal system of mobile telecommunications (υΜΤ3). The ideas in thisdocument can be implemented in the system of standard long-term development of 3SSR (BTE), the system of the standard ultra-wideband for mobile devices (υΜΒ) and other types of systems. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. As the advanced I / A (E-utCA), IEEE 802.11, IEEE802.16, IEEE 802.20, EIAzP-ΡΡΜΜ, etc., υΤΑΑ, ΕΙΙΑΑ and ΟΜΜ are part of the universal system of mobile telecommunications (υΜΤ3). The ideas in thisdocument can be implemented in the system of standard long-term development of 3SSR (BTE), the system of the standard ultra-wideband for mobile devices (υΜΒ) and other types of systems. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. E-I ^ A and O3M are part of the universal system of mobile telecommunications (υΜΤ3). The ideas in thisdocument can be implemented in the system of standard long-term development of 3SSR (BTE), the system of the standard ultra-wideband for mobile devices (υΜΒ) and other types of systems. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. E-I ^ A and O3M are part of the universal system of mobile telecommunications (υΜΤ3). The ideas in thisdocument can be implemented in the system of standard long-term development of 3SSR (BTE), the system of the standard ultra-wideband for mobile devices (υΜΒ) and other types of systems. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies. BTE is the version of υΜΤ3 that uses ΕΤΑΡΑ. Although certain aspects of disclosure can be described with the use of the 3SrR terminology, it is to be understood that the ideas in this document may apply to the 3SSR technology (Re 199, Re 15, Re 16, Re 17), as well as the technology 3SRP2 (ICCTT, IhEU- UIO Reio, Re ^^, ReuV) and to other tech nologies.

The ideas in this document may be included (for example, implemented as part of or executed with help) in a plurality of devices (for example, universities). In some aspects, a node (e.g., wirelessly

47

97019

48

node) implemented in accordance with the ideas contained in the document, may contain an access point or termal of access.

For example, an access terminal may include, be implemented as, or is known as a subscriber device, a subscriber station, a subscriber unit, a mobile station, a mobile device, a mobile node, a remote station, a remote terminal, a custom terminal, a custom agent, a user device, or some other term. In some implementations, the access terminal may contain a cellular telephone, a wireless phone, a protocol for initiating a session (3PP), a wireless subscriber station (MSC, a personal digital device (RSA), a handheld device with support for unconventional connections, or Accordingly, one or more aspects discussed herein may be included in the telephone (e.g., a cellular tele-phone or smartphone);

An access point may contain, be implemented or known as a node B, an e-node B, a wireless network controller (PNO), a base station (B3), a base radio station (PB3), a base station controller (B3C), a base transmitting station (VT3) the function of the transceiver (TP), the radio receiving transmitter, the radio router, the basic set of services (B33), the extended set of services (E33) or some other similar term.

In some aspects, a node (e.g., access point) may contain an access node for the system connection. Such an access device can provide, for example, the ability to connect to a network (such as a global computer network, such as the Internet or a cellular network) via a wired or wireless network with a network. Accordingly, the access node can provide the ability of another node (for example, the access terminal) to access the network or some other functionality. In addition, you must take into account that one or both of the nodes can be portable or, in some cases, relatively non-portable.

In addition, it should be borne in mind that the wireless host can allow the transmission and / or access of information in a non-wire way (for example, through a wired connection). Thus, the receiving device and the transmitter, as explained herein, may contain the corresponding components of the interface (for example, components of the electrical or optical interface) to exchange data through a non-wireless transmission medium.

A wireless node can exchange data through one or more wireless lines that are based or otherwise support any appropriate wireless technology. For example, in some aspects, a wireless node can be associated with the network. In some aspects, the network may contain a local computing network or global computingnetwork. The wireless device may support, or otherwise use, one or more of a variety of wireless technologies, protocols or standards, for example, as explained in this document (for example, SUMA, TYUMA, ORUM, ORUMA, MIMAX, MI-RI, etc. etc.) Similarly, a wireless node can support or otherwise use one or more of the plurality of corresponding modulation or multiplexing schemes. The wireless node may therefore include the appropriate components (eg, radio interfaces) to establish and exchange data through one or more wireless networks using the above or other wireless communication technologies. For example, a wireless node can contain a wireless receiving and transmitting device with associated components of the transmitter and receiver device, which may contain various components (for example, signal generators and processors of signals), which simplify the connection to the wireless transmission medium.

The components described in this document may be implemented in a large number of ways. Referring to FIG. 18-28, devices 1800, 1900,2000, 2100, 2200, 2300, 2400, 2500, 2600, 2700 and 2800 are represented as a sequence of interconnected functional blocks. In some aspects, the functionality of these blocks can be implemented as a processing system that contains one or more processor components. In some aspects, the functionality of these blocks can be re-arranged using, for example, at least part of one or more integrated circuits (for example, A3Yu). As explained herein, an integrated circuit may include a processor, software, other related components, or a combination of the above. The functionality of these blocks can also be realized-in some other way, as discussed in this document. In some aspects, one or more of the dotted blocks in FIG. 18-28y optional.

Devices 1800, 1900, 2000, 2100, 2200, 2300, 2400, 2500, 2600, 2700 and 2800 may include one or more modules that can perform one or more of the functions described above for relatively different drawings. For example, the reception / sending device 1802 may correspond, for example, to the contact roller as explained in this document. Identify means 1804 may, for example, be described by an access controller as not specified in this document. Means 1806 for determining the permitted services may correspond, for example, to the access controller, as explained in this document. Reception means 1902 may correspond, for example, to the communications controller described herein

49

97019

50

document The sending facility 1904 may correspond, for example, to the access controller as explained in the given document. Identification means 1906 may correspond, for example, to access control, as explained herein. The dispatching tool2002 may correspond, for example, to the access control console as explained in this document. The reception method of 2004 may correspond, for example, to the communications controller described herein. The method for determining the permitted services may, for example, be the access controller, as explained in this document. Configuration means 2102 may correspond, for example, to an initialization controller, as explained herein. Means 2104 obtaining may correspond, for example, to an access controller as explained in this document. Reception means 2106 may correspond, for example, to a communications controller, described in thisdocument. Measure 2108 may be answered, for example, by the access controller as explained in the document. Identification means 2202 may correspond, for example, to initialization control as explained in this document. The sending method 2204 may correspond, for example, to the communications controller, as explained herein. The destination facility 2206 may correspond, for example, to the initialization controller, as explained in the given document. Reception means 2302 may, for example, be initialized controller, as explained in this document. Transfer device 2304 may correspond, for example, to a communications controller, as explained herein. Meaning 2402 identifier identification can correspond, for example, to the initialization controller, as explained in the given document. The dispatch means 2404 may, for example, the communications controller is not listed in this document. The reception device 2502 may correspond, for example, to the communications controller described herein. The access activation recognition tool 2504 may correspond, for example, to the access controller, as explained in thisdocument. Configuration-based determination tool 2506 may correspond, for example, to access controller, as explained herein. The 201050 storage medium may correspond, for example, to the access controller, as explained in this document. Configuration tool 2602 may, for example, be a controller of initialization, as explained in this document. Transmission means 2604 may correspond, for example, to a communications controller, as explained herein. Means 2606 may be consistent with, for example, the controller communication described in this document. The dispatch means 2608 may correspond, for example, to the initialization control as explained herein. The task 2610 may correspond, for example, to the initialization controller, as explained in this document. The monitoring device 2702 may, for example, be a receiver described in this document. Measure 2704 of reception of beacon radio signals may correspond, for example, to a receiving device described in a given document. The dispatch means 2706 may, for example, be described by the communications controller as not listed herein. Reception tool 2708 described in this document. Measure 2704 of reception of beacon radio signals may correspond, for example, to a receiving device described in a given document. The dispatch means 2706 may, for example, be described by the communications controller as not listed herein. Reception tool 2708 described in this document. Measure 2704 of reception of beacon radio signals may correspond, for example, to a receiving device described in a given document. The dispatch means 2706 may, for example, be described by the communications controller as not listed herein. Reception tool 2708

The roaming routine may correspond, for example, to the initialization controller as explained in this document. The configuration tool 2802 may correspond, for example, to the initialization controller, as explained in the given document. Means 2804 for receiving beacon radio signals may correspond, for example, to a small device described in this document. The dispatch means 2806 may correspond, for example, to the communications controller, as explained in thisdocument. Authorization tool 2808 may correspond, for example, to an access controller, as explained in this document. Guideline 2810 may correspond, for example, to an access controller as explained herein. Reception capture means 2812 may correspond, for example, to the access controller, as explained in this document.

It is to be understood that any reference to an element in this document with the use of any designation, such as "first", "second", etc., in general, does not limit the number or order of these elements. Instead, these designations can be used in this document as a convenient way of distinguishing between two or more elements or instances of an element. Thus, references to the first and second elements do not mean that only two elements can be used in this case, or that the first element should precede the second element by some form. In addition, if not stated otherwise, the items may contain one or more elements.

Those skilled in the art will appreciate that information and signals can be represented by any of the plurality of different technology giants. For example, data, instructions, commands, information, signals, bits, symbols and symbols of the noise-like sequences, which can be given as an example for all of the above description, may be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, optical fields, or particles or any combination of the above-mentioned.

Those skilled in the art also have to take into account that any of the various illustrative logical blocks, modules, processors, assemblies, circuits, and algorithm steps described in connection with the vaks disclosed in this document, may be implemented as an electronic hardware device (eg, digital implementation, analog implementation or a combination of these, which can be pro- cessed using source encoding or some other technology), different forms of program-lots or project code containing instructions (which for convenience I can It is mentioned in this document as "software" or "software module"), or combinations of the above-mentioned. To clearly illustrate this interchangeability of hardware and software provision, various illustrative components, blocks, modules, circuits and stages are described above, in general, based on functionality. This functionality is implemented as hardware or software provision, depending on the specific version of application and design constraints, which overlay

51

97019

52

on the system as a whole. Highly skilled professionals can implement the described functionality in various ways for each particular application, but such implementation decisions should not be interpreted as entities that are a departure from the scope of this disclosure.

Various illustrative logical blocks, modules, and circuits described in connection with aspects disclosed in a given document can be implemented in frameworks or executed using an integrated circuit (IC), access terminal, or access point. The IC can be equipped with a general purpose processor, a digital signal processor (UZR), a specialized inter-gambling circuit (AIS), a user-programmed user terminal matrix (PPRA), or another programmed logic device, a discrete logic element or transistor logic, discrete hardware components, electrical components, optical components, mechanical components, or any combination of the aforementioned, executed from the possibility of performing the functions described in thisdocument, and may lead to the execution of the code or instructions that the post They are located on the IP, outside of the IC or both there and there. Processor general purpose can be a microprocessor, but in an alt-terteral version, the processor may beany traditional processor, controller, myc-rocontroller or terminal machine. The processor can be implemented as a combination of computing devices, for example, a combination of UDP and microprocessor, a plurality of microprocessors, one more microprocessors along with the core UZRor any other similar configuration.

It is necessary to understand that a particular order or hierarchy of stages in the open processes is an example of a typical approach. On the basis of constructive re-weights it is necessary to understand that the particular order or hierarchy of stages in the processes can be changed, while remaining within the scope of this discovery essentially. The points of the method in the enclosed formulas and inventions are elements of various stages of a discrete order and do not intend to be restricted to a particular represented order or hierarchy.

The described functions can be implemented by hardware tools, software, firmware or in any combination of the above. If implemented in software, functions can be saved or transmitted as one or more tools or code on a machine readable medium. Machine-gun carriers contain both computer storage media and data communications, containing any transferring environment, as it facilitates the transfer of a computer program from one place to another. Storage carriers may be any available media that can be accessed through a computer. As an example, but not limited to, these machine readable media may contain RAM, ROM, BERROM, CU-ROM or other storage device on optical disks,

code in the form of instructions or data structures, and to which you can access the computer. Similarly, any connection korek-tnot to call machine readable carrier. For example, if the software is transmitted from a website, server, or other remote source using a coaxial cable, fiber optic cable, twisted pair, digital subscriber line (SUZ__), or wireless technologies such as infra red, radio transmitter and microwave receivers , then the coaxial cable, the fiber optic cable, the twisted pair, the UZII_ or the wireless technology, such as the infrared, radio transmitting and micro-fiber environments included in the definition of the carrier. The disk (bike) and the disk (6I5c) when used in this Kumenny contain a CD (CD), a laser disk, an optical disk, a universal digital disk (YUUU), a floppy disk and a DVD-ROM, At the same time, disks (bikes) usually reproduce the data magnetically, while disks (buff) usually reproduce the data optically using lasers. Combinations of the above-mentioned should also be included in the number of hand-readable media. Therefore, you need to take into account that the computer-readable medium can be implemented in any appropriate computer software.

In view of the foregoing, in some aspects, the first communication method comprises: identifying an identifier for a set of at least one access point that is executed with the ability to provide at least one service only to a set of at least one access terminal, and the identifier uniquely identifies a set of any- less than one access point within the network operator; and sending an identifier to each access point in a set of at least one access point. In addition, in some respects, at least one of the following may also be applied to the first method of communication: the identifier is assigned the network identifier, and the network contains the domain operator of the cellular communication; the identifier is determined in conjunction with the activation of the access point of the set from at least one access point; a set of at least one access point contains a plurality of access points belonging to the general ad-domain domain; a set of at least one access point contains a plurality of access points that are associated with a common closed subscriber group; identifier is text; each access point of the set of at least one access point is limited in such a way that at least one of the access terminals is not provided at least one of the group consisting of: redistribution of service signals, access to data, registration, and service; each access point of a set of at least one access point contains a femto node or piquisazole; identification of the identifier contains the receipt of the request for an identifier anddefinition of whether the already used or not identifier at least with one another access point;

53

97019

54

other access points; Each access point at least one access point provides at least one other service to at least one other access terminal; a method further assigning the assignment of a unique device identifier to each access point of the set of at least one access point; each access point from the at least one access point provides services for dialing from at least one end-to-end terminal other than services for at least one other access terminal.

Also, in the light of the foregoing, in some aspects, the second method of communication comprises: a preseam of the identifier for recruiting at least one access point at the access point of the set, wherein each access point of the set is made with the ability to provide at least one service to only a set of at least one terminal access, and at the same time the identifier uniquely identifies at least one access point within the operator's network; and transfer the ID of the board interface. Additionally, in some respects, at least one of the following may also be applied to a second communication method: the method of post-receiving comprises receiving a registration message from the access terminal of a set of at least one access terminal in response to the transmission of the identifier; The identifier contains the identifier of the network, and the network contains the domain of the cellular communication operator ' tongue the identifier is accepted as the result of activating the access point, which takes an identifier; A set of at least one access point contains a plurality of access points that fall into the general administrative domain; the set of at least one access point contains a plurality of access points that are associated with the general closed subscriber group; identifier istext; each access point of the set at least one access point is limited in such a way that it does not provide at least one other access terminal at least one of the groups, which is compiled from the following: transfer of service signals, access to data, registration and service; Each access node of the set of at least one access point contains a femto node or picozool; Each access node of at least one access point provides at least one other service to at least one other access terminal, each access point of the set from at least one access point provides services for typing at least one access terminal different from the service for at least one other access terminal; the ID is accepted in response to request for an identifier; the method further contains the definition of the proposed identifier, in which the request contains the proposed identifier.

Also, in the light of the foregoing, in some aspects, the third method of communication comprises: identifying the access terminal terminals access terminals; and sending identifiers is not less than one access point, which is executed with the ability to provide at least one service only a set of access terminals. In addition, in some aspects, at least one of the following

can also be applied to the third method of communication: the identifiers contain permanent identifiers for access terminals; IDs contain temporary identifiers for terminals access; IDs contain identifiers of network addresses or international numbers of the digital network with integrated services for the mobile station; the IDs are sent to the request from the access point of at least one access point; the definition contains reception of identifiers from the network node; the definition contains the reception of identifiers from the web server, which allows the user to specify the access terminals, which is allowed to accept this least one service from at least one access point; a set of access terminals associated with a common closed subscriber game; each access point from at least one access point is limited so, in order not to provide at least one other access terminal with at least one of the following groups: transfer of service signals, access, registration, and service; Each access point with at least one access point contains fem-toluzzol or picosol; each access point of at least one access point provides at least one other service to at least one other access terminal.

Also, in the light of the foregoing, in some aspects, a fourth communication method comprises: receiving a message relating to a request using an access terminal to access an access point, the message containing the first identifier associated with the access denomination; determining the second identifier associated with the access terminal on the first first identifier; and determining whether or not the access terminal is allowed to receive an access point from an access point, based on the second identifier and at least one identifier associated with the access point. In addition, in some aspects, at least one of the following can also be applied to the fourth method of communication: the first identifier contains a temporary identifier, and the second identifier contains the post id; the second identifier contains the identity of the network access point address or the international number of the digital network with the integrated services for the mobile terminal access terminal; the second identifier identifies at least one closed subscriber group to which the access terminal can access, and at least one identifier associated with the access point contains an identifiable subscriber group associated with the access point; at least one identifier associated with the access point contains an access list for the access point, and determining if the access terminal is allowed to accept the service from the access point, contains a determination whether the second identifier is in the access list; the network node performs a determination of whether the access terminal is allowed to accept the service from the access point,

55

97019

56

additionally contains a send, an access point, a statement indicating the determination of whether the access terminal is allowed to accept the service from the access point; the definition of the second identifiercontains the sending of the first identifier to the network and the reception of the second identifier from the network node; the access point determines whether or not the access terminal is allowed to accept the service from the access point; at least one identifier associated with the access point is received from the network node; determining whether or not an access terminal accepts an access service from an access point comprises: sending a second identifier and at least one identifier connected to an access point, the network node and reception, from the network node, indicating whether the access terminal is allowed to receive access point service; definition of that whether or not the access terminal accepts the service from the access point, includes: sending the second identifier to the network node and receiving at least one identifier associated with the access point from the network node; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, access to data, registration, and service; The access point contains femto node or picosol. transfer of service signals, data access, registration and service; The access point contains femto node or picosol. transfer of service signals, data access, registration and service; The access point contains femto node or picosol.

Also, taking into account the foregoing, in some aspects, the fifth method of communication includes: reception request from the access point for the authentication of the access terminal; and sending to an access point of at least one identifier that identifies at least one set of access points, of which the access domain is allowed to receive at least one service. Additionally, in some aspects, at least one of the following may also be applied to the fifth communication method: at least one identifier contains the identifier of the covered subscriber group; the request contains the identification data of the network address of the access terminal or the international number of the digital network with the integrated services for the mobile terminal access terminal; the method further comprises a value of at least one identifier based on the constant identifier, associated with the term of access, and the determination of a constant identifier based on the temporary identifier associated with the access terminal; request contains a temporary identifier; determination of the constant identifier contains the sending of a temporary id-confession to the network node and the reception of a permanent identifier from the network node; the method of up to date contains reception of at least one identifier from the network node; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, data access, registration, and service; The access point contains femto node or picosol. determination of the constant identifier contains the sending of a temporary id-confession to the network node and the reception of a permanent identifier from the network node; the method of up to date contains reception of at least one identifier from the network node; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, data access, registration, and service; The access point contains femto node or picosol. determination of the constant identifier contains the sending of a temporary id-confession to the network node and the reception of a permanent identifier from the network node; the method of up to date contains reception of at least one identifier from the network node; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, data access, registration, and service; The access point contains femto node or picosol. which consists of the following: redistribution of service signals, data access, registration and service; The access point contains femto node or picosol. which consists of the following: redistribution of service signals, data access, registration and service; The access point contains femto node or picosol.

Also, in view of the foregoing, in some aspects, the sixth method of communication comprises: off-the-rack, using the access point, the request for audio,

tennification of the access terminal; and receiving in response to a request for at least one identifier that identifies at least one set of access points from which the access terminal is allowed to receive at least one service. In addition, in some aspects, at least one of the following may also be applied to the sixth method of communication: the method further comprises determining whether or not the access terminal is allowed to receive a connection from an access point, based on at least one identifier; at least one identifier contains the ID of the closed subscriber group; at least one identifier identifies a closed subscriber group to which the access terminal may access, and the definition determines whether or not at least one identifier with the identifier of the closed group group associated with the access point is identified; the request is sent based on the definition that the access terminal is not listed in the list for the access point access point; the request contains the identification data of the network address of the access terminal or the international number of the digital network with the integrated services for the mobile terminal access terminal; the request contains a temporary identifier associated with the access terminal; the method further comprises obtaining information for a session associated with the access terminal from the communication node, while: the session information contains contextual information for the ds-topa terminal, and the request contains contextual information; the access point is limited in such a way that it does not provide at least one other access terminal, at least one of the following, consisting of the following: transmission of service signals, access, registration, and service;

Also, in the light of the foregoing, in some aspects, the seventh method of communication comprises: an off-rack, using an access point, a request comprising a dial identifier of at least one access terminal, which has the right to receive the service from the access point; and receiving, in response to a request, a list of at least one access terminal authorized to receive the service from the access point. In addition, in some aspects, at least one of the following may also be applied to the seventh method of communication: the method further comprises determining if the access terminal is allowed to accept the service from the access point, based on at least one identifier; at least one identifier contains at least one identifier of the closed subscriber group; the identifier contains a list of at least one of the IDs of the closed or non-group associated with the access terminal, and the definition contains a definition of whether or not the id of the closed subscriber group is associated with the access point in the spy; the request is sent based on the definition that the access terminal is not listed in the list for the local access point access point; request the ID of the network address of the access terminal or the international number of the digital network with the integrated services for the mobile

57

97019

58

access terminal stations; the request contains a temporary id associated with the access terminal; the method further comprises obtaining the session information associated with the access point terminal from the network node, while: the session information contains contextual information for the access terminal, and the request contains contextual information; the access point is limited in such a way that it does not provide at least one other access terminal with at least one of the following groups: transfer of service signals, access, registration and service; the access point contains a femto node or picozool.

Also, in the light of the foregoing, in some aspects, the eighth communication method comprises: at-yom, from the first access point, an identifier of at least one other access point to which the access terminal has the right to access; anddefinition on the basis of the identifier whether or not to allow access to at least one other access point. In addition, in some aspects, at least one of the following can also apply to the eighth method of communication: the value contains a proposal to the user to determine whether to allow or not access; the definition of the display of the indicator of the ID and the acceptance of the user input, indicating whether to allow or not access; the way to additionally place a definition based on the configuration information is that you must allow access automatically or allow access in response to a request; The method of additionally includes storing the list of access points that are allowed to access by the access terminal, with the definition additionally based on the list; a method further comprising storing the list of access points to which the user has chosen not to access, hence the definition additionally based on the list; the id-identifier contains the network identifier; identity-identifier contains the ID of the closed subscriber group; the identifier is received through a ZMZ message, an application protocol protocol message, a radio control message or a search call; ID identifier is accepted from the network node; Each access point from at least one access point is limited in such a way that it does not provide at least one other access terminal at least one of the group consisting of the following: transfer of service signals, data access, registration and service; each access point from at least one access point contains a femto node or a penknose.

Also, in the light of the foregoing, in some aspects, the ninth communication method comprises: pinpointing an access point in the initialization mode; the transmission of the default beacon which contains the default configuration during the initialization mode; receiving a message from the access terminal in response to the beacon radio signal by default; and sending a list of preferred roaming to the access terminal in response to a notification. In addition, in some aspects, at least one of the following can also be applied to the ninth mode of communication: beacon radio-

The default configuration containing the default is transmitted at the first power level, the method further comprising configuring the access point to another operating mode, by which the beacon radio signals are transmitted at a second power level that exceeds the first power level; the first power level provides a smaller coverage area than that provided by the second power level; The default configuration contains the default network id, which differs from the network id identifier used for non-initializing the working mode; the default configuration identifies the system and the default network at least one access point with the highest priority, and the prevailing roaming speaker indicates the other identifiers of the system and the network of at least one access point with the highest priority; The lighthouse radio signal is by default transmitted at the default frequency, and the list of preferred roaming indicates another frequency of beacon radio signals for the access point, which differs from the frequency by default; the method further includes specifying a dial-up roaming based on another roaming list associated with the access terminal; the method further comprises receiving a different list of preferred roaming from the access terminal; the method further comprises receiving another roaming dial-up routing from the network node; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of the following: transmission of service signals, access to the attached, registration and service; the access point contains a femto node or picozool.

Also, in view of the foregoing, in some aspects, the tenth method of communication includes: monitoring, access terminal, beacon radio signals based on the first list of preferred roaming, which indicates the default configuration; receiving a beacon radio signal containing configurations By default, from an access point as a result of monitoring; sending a message to the access point in response to the beacon radio signal received; and receiving the second roaming list from the access point in response to a message, whilethis second roaming list specifies a configuration other than the default configuration. In addition, in some respects, at least one of the following can also be applied to the tenth way of communication: the first list of prevailing roaming contains a list of roaming by default foroperations of initialization, and the second list of preferred roaming contains a list of roaming for non-connected with the initialization of operations; the default configuration contains the default network identifier; the second roaming list contains another network identifier associated with the dot-dupe point that differs from the default network id; the beacon radio signal is received at the default frequency specified by the first roaming priority list and the second roaming rows indicate the frequency carrier for the access point that is different from the frequency which differs from the default network id; the beacon radio signal is received at the default frequency specified by the first roaming priority list and the second roaming rows indicate the frequency carrier for the access point that is different from the frequency which differs from the default network id; the beacon radio signal is received at the default frequency specified by the first roaming priority list and the second roaming rows indicate the frequency carrier for the access point that is different from the frequency

59

97019

60

by default; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: transmission of service signals, access to data, registration and service; the access point contains a femto node or piquisazole.

Also, in view of the foregoing, in some aspects, the eleventh method of communication comprises: configuration of an access point with the first identifier of the access terminal; receipt of the second access terminal identifier based on the first identifier; receiving a message requesting access using the access terminal; anddefinition, at the access point, whether, to provide or not requested access, based on the second identifier. Additionally, in some aspects, at least one of the following may also be applied to the eleventh method of communication: the first identifier contains the identity of the network address or the international digital network number with the integrated services for the mobile station; the second identifier contains an electronic serial no-meter or international identifier of the subscriber of the mobile communication; Receipt contains: sending the first identifier to the network node and the second ID of the network node as the result of sending the first identifier; the definition contains a comparison of the identifier that is received through the message from the terminal dos-topa, with the second identifier; Definition: send a second identifier to the network node and receive, as the result of sending another identifier, an indicator relative to whether or not the requested access is provided; access point is configured via the web interface; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, access to data, registration, and service; The access point contains femto node or picosol.

Also, taking into account the foregoing, in some aspects, the twelfth method of communication includes: configuring the access terminal with a preemptive roaming list containing an identifier of the set of access points, which are limited so as to provide services to a limited set of access terminals; reception of beacon radio signals from one of the access points, while the lame radio signal contains an identifier; sending a message to one access point in a beacon radio signal; and accepting the authorization to access the same access point, in the corresponding message. Additionally, in some aspects, at least one of the following may also be applied to the twelfth method of communication: the access set contains all access points in the domain of the cellular operator, which are limited so, to provide services to restricted access points; the identifier contains the identifier of the network; the list of preferred roaming indicates the bearer frequency used by the help set of access points; a way to add a suggestion to the user to identify the ones that the investigator does not access one access point;

the method further comprises displaying an indicator for one access point and receiving a custom message, indicating whether or not to access access to one access point; access terminalautomatically determines whether or not to be implementedwith one access point; each access point on the access point bar is limited in such a way that at least one of the other end-to-end terminals is not provided by at least one of the group consisting of the following: service signal transmission, data access, registration, and service; each access point from the set of access points contains a femto node or a penknose.

Also, in light of the foregoing, in some aspects, the thirteenth method of communication includes: receiving a request from the access point for authentication access term; determining whether the access terminal is allowed to accept the service from the access point, based on the identifier of the set of at least one access terminal that accepts the service from the access point; and sending a message that specifies the definition to the access point. In addition, in some respects, at least one of the following can also be applied to the thirteenth way of communication: the definition contains the definition of whether or not an identifier is in the access point list of the access point; request contains a list of access; the identifier contains a permanent identifier; the method further comprising a determination of a permanent identifier based on the temporary identifier of the set from at least one ter-minal of access; definition of a permanent identifier contains the sending of a temporary identifier to the network node and reception of constant identifier from the network node; the identifier contains the id of the closed subscriber group; the identifier comprises at least one of the one identifier of the closed subscriber group associated with the set of at least one access terminal, and the definition contains the definition of whether or not the closed subscriber group ID is associated with the access point, in list; the access point is limited so as not to provide at least one other access terminal at least one of the groups, which is compiled from the following: transmission of service signals, access to data, registration and service; the access point contains a femto node or picozool.

Also, in the light of the foregoing, in some aspects, the fourteenth method of communication includes: reception, access point, access request from the access terminal, and the request for access places the first identifier associated with the term-access point; definition of the second identifier associated with the access terminal, based on the first identifier; and determining whether or not the access terminal is allowed to access the service from the access point, based on the second ID of the subscription from at least one access terminal authorized to accept the service from the access point. In addition, in some aspects, at least one of the following can also be applied to the fourteenth method of communication: the first identifier contains a temporary identifier, and the second identifier contains pos-

61

97019

62

identifier; the first identifier identifies the network access address of the access terminal or the international number of the digital network with the integrated services for the mobile terminal of the access terminal; the list is accepted by the network node and contains separate identifiers of access terminals; the second identifier contains an identifier of a closed subscriber group associated with the access terminal, and the list contains an identifier of a closed subscriber group associated with an access point; the definition includes: sending a second identifier and a list to the network and the host, from the network node, the indicator of whether the access terminal is allowed to accept the service from the access point; the definition contains: sending the second identifier to the net-jaded node and receiving the list from the network node; the access point is limited so, in order not to provide at least one other access terminal with at least one of the following groups: transfer of service signals, access, registration, and service; the access point contains a femto node or picozool.

In some aspects, a functionality that addresses one or more of the foregoing

aspects of the first, second, third, fourth, fifth, sixth, seventh, eighth, ninth, tenth, eleventh, twelfth, thirteen and fourteenth forms of communication may be re-developed, for example, in devices with the use of the structure, as discussed in thisdocument. In addition, the computer software product may comprise codes made possible to instruct the computer to provide functionality that is consistent with one or more of the aforementioned aspects of these communication methods.

A prior description of the disclosed aspects of the invention is provided in order to enable any person skilled in the art to create or use the present invention. Various modifications in these aspects should be apparent to those skilled in the art, and the general principles of the invention described herein may be applied to other aspects without departing from the scope of the invention. Thus, the present invention is not intended to be limited to the aspects shown in this document, but must satisfy the widest extent consistent with the principles and new features disclosed in this document.

63

97019

64

65

97019

66

67

97019

68

69

97019

70

71

97019

72

73

97019

74

75

97019

76

τι

97019

78

79

97019

80

81

97019

82

83

97019

84

85

97019

86

87

97019

88

89

97019

90

1520A

'Global Computing Network (eg Internet)

Base Mobile Network Operator

1602B 1604B

1602C

FIG. 16

Node access macroseler1560

1606A

FIG. 15

1600

1606B

1606C

1602A

1604A

1500

1520V

1530

Femto

node

1510A

Femto-

NODE

91

97019

92

93

97019

94

95

97019

96

97

97019

98

99

97019

100

101

97019

102

Computer imposition of M. Matselio Signature Circulation 23 copies.

State Service of Intellectual Property of Ukraine, st. Uritskogo, 45, Kyiv, SME, 03680, Ukraine

State Enterprise "Ukrainian Institute of Industrial Property", st. Glazunova, 1, Kyiv - 42, 01601