Provisioning communication nodes

UKRAINE

(19) and A (11) 97552 (13) C2

(51) IPC

H04I 29/06 (2006.01) H04M12 / 08 (2009.01)

STATE SERVICE BANITELECTUAL PROPERTY IN UKRAINE

DESCRIPTION

TO THE INVENTORY PATENT

(54) INITIALIZATION OF CONNECTION DEVICES

(21) a201005540

(22) 07.10.2008

(24) February 27, 2012

(86) PCT / 32008/079113, 07.10.2008

(31) 60 / 978,363

(32) 08.10.2007

(33) from

(31) 61 / 025,686

(32) Feb 01, 2008

(33) from

(31) 61 / 061,537

(32) June 13, 2008

(33) from

(31) 12 / 246,388

(32) 10.6.2008

(33) from

(46) 02/27/2012, bulletin No. 4, 2012

(72) GUPTA RAZHARSHI, CZ, PALANIGOUNDERANAND, FROM, ULUPINAR FATHI, from, KHORN HEYVINB., FROM, AGASHE PARAG A., FROM, CHEN JEN MEY, FROM, DASHPANDE MANODZH M., FROM, BALASUBRA-manian srinivasan, from, Nanda Sanjiv, from, Sang Sticks, from

(73) kveklkomom incorporated, from

(56) out of 7263076 В1; 28.08.2007

EP 1667358 A; 07/06/2006

of 6185416 B1; Feb 06, 2001

from 2004063455 A1; 01.04.2004

EP 1841267 A; October 03, 2007

(57) 1. A communication method comprising the steps of: determining (808) an identifier for a set of at least one access point, which is made with the ability to provide at least one service to only a given set of multiple end-to-end terminals, with an identifier Uniquely identifies said set of at least one access point within the network operator's network; and

send this identifier to each access point in said set from at least one access point.

2. The method of claim 1, wherein:

identifier contains network identifier; The network contains the domain of the operator of the cellular communication.

3. The method of claim 2, wherein said set of at least one access point comprises a plurality of points

access that is associated with a general closed subscriber group.

4. The method of claim 2, wherein the identifier is based on the text.

5. The method of claim 2, wherein each access point of said set of at least one access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, access to data , registration-service and service.

6. The method of claim 1, wherein, when identifying the identifier, a request for the identifier is received, and determines whether the application is already in use or the requested identifier is at least one other access point.

7. The method of claim 6, wherein, if the requested identifier is already used by at least one other access point, when sending an identifier, a response to said request containing an identifier that is not used by any other dot-dupe points is sent .

8. The method of claim 1, further comprising a step on which a unique device identifier is assigned to each access point of said set in at least one access point.

9. The method of claim 1, wherein each access point of said set of at least one access point provides services for said set of multiple access terminals that are different from the services for at least one other access terminal.

10. The method of claim 1, further comprising the step of providing an access point with one or more identifier interconnected with each access terminal accessed at the access point.

11. Communication device comprising:

a means (1804; 2202; 2402) for determining an identifier for a set of at least one access point that is executed with the ability to provide at least one service only to a given set of a plurality of access terminals, the identifier uniquely identifying said set of at least one access points within network operator; and

iA (11) 97552 (13) C2

σ>

3

97552

4

a means (1802; 2204; 2404) for sending this identifier to each access point in said set of at least one access point.

A communication method comprising the steps of: receiving an identifier for a set of at least one access point at the access point of said set, with each access point of this field executed with the ability to provide at least one service only to a specified a set of plurality of access terminals, and at the same time identifying the identifier uniquely identifying said at least one access point within the operator network; and transmit (410) this radiointerface identifier.

13. The method of claim 12, wherein the identifier is received in response to the request for an identifier.

14. Communication device comprising:

a means (1902; 2302) for receiving an identifier for a set from at least one access point to the point of reference of said set, with each access point of this set executed with the ability to give at least one service only to a given set from the plurality of access terminals, and at the same time, the identifier uniquely identifies said said- at least one access point within a network operator; and

means (1904; 2304) for transmitting this identifier via the radio interface.

15. A computer readable medium comprising codes for assigning a computer to perform steps of the method according to any of the claims 1, 10, 12, 13.

Prioritization according to 35 and.S.S. §119

This application requires prioritization of the US Patent No. 60/978363, which is known in the general property filed on October 8, 2007 with the assigned number 080042R1 at the time of the Attorney; the previous US patent application 61/025686, filed February 1, 2008 with a designated number 080745R1 in the register of the accredited; and a preliminary application for the United States Patent Application No. 61/061537 filed on June 13, 2008, with the approval number 081811R1 in the Registrar, disclosing the substance of each of which is incorporated by reference in this document.

The prior art

The equipment of the invention to which the invention belongs

This application generally relates to wireless communication, but more specifically, but not only, to increase the productivity of the connection.

Introduction

Wireless systems are widely deployed to provide various types of communication (such as language, data, multimedia services, etc.) to several users. As the demand for high-speed transmission and transmission multymediynyhdanyh growing rapidly, there is a difficult task schobrealizovuvaty efficient and failsafe systemyzv'yazku with high performance.

In order to complement the base stations of the traditional mobile telephone network, small base stations can be deployed (for example, installed at the user's home). In some aspects, these base stations can provide a more faulty internal coverage of wireless communications for mobile modules. Such base stations with small coverage are commonly known as base stations in the form of access points, home-grown B or femtocells. Typically, such base stations with a small coverage are connected to the Internet and the network of mobile operators through the UE-router or cable modem.

In some scenarios, base stations with a small coverage can be deployed arbitrarily inorganic (ab boss) way. Consequently, there may be problems associated with the implementation of access to these base stations. For example, access terminals

Po may need to be executed with the opportunity to make access to their associated base stations. In addition, it may be desirable not to allow access to certain base stations by means of unauthorized access terminals. So way, there is a need for improved access control for wireless networks.

The essence of the invention

The essence of the exemplary aspects of disclosure is shown below. It should be understood that any references to the term "aspects" in this document may relate to one or more aspects of disclosure.

This disclosure relates to some aspect of the initialization of the communication nodes and the provision of control over-the-dum for wireless communications. For example, IDs can be assigned to node kits, and IDs can be used to control access to restricted access points that provide certain services only to specified set of access terminals. Here, a restricted access point can, for example, provide certain services (for example, different billing and payment for subscriber services, additional services, different service levels) for access terminals of one or more preferred users, but for other users.

In some aspects, the initialization of the node may include the provision of a unique identifier for a set of one or more nodes. For example, a unique identifier may be assigned to one or more restricted access points. Similarly, a unique identifier may be assigned to a set of access terminals that are authorized to accept service from one or more restricted access points. In some aspects, a temporary identifier may recognize an access terminal, whereby access to the node may include the transformation of the temporal identifier into a permanent identifier for the access terminal.

With such identifiers, the necessary level of access control can be reached even when the nodes can be initialized in a trusted organizational way. In some respects, access control may be provided through

5

97552

6

goy of a restricted access point. In some aspects, access control may be provided through a network node's help. In some aspects, access control can be provided by means of a modem of a restricted access point and a network node.

This disclosure applies in some aspects of the initialization of the site through the list of predominant roaming. In some aspects, the node may be initiated by default with the default roaming list, which node can be used to receive other lines of prevailing roaming to allow access to the restricted access points. In some aspects, a node can be initialized with a predominant roaming list using a self-initializing massive radio signal.

Brief description of the drawings

These and other exemplary aspects of the disclosure of the essence are described in the detailed description and the enclosed formulas and the invention, which is given below, and on the attached inscriptions, in which:

FIG. 1 is a simplified block diagram of several exemplary aspects of the access node;

FIG. 2 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used to initialize network nodes and provide control access;

FIG. 3 is a simplified schema of several exemplary components of a network node;

FIG. 4 is a flowchart of a mode of operation for several exemplary aspects that can be used in order to initialize an access point;

FIG. 5 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to initialize an access terminal;

FIG. 6 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to initialize the access terminal;

FIG. 7 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 8 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 9 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 10 is a flowchart of a mode of operation for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 11 is a flowchart of a mode for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 12 is a flowchart of the operational sequence of the way for several exemplary aspects of the opera-

those that can be used in order to initialize the access terminal;

FIG. 13 is a flowchart of a method for several exemplary aspects of operations that can be used in order to provide access control;

FIG. 14 is a simplified scheme of the wireless communication system;

FIG. 15 is a simplified wireless network scheme that includes femto nodes;

FIG. 16 is a simplified scheme that illustrates the coverage area for wireless communication;

FIG. 17 is a simplified block diagram of several exemplary aspects of communication components; and

FIG. 18-28 are simplified block diagrams of several exemplary aspects of devices that are designed to provide initialization and / or access control, as discussed herein.

According to established practice, various signs, illustrated in the drawings, may not be represented on a scale. Accordingly, the sizes of different signs can be arbitrarily increased or reduced for clarity. In addition, some of the drawings may be simplified for clarity. Thus, the creations can not illustrate all the components of this device or method. Finally, similar sources of references can be used for to indicate similar features throughout the details and drawings.

Detailed description of the invention

The various aspects of disclosure are described below. It should be obvious that ideas in this pre-komena can be implemented in a plurality of forms and all concrete structures, functions, or both, are disclosed in this document, are simply characteristic. Based on the ideas in this document, those skilled in the art will have to take into account that the aspects disclosed herein can be implemented regardless of any other aspect and that two or more of these aspects may be combined in various ways. For example, a device can be implemented or a method can be used in practice with any number of aspects outlined in this document. In addition, such a device can be implemented or the method can be used in practice by means of another structure, functionality or structures and functionality, on top-up or different from one or more aspets described in this document. In addition, the aspect may comprise at least one element of the formulas of the invention.

FIG. 1 illustrates several nodes in the exemplary communication system 100 (e.g., a portion of the communications network). For purposes of illustration, various aspects of disclosure are described in the context of one or more media nodes, access points, and access terminals that exchange data with each other. It should be borne in mind, however, that the ideas in this document may be applicable to other types of devices or similar devices that are referred to using other terms.

Points 102 and 104 of access in system 100 provide one or more services (for example, network connection capabilities) for one or more

7

97552

8

wireless terminals (e.g., terminal 106i / or access 108) that can be installed stationary or that can move across the associated geographic area. In addition, access points 102 and 104 can communicate with one or more network nodes 110 to simplify the ability to connect to the global computer network. This network node can take different forms. For example, a network node may contain a mobility manager or some other appropriate network object (for example, a basic network object).

Access points 102 and 104 may be limited in some aspects by which each access point provides certain services to certain access terminals (e.g., access terminals 106 and 108), but not to other access terminals (for example, the access terminal macro is not shown). For example, access points 102 and 104 may be limited in such a way that other subscriber terminals do not provide at least one of the following: registration, transfer of service signals, voice call, data access, or any other cellular service. communication. Restricted access points can be rolled out arbitrarily by organizational (ay Ios) way. For example, a given homeowner can install and configure his own limited access point.

FIG. 2 provides a brief overview of several operations that can be performed in order to simplify the deployment of restricted access points and access terminals that are authorized to use these access points. In some aspects, these operations can be used to enable a limited access node to define its own identification data, identify the identity of the access terminals that are allowed to access (for example, connect) to a restricted access point, and verify the identification data an access terminal (for example, an access terminal that tries to access a restricted access point). In some aspects, these operations may be used to enable the access terminal to determine its identification data,

For convenience, operations of FIG. 2 (or any other operations explained or considered in the given document) can be described as implemented by specific components (for example, components of the system 100 and / or components of system 300 as shown in Figure 3). You need to take into account, however, that these operations can be performed using other types of components and may be executed using another number of components. You also need to take into account that one or more of the operations described in this

The document may not be used in this document

realization.

FIG. 3 illustrates several exemplary components that may be included in the network node 110 (e.g., a mobility controller, a mobile co-mutation center, or an HTTP maintenance service provider), access point 102, and access terminal 106, according to ideas in thisdocument. It should be borne in mind that the components illustrated for this one of these nodes can also be included in other nodes in the communication system. For example, the access terminal 108 may include components similar to those described for access terminal 106 and the access point 104 may include components similar to those for access point 102.

The network node 110, access point 102, and access terminal terminal 106 include receiving and transmitting devices 302, 304 and 306, respectively, for exchanging data with each other and with other universities. The receiving transceiver 302 includes a transmitter 308 for sending signals (e.g., messages) and receiving device 310 for receiving signals. The predetermined transmitter 304 includes a transmission transmitter 312 for transmitting signals and a receiver 314 for receiving signals. The receiving transmitter 306 includes a transmitter 316 for transmitting signals and a receiver 318 for receiving signals.

The network node 110, access point 102, and access terminal 106 also include various other components that can be used in conjunction with node initialization and access control, as discussed herein. For example, the network node 110, access point 102, and access terminal 106 may include control con trols 320, 322, and 324, respectively, for communication with other nodes (e.g. sending and receiving messages

laziness / indicators) and to provide another related functionality that is considered in this pre-komena. The network node 110, access point 102, and access terminal 106 may include 326, 328, and 330 initialization con trols, respectively, for initializing the host and for providing another related functionality that is considered in this subscription. The network node 110, the access point 102, and the access terminal 106 may include access con-trols 332, 334 and 336, respectively, for providing access control and for providing other related functionality that is considered in the given document. In order to illustrate, all nodes are illustrated in FIG. 3 as having functionalities related to the initialization and management of access. In some implementations, however, one or more of these components may not be used in this node.

9

97552

10

functionality, and may be mentioned as such that represent different types of nodes (for example, in different implementations, the network node 110 can provide 3PN0 or MME, or AAA, etc.). It is necessary to take into account, however, that in this implementation, the network node 110, access point and access terminal 106 can be executed in a specific way.

Again referring to FIG. 2, as represented by step 202, each access terminal (e.g., access terminal 106) in the system can be initialized to communicate with one or more access points (e.g., access point 102). In the example of FIG. 3, these operations may be performed, for example, with the robotics of the initialization controllers 326 and 330.

In some aspects, the operator may assign a unique identifier for the access terminal 106. In some implementations, this identifier contains an Internet access denominator (NIA) or an international digital network number with integrated services for the mobile station (M3 Ι3ν). Alternatively, the subscriber identity, such as the international mobile subscriber ID, (ΙΜ3Ι), can also be extracted from the subscriber identification module, such as 3MM, ISM, or UZIM, present in the access terminal. In some cases, this ID is guaranteed to be uniquely within the domain of the operator (for example, the entire network provided by the cell operator). In some implementations, such an identifier may be part of the session information for the access terminal 106. Example, the identifier may be sent to a network node 110 (for example, a session backbone controller, 3ΡN0) using the access terminal 106, when the access terminal 106 creates a session, or the ID may be propagated to the network node 110 of the authentication object, Authorization and Accounting (AAA), as soon as the SANS is created. In some implementations, the identifier is accessible to the user so that the user can, for example, configure his own limited access point (s) to provide services to one or more access terminals. In some implementations, the access terminal can be assigned an temporal identifier. For example, the network may assign permanent and temporary identifiers to the access terminal 106 and store these identifiers on the network. In addition, the network may send a temporary identifier to the access terminal 106 so,

The access terminal 106 may also be initialized with the identification data of each access point (e.g., access point 102), to which access terminal 106 access is allowed. As described in more detail below, this mozhevklyuchaty an example, sending Eden tyfikatoriv points of access terminal 106 access (for example, a model of passive reception and aktyvnoyiperedachi) and / or enable terminal 106dostupu select the access point to which povynenzdiysnyuvaty access terminal 106 access ( for example

treasure trove, model of active reception and passive transfer). The access terminal 106 can thus collapse a list of authorized access points (for example, a whitelist or a list of preferred user zones) to which access terminal 106 can access as it moves through different wireless coverage areas.

In some implementations, the user of the access terminal 106 may specify whether to allow the access terminal 106 to access the access point. In some embodiments, access terminal 106 can automatically allow access to an access point. In some implementations, the access terminal 106 may determine, based on the configuration information in access terminal 105, whether access is required automatically or require the user to indicate that access is allowed. In some implementations, the user can choose to access or choose to not access one or more access terminals. In this case, the spiked juice of the allowed and / or rejected access terminal (s) can be stored in the access terminal 106. Thus, the access terminal 106 may not be validated (for example,

As represented by step 204, a limited access point (e.g., access point 102) in the system may be initialized to provide a connection to one or more access terminals (e.g., access terminal 106). In the example of FIG. 3, these operations can be performed, for example, with the operation of the controllers 326 and 328 initialization.

For example, a unique identifier may be assigned to an access point or an access point set (e.g., access points 102 and 104). This unique identifier is different from the unique device identifier that can be assigned to identify individual access terminals in the system. As described in more detail below, such an identifier may include, for example, a special type of network identifier (NII) or a subnet identifier, or an identifier assigned to an access terminal group that has identical properties of a limited association (e.g., C3C) . In some cases, the network can autonomously assign a unique identifier. In some cases, one or more access points may request an identifier (for example, by identifying the proposed identifier and sending the yogis to the network). In these cases, the network can determine whether the requested or id is already being used by one or more other access points. If the requested ID is already in use, the network may choose another identifier (for example, a similar identifier) ​​that is not used by other access points and send this identifier to the access point (s).

Access point 102 may also initialize with one or more identifiers associated with each access terminal (e.g., access terminal 106), which is allowed to perform

11

97552

12

access access to access point 102. As detailed, as described below, this may include, for example, storing access terminal identifiers in a controlled database using a directory and / or storing access terminal identities in the list for local access at access point 102.

In some implementations, the access control list for this restricted access point can be accessed at this restricted access point. For example, as explained below in connection with FIG. 13, the user can configure his access point using an access terminal (for example, a cell phone) or using a password-protected web page hosting a limited access point.

Alternatively, in some implementations, the access control list for each access point on the network is controlled on the network (for example, the base network). For example, as explained below in connection with FIG. 4, the access control list may be directed to a web page hosted by the network operator. Managing a network access control list can provide one or more benefits in some contexts. In some respects, this approach can provide a lot of policy flexibility. For example, an operator can limit access to restricted dots if necessary, and the operator can check the records (for example, for access terminals) in one scheme of charging and payment of subscriber services. In addition, the network may be more reliable than separate access points. Therefore, the reliability of the access control list may increase. In addition, Since the access control list can not be replicated to a restricted access point, you may not need to provide a direct interface with intermediate access points (for example, application software, ISV ports, etc.). In addition, with the help of centralized access control lists, it may be easier to manage several of the limited access points that apply to the general organization.

As soon as the restricted access point is initialized, it can alert about its assigned identifier via the radio interface. For example, an access point 102 may broadcast its identifier as part of the sector parameters or some other suitable means in broadcasts.

As represented by step 206, as long as the access terminal is initialized, the access terminal can track signals (such as pilot / beacon radio signals) that are broadcast in the broadcast mode by adjacent access points. As explained in detail below, if the access terminal identifies the signals from the access point 102 (for example, in the scenario, the access determiner 106 is allowed to access the access point 102), the access terminal 106 may request access to this point 102, stupid Identifying an accessible access point using the access terminal 106 may include itself, for example, comparing the identifier associated with access point 102 with the trusted

A list of 338 authorized access points (for example, a white list) stored with the help of the access terminal 106. In the example of FIG. 3, these and other access-related operations may be performed, for example, by access control controller 336.

As represented by step 208, the access point 102 and / or one or more network nodes (e.g., network node 110) may determine whether or not to allow the access terminal 106 to access the access point 102. This access control operation may include, for example, confirmation of identification data of the access terminal 106 and a comparison of the identifier of the access terminal 106 with the list of automated access terminals stored by the access point 102 (e.g., a list of 340 for local access), and / or stored through a network node 110 (for example, a list 342 for accessing a network database). In the example of FIG. 3, these and other access related operations can be performed, for example, with the help of the operation of the access controller 334 and / or the access control console 332.

In the light of the foregoing brief review, further details relating to initialization and access control are described in the FIG. 4-13. It is necessary to take into account, based on the ideas in this document, that one or more operations described in connection with the data of one of these drawings can be used in conjunction with the operations described in another of these drawings. For convenience, these operations are described with respect to the components of FIG. 1. It is necessary to take into account that these operations may also be applicable to other sites in the network.

Referring first to FIG. 4, several-step operations are considered, relating to the initiation of a restricted access point.

As represented by step 402, the traffic node 110 assigns an identifier (for example, a unique identifier) ​​for a restricted access point. In some cases, this identifier is guaranteed to be unique within the domain operator (for example, the entire network provided with the help of the cellular operator). For example, a network object can store the database identifiers, which is used for, to ensure the uniqueness of any assigned identifier.

The ID can take different forms. In some implementations, this identifier contains the id-identifier of the network (for example, the identifier of the network, PNII). In some implementations, the identifier may contain the identifier of the closed subscriber group (SPS). As mentioned above, a set of restricted access points (for example, associated with one administrative domain) may freely use a generic identifier (e.g., PPS). In some implementations, a set of PNII may be associated with a general SNS. For example, SNS may be assigned to organizations, and different PNII may be assigned to different points of access in an organization (for example, in different buildings). In some implementations, additional identification

13

97552

14

Tories that can be understood by users (for example, text) can also be used.

A unique identifier can be initialized in a variety of ways. For example, in some cases, the identifier is selected and configured when the user activates a restricted access point. Here, the identifier can be configured by the operator, at the point of sale, or by some other means.

As represented by step 404, a list of access terminals is allowed, which allows access to access point 102 (and, if applicable, to all other access points in the other set of access points). This to-do list may include, for example, identifiers of access terminals as explained in this document. Thus, such an identifier may identify a separate access terminal (for example, ΝΑΙ, or IMZ, or M3 IZYU), or a set of one or more access terminals (for example, one or more access terminals associated with this SSN). In addition, the access list may indicate the permissions (for example, the conditions for the duplex) associated with this access terminal.

In some implementations, the access list can be accessed using Web site 344 (for example, accessible through a computer, phone, or some other proper device). In a way, the owner or user of the access point 102 may access the Web site to add, delete or edit access terminal records in the access list. For example, to allow the home or guest access to the access terminal (e.g., access terminal 108) to access the access point 102, the user can add a permanent access terminal to the access list via a web page. Different names agreements (for example, ID-capable users, such as "Joe Telephone", etc.) can be associated with a zip code identifier of the access terminal (for example, ΝΑΙ or M3 IZYU),

As presented using step 406, in some implementations the access list is managed with the help of the network operator. For example, the operator can store the server for the access list Web site. Thus, the operator can authorize all modifications to the access list (for example, to prohibit access for access terminals from other operators).

As presented in step 408, the access list information can then be sent to each access point or other network nodes that perform access control associated with that access list. For example, the server can "push" information about the access list to access point 102, or the access point 102 can "pull" information about the access list from the server. As an example of a passive reception model andactive transmission ("pushing"), the list of dos-dupe can be sent from the site operator operator server configuration, which then sends a list

access to access point 102. As another example, the access list can be sent from the Web host via the Internet to the application software at the access point 102. As an example of an active reception and passive transmission (VITA) mode, the access point 102 may ask the server configuration server to accept the latest version of the access list. Such a request may, for example, occur whenever an access point 102 is activated to the network operator (for example, a new IRIS connection is established). Thus, in the case if the access point 102 passes to the offline time for a certain period of time, the access point 102 can be sure of receiving the latest version of the access list each time it is reconnected to the network.

By storing the access list in a non-access point 102, an access point 102 is exempted from the load by storing the access list. This approach allows you to provide improved access control, since the access list can be updated, especially when the access point 102 is offline. Additionally, this approach can simplify the access control that is associated with several access points. For example, a separate access spin can be specified for the access point set (for example, associated with the given access point). In this case, access points can detect access lists from one source instead of being coordinated with one another to manage (for example, update) Access list for all access points.

Using a centralized access list also can simplify the use of temporary identifiers. For example, an access point 102 may use this identifier over the duration of the given IPZ tunnel. When a new IRES tunnel is installed, the access list can be configured with a different set of identifiers. Here, a new set of identifiers can identify or not identify these access terminals as a prior access list access.

As represented by step 410, the access point 102 transmits in the broadcast mode its id (for example, RIIAI or SPS IU) via the radio interface. Thus, all access terminals that enter the coverage area of ​​the access point 102 can identify the access point 102 and determine if it is allowed or not to access access point 102.

Referring now to FIG. 5 and 6, describes a number of operations that can be used to initialize the access terminal. ZO-cream, these drawings describe the technologies for initiating the access terminal using identifying data of one or more restricted access points to which the access terminal is allowed to access.

FIG. 5 illustrates several operations that can be completed in order to "push" information about the access list to the access terminal (that is, the model of passive reception and active transfer). In this example, it is assumed that unique

15

97552

16

This identifier is assigned to the access terminal (for example, as explained above).

As represented by step 502, at some point in time the access terminal can be recognized as being allowed to access one or more access points. For example, the owner of one or more access points may add the requested access terminal to the access list associated with the access point (s) as explained in the links above with FIG. 4

As represented by step 504, the operator sends a message to the access term, indicating that the access terminal is now allowed to access the access point or the set of access points. This message may include an identifier associated with the access point (s) (e.g., PNIO0 or SPCIU), as well as any restrictions that may be applicable (for example, the terms for the invited access point). This message may be sent, for example, when the ID of the access terminal 108 is provided to the access list associated with the access point 102. This message can also be sent in different ways. For example, the network may send a WMD message, application-level protocol message (e.g., control the device according to the standard of the open community of mobile communications manufacturers),

As represented by step 506, the access terminal 108 may then inform the user of the access terminal 108 that it has the right to access the access point (s). For example, the access terminal 108 may display an indicator relative to the identification data of the point ( ok) access or provide some other form indicator. Such an indicator may include, for example, an identifier assigned to an access point (s) or an alternate name (e.g. user IDs such as Sue House, etc.) that is associated with identifier

As represented by step 508, the user can then determine whether to allow or not (for example, using the input device in the access terminal 108) the requested access to the access point (s). Based on the user's decision, the access terminal 108 may update the list (for example, the white list) that it stores, the access point to which it is allowed (for example, this opportunity) to access. As explained later, the access terminal 108 may use this list in order to determine which access access node it can access, as the access terminal 108 moves over the network. Here, the user may not at all be required to provide any additional authorization access in the event that the access terminal enters the coverage area of ​​the access point in the list, since the access terminal can automatically "memory"

this access point. In some implementations, white spin juice can be updated only after the sub-acceptance is accepted by the network operator.

In some implementations, the access terminal 108 can send messages to the operator, which specifies the user's decision. Thus, the operator can choose to modify the access list for the access point (s), if necessary.

By allowing users of the access terminal to accept or reject an access point to an access point, one-dimensional access of the access terminal (for example, a neighbor's access terminal) to access the access point by the user of the access point may not be allowed. Thus, the user of the end-to-end terminal can be sure that his information is not sent to an unauthorized access point.

In addition, this passive reception and active transmission model does not require that the access terminal be located next to the access point in order to give access point to its white list. Inthis, since the access terminal can receive "push" messages only when it is added to the access list, the probability of the user choosing the wrong access point (for example, to which access terminal is not allowed access) may decrease.

FIG. 6 illustrates several operations that can be completed in order to "extract" information about the list of access to the access terminal (that is, the active mode of reception and passive transmission). On the other hand, it is assumed that a unique identifier is assigned to the access terminal.

As represented by step 602, at some point in time, the access terminal user (e.g., access terminal 108) initiates the scanning of adjacent access points. To this end, the access terminal 108 may include a device input that can be controlled by the user (for example, a menu option) to instruct the receiving device 318 to track one or more channels for pilot signals or other signals from the access point .

As represented by step 604, the access terminal 108 informs the user about all access points detected as a result of the scan. For example, an access terminal 108 may display an indicator relative to the identification of the detected access point (s), or provide another form of indicator. Similarly, such an insert may contain an identifier attributed to the access point (s), alternate name, or some other relevant information.

As represented by step 606, the user may choose to allow access to one or more identified access points. For example, the user can control the input of the device in the access terminal 108 so as to select one or more access points that are displayed with the access terminal 108.

The access terminal then tries to access the selected access point, if necessary. As explained below, if the user has selected the wrong access point (for example, the access point to which terminal is accessed).

17

97552

18

stupidity is not allowed access), the access point may prohibit access. The access point can then re-broadcast this information to the access terminal (for example, to prevent this in the future again).

As represented by step 608, in some implementations, the access terminal 108 can update the list that it stores, the access points to which it is allowed to access (such as the white list), based on the provider's decision. Thus, the access terminal 108 can "remember" the selected access point so that the user input is not required for future accesses of this access point (for example, the access terminal 108 can be connected to the access point without the need for the user to initiate a one-way scan).

As represented by step 610, in some implementations, the active reception and passive transmission model can be used to allow the terminal 108 to-do-it-yourself to access the access point on a specific basis (for example, a usage fee). For example, multiple access points ( for example, belonging to the general owner, such as the hotel or other organization) may announce one unique identifier (eg, PNII or SZSII). When the access terminal is adjacent to one of these access points, and the user of the access terminal 108 initiates the scan, the user may choose to connect to one of these dots (e.g., access points 102). When the access terminal 108 attempts to connect to the access point 102, the access point 102 may not check its local control list for the purpose of whether or not the access terminal 108 is available for access, but instead, the access terminal 108 can perform an initial connection. This initial connection may include, but, redirecting the user to a web page, with the help of the access terminal 108, the service can receive the access point 102 only if certain conditions are met (for example, payment is completed). With this model, any access terminal (as opposed to certain POS-terminals access) can receive access to an associated set of access points. With the help of the access terminal 108, the service can receive an access point 102 only if certain conditions are met (for example, payment is completed). With this model, any access terminal (as opposed to certain POS-terminals access) can receive access to an associated set of access points. With the help of the access terminal 108, the service can receive an access point 102 only if certain conditions are met (for example, payment is completed). With this model, any access terminal (as opposed to certain POS-terminals access) can receive access to an associated set of access points.

As mentioned above, the access point and / or network node can control whether or not the access terminal is allowed to access the access point. In some implementations, access control for this restricted access point may be directed at this restricted access point. In some implementations, access control for this limited access point can be guided in this limited access point with the help of centralized access control (for example, implemented in a network node). FIG. 7-11 illustrates several technologies that can be used to manage such access.

Referring initially to FIG. 7, describes several operations that are related to the script, the access node manages access to itself. In some aspects, access is provided using a point

access may be conditional. For example, if the access point determines that access to a certain service should not be provided, the requested DOS can be unilaterally prohibited. If, if the access point determines that the access to the added service is to be provided, the access point may send the request to the network to verify whether access is required or not allowed.

In some implementations, the access point can manage (for example, one-sidedly control) access to the local service. For example, a term access may try to get access to services provided on a local area network, associated with the access point. Such services may include initself, such as access to a local server (for example, to access the audio-tu Deo, data or other content), access to prynterai t. E.

As represented by step 702 for the Faces. 7, at some point in time, the access terminal (for example, the access terminal 108) begins to establish a connection with a restricted access point (for example, access point 102). In connection with this operation, the access terminal 108 may attempt to open a session (or route) to a dot-to-point point 102. In addition, the associated session information can be stored on the network (for example, in the network node 110). To simplify the verification by using the access point 102 of the access data of the access terminal 108, in some cases, the access terminal terminal 108 may be part of the session information (for example, included in the context information for the access point). This ID may include, for example, a position identifier (e.g., ΝΑΙ), as explained in the present document.

As represented by step 704, accessor 102 may receive information to confirm the identity of the access terminal 108. For example, in some cases, the access point 102 may receive an identifier (e.g., a temporary identifier) ​​or other relevant information directly from the access terminal 108. (e.g., the radio interface). In some cases, the access point 102 may extract-wool above information session identifier that includesin access terminal (eg, temporary or permanent ID) zmerezhi (eg with ^ C). Preferably, in this latter scenario, the transmission of an identifier (for example, a constant ΝΑΙ) through the radio interface may be prohibited.

In cases where the temporary identifier is used (for example, the temporary NAN), the access point 102 can interact with the network in order to ensure the authenticity of the identifier. For example, in some implementations, access point 102 sends a temporary identifier to an AAA object that authenticates an identifier. In some implementations, the access point 102 sends a temporary identifier to the network and accepts an associative constant identifier in response. In this case, the access point 102 may use a permanent identifier in order to authenticate the access terminal 108.

19th

97552

20

As represented by step 706, access 102 then compares information about the access terminal (e.g., a temporary or permanent identifier) ​​with the information in its list for one-way access (for example, represented by the list 340 for local access in Figure 3). As explained above, the locale access list may be implemented with the ability to include a unique identifier associated with the access terminal 108 (e.g., ΝΑΙ, UPS UI, etc.).

As represented by step 708, access then 102 may allow or disable requested access based on comparison in step 706. Here, the access point 102 may send a deviation message to the access terminal 108 and / or a point 102 Access can redirect the access terminal terminal 108 to another access point (for example, by sending a redirection message that identifies the local access point).

As described below, in some implementations, the access terminal 102 may interact with the network to authenticate the access terminal 108. For example, if the access terminal ID is not in the local access list, the access point 102 may send the request to the network node, such as the AAA object that provides authentication, etc., for the purpose of limiting access points (for example, femto-AAA, real-time, for example, as a stand-alone object, or by the inclusion of the corresponding functionality in a traditional network AAA object). Here, the network node can store an access control list for the access point 102 that the network node uses to authenticate the access terminal 108 (for example, the same way as explained above). In addition, if applied, the network node can interact with another network node (e.g., an AAA object for access terminal 108) in order to extract the constant identifier associated with the access terminal 108 from the identifier that is sent to the access input 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the authorized or non-access terminal 108 is available to access the access point 102. According to the ideas in this document, the access control feature can be executed in the point of view or another network object such as the gateway, the switching center of the mobile communication (MFA), the service maintenance node of the SRDR (SNS), the service node of packet data (P3N) or MME in various implementations. access terminal terminal 108) to extract the constant identifier associated with the access terminal 108 from the identifier that is sent to access access 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the authorized or non-access terminal 108 is available to access the access point 102. According to the ideas in this document, the access control feature can be executed in the point of view or another network object such as the gateway, the switching center of the mobile communication (MFA), the service maintenance node of the SRDR (SNS), the service node of packet data (P3N) or MME in various implementations. access terminal terminal 108) to extract the constant identifier associated with the access terminal 108 from the identifier that is sent to access access 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the authorized or non-access terminal 108 is available to access the access point 102. According to the ideas in this document, the access control feature can be executed in the point of view or another network object such as the gateway, the switching center of the mobile communication (MFA), the service maintenance node of the SRDR (SNS), the service node of packet data (P3N) or MME in various implementations. from the ID sent to the access input 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the authorized or non-access terminal 108 is available to access the access point 102. According to the ideas in this document, the access control feature can be executed in the point of view or another network object such as the gateway, the switching center of the mobile communication (MFA), the service maintenance node of the SRDR (SNS), the service node of packet data (P3N) or MME in various implementations. from the ID sent to the access input 102 via the access terminal 10.8. The access point 102 may then allow or reject the requested access based on the response it receives from the network node, indicating whether the authorized or non-access terminal 108 is available to access the access point 102. According to the ideas in this document, the access control feature can be executed in the point of view or another network object such as the gateway, the switching center of the mobile communication (MFA), the service maintenance node of the SRDR (SNS), the service node of packet data (P3N) or MME in various implementations.

Referring now to FIG. 8 describes a number of operations that are related to the scenario in which the network sends a list of terminal access terminal identifiers (e.g., access point access point) to the access point so that the access point can determine if there is any request to access the access terminal. In this example, operations steps 802 and 804 may be similar to operations of steps 702 and 704 described above. In this

scenarios, however, access point 102 may not be extracted

Session information in some cases.

As represented by step 806, the access point 102 then sends a request to the network (for example, a network node 110) to authenticate the access terminal 108. In the event that the access point 102 receives session information (for example, which includes access terminal identifier information such as MZ I3, NSC, IE or NDA), the access point 102 may send this information to the network node 110 together with the request (for example, included in the message with the message). In some implementations, this operation mayinclude a request for a list of identifiersterms of access. In practice, access point 102 can request this list repeatedly (for example, each time an access point is activated or connected to the network, whenever the access terminal attempts to access the access point, periodically, etc.).

As represented by step 808, the communication node 110 receives an identifier associated with the access terminal 108. This identifier may contain, for example, list identifiers that indicate one or more access groups associated with the access terminal. By way of example, an identifier may include a list of covered subscriber groups whose member has an access terminal 108, a list of access terminals that are allowed to access an access point 102 (e.g., access point access point 102), or an access point identifier list, to which the access terminal 108 can access. The identification of the identifier using a network node 110 may include, for example, receiving an identifier from another network node (for example, an NZ) or obtaining an identifier for a malicious database. In some implementations, The value of the identifier may include the definition of a permanent identifier, as explained herein, in this document (for example, based on the timestamp identifier being accepted). The mapping node 110 sends the identifier, or identifiers obtained at step 808, to the access point 102 in step 810.

As represented by step 812, then access 102 can then determine what to allow or deny the requested access based on the received identifier (s). For example, an access point can compare the received identifier (e.g., UPS UI) indicating the collection of the terminal 108 with the information (e.g. UPS UI) in the access list access point 102, which serves as a feature of the sets that belong to the point Access 102. Access point 102 can then allow or reject the requested access based on this comparison.

Referring now to FIG. 9, describes a number of operations related to the scenario in which the network controls access to the access point. In this example, the operations of the stages 902, 904 and 906 may be similar to the operations of stages 802, 804 and 806, described above. Similarly, the access point 102 may be able to extract session information in some cases. In addition, in some cases point 102

21

97552

22

stupid can send their list for local access to the network for use in the operation authentication.

As represented by step 908, the adjustments using temporary identifiers in order to identify one or more nodes (e.g., access terminals), the network node 110 (e.g., femto-AAA) can be used to determine a permanent identifier associated with with the access terminal 108, based on the temporary identifier associated with the access terminal 108. In this case, For example, access point 102, possibly, receives a temporary identifier from the access terminal (e.g., at step 902) or from the session information (for example, at step 904). In this case, the access point 102 may send a temporary identifier (e.g., temporal NIA) for the access terminal 108 along with the identifier (e.g., PIN) of the access terminal 102 to the network node 110, together with the request at step 906. As explained above in connection from FIG. 7

As represented by step 910, the communication node 110 determines whether to permit access to access point 102 to the access terminal 108. For example, the network node 110 may compare the access terminal terminal ID 108 (e.g., NIA, SPS, etc.) from the access list access point 102. Here, the access list may be a local list received from the access point 102, or may be a access list secured by the network (for example, based on the information received from the web server as explained above). The network node 110 can then determine whether to allow or reject the requested access based on this comparison.

As represented by step 912, the communication node 110 sends an indicator with respect to this definition to the access point 102. Access point 102 may then allow or reject the requested access based on the acceptance indicator (step 914). Preferably, in such implementation implementations, the access point 102 should not be aware of the actual access terminal identities that access the access point 102. In addition, the access control list for the dot-dupe point 102 does not necessarily have to be sent to the access point 102. In this implementation, access control is fully executed in the network node transparency of the access point.

Different technologies can be used for the purpose of managing terminal access identifiers in the network. As mentioned above, the access point can store the valid identifier (for example, ΝΑΙ) used by the access terminal. In some implementations, this identifier may remain valid for a given period of time. Here, if the access terminal re-identifies an access point within a time period (ie, the access terminal has the same identifier at the given time), the access point can accept the term access without obtaining authorization from the network (on-

example, femto-AAA). In some implementations, the operator may choose to use a temporary id or a permanent identifier for the access terminals. If a permanent identifier is used, the permanent identifiers may be stored at the access points (for example, an entry for 340 for local access) so that the access point can independently authenticate the access terminals. If a temporary identifier is used, the operator can control the frequency with which the access points are verified with the network (for example, femto-AAA) to verify the identities stored in the list 340 for the local access.

FIG. 10 illustrates an example of access control operations that can be implemented in a long-term development (BTE) implementation or other similar technology. In this example, a network (for example, a base network opposite to a radio access network) controls whether or not an access terminal is allowed access to an access point. In addition, it describes the technologies for initializing access terminals with access information via the SPS subscription (e.g., mapping information), by activating access control (for example, for inactivity mode or active mode), access point initialization modifications, or access terminal and compulsory activation of the SNS list when the access terminal performs operations such as powering, updating the tracking area and transferring the service.

The network (eg, a server of its own Subscriber-ing, NZZ server or ESS-subscription) can zberihatyinformatsiyu by ESS-subscription for limited access terminals and access points in the network. Similarly, as described above, the operator can provide a web server that provides the user with the ability to manage information on an SSS subscription for his limited access point (s). For example, a user can modify his subscription information (for example, MH I3YN) with the help of the website. The network can then sanction the modifications (for example, access terminal records) executed by the user, and the web server can send subscriber information to the network (for example, NLC). Here, MH Ι3νΝ can be re-engineered in IMI. The network may then send SZS information (for example, a unique SPS identifier) ​​to the appropriate restricted access point (s). Exept this,

Just as described above, the initialization of the access terminal (for example, with the help of a list of unique UPSs) can be authorized by the access terminal owner. In addition, the operator can also authorize the initialization of the access terminal. Here, the given UPS UI may be associated with a user from one or more access terminals that are authorized to receive at least one service from a dial from at least one restricted access point. In other words, access terminal collections and set of access points are associated with the general SPS Ι. Also need to take before

23

97552

24

Note that this access terminal or dot-dupe point can also be associated with a number of SSAs. In some aspects, the network (e.g., the NLC) may store information that indicates the correspondence between the access terminal ID and the sub-message UPS UI. In addition, since the NES is connected to the MME, the MME can extract the SSS information and retransmit it to the restricted access points, if necessary.

On the other hand, the initialization of the access terminal may include "model of passive reception and active transmission" or "model of active reception and passive transmission". For example, in the first case, the network (for example, a network node) can send a ZMZ message to the terminal access to inform the access terminal of a redundant subscription (for example, identification of one or more UPS UI), and the user accepts or discards the subscription. In the second case, the user can initiate a manual scan, and the access terminal displays a list of adjacent access points (for example, the user understands U.S.S.U. or other types of access point identifiers) so that the user can select one or more messages from the list, if necessary .

As represented by step 1002 for the Phys. 10, at some point in time, the access terminal is enforcing access to a limited dot-dupe point. For example, when an access terminal 108 indicates that it is located near the access point 102 (for example, if an access point 102 signals an UPS UI that is also associated with the access terminal terminal 108), the access terminal 108 may send a registration request, or the other does not have a message at access point 102.

As represented by step 1004, the access point 102 sends a request to the network (for example, one or more network nodes 110) to authenticate an access terminal 108. Here, the network node (s) 110 may comprise a mobility management object (MME) or some other fictitious network entity or objects. The dot-to-dupe point 102 may also send an identifier (e.g., an UPS UI associated with an access point 102) to a network node 110 along with a request (for example, included in a log message). In addition, the request may include information received from the access terminal 108 (for example, at step 1002).

As represented by step 1006, the network node 110 receives the context information associated with the access terminal 108 (for example, from the previous MME for the late-dupe 108 terminal or the NZ). This context information may include, for example, a set of identifiers associated with the access terminal 108. For example, contextual information may include a list of all SNS IUs associated with Access Terminal 108. In some implementations, the network node 110 can store its own SMTP list for each of its limited access points. In this case, the network node 110 may update its list each time the entry changes on the web server.

As represented by step 1008, the network node 110 determines whether or not the access terminal 108 is allowed to access the access point 102. For example, a network node 110 determines whether or not an access point 102 is located (e.g., which indicates an SMN for accessing access point 102) in the list of IDs associated with the access terminal 108 (for example, which indicates all the SNS to which the terminal Access is required).

The definition of step 1008 can be performed in different network nodes. For example, in some embodiments, this definition may be performed in the MME which receives and / or stores identifiers associated with the access point 102 and the end-dupe terminal 108.

In some implementations, this definition may occur in another network node, such as the NSC. For example, MME may send a NZP request to determine whether the access terminal 108 is authorized to access the access point 102. Together with this request, MM may be able to send information (for example, identifiers, such as IMI and SNS IU) in ND in some cases. In addition, in some cases, the NSA may receive and store such information independently. After determining whether or not to-dos are available, the NF sends an appropriate response to the MME inverse.

As represented by step 1010, the MME sends an answer to the access point 102 on the basis of the definition performed by the MME, or on the basis of the definition performed by another network node (e.g., NLC). Based on this answer, access point 102 can then allow or deny access through access point 108.

FIG. 11 illustrates operations that can be used in connection with the transfer operation. For example, the access terminal 108 may initially be served by access point 104, and, later, access to the access terminal 108 is transmitted to the access point 102, and then it is served by the help of this node.

As represented by step 1102, the network (e.g., NLC) can store the container-tone information for each access terminal in the system. As mentioned above, this context information may include a list (e.g., a bi-lite list) indicating all access kits (e.g., SNS) that have an access terminal 108.

As represented by block 1104, the network (eg, MME) selects context forthis access terminal and provides a context in ob limits of the access point when the terminal is limited dostupustaye active access point. Referring to the example of FIG. 3, when the access terminal 108 becomes active (for example, switched on) in the access gate 104, the network node 110 may reject the context information for the access terminal 108 to the access point 104. Thus, the access terminal 108 may first be served by access point 104.

As represented by step 1106, some point in the time service of access terminal 108 may be transmitted to access point 102.

25

97552

26

For example, if the access terminal 108 is remote from the access point 104, measurement reports from the access terminal 108 may indicate that the intensity of the signals received from the access point 102 now exceeds the intensity of the signals received from the access point 104. In this case, the network may initiate a transfer service from the access point 104 to the dot-to-point point 102.

As represented by steps 1106 and 1108, with this service transfer, the access point 104 (that is, the outgoing access point) may receive an identifier associated with the access point (that is, the access point 102) such as, for example, the UPS UI . For example, this information may be received from the access terminal 108. The access point 104 can then determine whether the access terminal 108 is authorized to access the access point 102 based on that identifier. For example, an access point 104 can compare an identifier with a message indicating access points to which the access terminal 108 can be allowed to access (for example, a white list, such as a list of SPIEGs for contextual information for the access terminal 108).

As represented by step 1110, if the access terminal 108 is not authorized to access the access point 102 (e.g., the UPS UI access point 102 is not in the UPS UI list of access terminal 108), the transfer operation may not be used get rid of For example, an access point 102 may dispatch a message to a network node 110 to complete a service transfer operation. Additionally, alternatively, the access point 102 may send deviations and / or redirects to access point 108 (e.g. as explained above).

As represented by step 1112, the service transfer operation may continue if the access terminal 108 is authorized to access the access point 102 (for example, the UPS OUT access point 102 is in the UPS UI list 108 of the DS-terminal). Accordingly, the network (e.g., MME) may send contextual information for the access terminal 108 to the access point 102, or the access point 102 may receive this information from the access point 104.

As represented by step 1114, the access point 102 can determine whether the access terminal 108 is authorized to access the access point 102. For example, in the same way as explained above, the access point 102 can compare its identifier (for example, the UPS UI) with a list that indicates the access points to which the access terminal 108 is allowed to access (for example, the U.S. OUT list of context information for the access terminal 108 po)

As represented by step 1116, in some implementations, the access point 102 may reject a request to the network (e.g. MME) to confirm whether or not to execute

transfer of service (for example, along with a request for switching the path). For example, as not limiting the above, an access point 102 may send a request (for example, which does not necessarily include an identifier associated with the access terminal 108, and an OTA for the access point, if not necessary) to the network node 110 to determine, should whether access terminal 108 access to access point 102 is allowed.

In cases where the access terminal must access access to the access point without prior training to the service (for example, in the event of a failure in the radio communication line), the access point can select the context of the access terminal from the outgoing access point. As a reminder, this context includes the SPS-list of access privileges. Thus, the access point may determine whether or not the access term is allowed to access the access point.

As represented by step 1118, on the basis of the definition in step 1114 (and, optionally, at step 1116), the service is either doped or rejected. If the service transfer is allowed, access point 102 then becomes a serving access point for the access terminal 108. On the contrary, if transmission service is not allowed, service delivery may be completed (for example, as explained in connection with step 1110).

Referring now to FIG. 12, in some embodiments, a restricted access point may be used in order to initialize the dash-to-dummy terminal. As an illustration, the examples below depict examples where the access terminal is initiated (for example, configurable) using the Preferred Roaming (PPI) list. You need to take into account, however, that the access terminal can be initialized using other types of information, in accordance with the ideas in this document.

As represented by step 1202, access terminals on the network (for example, all access terminals that can access a restricted access point) can first be configured with the default PPI_ (for example, the list contains or specifies the default configuration). For example, the 106-DOS terminal 106 may be configured by the operator when the access terminal 106 is acquired by the user. Such PPI_ may specify, for example, the default system id (SID), the default network id (KIU), and the default frequency for the initial detection of all bounded access points that can be deployed on the network. Here, all of the above-mentioned dos-topa terminals can be configured with the default RPM. So, each access terminal can find and access a limited access point for initialization operations. In some respects, information about the PPI_sample (e.g., ZIU and / or KIU) may address one or more access points associated with the highest priority. For example, an access terminal can be executed with the possibility to search (for example, first used

27

97552

28

search for a specified preferred access point or specified preferred access points (for example, home access points).

In some respects, PPI parameters may by default be reserved for associated access restricted operations. For example, the default ZIU can be reserved for limited access points by the network operator. With such a SLA, access to restricted access points that are not configured to access restricted access points (for example, access terminals made possible with Mac-only use) may not be allowed to register at a limited point. In addition to this, I \ III by default can be reserved for connected to a restricted access point initialization procedures. In addition, the conditional frequency can be set as the total frequency that should be used with the use of restricted access points in the network for transmitting beacon radio signals for initialization procedures.

PPI_ by default can also include information for you to select a macrosystem. For-example RRI_ default initself may include identifiers and frequencies that can tovuvatysya-Use to access domakrotochok to access the network.

As represented by step 1204, restricted access points in the system (e.g., access point 102) are made to transmit a beacon-based self-initialization radio signal. In some aspects, this beacon radio self-initiating signal may contain a temporary beacon radio signal, which is used in connection with the initialization provided by the access point 102. Here, the beacon radio-signal of self-initialization may be transmitted in broadcast mode in accordance with general parameters RRI_, explained above (for example, beacon radio signal may contain or indicate the default configuration). For example, the beacon radio self-initialization signal (for example, the beacon radio signal by default) can be transmitted at the default frequency and may include default ZIU and I / II default (for example,

The beacon radio self-initialization signal can be transmitted at a very low level of power, which is much lower than the transmit power of the beacon-based radio during normal operations at the access point (for example, when the access point is configured in a non-operational mode initialization, such as a normal operating mode). For example , the power of the transmission of beacon radioisodes of self-initialization can lead to the range of coverage (for example, the radius) for the beacon radiosignal self-initialization of order of one meter or less.

In some implementations, the access point 102 may transmit the self-initialization radio beacon when the access point is in the initialization mode (for example, configuration or initialization).

In some implementations, the user can use the input device in order to transfer the access point 102 into the configuration mode, which the user wants to initially initialize or re-initialize the access terminal 106. For example, an access terminal may be initialized when the access point is first established when the access terminal is initially acquired or when the access terminal RPI is updated using the network (for example, due to changes in the roaming list, travel abroad, etc.). , which leads to the rewrite of PPI_, which is initialized using the access point (as explained below).

As represented by step 1206, when the access terminal 106 initialized with the help of the default PPI_ is placed near the restricted access point 102 operating in the initialization mode, the access terminal 106 can receive a high-volume self-initialization radio signal transmitted using the access point 102. In contrast, the access terminal 106 may send the message to the access point 102 to initiate the initialization operations. In some implementations, this statement may include the PPI_ currently used by the access terminal. In some implementations, the user of the access terminal 106 may initiate an initialization by selecting the corresponding attribute in the access token (e.g., a set of specified no-measures).

As represented by step 1208, an access point 102 (for example, an initialisation controller 328) may specify a new PPI_ for the access terminal 106. For example, for conventional operations of mobile stations. The new PPI_ may include information about the macro system as in the default PPI_, but the initialization information of the PPI_ default can be deleted. Instead, it may be subject to the information of the new PPI_ (for example, the list contains or specifies a new configuration). In some aspects, the new Pry's information may be specific to the access point 102 (for example, the new PPI_ may differ from the PPI_ initiated by other access points). For example, a new PPI_ may specify the ZID that is reserved for all restricted access points , as explained above, MU, which is unique for access points 102 (eg, femto-KII, RKIGO), and frequency parameter, which specifies the operating frequency of the access points 102. This frequency parameter may coincide or differ from the default frequency. In some respects, the information of the new PPI_ (for example, ZIU and / or MAN) may correspond to one or more access points associated with the highest priority. For example, the 106 DOS-terminal 106 may be executed with the ability to perform a search (for example, first perform a search) of the preferred access point and preferred access points (e.g., home access points).

The access point 102 can receive the information of the PPI_ macrosystem in various ways. In some implementations, the access point 102 may request this RRI_ information from the access point (e.g., via a network node 110 or on a non-

29

97552

30

diiointerface). In some implementations, access point 102 may receive this PPI information from the access domain (e.g., access terminal 108). For example, access point 102 may include a radio interface function. Here, the access point 102 may send messages (for example, a ZPP configuration request) to request a current access terminal's PPI_ (which may include the information of the current macro-PPI_ as explained above), and the access terminal may respond by sending its -the exact PPI_ on the radio interface to the point-102 of the DOS-stupidity.

As soon as the access point 102 defines a new PPI_, the access point 102 sends (for example, snapshots) PPI_ into the access terminal 106. For example, access point 102 may send PPI_ to the terminals of the access via the radio interface (eg, via TOTALS or OTARA).

Preferably, by initializing the access terminal 106 through the access point 102, as explained above, the network operator should not store specific information for the access terminal (e.g., PPI information). However, it may be desirable to configure the access point 102 so that it performs regular updates of the PPI_ access terminal. For example, PPI_ can be updated every night and sent to the access terminal 106 via the radio interface. In addition, in order to avoid overwriting with one access point from a set of associated access points of the PPI_, initialized by another access point from the set, each access point maybe performed simply by updating the information of the current access terminal PPI_. For example, , the access point 102 may request an access terminal terminal 106 for the subject of its current stream information,

As represented by step 1210, since the access terminal 106 is initialized with the help of the new PPI_ information, the access terminal 106 must use this information in order to identify the access points to which it can access. For example, if the access terminal 106 determines that the access point 102 is located (for example, after an access point is configured in normal operation), access terminal 106 may prefer the service by access point 102 , and not any other access points (e.g., access macros) that are detected by the access terminal 106.

Referring now to FIG. 13 describes different technologies for managing restricted access (for example, associating) in an access point. In this example, the access point can be configured with a local list of access terminals that are allowed to access one or more services provided through the dot-dupe point. The access point can then provide or block the access based on the local list. Pe-

it is advantageous, in some respects, this scheme may allow the access point owner to provide a time-stamp service to guest access terminals (for example, by adding / removing these access terminals in / from the list) without the network operator.

As represented by step 1302, a restricted access point (e.g., an access point 102) is configured using the list of access points (for example, provided with the local access list 340 in Figure 3). For example, an access point 102 owner can configure a list of identifiers (e.g., telephone numbers) of the access terminals that are allowed to use one or more of the destinations provided by the access point 102. In some implementations, managing which access terminals can access the access point 102 may thus rest on the owner access points 102, and not on the network operator.

Access point 102 may be initialized in different ways. For example, the owner can use the web interface 102 that is hosted by the access point in order to configure the access point 102.

In addition, different access terminals can be assumed different levels of access. For example, accessed access terminals may be provided temporarily with different criteria. In addition, in some implementations the home access terminal may be assigned a better service than the guest access terminal. In addition, some access terminals (for example, invited access terminals) may currently have access to certain services (such as local services, such as a multimedia server or some other type of information server) without authentication by the network operator. In addition, in some cases, the locally access list 340 can be used as a start-up temporary replacement at access point 102, in which the actual authentication (for example, for a telephone call) can be executed via a network,

As represented by step 1304, the access point 102 may send information of the access terminal identifier configured at block 1302 (e.g., the list 340 of the one-way access) to the network database (for example, the authentication center / the registry of its own subscribers, AC / NDB ) and ask for other identifying information associated with the corresponding access denotes. For example, the access point 102 may send the telephone number of the access terminal 106 to the network node 110 (for example, which contains the NI_P database) and receive an electronic serial number (Ε3Ν) or an international identifier of the mobile subscriber (IMZI) that is assigned to the access terminal 106 from the network node 110

As represented by step 1306, the access point 102 may alert about its identification information (for example, as explained in the given document). For example, access point 102

31

97552

32

can notify information about UJ and U.S., as explained above.

As represented by step 1308, the access terminal, which is initialized to access the access point 102, may recognize that it is located near the access point 102 after receiving the notified identification information. For example, the access terminal 106 may be initialized by PPB using the access point 102 as explained above, or the access terminal may be initialized with the help of a PPB that includes the access point of the restricted access point, NI with substitution symbols, and one or more operating frequencies that are used by the access point 102, or the access terminal may be initialized in some other way that enables it to an-antificate the access point 102 (for example, initiated by the list of preferred corridors Vacation zones). The access terminal 106 may then be attempted to register at the access point 102 in response to the receiving of different UPSs (e.g., which may represent a zone other than the macroside, based on the registration zones). Thus, in some cases, the access terminal can automatically attempt access to access point 102. In other cases, however, the user can manage whether the access terminal 106 accesses the access points 102 (e.g., the user provides input through the input device of the response to the indicator relative to the detected access points outputted using the access terminal 106 ) In connection with this registration, the access terminal 106 may send its identifier (e.g., its Ε3Ν, ΙΜ3Ι, etc.) to the access point (eg, through the access channel).

As presented in steps 1310 and 1312, the access point 102 determines what is allowed by the access terminal terminal 106 to access access access point 102. For example, an access point 102 may determine whether a specified or not identifier received from an access terminal 106, an outline 340 for local access. You need to take into account that the authentication information, varied from Ε3Ν and ΙΜ3Ι, may be used in different implementations. For example, an access point 102 may receive caller numbering information through a message in idle mode and use this information for authentication (e.g., for comparison with the number of a calling party that is received from the access terminal 106. via the registration message, or some other way )

As represented by step 1314, if the access terminal 106 is not allowed access (for example, the access terminal identifier that is received is not in the list 340 for one-way access), access point 102 may over-defend access. For example, an access point 102 may send a rejection message to the access terminal 106. Alternatively, the access point 102 may send the redirection message to the access terminal 106. This message may include, for example, information (for example

a treasure, ZU, NI, working frequency) that identifies an alternative access point (for example, a locale macro network) to which an access terminal 106 may access.

As represented by step 1316, if the access terminal 106 is allowed to access (e.g., the access terminal identifier that is received is in the locale access list 340), access point 102 may provide access to certain services. For example, as an explanatory point, an access point 102 can provide access to the local services provided through a local network.

Additionally, alternatively, the to-dop point 102 may transmit the login information to the gateway node 110 (e.g., the NDR macro) to authenticate and register the access terminal. The network node 110 may then respond with a notification of acceptance or rejection of registration. In response, the access point 102 may send the corresponding message to the access terminal 10.6. If authorized, the access terminal 106 then receives the requested service from the access point 102 (e.g., network access).

It should be borne in mind that the above techniques can be implemented in different ways, in accordance with the ideas in this document. For example, authentication information that differs from the information specifically mentioned above (e.g., E3N, IM3I, SZS Yu) can be used in a device or method implemented in practice based on the ideas in this document.

In some aspects, the ideas in this document can be used on a network that includes a macro-coverage (for example, in a cellular network of a large area, such as the ZS-network, called a macro-cellular network or MOLN) and a small scale coverage (for example, the size of an environment in an apartment or in house, typewoman ΕΛΝ). As the access terminal is deployed on this network, the access terminal may be used in certain locations by means of access points that provide macroscopy, while the access terminal can be served in other locations using access points that provide a small amount of coverage. -taboo. In some aspects, small-scale nodes may be used to provide incremental increase in throughput capacity, coverage inside the building and various services (for example, for more reliable work of user-users). In the explanation in this document, the node, which provides coverage in a relatively large area, can be remembered as a macro node. A node that provides coverage in a relatively small area (for example, in apartment) can be referred to as a femto node. Wo-zol, which provides coverage for a region that is smaller than the macrocosm and more of the femto region, can be referred to as pikovozol (for example, when providing a building within the office building).

A cell associated with a macro node, a fem node or a picosecond, can be referred to as a macroscope, a femtocell, or a picosilicon, respectively. In some implementations, each node

33

97552

34

may be associated with (for example, divided by) one or more cells or sectors.

In various applications, other terms can be used to refer to a macro node, a femto node or piikovozol. For example, the macro node can be configured or recalled as an access node, a base station, an access point, an e-node B, a macro cell, and so on. .In addition, the femto node can be configured or referred to as home network B, home e-node B, access point base station, femtocell, etc.

FIG. 14 illustrates a system 1400 wirelesscommunication, made with the ability to maintain a certain number of users, which can implement the ideas in this document. The system 1400 provides a connection for several 1402 cells, such as, for example, a macro cell 1402A-1402O, wherein each cell is served by the help of the corresponding access point 1404 (e.g., access points 1404A-1404O). As shown in FIG. 14, access terminals 1406 (e.g., access terminals 1406A-1406B) may be dispersed at different locations throughout the system in time. Each access terminal 1406 can exchange data with one or more access points in the direct line (RB) 1404, and / or the reverse link (RB) at this time, depending, for example, on whether or not the access terminal 1406 is active and whether it is located in the m ' which transmission service. System 1400 wireless can provide services for a large geographical area. For example, makroplodniki 1402А-14020 can cover several quarters in the district or several miles in the countryside.

FIG. 15 illustrates exemplary communication system 1500, wherein one or more femto nodes are deployed within the framework of the network environment. In particular, the system 1500 includes several femto nodes 1510 (for example, femto nodes 1510A and 1510B), installed in a network environment relatively small scale (for example, in one or more apartments 1530 user). Each femto node 1510 may be associated with a global computer network 1540 (e.g., the Internet) and a base station of 1550 mobile operators via a UZB router, cable modem, wireless communication line, or other means of communication (not shown). As explained below, each femto-malleable 1510 may be configured to handle associate access terminals 1520 (e.g., an access terminal 1520A) and, optionally, third-party access terminals 1520 (e.g. 1520V access terminal). In other words, the access to femto nodes 1510 may be limited, whereby the given access terminal 1520 can be served by a set of specified (e.g., home-made) femto nodes 1510, but can not be served by means of the unnamed femto nodes 1510 (for example , with the help of femto node 1510 neighbor).

FIG. 16 illustrates an example of a coverage map 1600, in which several tracking areas 1602 (or routing areas or location areas) are specified, each of which includes several

zones 1604 macro coverage. Here, the coverage area, associated with the areas 1602A, 1602B and 1602C, is determined by broad lines, and areas of 1604 macroscopes are represented by hexagons. The 1602 tracking areas also include areas of 1606 femto coatings. In this example, each of the zones 1606 of the femto coating (e.g., the 1606Sfemt coating layer) is illustrated within the area of ​​1604 macro coating (for example, the area of ​​1604B macropoperation). It is necessary to take into account, however, that the F-1606 fossil zone may not be full within the area of ​​1604 macro coverage. OnPractice, a large number of zones 1606 femto coating can be set using this area 1602 tracking or zone 1604 macro coverage. In addition,

Referring again to FIG. 15, the owner of the femto node 1510 can subscribe to a mobile service, such as, for example, a mobile 3O service, prompted through the base network 1550 mobile operator. In addition, the 1520 access terminal can simultaneously work both in macro areas and on small-scale network environments (for example, residential). In other words, depending on the current location of the access terminal 1520, the access terminal 1520 can be served by the macro access point 1560 associated with the base network 1550 of the mobile operator, or by any of the set of feminine units 1510 (for example, the femto nodes 1510A and 1510B, which are permanently placed within the framework of the corresponding apartment of 1530 users). For example, when a subscriber is located outside the home, it is served by a standard access point (for example, access point 1560), and when the caller is at home, he is served by a femto node (for example, node 1510A). Here, it is necessary to take into account that the femto node 1510 may be inverse to the existing access terminals 1520.

The femto node 1510 can be deployed on one frequency or, alternatively, at multiple frequencies. Depending on the particular configuration, one frequency, or one or more of several frequencies, may overlap with one or more frequencies used by the dot-duper macros (for example, access points 1560).

In some aspects, the access terminal 1520 may be configured to connect to a preferred femto node (e.g., a home femto node of the access terminal 1520) of each razou, when such a connection is possible. For example, whenever a 1520 terminal is in an apartment 1530 user, it may be desirable for the access terminal 1520 to exchange data only with the home femtowave scrap 1510.

In some aspects, if the access terminal 1520 operates on a macro network 1550, the same is permanently placed on its most important network (for example, the one specified in the re-

35

97552

36

an important roaming), the access terminal 1520 may continue to search for the most important network (for example, preferred femto-evil 1510) by re-selecting a better system (VZR), which may include periodic scanning of available systems to determine what , whether or not optimal systems are available at the moment, and further steps to associate with such preferential systems. When recording an identification, the access terminal 1520 may limit the search for a specific frequency band and channel. For example, the search for the most preferredsystem can periodically be repeated. Upon detection of the preferred femto node 1510, the term-nal 1520 access selects the femto node 1510 to wait for a call within its coverage area.

Femto node may be limited in some aspects. For example, this femto node can provide only certain services to certain access terminals. In deployments with the so-called restricted (or closed) association, this terminal can only be served by means of a mobile cellular network of a macro cell and a set of femto node units (for example, femto nodes 1510 that are permanently located in the corresponding user's subsection 1530). In some implementations, the node may be limited in such a way that it does not provide at least one node of at least one of the following: transmission of service signals, access to data, registration, search calls or service.

In some respects, a restricted femto node (which may also be referred to as the homegroup of a Client Subscriber Group) is a femto node that provides services to a limited initialized set of access terminals. This set may be temporarily or permanently expanded as necessary. In some aspects, a closed subscriber group (SZO) can be specified as a set of access points (for example, femto nodes) that share the general access control list of access terminals. A restricted access point may include a SZO that allows multiple access terminals to connect to it. One end-dupe terminal can be able to connect to a limited number of access points. A channel on which all femto nodes (or all limited fem-nodes) in the area can be referred to as femto-nal.

Different interconnections thus can exist between these femto node and given by the terminal dos-dull. For example, in terms of an access terminal, an open femto node can be referred to as a femto-towzool without a limited association (for example, a femto node provides access to all terminals of dos-dupe). Limited femto node can be referred to as femto node, which is limited in some way (for example, limited to associate and / or registration). The home femto node may be referred to as a femto node for which the access terminal is authorized for access and work (for example, permanent access is provided for a predetermined set of one or more access terminals). The called femto node may be referred to as a femto node, for which the access terminal is temporarily unavailable,

Authorized for access and work. The current femto node may be referred to as a femto node, for which an access terminal is not authorized for access and work, except for possible emergency situations (eg, ex-friction calls).

In terms of a limited femto node, the home access terminal can be referred to as an access terminal that is authorized to access a limited femto node (for example, the access terminal has a permanent access point to the femto node). The called access terminal can be referred to as a access terminal with temporary access to a limited femto node (eg, based on the term of termination, usage time, bytes, the counter counts or some other criterion or criteria). A third-party access terminal may be referred to as an access terminal that has no access to a restricted femto node, except perhaps for emergency situations such as emergency calls (for example, an access terminal that does not have credentials or permission to register in limited femto node).

For convenience, the disclosure in this document describes a different functionality in the context of the femto node. It is necessary to take into account, however, that the pico node can provide identical or similar functionality for a larger coverage area. For example, piikovozol may be limited, homeopathic pezovozol may be given for this ter-minal of access, etc.

A multiple-access wireless system can simultaneously maintain communications for multiple wireless access terminals. As mentioned above, each terminal can exchange data with one or more base stations by means of a direct and reverse link transmission. Direct line of communication (or downlink communication link) refers to the communication link from the base stations to the terminals, and the reverse link (or the uplink) refers to the communication link terminals to the base stations. This communication line can be installed through a system with one input and one output, a system with multiple inputs and a plurality of outputs (MIMO) or some other type of system.

The MIMO system uses several (Ντ) trans-antennas and several (Νρ) receiving antennas for data transmission. The MIMO channel, which is formed with the help of Nt transmission and receiver antennas, can be decomposed into N3 non-dependent channels, which are also referred to as spatial channels, where N3 <tip {NT, Nρ}. Each of the N3 independent channels corresponds to the dimension. The MIMO system can provide increased productivity (for example, higher bandwidth and / or greater reliability) if additional dimensions are created using multiple transmitting and receiving antennas.

The MIMO system can support systems with duplex time division of channels (TUI) with duplex with frequency division of channels

37

97552

38

(RUE). In the TU-system, transmission in the forward and backward communication lines is carried out in the same frequency domain, so that the principle of turnover gives the possibility of estimating the channel of the direct link from the channel to the reverse link. This allows the access point to derive benefit from the formation of a forward-linking directional pattern when a plurality of antennas are available at the access point.

Ideas in this document can be included in a node (for example, a device), which uses different components to exchange data at least one other node. FIG. 17 illustrates several-component components that can be used to simplify the communication between the hosts. In particular, FIG. 17 illustrates a wireless accessory 1710 (for example, an access point) and a non-stop device 1750 (such as a terminal accessory) of MIMO-system 1700. In apparatus 1710, traffic data for a certain number of data streams is provided from a data source 1712 to a transmission processor (TX) data.

In some aspects, each data stream is transmitted through a corresponding transmit antenna. CP-1714 TX data formats, encodes and mimics traffic data for each data stream on the basis of a specific encoding scheme selected for this data stream to provide encoded data.

The coded data for each data stream may be multiplexed with control data using ORUM technologies. Control data is typically a known data pattern that is processed in a known manner and can be used in the receiver system for the purpose of evaluating the channel response. The multiplexed control and coded data for each threaded data is then modulated (that is, it is displayed on the characters) based on a specific modulation scheme (eg, the UPC, Ω3ΡΚ, M-RPC or M-ΩΑΜ) selected for this data stream to provide modulation symbols. The data rate, coding, and modulation for each data stream may be determined using instructions issued by the processor 1730. The memory 1732 can store the program code, data, and other information,

The modulation symbols for all data streams are provided in the TM MIMO processor 1720, which can additionally handle the modulation symbols (for example, for ARMS). The THM MIMO processor 1720 then provides Nτ the modulation symbol streams in the Transmitting Transmitters (CSPR) 1722Α-1722Τ. In various embodiments, the TCHIMO-processor 1720 applies weighting-ty shaping of the diagram to the symbol streams of the data and to the antenna from which the symbol is transmitted.

Each receiving and transmitting device 1722 receives and processes an appropriate symbol stream to provide one or more analog signals, and further adjusts (e.g., assists, filters, and converts with frequency-increasing frequencies) analog signals to provide a modulated signal, suitable for transmission on MIMO-

the channel. Nt modulated signals from the receiver-

transmitting devices 1722А-1722Т then

edited from Ντ antennas 1724А-1724Т, respectively.

In apparatus 1750, modulated transmitted signals are received by NK antenna 1752A-1752P, and the received signal from each antenna 1752 is provided to the respective transmitter (CCD) 1754A-1754K. Each transmitting device 1754 controls ( for example, filters, amplifies and converts with a decrease in frequency), the received signal digifies the adjusted signal to provide sampling, and further processes the pick-ups to provide the corresponding "received" stream of characters.

The receive (RX) data processor 1760 then receives and processes the NK received receive streams from the NK receiving and transmitting devices 1754 based on the specific processing technique of the receiving device to provide the Nt "detected" symbol streams. The RPC 1760 processor then demodulates, mutually alters and decodes each detected character stream to recover traffic data for the data stream. Working with the 1760 RH-datacomplementary processing performed by the help of the TX MIMO processor 1720 and the processor 1714TX data in device 1710.

Processor 1770 periodically determines what kind of matrix of pre-coding you are using (described below). The processor 1770 formulates a feedback link that contains a part of the matrix index and part of the rank value. The memory 1772 can store the program code, data, and other information used by the processor 1770 or other components of the device 1750.

The feedback message may contain different types of information that relates to the communication line and / or the data stream being received. The forward communication of the back link is then processed by the processor 1738 of the TX data, which also accepts traffic data for a certain number of data streams from the data source 1736, modulated using the modulator 1780, is given to the required parameters using the transmitting devices 1754A-1754R and transmitted back to device 1710.

In device 1710, modulated signals from the device 1750 are received using antennas 1724, are brought to the necessary parameters with the help of receiving and transmitting devices 1722, are demodulated by demodulator (SUEMO) 1740 and processed by the RX data processor 1742 to extract the message the return link transmitted by means of the device 1750. The processor 1730 determines what pre-code matrix is ​​used to determine the weight coefficients of the formation of the directional diagram, and then processes in the message is thrown.

FIG. 17 also illustrates that communication components may include one or more com ponents performing access control operations as discussed herein.

39

97552

40

For example, the access control component 1790 may interact with the processor 1730 and / or other components of the device 1710 to send / receive signals to / from another device (for example, device 1750), as discussed in thisdocument. Similarly, the access control component 1792 may interact with the processor 1770 and / or other components of the device 1750 to send / receive signals to / from another device (e.g., device 1710). It should be taken into account that for each device 1710 and 1750, the functionality of two or more of the components described can be provided with one component. For example, one processing component can provide the functionality of the access control component 1790 and the processor 1730, and one processing component can provide the functionality of an access control component 1792 and a processor 1770.

Ideas in this document may include various types of communication systems and / or system components. In some aspects, the ideas in this document can be used in the multiple access system, which allows communication with a decile-number of users by sharing the use of available system resources (for example, by specifying one or more of the bandwidth, transmission power, co-ing, interleaving, etc.). For example, the ideas of this document can be applied to any combination of the following technologies: multiple-access systems with code division channels (COMA), COMA multi-carrier systems (MSCAM), broadband COM (SH-COMA) systems, high-speed password access systems (NZRA, NZRA +), time-division multiple access systems (TOMA), multiple-access systems with frequency separation of channels (ROMA), ROMA systems with one-carrying carrier (сС-ROMA), multi-access systems with orthogonal frequency division of mnals (OROMA) or other technologies of multiple access. A wireless communication system using the ideas in this document can be implemented with the ability to implement one or more standards such as from-95, fuck2000, -856, SH-COMA, TOZCOM and other standards. SOMA-network can implement such technology of radio communications as Universal Terrestrial Radio Access (EITRA), Ebte2000 or some other technology. ITR includes a SH-COMA and a low-speed standard for the transmission of symbols of a noisy sequence (IPS). Additionally, technology ebta2000 coversstandards from-2000, from-95 and -856. TOMA network can implement such a radiocommunication technology, as the global mobile communication system (CMS). The COARM-network can implement such technology of radio communications as improved ITRA (E-ITRA), IEEE 802.11, IEEE 802.16, IEEE 802.20, RIAZ-OROM®, etc. ITE, E-EITRA and SZM are part of the universal system of mobile telecommunication (IMTs). The ideas in this document can be re-leased in the system according to the standard long-term development of 3SSR (BTE), the system outstandard ultra wideband transmission for the mod-

illuminated devices (IVMs) and other types of systems. I_This is the version of iMZ, which uses EEITRA. Although certain aspects of the disclosure of the substance can be described using the terminology of 3SSR, it is necessary to understand that the ideas in this document can be applied to the technology of 3SSR (Re199, Re15, Re16, Re17), as well as to the technology 3СРР2 (1хРТТ, 1хЕУ-Ыθ РеИО, ReuA, ReuV) and other technologies.

The ideas in this document may be included (for example, implemented as part of or executed with help) in a plurality of devices (for example, universities). In some aspects, a node (e.g., a wireless node), implemented in accordance with the ideas contained in the document, may contain an access point or an access terminal.

For example, an access terminal may include, be implemented as, or is known as a subscriber device, a subscriber station, a subscriber unit, a mobile station, a mobile device, a mobile node, a remote station, a remote terminal, a custom terminal, a custom agent, a user device, or With the use of some other term, In some implementations, the access terminal may include a cellular tele-phone, a cordless telephone, a proxy-initiated call (XR) telephone, a wireless subscriber access station (SHCH, personal digital device (PCA), pocket device with support for wireless connections, or some other proper processing device connected to a wireless modem. Accordingly, one or more of the aspects discussed in this document may be included on the phone (for example ,

An access point may include, be implemented or known as a node B, an e-node B, a network controller (RMI), a base station (BZ), a base radio station (RC), a base station controller (BCC), a base transmitting station (VTZ) the function of the transceiver (TP), the radio receiving transmitter, the radio router, the basic set of services (WZ), the extended set of services (EZZ), or the use of some other similar term.

In some aspects, a node (e.g., access point) may contain an access node for the system connection. Such an access device can provide, for example, the ability to connect to a network (such as a global computer network, such as the Internet or a cellular network) via a wired or wireless network with a network. Accordingly, the access node can provide the ability of another node (for example, the access terminal) to access the network or some other functionality. In addition, you need to take into account that one or both of the nodes may be

41

97552

42

portable or, in some cases, relatively non-portable.

In addition, it should be borne in mind that the wireless host can allow the transmission and / or access of information in a non-wire way (for example, through a wired connection). Thus, the receiving device and the transmitter, as explained herein, may include the appropriate components of the interface (for example, components of the electrical or optical interface) to exchange data through a non-wireless transmission environment.

A wireless node can exchange data through one or more wireless links that are based or otherwise support any applicable wireless technology. For example, in some aspects, a wireless node can be associated with the network. In some aspects, the network may contain a local computing network or global computingnetwork. The wireless device may support, or otherwise use, one or more of a variety of wireless technologies, protocols or standards, for example, explained in a given document (for example, SOMA, TUUM, OBOM, BOBOM, PWM, SHI-BI, and so on. etc.) Similarly, a wireless node can support or otherwise use one or more of the plurality of corresponding modulation or multiplexing schemes. The wireless node can thus include the appropriate components (eg, radio interfaces) to connect and exchange data through one or more unconnected lines using the aforementioned or other wireless technologies. For example, a wireless hub may contain a wireless transmitting device with associated components of the transmitter device and the receiver, which may include different components (eg, signal processors and signal processors), which c o-schuyut connection wirelessly peredavalnomuseredovyschu.

The components described in this document may be implemented in a variety of ways. Referring to FIG. 18-28, devices 1800, 1900, 2000, 2000, 2200, 2300, 2400, 2500, 2600, 2700 and 2800 are represented as a sequence of interconnected functional blocks. In some aspects, the functionality of these blocks can be implemented-as a system of processing, which includes one or more processor components. In some aspects, the functionality of these blocks can be re-arranged using, for example, at least part of one or more integrated circuits (for example, A3Yu). As explained herein, an integral circuit may include software, software, or other related components or a combination of the foregoing. The functionality of these blocks can also be implemented in some other way, as discussed in this document. In some aspects, more or more of the block dotted blocks in FIGS. 18-28 are optional.

Devices 1800, 1900, 2000, 2100, 2200, 2300.2400, 2500, 2600, 2700 and 2800 initself may include one or more modules that can execu-tion of one or more of the functions described vyschevidnosno various drawings. For example, the receiving / sending device 1802 may correspond, for example, to the communications controller, as explained in this document. Identification tool 1804 may correspond, for example, to an access controller as explained in this document. Means 1806 of the value of the allowed services may correspond, for example, to the access controller as explained in the document. The reception device 1902 may, for example, be a communications controller as described in this document. The dispatch tool 1904 may correspond, for example, to the access controller as explained herein. Measure 1906 of the value of the identifiers may correspond, for example, to access controller, as explained in this document. The dispatch method 2002 may correspond, for example, to an access controller, as explained in this document. The reception tool 2004 may correspond, for example, to the communications controller described in this document. The 2006 Identification Service may, for example, comply with the access controller as explained in this document. Configuration means 2102 may, for example, be a controller of initialization, as explained in this document. Receipt device 210 may correspond, for example, to an access controller as explained herein. Means 2106 may be consistent with, for example, the controller communication described herein. The determination tool 2108 may correspond, for example, to an access controller as explained in this document. Identification means 2202 may report, for example, the initialization controller, as explained in this document. The dispatch means 2204 may correspond, for example, to a communications controller, as explained herein. Assignment tool2206 may correspond, for example, to the initialization controller, as explained in this docket. The reception device 2302 may correspond, for example, to the initialization controller, as explained in the given document. The transfer device 2304 may, for example, be a communications controller, as exemplified in this document. Identification means 2402 may correspond, for example, to the initialization co-leader, as explained in this document. The dispatching means 2404 may correspond, for example, to the communications controller, as explained in this document. The reception device 2502 may respond, for example, to the communications controller described in the given document. Accessibility detection means 2504 may correspond, for example, to access controller, as explained herein. Means2506 can be configured based on the configuration, for example, the access controller, as not specified in this document. The storage medium 2508 of the list may correspond, for example, to the access controller, as explained herein. The configuration tool2602 may correspond, for example, to the initialization controller, as explained in this document. The transferring means 2604 may correspond, for example, to the communications controller, as explained in as explained in this document. The configuration tool2602 may correspond, for example, to the initialization controller, as explained in this document. The transferring means 2604 may correspond, for example, to the communications controller, as explained in as explained in this document. The configuration tool2602 may correspond, for example, to the initialization controller, as explained in this document. The transferring means 2604 may correspond, for example, to the communications controller, as explained in

43

97552

44

document. Reception means 2606 may respond, for example, to a communications controller described in a given document. The dispatch means 2608 may correspond, for example, to the initialization controller, as explained in this document. The facility 2610 may correspond, for example, to an initialisation controller as explained herein. Monitoring means 2702 may correspond, for example, to a receiver described in this document. Means 2704 for receiving beacon radio signals may correspond, for example, to a receiving device described herein. The dispatch means 270 may correspond, for example, to the communications controller, as explained in this document. The 2708 receiving roaming routine may, for example, be initialized controller, as explained in this document. Configuration means 2802 may correspond, for example, controller initialization, as explained in this document. Measure 2804 for receiving beacon radio signals may, for example, be a receiver device described in this document. The dispatch means 2806 may correspond, for example, to the controller communication, as explained herein. Authorization authorization tool2808 may correspond, for example, to an access controller as explained in this document. Means 2810 may be answered, for example, by the access controller as explained in the document. Recognition displaying means 2812 may correspond, for example, to access controller, as explained in this document. controller communication as explained in this document. Authorization authorization tool2808 may correspond, for example, to an access controller as explained in this document. Means 2810 may be answered, for example, by the access controller as explained in the document. Recognition displaying means 2812 may correspond, for example, to access controller, as explained in this document. controller communication as explained in this document. Authorization authorization tool2808 may correspond, for example, to an access controller as explained in this document. Means 2810 may be answered, for example, by the access controller as explained in the document. Recognition displaying means 2812 may correspond, for example, to access controller, as explained in this document.

It is to be understood that any reference to an element in this document with the use of any designation, such as "first", "second", etc., in general, does not limit the number or order of these elements. Instead, these designations can be used in this document as a convenient way of distinguishing between two or more elements or instances of an element. Thus, references to the first and second elements do not mean that only two elements can be used in this case, or that the first element should precede the second element by some form. In addition, if not stated otherwise, the items may contain one or more elements.

Those skilled in the art will appreciate that information and signals can be represented by any of the plurality of different technology giants. For example, data, instructions, commands, information, signals, bits, symbols and symbols of the noise-like sequence, which can be given as an example on all of the above description, may be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, optical fields, or particles or any combination of the above-mentioned.

Those skilled in the art will additionally have to take into account that any of the various illustrative logical blocks, modules, processors, assemblies, circuits, and algorithm steps described in connection with the vaks disclosed in this document, may be implemented as electronic hardware (for example, digital realization, analogue realization or a combination of them, which can be pro-

typed by encoding a source or some other technology), various forms of program-lots or a project code that contains instructions (which for convenience can be mentioned in this document as "software" or "software module"), or combinations of the above- th To clearly illustrate this interchangeability of hardware and software provision, various illustrative components, blocks, modules, circuits, and stages are described above, in general, based on functionality. Realized this functionality as hardware or software provision, depends on the specific versionuse and design constraints imposed on the system as a whole. Specialists can realistically describe the described functionality in various ways for each particular application application,

Various illustrative logical blocks, modules, and circuits described in connection with aspects disclosed in a given document can be implemented in frameworks or executed using an integrated circuit (IC), access terminal, or access point. The IC can be equipped with a general purpose processor, a digital signal processor (UZR), a specialized inter-gambling circuit (AIS), a user-programmed user terminal matrix (PPRA), or another programmed logic device, a discrete logic element or transistor logic, discrete hardware components, electrical components, optical components, mechanical components, or any combination of the foregoing, executed with the ability to implement the functions described in this document, and may execute codes or instructions that are continuously are placed on the IP, outside of the IC or both there, and there. The general-purpose processor may be a microprocessor, but in the alternative variant, the processor can be any traditional processor, controller, microcontroller or end-to-end automaton. The processor can also be implemented as a combination of computing devices, for example, a combination of SWAP and microprocessor, a plurality of microprocessors, one or more microprocessors along with the kernel of the SWR or any other similar configuration.

It is necessary to understand that a particular order or hierarchy of stages in the open processes is an example of a typical approach. On the basis of constructive re-weights it is necessary to understand that the particular order or hierarchy of stages in the processes can be changed, while remaining within the scope of this disclosure of the essence. Items on the method in the attached formulas of the invention represent elements of different stages in a sample order and do not intend to be limited to specific representations of order or the hierarchy.

The described functions can be implemented by hardware tools, software, firmware or in any combination of the above. If implemented in software, functions can be saved or transmitted as one or more tools or code on a machine readable medium. Machinocity

45

97552

46

The media includes both computer storage media and communication medium, which includes any transfer medium, which simplifies the transfer of computer programs from one place to another. Carriers can be any available carriers that can be accessed through a computer. As an example, but not limited to, these computer readable media may include a RAM, ROM, BERROM, OR-ROM or other storage device on optical disks, storage device on magnetic disks or other magnetic storage devices, or any other carrier that can be used to carry or store the necessary software code in the form of instructions or data structures and to which you can access using a com puter. Similarly, any connection can be correctlycalled as a machine readable medium. For example, what kind of software is transmitted from a web site, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (UI3) or wireless technology such as infrared, radio transmitting and microwave environments, then coaxial cable, opto-horse cable, "twisted pair", microwave or wireless technology, such as infrared, radio transmitting, and microwave environments included in the definition of the carrier. The disk (bus) and disk (bus) when used in this document include a compact disc (ÎÛ), a laser disk, an optical disk, a universal digital disk (DVD), a flexible disk drive BI-Rau, while disks (business ) usually reproduce data magnetically, while discs (Bizz) usually reproduce the data optically using lasers. The combinations of the above are encompassed by the term "machine readable medium". Thus, it is necessary to take into account that the computer-readable medium can be implemented in any suitable computer software product.

In view of the foregoing, in some aspects of the first communication method includes: identifying an identifier for a set of at least one access point, which is executed with the possibility of providing at least one service only a set of at least one access terminal, and the identifier uniquely identifies a set of any- less than one access point within the network operator; and sending an identifier to each access point in a set of at least one access point. In addition, in some respects, at least one of the following may also be applied to the first method of communication: the identifier is assigned the network identifier, and the network contains the domain operator of the cellular communication; the identifier is determined in conjunction with the activation of the access point of the set from at least one access point; a set of at least one access point contains a plurality of access points belonging to the general ad-domain domain; a set of at least one access point contains a plurality of access points that are associated with a common closed subscriber group; identifier is text; each access point of the set from at least one point of the to-do list is limited in such a way that it does not provide at least

for one another of the access terminal at least one of the group consisting of: redistribution of service signals, access to data, registration and service; each access point of a set of at least one access point contains a femto node or piquisazole; identification of the identifier includes the receipt of the request for an identifier anddefinition of whether the already used or not identifier at least with one anotheraccess point; if the requested identifier is already in use at least through one of the other points, the sending of the identifier involves sending a response to a request that places an identifier that is not used by other access points; each dot-duplex node of at least one access point provides at least one other service to at least one other access terminal; the method includes the assignment of a unique identifier of the device to each access point dialing from at least one access point; each access point from at least one access point provides services for dialing from at least one access terminal, other than at least one access point for another access terminal.

Also, in the light of the foregoing, in some aspects, the second communication method includes: a preseam ID for the dialing of at least one access point at the access point of the set, wherein each access point of the set is made with the ability to provide at least one service to a single set of at least one terminal access, and at the same time the identifier uniquely identifies at least one access point within the operator's network; and transfer the ID of the board interface. Additionally, in some aspects, at least one of the following may also be applied to the second communication method: the method includes, until the end, the reception of a registration message from the access terminal of the set of at least one access terminal in response to the transmission of the identifier; The identifier contains the identifier of the network, and the network contains the domain of the cellular communication operator ' tongue the identifier is accepted as the result of activating the access point, which takes an identifier; A set of at least one access point contains a plurality of access points that fall into the general administrative domain; the set of at least one access point contains a plurality of access points that are associated with the general closed subscriber group; identifier istext; each access point of the set at least one access point is limited in such a way that it does not provide at least one other access terminal at least one of the groups, which is compiled from the following: transfer of service signals, access to data, registration and service; Each access node of the set of at least one access point contains a femto node or picozool;

47

97552

48

services for at least one other access terminal; the ID is accepted in response to request for an identifier; the method further includes the definition of the proposed identifier, in which case the request includes the proposed identifier.

Also, in the light of the foregoing, in some aspects, a third method of communication includes: identifying the access terminals of access terminals on the access terminals; and sending identifiers at least one access point, which is executed with the ability to provide at least one service only for a set of terminals dos-dupe. In addition, in some aspects, at least one of the following may also be used in the third mode of communication: the identifiers contain constant identifiers for the access terminals; the identifiers contain temporary identifiers for the access terminals; IDs contain IDs of network addresses or international digital network integrators with integrated services for the mobile station; IDs are sent in response to a request from an access point at least one access point; definitionsinclude the reception of identifiers from the network of higher education; the definition includes the reception of server-side identifiers, which allows the user to specify the access terminals that are allowed to accept at least one service at least one access point; A set of access terminals is associated with a common closed or n-ans group; each access point at least one access point is limited in such a way that at least one other access terminal is not provided at least one of the following groups: the transmission of service signals, access to data, registration and service; Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. the definition includes the reception of server-side identifiers, which allows the user to specify the access terminals that are allowed to accept at least one service at least one access point; A set of access terminals is associated with a common closed or n-ans group; each access point at least one access point is limited in such a way that at least one other access terminal is not provided at least one of the following groups: the transmission of service signals, access to data, registration and service; Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. the definition includes the reception of server-side identifiers, which allows the user to specify the access terminals that are allowed to accept at least one service at least one access point; A set of access terminals is associated with a common closed or n-ans group; each access point at least one access point is limited in such a way that at least one other access terminal is not provided at least one of the following groups: the transmission of service signals, access to data, registration and service; Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. which allows the user to specify the access terminals that are allowed to accept this at least one service from at least one access point; A set of access terminals is associated with a common closed or n-ans group; each access point at least one access point is limited in such a way that at least one other access terminal is not provided at least one of the following groups: the transmission of service signals, access to data, registration and service; Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. which allows the user to specify the access terminals that are allowed to accept this at least one service from at least one access point; A set of access terminals is associated with a common closed or n-ans group; each access point at least one access point is limited in such a way that at least one other access terminal is not provided at least one of the following groups: the transmission of service signals, access to data, registration and service; Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. A set of access terminals is associated with a common closed or n-ans group; each access point at least one access point is limited in such a way that at least one other access terminal is not provided at least one of the following groups: the transmission of service signals, access to data, registration and service; Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. A set of access terminals is associated with a common closed or n-ans group; each access point at least one access point is limited in such a way that at least one other access terminal is not provided at least one of the following groups: the transmission of service signals, access to data, registration and service; Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals. Each access point from at least one access point contains a femto node or picozool; each access point from at least one access point provides at least one other service to at least one of the other access terminals.

Also, in the light of the foregoing, in some aspects, a fourth communication method includes: receiving a message relating to the request using the access terminal to access the access point, while the message contains the first identifier associated with the access denomination; determining the second identifier associated with the access terminal on the first first identifier; and determining whether or not the access terminal is allowed to receive an access point from an access point, based on the second identifier and at least one identifier associated with the access point. In addition, in some aspects, at least one of the following can also be applied to the fourth method of communication: the first identifier contains a temporary identifier, and the second identifier contains the post id; the second identifier identifies the network access point of the access terminal or the international number of the digital network with the integrated services for the mobile terminal access terminal; the second identifier identifies at least one closed subscriber group,

the access terminal to which the access terminal can access, and at least one identifier associated with the access point, includes the identity of the covered subscriber group associated with the access point; at least one identifier associated with the access point contains an access list for the access point, and determining whether the access terminal's access authority accepts the service from the access point includes determining whether the second identifier is in the access list; the network node performs a determination whether the access terminal is allowed to accept the service from the access point; the message contains a request from the dot-dupe point for authenticating the access terminal; and the method includes, in addition, the sending, to the access point, a message indicating whether it is authorized or nor the access terminal to accept the service from the access point; the definition of the second identifier involves sending the first identifier to the intranet and receiving the second identifier from the network node; the access point determines whether or not the access terminal is allowed to accept the service from the access point; at least one identifier associated with the access point is received from the network node; determining whether or not an access terminal accepts an access service from an access point includes: sending a second identifier and at least one identifier associated with an access point, an intranet and a reception, from the network node, whether the access terminal accepts the service from the point access determining whether or not the access terminal accepts the service from an access point, includes: sending another identifier to a network node and receiving at least one identifier, associated with the access point, from the network node; the dot-to-dup point is limited in such a way that at least one of the access terminals is not provided at least one of the group consisting of: redistribution of service signals, data access, registration, and service; The access point contains femto node or picosol.

Also, in the light of the foregoing, in some aspects, the fifth method of communication includes: at-yom of the request from the access point for authenticating the te-access denominator; and sending to an access point with at least one identifier that identifies at least one set of access points from which access terminals is allowed to receive at least one service. In addition, in some aspets, at least one of the following can also apply to the fifth method of communication: at least one identifier contains the identifier of the closed subscriber group; the request contains the identification data of the network address of the access terminal or the international number of the digital network with the integrated services for the mobile terminal access terminal; the method further includes a value of at least one identifier based on the constant identifier, associated with the term of access, and the determination of a constant identifier based on the temporary identifier associated with the access terminal; request contains a temporary identifier; determination of the constant

49

97552

50

The ID includes sending a temporary identifier to the network node and receiving a destination identifier from the network node; the method includes, in addition, the reception of at least one identifier from the network node; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, data access, registration, and service; The access point contains femto node or picosol.

Also, in the light of the foregoing, in some aspects, the sixth method of communication includes: control, using the access point, the request for authentication of the access terminal; and receiving, in response to a request, at least one identifier identifying at least one set of access, of which the access terminal is allowed to receive at least one service. In addition, in some aspects, at least one of the following may also be applied to a sixth method of communication: the method further includes determining whether the access terminal is allowed to receive the service from an access point, based on at least one identifier; at least one identifier contains the id of the closed subscriber group; at least one identifier identifies a closed subscriber group to which the access terminal can access, and the definition includes the determination of whether or not the least one identifier with the identifier of the closed subscriber group associated with the access point is the same; the request is sent on the basis of the value that the access terminal is not specified in the entry for the local access point of the access point; The pit contains the identification data of the network address of the access terminal or the international number of the digital network with integrated services for the mobile terminal of the access terminal; request contains an interim identifier associated with the term-access point; the method further includes receiving the session information associated with the access terminal from the network node, while: the session information contains contextual information for the access terminal, and the request contains contextual information; access point is limited so so as not to provide at least one other access terminal at least one of the following groups: the transmission of service signals, access to data, registration and service; the access point contains a femto node or picozool.

Also, in the light of the foregoing, in some aspects, the seventh communication method includes: listening, using an access point, a request that includes a dial identifier of at least one access terminal that has the right to receive the service from the access point; and receiving, in response to a request, a list of at least one access terminal authorized to receive the service from the access point. In addition, in some aspects, at least one of the following may also be applied to the seventh method of communication: the method further includes determining whether the access terminal is allowed to accept the service from the access point, based on at least one identity

kator; at least one identifier contains at least one identifier of the closed subscriber group; the identifier contains a list of at least one of the closed or group IDs associated with the access terminal, and the definition includes determining whether or not an identifier of a closed subscriber group associated with an access point is in the spy; the request is sent based on the determination that the access terminal is not listed in the access point list for the local access; the request contains the identification data of the network address of the access terminal or the international number of the digital network with the integrated services for the mobile terminal access terminal; the request includes a temporary identifier associated with the access terminal, the method further comprising obtaining an information session associated with the access terminal from the communication node, In this case, the session information specifies the context information for the access terminal, and the query contains context information; the access point is limited in such a way that it does not provide at least one other access terminal, at least one of the following, consisting of the following: transmission of service signals, access, registration, and service; the access point contains a femto node or picozool.

Also, in the light of the foregoing, in some aspects, the eighth communication method includes: receiving from the first access point, identifying at least one other access point to which the access terminal has the right to access; anddefinition on the basis of the identifier whether or not to allow access to at least one other access point. In addition, in some aspects, at least one of the following may also apply to the eighth mode of communication: the value includes the suggestion of the user to determine whether to allow or not access; the definition includes the display of the identifier and the acceptance of the user input, indicating whether to allow or not access; the method additionally includes the determination based on the configuration information of it, it is necessary to allow access automatically or allow access in response to a request; the method includes up-to-date storage of the list of access points that are allowed to access via the access terminal, and the definition is additionally based on the list; the method further includes storing the list of access points to which the user has chosen not to access, hence the definition additionally based on the list; the id-identifier contains the network identifier; identity-identifier contains the ID of the closed subscriber group; the identifier is received through a WMZ message, an application-level protocol message, a radio link notification, or a search call; e-confectioner is accepted from the network node; Each access point from at least one access point is limited in such a way that it does not provide at least one other access terminal at least one of the group consisting of the following: transfer of service signals, data access, registration and service; every access point at least

51

97552

52

from one access point contains a femto node or pykovozol.

Also, in the light of the foregoing, in some aspects, the ninth mode of communication includes: configuration of the access point in the initialization mode; transmission of the beacon radio signal by default, which contains the default configuration, during the initialization mode; reception of a message from the access terminal in response to the lighthouse radio signal by default; and sending a list of prestigious roaming to the access terminal in the corresponding message. In addition, in some respects, at least one of the following can also be applied to the ninth mode of communication: the lame default radio signal containing the default configuration, is transmitted at the first level of power, the method further includes configuring the access point in another working mode, with which the beacon radio signals transmitted at the second level of power, which exceeds the first level of power; the first level of power provides a smaller coverage area than that provided with the second level of power; The default configuration contains a default network id-identifier that differs from the network identifier used for non-initialized working mode; the default configuration specifies system identifiers and network default settings for at least one access point with the highest priority, and the preferred roaming list specifies other system identifiers and networks with at least one access point with the highestpriority; the beacon radio signal is by default transmitted at the default frequency, and the list of superior roaming indicates another frequency of beacon radio signals for the access point, which differs from the default frequency; the additional method involves setting up a preferred roaming list based on another roaming list associated with the access terminal; the additional method includes the receipt of another list of preferred roaming from the access terminal; the additional method involves the reception of another list of preferred roaming from the network node; the access point is limited to the one that does not provide at least one other access terminal at least one group, which consists of the following: transmission of service signals, access to data, registration and service; the access point contains a femto node or a penknose. the access point is limited to the one that does not provide at least one other access terminal at least one group, which consists of the following: transmission of service signals, access to data, registration and service; the access point contains a femto node or a penknose. the access point is limited to the one that does not provide at least one other access terminal at least one group, which consists of the following: transmission of service signals, access to data, registration and service; the access point contains a femto node or a penknose.

Also, in view of the foregoing, in some aspects, the tenth method of communication includes: monitoring, access terminal, lighthouse radio signals based on the first list of preferred roaming, which indicates the default configuration; reception of a beacon radio signal containing configurations By default, from an access point as a result of monitoring; Sending a message to the access point in response to the receiving beacon radio signal; and receiving a second ro-call list from an access point in response to a message, while the second roaming list indicates a configuration other than the configuration under conditions. In addition, in some aspects at least

One of the following can also be applied to the tenth method of communication: the first list of overriding roaming contains a list of roaming under conditions for initialization operations, and the second list of superior roaming contains a roaming list for not associated with the initialization of operations; the default configuration contains the default network id; the second list of preferred roaming contains another network identifier associated with an access point that is different from the default network identifier; Beacon radio-signal is received at the default frequency, indicated by the first list of preferred roaming, and the second list of preferred roaming indicates the carrier frequency for the access point, which bits off from the default frequency; access point is limited so in order not to provide at least one other access terminal at least one of the group consisting of: redistribution of service signals, data access, registration, and service; The access point contains femto node or picosol.

Also, in the light of the foregoing, in eleven aspects, the eleventh method of communication includes: configuration of an access point with a first identifier of the access terminal; receipt of the second access terminal identifier based on the first identifier; receiving a message requesting access using the access terminal; anddefinition, at the access point, whether, to provide or not requested access, based on the second identifier. Additionally, in some aspects, at least one of the following may also be applied to the eleventh method of communication: the first identifier contains the network address identifier or the international digital network number with the integrated services for the mobile station; the second identifier contains an electronic serial no-meter or international identifier of the subscriber of the mobile communication; Receipt includes: Sending the first ID to the network node and receiving the second identifier from the network node as the result of sending the first identifier; the definition includes a comparison of the identifier received via the message from the access terminal with the second identifier, the definition includes: sending a second identifier to the network node and receiving, as a result of sending a second identifier, an indicator relative to the provision of whether requested access; the access point is configured via the web interface; the access point is limited so as not to provide at least one other access terminal at least one of the groups, which is compiled from the following: transfer of service signals, access to data, registration and service; the access point contains a femto node or picozool.

Also, in the light of the foregoing, in some aspects, the twelfth method of communication includes: configuring the access terminal with a preemptive roaming list, which includes an identifier of the set of access points, which are limited so as to provide services to a limited set of access terminals; receiving lighthouse radio signals from one of the access points, while lighthouse

53

97552

54

the radio signal contains an identifier; Sending a message to one access point in response to a native radio signal; and accept authorization to allow access to one access point, in the message box. In addition, in some as-bake at least one of the following as mozhezastosovuvatysya to twelfth mode of communication: a set of access points includes all access points vdomeni mobile operator, which Genis-restricted so that cartridges provide limited-access terminals frames ; the identifier contains the network identifier; The list of preferred roaming-gu indicates the carrier frequency used by the set of access points; the additional method involves proposing the user to determine whether or not to access one access point; the method further includes displaying an indicator of one access point and receiving a user-watched input, indicating whether or not to access access to one access point; Terminal access automatically determines whether the ranks need to access one access point; the access point from the set of access points is restricted so as not to provide at least one access terminal of at least one of the group consisting of the following: transmission of service signals, access to data, registration and service; each access point from the dots-tops set contains a femto node or piquisazole. in order not to provide at least one of the other access terminals of at least one of the group, consisting of the following: transmission of service signals, access to data, registration and service; each access point from the dots-tops set contains a femto node or piquisazole. in order not to provide at least one of the other access terminals of at least one of the group, consisting of the following: transmission of service signals, access to data, registration and service; each access point from the dots-tops set contains a femto node or piquisazole.

Also, taking into account the foregoing, in some aspects the thirteenth method of communication includes: receiving a request from the access point for authentication access term; determining whether the access terminal is allowed to accept the service from the access point, based on the identifier of the set of at least one access terminal that accepts the service from the access point; and sending a message indicating the definition to an access point. In addition, in some aspects, at least one of the following may also be applied to the trident communication method: the definition includes the value of whether or not the access point access point identifier is located. ; request contains access list; the identifier contains a constant identifier, the method further comprising determining a permanent identifier based on a temporary set identifier of at least one access terminal; definition of a permanent identifier includes sending a temporary identifier to a network node and receiving a post identifier from the network node; identity-identifier contains the ID of the closed subscriber group; the identifier contains at least one of the same closed group IDs associated with the set of at least one access terminal, and the determination includes determining whether or not the identifier of the closed user group associated with the access point is in the list; the access point is limited so as not to provide at least one other access terminal at least one of the group consisting of the following: redistribution of service signals, access to data, registry and service; The access point contains femto node or picosol.

Also, in the light of the foregoing, in some aspects, the fourteenth communication method includes: reception, access point, access request from the access terminal, and the request for access places the first identifier associated with the access terminal; definition of the second identifier associated with the access terminal, based on the first identifier; and determining whether or not the access terminal is allowed to access the service from the access point, based on the second ID of the subscription from at least one access terminal authorized to accept the service from the access point. In addition, in some aspects, at least one of the following can also be applied to the fourteenth method of communication: the first identifier contains a temporary identifier, and the second identifier contains the post identifier; the first identifier identifies the network access address of the access terminal or the international digital network number with the integrated services for the mobile terminal of the access terminal; the list is accepted from the network node and contains individual identifiersterms of access; the second identifier contains an identifier of a closed subscriber group associated with the access terminal, and the list contains an identifier of a closed subscriber group associated with an access point; the definition includes: sending a second identifier and a list of the intranet and reception, from the network node, whether the access terminal is allowed or not to accept the service from the access point; The definition includes: sending the second ID to the intranet and receiving the list from the network institution; access point is limited so in order not to provide at least one other access terminal with at least one of the following groups: transfer of service signals, access, registration, and service; the access point contains a femto node or picozool.

In some aspects, functionality is a response to one or more of the aforementioned aspects of the first, second, third, fourth, fifth, sixth, seventh, eighth, ninth, tenth, eleventh, twelfth, thirteenth and fourteenth modes of communication, It can be implemented, for example, in a device using current, as discussed in this document. Inthat, a computer software product can provide codes, executed with the ability to instruct the computer to provide functionality, corresponding to one or more of the aforementioned aspects of these communication methods.

A preliminary description of the disclosed aspects is provided in order to enable any facsimile in the art to create or use this disclosure. Various modifications in these aspects should be apparent to those skilled in the art in the art, and the general principles described in this document can be applied to any other aspect without deviating from the scope of disclosure. Thus, this disclosure does not intend to be limited to the aspects shown in this document, but must satisfy the self-

55

97552

56

wide scope, consistent with the principles and

new features disclosed in this document.

57

97552

58

300

FIG. WITH

59

97552

60

61

97552

62

63

97552

64

65

97552

66

67

97552

68

69

97552

70

71

97552

72

73

97552

74

75

97552

76

τι

97552

78

79

97552

80

1404A

1404B

140YA

14063

140IEC

144Ke

1404C

14060

1406C

14V4

14M

1404C

14065

1402B

1402A

TIM

1406 N.

1402C

1402 =

4 Ci

1402 "

140yo

14061

FIG. 14

15Z0Α

GLOBAL COMPUTER NETWORK (EXAMPLE, [rtgrCHRTi

BASE OF THE NETWORK OPERATOR

FIG. 15

ACCESSORIES ACCESSORIES

eating

1500

1520V

1530

FEMIOS-

IJIO ::

151DL

FEMTS

iyuzzp

81

97552

82

83

97552

84

85

97552

86

87

97552

88

89

97552

90

Computer design of O. Gaponenko

State Service of Intellectual Property of Ukraine, st. Uritskogo, 45, Kyiv, SME, 03680, Ukraine

State Enterprise "Ukrainian Institute of Industrial Property", st. Glazunova, 1, Kyiv - 42, 01601