Abstract: A method and system are provided for integrating a WLAN radio access network into a GSM/GPRS core network wherein gateways are added that transparently transport services between the two networks. A further aspect of the invention is secure authentication. The system has two network elements: a Radio Link Manager (RLM) and a Radio Access Controller (RAC), and a software application, a Multi-Link Client (MLC) to control the functionality of the integration and the authentication. The MLC resides on a user device. The RAC provides protocol stacks and interworking functions to allow the MLC to talk to a Home Location Register (HLR). The RLM and MLC set up a “tunnel” employing, for example, PPP over Ethernet (PPPOE), and all of the data packets received on this tunnel are forwarded by the RLM to the Gateway GPRS Support Node (GGSN over a further tunnel using the GPRS Tunneling Protocol (GTP).

Abstract: A services gateway, which links client access by any technology to multiple service nodes, even if the client access technology is not directly compatible with the service node. The universal convergence border gateway (UCBG) utilizes the IP layer as a harmonizing layer to decouple standard services from their normally-associated access technologies. This is particularly advantageous with multifunction client devices because the best available wireless access technology can be used independently of the type of service being accessed. The UCBG uses a single encryption scheme to multiplex the traffic for various services with different characteristics into multiple data flows. The UCBG uses a single encryption scheme to converge the data flows to the client using a single control path without losing each traffic's characteristics such as QoS. The gateway also demultiplexes the converged traffic that it receives from the client in order for the data to reach the appropriate service node.

Abstract: A proxy server provides an anchor point for access network changes in a wireless environment. One example embodiment uses the concept of proxy server in order to preserve a uniform connectivity to a gateway service node while roaming across different networks through a handover mechanism. In one embodiment, the client connects to a proxy server through one access network, and the proxy server manages and keeps track of the user session toward the gateway service node. The client then connects to any packet service network, including Internet, through the proxy. When the client moves from one network to another, it indicates the change to the proxy and proxy, using a handover mechanism, switches the access network while maintaining the user session toward the gateway service node. The handover mechanism involved is efficient, with minimal messaging overhead, and preserves the application layer IP address of the client.

Abstract: A method and apparatus for performing SIM-based authentication and authorization in a WLAN Internet Service Provider (WISP) network supporting the universal access method (UAM) of authentication and authorization enabling roaming for customers of mobile service providers onto said networks. In addition, the invention provides a secure way of authenticating the customer's client device to the mobile service provider's network by employing temporary credentials for authentication that provide privacy of the user's identity and prevent replay attacks. Finally, if the WISP network supports the ‘pass-through’ facility, the authentication can be done more securely and quickly.