Patent Description:
Wireless communication networks are widely deployed to provide various communication content such as voice, video, packet data, messaging, broadcast, etc. These wireless networks may be multiple-access networks capable of supporting multiple users by sharing the available network resources. Examples of such multiple- access networks include code division multiple access (CDMA) networks, time division multiple access (TDMA) networks, frequency division multiple access (FDMA) networks, orthogonal FDMA (OFDMA) networks, and single-carrier FDMA (SC-FDMA) networks.

A user equipment (UE) may be located within the coverage of multiple wireless networks, which may support different communication services. A suitable wireless network may be selected to serve the UE based on one or more criteria. The selected wireless network may be unable to provide a desired communication service (e.g., voice service) for the UE. A set of procedures may then be performed to redirect the UE to another wireless network (e.g., <NUM>, <NUM> or non-LTE <NUM>) that can provide the desired communication service. <CIT> discloses a data stream transmission method wherein a user equipment establishes a first network link and a second network link with a network side, where the first network is different from the second network. The user equipment associates the first network link with the second network link and distributes, according a scheduling algorithm, a same data stream to the first network link and the second network link for transmission.

Certain aspects of the present disclosure provide a method for wireless communications by a base station. The method generally includes establishing communications with a first user equipment (UE), wherein the UE is identified by a first set of one or more identifiers in a wide area wireless network (WWAN) and by a second set of one or more identifiers in a wide local area network (WLAN) and determining, based on the first and second set of identifiers, a UE connected to the WWAN and WLAN is the first UE.

Certain aspects of the present disclosure provide a method for wireless communications by a user equipment. The method generally includes establishing communications with a wide area wireless network (WWAN) and a wide local area network (WLAN), wherein the UE is identified by a first set of one or more identifiers in the WWAN and by a second set of one or more identifiers in the WLAN and providing, when establishing communications with a first one of the WWAN or WLAN, a set of identifiers allowing the other of the WWAN or WLAN to identify the UE.

Certain aspects of the present disclosure provide an apparatus for secure wireless communications by a first base station. The apparatus generally includes means for establishing communications with a first UE, wherein the UE is identified by a first set of one or more identifiers in a wide area wireless network (WWAN) and by a second set of one or more identifiers in a wide local area network (WLAN) and means for determining, based on the first and second set of identifiers, a UE connected to the WWAN and WLAN is the first UE.

Certain aspects of the present disclosure provide an apparatus for secure wireless communications by a first base station. The apparatus generally includes at least one processor configured to establish communications with a first UE, wherein the UE is identified by a first set of one or more identifiers in a wide area wireless network (WWAN) and by a second set of one or more identifiers in a wide local area network (WLAN) and determine, based on the first and second set of identifiers, a UE connected to the WWAN and WLAN is the first UE. The apparatus also includes a memory coupled to the at least one processor.

Certain aspects of the present disclosure provide a computer program product for secure wireless communications by a first base station. The computer program product generally includes a computer readable medium having instructions stored thereon, the instructions executable by one or more processors for establishing communications with a first UE, wherein the UE is identified by a first set of one or more identifiers in a wide area wireless network (WWAN) and by a second set of one or more identifiers in a wide local area network (WLAN) and determining, based on the first and second set of identifiers, a UE connected to the WWAN and WLAN is the first UE.

Certain aspects of the present disclosure provide an apparatus for secure wireless communications by a UE. The apparatus generally includes means for establishing communications with a wide area wireless network (WWAN) and a wide local area network (WLAN), wherein the UE is identified by a first set of one or more identifiers in the WWAN and by a second set of one or more identifiers in the WLAN and means for providing, when establishing communications with a first one of the WWAN or WLAN, a set of identifiers allowing the other of the WWAN or WLAN to identify the UE.

Certain aspects of the present disclosure provide an apparatus for secure wireless communications by a UE. The apparatus generally includes at least one processor configured to establish communications with a wide area wireless network (WWAN) and a wide local area network (WLAN), wherein the UE is identified by a first set of one or more identifiers in the WWAN and by a second set of one or more identifiers in the WLAN and provide, when establishing communications with a first one of the WWAN or WLAN, a set of identifiers allowing the other of the WWAN or WLAN to identify the UE. The apparatus also includes a memory coupled to the at least one processor.

Certain aspects of the present disclosure provide a computer program product for secure wireless communications by a UE. The computer program generally includes a computer readable medium having instructions stored thereon, the instructions executable by one or more processors for establishing communications with a wide area wireless network (WWAN) and a wide local area network (WLAN), wherein the UE is identified by a first set of one or more identifiers in the WWAN and by a second set of one or more identifiers in the WLAN and providing, when establishing communications with a first one of the WWAN or WLAN, a set of identifiers allowing the other of the WWAN or WLAN to identify the UE.

The detailed description includes specific details for providing a thorough understanding of the various concepts.

The techniques described herein may be used for various wireless communication networks such as code division multiple access (CDMA), time division multiple access (TDMA), frequency division multiple access (FDMA), orthogonal FDMA (OFDMA), single carrier FDMA (SC-FDMA) and other networks. A CDMA network may implement a radio access technology (RAT) such as universal terrestrial radio access (UTRA), cdma2000, etc. UTRA includes wideband CDMA (WCDMA) and other variants of CDMA. IS-<NUM> is also referred to as 1x radio transmission technology (1xRTT), CDMA2000 1X, etc. A TDMA network may implement a RAT such as global system for mobile communications (GSM), enhanced data rates for GSM evolution (EDGE), or GSM/EDGE radio access network (GERAN). An OFDMA network may implement a RAT such as evolved UTRA (E-UTRA), ultra mobile broadband (UMB), IEEE <NUM> (Wi-Fi), IEEE <NUM> (WiMAX), IEEE <NUM>, Flash-OFDM. , etc. UTRA and E-UTRA are part of universal mobile telecommunication system (UMTS). 3GPP long-term evolution (LTE) and LTE-Advanced (LTE-A) are new releases of UMTS that use E-UTRA, which employs OFDMA on the downlink and SC-FDMA on the uplink. The techniques described herein may be used for the wireless networks and RATs mentioned above as well as other wireless networks and RATs.

Circuit-switched fallback (CSFB) is a technique to deliver voice-services to a mobile, when the mobile is camped in a long-term evolution (LTE) network. This may be required when the LTE network does not support voice services natively. The LTE network and a 3GPP CS network (e.g., UMTS or GSM) may be connected using a tunnel interface. The user equipment (UE) may register with the 3GPP CS network while on the LTE network by exchanging messages with the 3GPP CS core network over the tunnel interface.

<FIG> shows an exemplary deployment in which multiple wireless networks have overlapping coverage. An evolved universal terrestrial radio access network (E-UTRAN) <NUM> may support LTE and may include a number of evolved Node Bs (eNBs) <NUM> and other network entities that can support wireless communication for user equipments <NUM> (UEs). Each eNB <NUM> may provide communication coverage for a particular geographic area. The term "cell" can refer to a coverage area of an eNB <NUM> and/or an eNB subsystem serving this coverage area. A serving gateway (S-GW) <NUM> may communicate with E-UTRAN <NUM> and may perform various functions such as packet routing and forwarding, mobility anchoring, packet buffering, initiation of network-triggered services, etc. A mobility management entity (MME) <NUM> may communicate with E-UTRAN <NUM> and serving gateway <NUM> and may perform various functions such as mobility management, bearer management, distribution of paging messages, security control, authentication, gateway selection, etc. The network entities in LTE are described in <NPL>," which is publicly available.

A radio access network (RAN) <NUM> may support GSM and may include a number of base stations <NUM> and other network entities that can support wireless communication for UEs <NUM>. A mobile switching center (MSC) <NUM> may communicate with the RAN <NUM> and may support voice services, provide routing for circuit-switched calls, and perform mobility management for UEs <NUM> located within the area served by MSC <NUM>. Optionally, an inter-working function (IWF) <NUM> may facilitate communication between MME <NUM> and MSC <NUM> (e.g., for 1xCSFB).

E-UTRAN <NUM>, serving gateway <NUM>, and MME <NUM> may be part of an LTE network <NUM>. RAN <NUM> and MSC <NUM> may be part of a GSM network <NUM>. For simplicity, <FIG> shows only some network entities in the LTE network <NUM> and the GSM network <NUM>. The LTE and GSM networks may also include other network entities that may support various functions and services.

A UE <NUM> may be stationary or mobile and may also be referred to as a mobile station, a terminal, an access terminal, a subscriber unit, a station, etc. UE <NUM> may be a cellular phone, a personal digital assistant (PDA), a wireless modem, a wireless communication device, a handheld device, a laptop computer, a cordless phone, a wireless local loop (WLL) station, etc..

Upon power up, UE <NUM> may search for wireless networks from which it can receive communication services. If more than one wireless network is detected, then a wireless network with the highest priority may be selected to serve UE <NUM> and may be referred to as the serving network. UE <NUM> may perform registration with the serving network, if necessary. UE <NUM> may then operate in a connected mode to actively communicate with the serving network. Alternatively, UE <NUM> may operate in an idle mode and camp on the serving network if active communication is not required by UE <NUM>.

UE <NUM> may be located within the coverage of cells of multiple frequencies and/or multiple RATs while in the idle mode. For LTE, UE <NUM> may select a frequency and a RAT to camp on based on a priority list. This priority list may include a set of frequencies, a RAT associated with each frequency, and a priority of each frequency. For example, the priority list may include three frequencies X, Y and Z. Frequency X may be used for LTE and may have the highest priority, frequency Y may be used for GSM and may have the lowest priority, and frequency Z may also be used for GSM and may have medium priority. In general, the priority list may include any number of frequencies for any set of RATs and may be specific for the UE location. UE <NUM> may be configured to prefer LTE, when available, by defining the priority list with LTE frequencies at the highest priority and with frequencies for other RATs at lower priorities, e.g., as given by the example above.

UE <NUM> may operate in the idle mode as follows. UE <NUM> may identify all frequencies/RATs on which it is able to find a "suitable" cell in a normal scenario or an "acceptable" cell in an emergency scenario, where "suitable" and "acceptable" are specified in the LTE standards. UE <NUM> may then camp on the frequency/RAT with the highest priority among all identified frequencies/RATs. UE <NUM> may remain camped on this frequency/RAT until either (i) the frequency/RAT is no longer available at a predetermined threshold or (ii) another frequency/RAT with a higher priority reaches this threshold. This operating behavior for UE <NUM> in the idle mode is described in <NPL>," which is publicly available.

UE <NUM> may be able to receive packet-switched (PS) data services from LTE network <NUM> and may camp on the LTE network while in the idle mode. LTE network <NUM> may have limited or no support for voice-over-Internet protocol (VoIP), which may often be the case for early deployments of LTE networks. Due to the limited VoIP support, UE <NUM> may be transferred to another wireless network of another RAT for voice calls. This transfer may be referred to as circuit-switched (CS) fallback. UE <NUM> may be transferred to a RAT that can support voice service such as 1xRTT, WCDMA, GSM, etc. For call origination with CS fallback, UE <NUM> may initially become connected to a wireless network of a source RAT (e.g., LTE) that may not support voice service. The UE may originate a voice call with this wireless network and may be transferred through higher-layer signaling to another wireless network of a target RAT that can support the voice call. The higher-layer signaling to transfer the UE to the target RAT may be for various procedures, e.g., connection release with redirection, PS handover, etc..

<FIG> shows a block diagram of a design of UE <NUM>, eNB <NUM>, and MME <NUM> in <FIG>. At UE <NUM>, an encoder <NUM> may receive traffic data and signaling messages to be sent on the uplink. Encoder <NUM> may process (e.g., format, encode, and interleave) the traffic data and signaling messages. A modulator (Mod) <NUM> may further process (e.g., symbol map and modulate) the encoded traffic data and signaling messages and provide output samples. A transmitter (TMTR) <NUM> may condition (e.g., convert to analog, filter, amplify, and frequency upconvert) the output samples and generate an uplink signal, which may be transmitted via an antenna <NUM> to eNB <NUM>.

On the downlink, antenna <NUM> may receive downlink signals transmitted by eNB <NUM> and/or other eNBs <NUM> /base stations <NUM>. A receiver (RCVR) <NUM> may condition (e.g., filter, amplify, frequency downconvert, and digitize) the received signal from antenna <NUM> and provide input samples. A demodulator (Demod) <NUM> may process (e.g., demodulate) the input samples and provide symbol estimates. A decoder <NUM> may process (e.g., deinterleave and decode) the symbol estimates and provide decoded data and signaling messages sent to UE <NUM>. Encoder <NUM>, modulator <NUM>, demodulator <NUM>, and decoder <NUM> may be implemented by a modem processor <NUM>. These units may perform processing in accordance with the RAT (e.g., LTE, 1xRTT, etc.) used by the wireless network with which UE <NUM> is in communication.

A controller/processor <NUM> may direct the operation at UE <NUM>. Controller/processor <NUM> may also perform or direct other processes for the techniques described herein. Controller/processor <NUM> may also perform or direct the processing by UE <NUM> in <FIG> and <FIG>. Memory <NUM> may store program codes and data for UE <NUM>. Memory <NUM> may also store a priority list and configuration information.

At eNB <NUM>, a transmitter/receiver <NUM> may support radio communication with UE <NUM> and other UEs. A controller/processor <NUM> may perform various functions for communication with the UEs. On the uplink, the uplink signal from UE <NUM> may be received via an antenna <NUM>, conditioned by receiver <NUM>, and further processed by controller/processor <NUM> to recover the traffic data and signaling messages sent by UE <NUM>. On the downlink, traffic data and signaling messages may be processed by controller/processor <NUM> and conditioned by transmitter <NUM> to generate a downlink signal, which may be transmitted via antenna <NUM> to UE <NUM> and other UEs. Controller/processor <NUM> may also perform or direct other processes for the techniques described herein. Controller/processor <NUM> may also perform or direct the processing by eNB <NUM> in <FIG> and <FIG>. Memory <NUM> may store program codes and data for the base station <NUM>. A communication (Comm) unit <NUM> may support communication with MME <NUM> and/or other network entities.

At MME <NUM>, a controller/processor <NUM> may perform various functions to support communication services for UEs. Controller/processor <NUM> may also perform or direct the processing by MME <NUM> in <FIG> and <FIG>. Memory <NUM> may store program codes and data for MME <NUM>. A communication unit <NUM> may support communication with other network entities.

<FIG> shows simplified designs of UE <NUM>, eNB <NUM>, and MME <NUM>. In general, each entity may include any number of transmitters, receivers, processors, controllers, memories, communication units, etc. Other network entities may also be implemented in similar manner.

Aspects of the present disclosure provide techniques that may allow confirmation that a user equipment (UE) registered in one radio access network (RAN) is the same UE (e.g., wireless local area network (WLAN)) is the same UE also registered in another RAN by correlating IDs of the different RANs. For example, the techniques may be used to confirm a device registered in a WLAN network is the same as device registered in an LTE network.

Aggregation using separate Evolved Packet System (EPS) bearers that terminate at the radio access network (RAN). <FIG> illustrates an example architecture for WLAN to aggregation using separate EPS bearers terminating, according to certain aspects of the present disclosure. As seen in <FIG>, a UE <NUM> may use separate EPS bearers at the core network (CN) <NUM>, for example the eNB <NUM> and WLAN AP, i.e. the existing EPS bearers are uniquely mapped to be served by either the eNB <NUM> or the WLAN AP <NUM> serving the UE <NUM>.

<FIG> illustrates an example UE packet data network (PDN) gateway (UE-PGW) user plane. As seen in <FIG>, the user plane between the UE <NUM> and PGW <NUM> for WLAN has aggregation using separate EPS bearers terminating at the RAN <NUM>, for example, the UE <NUM> sends the bearers on the Wi-Fi AP. DL data is received at the Packet Data Network Gateway (PGW) <NUM> and separated into different EPS bearers and forwarded either to the eNB <NUM> or the AP <NUM>.

For S2a-based Mobility over GTP (SaMOG), the UL data is received at the eNB <NUM> and the AP <NUM>, forwarded to the PGW <NUM> in the appropriate EPS bearer, and S2a tunneled. For S1 bearer-based session continuity, the UL data received at the eNB <NUM> and AP <NUM> is forwarded to the SGW and PGW <NUM> in the appropriate EPS bearer (i.e., the AP <NUM> reuses the EPS bearer to forward the traffic).

<FIG> illustrates an example architecture for WLAN interworking using separate EPS bearers terminating at the CN <NUM> defined by MAPCON, IFOM and SaMOG in Rel-<NUM>, Rel-<NUM> and Rel-<NUM>, respectively. As seen in <FIG>, the UE <NUM> sends the flows corresponding to some bearers via the 3GPP access (as indicated as flow <NUM>) and other bearers via the Wi-Fi AP (as indicated as flow <NUM>). For simplicity, the additional architectural elements of an ePDG between the AP and the PGW <NUM> for S2b are not shown.

<FIG> illustrates an example architecture for non-seamless mobility, according to certain aspects of the present disclosure. As seen in <FIG>, the traffic sent via the eNB may use separate PDN connections and EPS bearers terminating at the CN <NUM> to go to the Internet, whereas the traffic sent via WLAN is sent directly to the internet. For example, the UE <NUM> may use a different IP address at the eNB <NUM> and at the Wi-Fi AP <NUM>. Multipath TCP is an example of such aggregation.

According to certain aspects, the EPS bearer associated with an RLC packet in Long Term Evolution (LTE) is currently only in the Media Access Control (MAC) header in LTE. As such, for both bearer and packet aggregation in WLAN, the UE <NUM> and AP need to indicate the logical channel identifier (LC ID) for the EPS bearer in the WLAN MAC header if more than one bearer is sent in WLAN.

In some embodiments, such MAC headers may be EtherType. EtherType may be, for example, a <NUM> byte field in an Ethernet frame used to indicate which protocol is encapsulated in the Payload of an Ethernet Frame. The field within the Ethernet frame used to describe the EtherType also can be used to represent the size of the payload of the Ethernet Frame.

<FIG> illustrates an example Ethernet MAC frame <NUM> including the <NUM> byte EtherType <NUM> field. 11Q is a <NUM> byte field in an Ethernet frame. 11Q header consists of the following fields: Tag Protocol Identifier (TPID) having <NUM> bytes set to a value of 0x8100 to identify the frame as an IEEE <NUM>. 1Q-tagged frame used to distinguish the frame from untagged frames; Tag Control Identifier (TCI) having <NUM> bits to indicate priority (<NUM>-<NUM>) and whether the packet may be dropped; and VLAN Identifier (VID) having a <NUM>-bit field specifying the VLAN to which the frame belongs. <FIG> illustrates an example alternative Ethernet MAC frame <NUM> including the <NUM>. 11Q <NUM>-byte header.

In certain scenarios, the UE <NUM> may need to know the identity of LTE/UMTS cells and WLAN APs where RAN <NUM> and WLAN interworking can occur (e.g., which combinations of LTE/UMTS cells and WLAN APs can be used for LTE and WLAN interworking). On the other hand, the network may need to know the corresponding identity of the UE <NUM> in each type of RAN access (e.g., to correlate the presence of a UE across the WLAN and the cellular access). For example, this may be used to distinguish among different UEs using RAN <NUM> and WLAN interworking as well as for each UE <NUM> in order to correctly route the traffic.

Aspects of the present disclosure provide techniques and various apparatus that may help correlate WLAN and WWAN identifiers to determine WLAN and WWAN interworking capability.

<FIG> illustrates an example architecture <NUM> of a UE-PGW user plane with WLAN, in accordance with certain aspects of the present disclosure. The UE-PGW user plane has aggregation using separate EPS bearers at the RAN <NUM> and an additional layer to identify the EPS bearers. In an alternative solution, an LC ID <NUM> in WLAN may be indicated by including an additional header sent over the WLAN to identify the EPS bearer as shown in <FIG>. The LC ID <NUM> may be maintained at the AP/enB <NUM>. For example, the UE <NUM> and AP/eNB <NUM> may include an additional header such as GRE to indicate the associated bearer.

As an example, an LC ID in WLAN may be indicated using an existing field in the WLAN MAC header as shown in <FIG>. For example, the UE and AP may use the VLAN tag in the WLAN MAC header to indicate the associated bearer.

In some embodiments, the network may determine that the same UE <NUM> connects on WLAN and WWAN. A base station <NUM> may establish a communication with a UE <NUM> that is identified by a set of identifiers using a WWAN radio. The base station <NUM> may then establish a communication with a UE <NUM> that is identified by a different set of identifiers using a WLAN radio. The base station <NUM> may then determine that the UE <NUM> is the same UE <NUM>, based on the two sets of identifiers.

In order to determine to whether RAN <NUM> and WLAN interworking is available there are two steps needed: initiating LTE/UMTS and WLAN interworking (e.g., determining at the network and UE <NUM> to start the RAN <NUM> and WLAN interworking), and determining how to distinguish between EPS bearers at WLAN in order to correctly identify the DL traffic at the UE <NUM> and place the UL traffic into the correct S1 bearer on the UL.

As noted previously, for initiating RAN <NUM> and WLAN interworking, the UE <NUM> may need to know the corresponding identity of LTE/UMTS cells and WLAN APs where the RAN <NUM> and WLAN interworking can occur (e.g.,, which combinations of LTE/UMTS cells and WLAN APs can be used for RAN and WLAN interworking. Similarly, the network needs to know the corresponding identity of the UE <NUM> in each access (e.g., to correlate the presence of a UE <NUM> across the WLAN and the cellular access). For example, this may be needed in order to be able to distinguish among different UEs using RAN <NUM> and WLAN interworking as well as for each UE <NUM> in order to correctly route the traffic.

The above exchange of capabilities and identities are needed since the identifiers for the UE <NUM> used in WLAN (such as IEEE <NUM> bit MAC ID) are different from the identifiers used by the UE <NUM> in, for example, LTE (e.g., Cell Radio Network Temporary Identifier/Identification (C-RNTI) or Global Unique Temporary Identifier/Identification (GUTI)). Therefore, the UE <NUM> may need to either send the eNB <NUM> the WLAN MAC address or equivalent to be used or send the WLAN AP <NUM> the C-RNTI or GUTI or equivalent to be used.

In some embodiments, the association may be network initiated. The UE <NUM> may indicate to the network that the UE <NUM> supports RAN <NUM> and WLAN interworking as a capability. The network then indicates to the UE <NUM> to access either the LTE/UMTS or WLAN access, including a cell or AP identifier of the corresponding access, to initiate the RAN <NUM> and WLAN interworking procedures. The UE <NUM> capability may be indicated by signaling as part of the access in radio resource control (RRC), via non access stratum (NAS), via higher layer signaling or as part of the UE <NUM> subscription information. Higher layer signalling may use UDP or TCP transport protocols over the Internet Protocol. Alternatively, the UE <NUM> identity and capability may be signalled in WLAN, for example, using a vendor specific extension in the association procedure.

In some embodiments, indication that the UE <NUM> supports LTE and WLAN interworking capability may be provided as part of establishing communication. Alternatively, the indication that the UE <NUM> supports LTE and WLAN interworking capability may be provided as a part of a registration with the WWAN network, for example, in the Attach or Tracking Area Update (TAU) procedures.

The network indication may occur, via signaling such as radio resource control (RRC), for example, when the connection is established, or in WLAN, for example, as part of vendor specific signalling or IP layer signalling. As a part of the network indication, the RRC or WLAN signalling may indicate the WLAN BSSID, or RAN cell ID respectively to the UE, i.e., the RAN <NUM> or WLAN access indicates to the UE <NUM> the identity of the corresponding AP or (e)NB at which the RAN <NUM> and WLAN interworking procedures apply. Alternatively, various other types of identifiers may be used for WLAN.

For LTE, the eNB cell ID, tracking area, PCI, CSG ID, or some other identifier may be used to determine the corresponding LTE cell associated with the WLAN interworking. For UMTS, the NB cell ID, routing area, PSC, CSG ID or some other identifier can be used to determine the corresponding UMTS cell associated with the WLAN interworking.

In some embodiments, the association may be UE initiated. The network may advertise, for example, in a system information block (SIB) or RRC (e.g., LTE/UMTS) or Probe Response (e.g., WLAN) that RAN <NUM> and WLAN interworking is supported. When the UE <NUM> accesses either on RAN <NUM> or WLAN, the UE <NUM> may request to use the RAN <NUM> and WLAN interworking procedures.

The network advertisement may include a capability or an identifier of the corresponding WLAN BSSID(s), or cell ID(s) where the RAN <NUM> and WLAN interworking is supported. Alternatively, one of the other identifiers for the RAN <NUM> and WLAN as described above may be used.

The UE request may be indicated as part of the LTE access in RRC, via NAS, via higher layer signaling, or as part of the WLAN association procedures.

Determining the corresponding identity of the UE in each access may be UE provided or network provided. In some embodiments, when the UE requests access in RRC, via NAS, or as part of the WLAN association procedures, the UE request may include an identifier of the UE in the corresponding access. For example, the UE request in WLAN may indicate the CRNTI being currently used in LTE or the GUTI of the UE. Similarly, the UE request in LTE/UMTS may indicate the network access identifier (NAI) or the IEEE <NUM>-bit MAC address of the UE used in WLAN. In either case, security procedures such as integrity protection may be used to confirm the UE's identity matches in the other access, e.g., through the use of the EAPOL signalling in WLAN as part of the association procedure.

In some embodiments, when the network indicates to the UE to access WLAN, the network may provide the WLAN AP with the UE identifier that will be used, and/or shared, over the backhaul connection. For example, if the network knows the MAC ID of the UE or some other credential that will be provided to WLAN as part of the access procedures, the identity can be passed to WLAN or, conversely, so the AP <NUM> and eNB <NUM> can map the UE accessing the WLAN to the corresponding UE in LTE/UMTS or the UE in LTE/UMTS to the UE in WLAN. Alternatively, the WLAN may provide the UE with a CRNTI to use as part of a handover procedure to LTE similar to how CRNTI is provided today between the source and target cells in a LTE handover.

The mapping between the LC ID included in WLAN to the corresponding LC ID in EPS may be determined using dynamic or fixed mapping. For dynamic mapping, the corresponding LC ID WLAN to EPS bearer mapping may be negotiated either when the UE connects to WLAN, or in the RRC command sent by the eNB <NUM> to go to WLAN <NUM>. For fixed mapping, a fixed mapping may use the same LC ID in WLAN as EPS.

In some embodiments, the network may instruct the UE to establish communications in response to receiving the indication the UE supports LTE and WLAN interworking. In some embodiments, the indication may be an identifier identifying where to establish the communication, i.e., in WLAN or WWAN.

In some embodiments, indication that the network supports LTE and WLAN interworking may be provided, for example, in RRC, SIB or probe response, a WLAN carrier setup request message, or an association response. In some embodiments, a request to establish LTE and WLAN interworking may be sent as part establishing a communication with a WLAN or WWAN.

<FIG> illustrates an example call flow <NUM> for an associate procedure for an eNB <NUM> to WLAN AP <NUM> over RRC, according to certain aspects of the present disclosure, with a numbered sequence of steps.

As illustrated, in some embodiments the UE <NUM> sends the Measurement report message (step <NUM>) using RRC over the RAN <NUM>. Based on the measurement report the eNB <NUM> may determine to initiate the LTE and WLAN <NUM> interworking procedures. Alternatively, there are any number of triggers that may be used to initiate the LTE and WLAN interworking procedures, such as the UE sending the authentication request in step <NUM> or UE reporting WLAN quality via WLAN measurements, such as IEEE <NUM>.

The eNB <NUM> may send an RRCConnectionReconfiguration message (step <NUM>) to the UE. In one embodiment, the message includes a list of DRBs to be offloaded (step <NUM>). The list of DRBs may include a corresponding identifier to be used by the UE on WLAN for the DRB. For example, if the UE uses a VLAN ID or GRE tunnel to send the bearer traffic, then the list of DRBs may include a corresponding a VLAN ID or GRE key for each offloaded bearer.

In step <NUM>, the UE may perform authentication with the WLAN AP. It may be noted that the additional authentication procedures after step <NUM> are not shown, but any of various supported WLAN security mechanisms may be reused.

In step <NUM>, after successful authentication, the UE may associate with the WLAN AP. As part of the association procedures, the UE may include the corresponding identity of the UE in LTE. Similarly, the association procedures may include a negotiation on the corresponding identifiers of the EPS bearers that are being sent over WLAN, e.g., a mapping of the LC ID to the corresponding identifier used in WLAN such as a VLAN ID or GRE key corresponding to each LC ID.

In step <NUM>, the UE sends a RRCConnectionReconfigurationComplete message to the eNB <NUM> to indicate that the association was successful.

In step 7a, for non-seamless WLAN Offload (NSWO), the UE sends a DHCPv4 request as per IETF RFC <NUM> [<NUM>], or DHCPv6 request as per IETF RFC <NUM> [<NUM>] to the WLAN AP to receive an IP address. In step 7b, the WLAN AP responds with a DHCPAck including the IP address to use at the local network. The UE may report a WLAN MAC address and an LTE IP address. The network may assign the same IP configuation to the WLAN interface, as recognized via matching the WLAN MAC address.

In step 8a, for IPv6, the UE performs router discover by sending a Router Solicitation message. And in step 8b, the WLAN AP replies with a Router Solicitation message. The UE may then send data using the NSWO IP address.

In some embodiments, WLAN APs may be identified as target identifier, i.e. corresponding to a specific WLAN AP, or a group of WLAN APs, and target frequency, i.e., corresponding to a specific WLAN channel or a WLAN band. Target identifiers may be, but are not limited to: BSSID, to search for a specific WLAN AP, e.g., in the case of a collocated WLAN AP <NUM> and eNB <NUM> (it may be noted that BSSID is used to identify an individual AP, whereas the other measurement targets are used to identify an ESS); SSID, to search for a specific SSID which may represent a WLAN service provider (SP); HESSID, to search for a specific Hotspot SP included in the Interworking IE (<NUM>. 11u) as part of the beacon or Probe Response (it may be noted that HESSID is more controlled than SSID based search but assumes Hotspot support at the WLAN; and 3GPP Cellular Network Info, to search for a specific PLMN (<NUM>. Target frequencies may be, but are not limited to, Operating class and Channel number.

<FIG> illustrates example operations <NUM> for confirming identity of a UE registered at both a WLAN and WWAN, according to certain aspects of the present disclosure. The operations may be performed, for example, by a base station (BS) <NUM> of either network (e.g., a WLAN AP <NUM> or an LTE eNB <NUM>).

At <NUM>, the base station <NUM> establishes communications with a first UE, wherein the UE is identified by a first set of one or more identifiers in a wide area wireless network (WWAN) and by a second set of one or more identifiers in a wide local area network (WLAN). At <NUM>, the base station <NUM> determines, based on the first and second set of identifiers, a UE connected to the WWAN and WLAN is the first UE.

<FIG> illustrates example operations <NUM> for secure wireless communications, according to certain aspects of the present disclosure. The operations may be performed, for example, by a UE. The operations <NUM> begin, at <NUM>, by establishing communications with a wide area wireless network (WWAN) and a wide local area network (WLAN), wherein the UE is identified by a first set of one or more identifiers in the WWAN and by a second set of one or more identifiers in the WLAN. At <NUM>, the UE provides, when establishing communications with a first one of the WWAN or WLAN, a set of identifiers allowing the other of the WWAN or WLAN to identify the UE.

As discussed above, while establishing association with the UE, the eNB <NUM> may determine that WWAN and WLAN interworking capability is supported, which may be at the RAN <NUM> or at the CN <NUM>. In some embodiments, the determination may be provided during registration with the WWAN. In some embodiments, the eNB <NUM> may send the UE an indication directing the UE to associate with a WWAN and WLAN, if the eNB <NUM> determines that WLAN and WWAN interworking is supported as a capability. In some embodiments, the indication may be sent via RRC signaling, SIB, probe response, or an association response. RRC WLAN interworking connection setup procedure may enable the eNB <NUM> to determine corresponding the WLAN MAC ID of the UE and the types of interworking supported by the UE.

In some embodiments, the UE may provide its WLAN MAC address as part of the UE capabilities procedures to configure the LTE UE and WLAN STA mapping on the eNB <NUM>. As part of the capabilities, the UE may also indicate the UE's support of the different types of WLAN and LTE interworking such as at the CN <NUM> or in the RAN <NUM>.

<FIG> illustrates example call flow <NUM> for eNB <NUM> initiated radio resource control (RRC) UE capability handling procedures, according to certain aspects of the present disclosure. <FIG> shows RRC procedures for enabling LTE and WLAN RAN interworking.

As seen in <FIG>, the eNB <NUM> may forward a RRC: UECapabilityEnquiry message to the UE. In some embodiments, the UECapabilityEnquiry message may indicate a request to include WLAN capabilities as an additional RAT-type. In response to receiving the UECapabilityEnquiry message, the UE may respond with a UECapabilityInformation message. In the example embodiments, the UECapabilityInformation message may include the UE radio access capabilities for WLAN within a UECapabilityRATContainer with the RAT-type set to WLAN.

According to certain standards (e.g., in TS <NUM>), the MME <NUM> stores the UE Radio Capabilities that are forwarded by the eNB <NUM> in the S1-AP: UE Capability Information Indication message. For example, the eNB <NUM> may acquire the UE capabilities after a handover completion. When the UE establishes a connection, the MME <NUM> may include the last received UE capabilities as part of the S1-AP: Initial Context Setup Request message sent to the eNB <NUM>. During handover preparation, the source RAN node may transfer the UE source RAT capabilities and the target RAT capabilities to the target RAN node, in order to minimize interruptions. In TS <NUM>, possible RAT-types include EUTRAN, UTRAN, GERAN-PS, GERAN-CS, CDMA2000-1XRTT.

In one proposed changed, RAT-type information element may be updated to include WLAN capabilities. The WLAN RAT-type information element may be used to convey UE WLAN Radio Access Capability Parameters to the network. In some embodiments, the UE-WLAN-Capability field description for CN-interworking may be set to "supported" if the UE supports a CN LTE and WLAN interworking. The field description for RAN-interworking may be set to "supported" if the UE supports a RAN LTE and WLAN interworking.

Several aspects of a telecommunications system have been presented herein with reference to a WLAN and LTE system. By way of example, various aspects may be extended to other UMTS systems such as W-CDMA, High Speed Downlink Packet Access (HSDPA), High Speed Uplink Packet Access (HSUPA), High Speed Packet Access Plus (HSPA+) and TD-CDMA. Various aspects may also be extended to systems employing Long Term Evolution (LTE) (in FDD, TDD, or both modes), LTE-Advanced (LTE-A) (in FDD, TDD, or both modes), CDMA2000, Evolution-Data Optimized (EV-DO), Ultra Mobile Broadband (UMB), IEEE <NUM> (Wi-Fi), IEEE <NUM> (WiMAX), IEEE <NUM>, Ultra-Wideband (UWB), Bluetooth, and/or other suitable systems.

Several processors have been described in connection with various apparatuses and methods. These processors may be implemented using electronic hardware, computer software, or any combination thereof. Whether such processors are implemented as hardware or software will depend upon the particular application and overall design constraints imposed on the system. By way of example, a processor, any portion of a processor, or any combination of processors presented in this disclosure may be implemented with a microprocessor, microcontroller, digital signal processor (DSP), a field-programmable gate array (FPGA), a programmable logic device (PLD), a state machine, gated logic, discrete hardware circuits, and other suitable processing components configured to perform the various functions described throughout this disclosure. The functionality of a processor, any portion of a processor, or any combination of processors presented in this disclosure may be implemented with software being executed by a microprocessor, microcontroller, DSP or other suitable platform.

The software may reside on a computer-readable medium. A computer-readable medium may include, by way of example, memory such as a magnetic storage device (e.g., hard disk, floppy disk, magnetic strip), an optical disk (e.g., compact disc (CD), digital versatile disc (DVD)), a smart card, a flash memory device (e.g., card, stick, key drive), random access memory (RAM), read only memory (ROM), programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), a register, or a removable disk. Although memory is shown separate from the processors in the various aspects presented throughout this disclosure, the memory may be internal to the processors (e.g., cache or register).

Computer-readable media may be embodied in a computer-program product. By way of example, a computer-program product may include a computer-readable medium in packaging materials. Those skilled in the art will recognize how best to implement the described functionality presented throughout this disclosure depending on the particular application and the overall design constraints imposed on the overall system.

Claim 1:
A method for secure wireless communications by a first base station, comprising:
establishing (<NUM>) communications with a first user equipment, UE, wherein the UE is identified by a first set of one or more identifiers in a wide area wireless network, WWAN, and by a second set of one or more identifiers in a wireless local area network, WLAN; and
determining (<NUM>), based on the first and second set of identifiers, a UE connected to the WWAN and WLAN is the first UE,
wherein the method further comprises:
determining the UE supports WWAN and WLAN interworking as a capability;
directing the UE, via one of the WWAN or WLAN, to establish communication with the other one of the WWAN or WLAN, in response to the determination, wherein the directing comprises providing, to the UE, an identifier of where to establish the communication.