Apparatus for authenticating access to a client terminal, which is not compatible with the protocols of mobile communication network.

摘要

A telecommunication system comprising: a plurality of packet switched services in a mobile communication network; an access gateway network (WAG) for providing access to a client terminal; an agent PANA Authentication (PAA) for verifying a PANA identity (DI) of the terminal and an identity (PaCl) of the PANA client (PaC) associated with the terminal accessing the telecommunication system; and an AAA system for authenticating and authorizing a user of the client terminal accessing the telecommunication system; wherein the client terminal to the PANA Authentication Agent (PAA) is connected via a xDSL connection; further comprising the telecommunication system: a gateway packet data (PDG) for providing access further to the packet-switched services of the mobile communication network; and Enforcement Point (EP) of the PANA, integrated with said gateway packet data (PDG), for providing a mutual authentication with a security association (SA) between the PANA client (PaC) and the Enforcement Point ( EP) and for filtering packets incoming and outgoing data of the customer terminal providing said gateway packet data / point PANA enforcement (PDG / EP) integrated interface between the gateway network access (WAG) and packet switched network mobile communication services in which the agent PANA authentication (PAA) is arranged to relay an authentication procedure EAP carried inside the PANA authentication to the AAA system for an authentication against a 3GPP AAA system.